Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/3135382e39372e36342e302f32332d3233203d3e2033363430.roa
File:                     3135382e39372e36342e302f32332d3233203d3e2033363430.roa (raw, json)
Hash identifier:          nMx3MThU/6U4jMg7cGNVDx9hwWSVtUHgJf+I8TEQnXI=
Subject key identifier:   26:52:91:3A:0A:6F:34:F8:FC:0B:8F:D0:50:F2:B5:A7:40:0B:92:53
Certificate issuer:       /CN=A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419
Certificate serial:       11ED6FBF57592E0E117AE3B2EE5D979732A578BF
Authority key identifier: A4:3F:1B:6C:CD:8E:C4:C0:5D:6D:9C:29:8D:CE:82:1A:2D:44:44:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/3135382e39372e36342e302f32332d3233203d3e2033363430.roa
Signing time:             Tue 06 Jan 2026 20:54:09 +0000
ROA not before:           Tue 06 Jan 2026 20:49:09 +0000
ROA not after:            Tue 05 Jan 2027 20:54:09 +0000
asID:                     3640
IP address blocks:        158.97.64.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:ed:6f:bf:57:59:2e:0e:11:7a:e3:b2:ee:5d:97:97:32:a5:78:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419
        Validity
            Not Before: Jan  6 20:49:09 2026 GMT
            Not After : Jan  5 20:54:09 2027 GMT
        Subject: CN=2652913A0A6F34F8FC0B8FD050F2B5A7400B9253
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:71:26:5b:74:8b:18:d1:b9:2e:f3:d8:22:ec:
                    fb:ac:b5:af:98:f0:22:81:a7:6c:89:05:39:a7:ff:
                    97:b6:91:08:2c:5b:40:e6:b9:3b:fc:78:0d:c0:c4:
                    1e:5a:db:20:77:10:47:eb:17:64:1f:e6:6f:24:4b:
                    8a:7f:50:7a:c6:0f:48:6f:99:b7:e9:2d:79:aa:e3:
                    b4:b7:15:91:28:f7:40:85:2c:ab:04:42:b1:22:51:
                    91:96:17:ae:18:ad:d6:4e:a9:d3:bc:da:5d:90:71:
                    22:a6:18:f3:9b:96:6a:04:39:bc:2e:6c:ff:de:6f:
                    43:95:98:4a:31:bb:a9:1e:59:34:65:b7:b9:a8:49:
                    b0:e8:d5:82:73:db:74:b8:90:f2:88:42:c0:34:ff:
                    2c:c7:9f:99:ed:29:31:92:17:e7:7e:d0:40:a2:90:
                    0e:5a:14:d0:00:b2:2e:c2:55:ed:ba:fd:11:da:ee:
                    2f:b2:ec:84:31:75:55:c4:35:b3:41:3c:11:5e:59:
                    4a:22:2a:4d:05:b9:7e:7b:bd:8a:93:1d:27:e7:f9:
                    ca:36:4d:73:6a:7b:23:51:6f:3a:1c:01:ee:e8:49:
                    14:41:d3:7e:dc:08:3e:31:0a:93:f3:f4:4c:8e:25:
                    01:9a:b5:65:74:ea:b2:6f:d8:65:c1:00:d1:1f:b1:
                    66:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:52:91:3A:0A:6F:34:F8:FC:0B:8F:D0:50:F2:B5:A7:40:0B:92:53
            X509v3 Authority Key Identifier:
                keyid:A4:3F:1B:6C:CD:8E:C4:C0:5D:6D:9C:29:8D:CE:82:1A:2D:44:44:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/3135382e39372e36342e302f32332d3233203d3e2033363430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.97.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3e:3f:67:a0:e6:c1:70:62:6f:e9:42:cb:66:d3:63:ec:f2:ef:
         dd:31:7d:fd:d8:61:27:ab:45:46:c0:d5:d0:b8:f0:9f:51:5f:
         ff:18:6a:d4:5a:8e:f3:b5:ef:75:98:a4:95:b5:df:38:77:1f:
         1f:69:99:3e:6a:82:04:c0:f0:67:5b:f7:57:15:d3:91:b3:95:
         5b:90:72:27:82:f4:63:fd:42:c8:a3:8e:3c:25:8d:e3:9a:6a:
         d5:4f:89:29:e3:11:34:b7:98:f9:4f:95:5a:bb:93:1d:94:e5:
         b9:2b:0a:67:39:0b:4e:05:4c:7e:9f:c5:76:2f:63:6a:0c:0d:
         3a:5e:64:29:94:a2:bb:18:dd:7c:d1:26:2e:98:e7:d4:86:ff:
         7c:a7:9c:49:ca:19:72:cd:77:3e:42:73:e9:d0:35:6d:99:ab:
         3b:95:fc:c4:db:06:b5:22:dc:8e:2f:bc:1b:91:03:76:22:a3:
         03:a2:e0:27:a9:db:33:9f:d6:0c:ff:f9:b1:f9:69:e3:46:a7:
         aa:81:63:d8:60:16:a8:10:28:88:01:47:0b:13:a5:12:e8:68:
         6e:65:6c:7e:cb:76:05:ba:6c:ed:56:b4:52:6c:34:e3:40:e1:
         73:e3:02:c3:87:ac:b8:ad:7b:0f:f0:1b:7a:b2:b2:6c:6f:5e:
         e1:be:d9:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 00:06:53 2026 by rpki-client