Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/3135382e39372e36342e302f31392d3233203d3e2033363430.roa
File:                     3135382e39372e36342e302f31392d3233203d3e2033363430.roa (raw, json)
Hash identifier:          x0gy71ABFNnRlLXAw442jGo4yn3ngN4muh2cfjv0JLA=
Subject key identifier:   43:A4:47:46:44:4E:BC:05:B1:C1:5C:97:AC:60:7F:E9:BA:F9:73:EE
Certificate issuer:       /CN=A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419
Certificate serial:       1D782E5AFA65562DD600DD0D7780ECA43A96539B
Authority key identifier: A4:3F:1B:6C:CD:8E:C4:C0:5D:6D:9C:29:8D:CE:82:1A:2D:44:44:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/3135382e39372e36342e302f31392d3233203d3e2033363430.roa
Signing time:             Tue 06 Jan 2026 20:54:08 +0000
ROA not before:           Tue 06 Jan 2026 20:49:08 +0000
ROA not after:            Tue 05 Jan 2027 20:54:08 +0000
asID:                     3640
IP address blocks:        158.97.64.0/19 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:78:2e:5a:fa:65:56:2d:d6:00:dd:0d:77:80:ec:a4:3a:96:53:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419
        Validity
            Not Before: Jan  6 20:49:08 2026 GMT
            Not After : Jan  5 20:54:08 2027 GMT
        Subject: CN=43A44746444EBC05B1C15C97AC607FE9BAF973EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f2:a6:46:6f:8b:46:be:48:ca:39:6d:2d:71:
                    cc:cc:f9:fb:cb:cf:d5:73:c7:1e:f6:28:78:a9:3d:
                    07:01:a0:e1:8a:4b:b0:ac:75:46:7a:bc:d2:cd:05:
                    25:54:f2:70:a7:ac:14:35:63:34:3d:92:3a:1f:34:
                    ed:03:5d:c9:cc:b9:6f:25:94:3a:84:92:41:5e:2e:
                    32:4b:18:09:5d:16:7d:55:18:4b:c6:f1:90:c9:a7:
                    06:ee:8a:39:74:80:97:50:f4:4f:03:bb:45:bf:b3:
                    e8:3f:fb:ca:3c:e9:07:44:f8:62:0f:ef:70:d4:0f:
                    15:e5:52:f6:28:59:81:a4:a7:2f:bb:f3:bf:52:58:
                    b7:f2:ad:a1:d8:80:67:d6:6b:35:ab:5c:7d:8d:b1:
                    c8:9a:ba:c4:b0:69:e3:87:5d:8f:92:31:1c:e0:39:
                    71:19:c1:74:00:ef:be:86:4a:be:33:ed:71:7d:b3:
                    b9:12:0e:70:e1:3e:14:bb:67:ca:7a:aa:4f:a7:ed:
                    f8:18:f0:6f:21:7b:e8:a2:98:9e:ac:91:72:c4:94:
                    21:e8:dc:2b:74:0f:2b:e3:9a:1d:da:f8:a3:b1:d0:
                    cb:01:a8:1d:c1:31:f6:5a:98:a8:2d:e6:5b:1f:27:
                    5d:82:9b:6a:b7:0b:c6:d1:ee:d6:0d:7d:76:2c:9e:
                    95:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:A4:47:46:44:4E:BC:05:B1:C1:5C:97:AC:60:7F:E9:BA:F9:73:EE
            X509v3 Authority Key Identifier:
                keyid:A4:3F:1B:6C:CD:8E:C4:C0:5D:6D:9C:29:8D:CE:82:1A:2D:44:44:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/3135382e39372e36342e302f31392d3233203d3e2033363430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.97.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         1d:f7:29:2e:ab:03:6e:11:04:e4:85:58:52:7e:bc:bf:86:b5:
         e6:37:33:90:48:e7:ce:5a:03:2a:64:66:71:3e:bb:b6:52:56:
         c0:31:5c:8c:cf:1d:29:90:9b:9e:8a:30:73:2e:e2:f3:2f:2f:
         fc:02:3d:87:5a:6d:34:0e:4a:6f:b5:38:ee:fa:aa:8a:a7:7e:
         97:75:79:3e:d2:4e:d9:7a:4c:a7:16:81:85:77:4c:8c:ac:76:
         a5:e0:25:ef:2c:ad:8e:9a:4e:34:71:de:8a:0c:52:cc:3b:ba:
         4c:ca:bc:ae:ff:c6:a8:51:5e:52:80:c4:cd:30:58:11:a1:0b:
         8c:c5:ce:7b:19:71:7c:cb:4a:75:6c:57:cb:78:ce:a7:31:d6:
         f5:8f:4b:3a:b5:c8:04:51:b5:08:fd:bb:01:4d:c8:84:a8:4a:
         8c:4f:4d:b8:f4:f8:86:8a:1c:9d:d7:95:47:52:76:1f:0e:ec:
         ef:1e:e1:c1:c2:d1:27:d1:0e:97:f2:dd:fe:5e:b0:e9:f6:cf:
         a6:3f:37:6e:5e:7e:3a:c6:f5:93:f9:92:f0:af:30:da:39:b7:
         ff:71:6f:e5:a7:40:fb:9f:21:ba:0a:90:a4:02:89:0b:c5:3e:
         d8:a4:00:10:f3:4c:64:59:f8:14:b5:be:80:4a:c8:ae:84:e3:
         69:82:67:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 00:06:53 2026 by rpki-client