Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/3139322e38342e31322e302f32342d3234203d3e2033363430.roa
File:                     3139322e38342e31322e302f32342d3234203d3e2033363430.roa (raw, json)
Hash identifier:          cJET2aEyVFxhBl+zjeUb82zjBMndXjVXrSFZafJ4rz4=
Subject key identifier:   2A:E6:A6:67:0B:7A:17:4D:8E:58:DF:1D:5C:98:98:6B:22:4C:05:52
Certificate issuer:       /CN=A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419
Certificate serial:       43CD0FDBF3230E55EBD9E873C0A318911DA5623C
Authority key identifier: A4:3F:1B:6C:CD:8E:C4:C0:5D:6D:9C:29:8D:CE:82:1A:2D:44:44:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/3139322e38342e31322e302f32342d3234203d3e2033363430.roa
Signing time:             Tue 06 Jan 2026 20:54:07 +0000
ROA not before:           Tue 06 Jan 2026 20:49:07 +0000
ROA not after:            Tue 05 Jan 2027 20:54:07 +0000
asID:                     3640
IP address blocks:        192.84.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:cd:0f:db:f3:23:0e:55:eb:d9:e8:73:c0:a3:18:91:1d:a5:62:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419
        Validity
            Not Before: Jan  6 20:49:07 2026 GMT
            Not After : Jan  5 20:54:07 2027 GMT
        Subject: CN=2AE6A6670B7A174D8E58DF1D5C98986B224C0552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a5:da:3d:b1:5e:99:1b:08:04:ff:ba:7a:ab:
                    8a:09:7d:30:ab:f7:5a:cf:5e:21:a7:c5:16:f1:ab:
                    40:c3:0e:92:e2:b3:29:97:82:6f:5c:0e:3f:d3:58:
                    06:c5:bc:ed:45:80:2a:01:5d:5e:37:18:e8:0e:3d:
                    87:90:9e:65:c4:1f:9d:84:54:52:3a:00:30:cd:3a:
                    62:1f:15:b1:14:a6:64:30:b5:71:39:7f:95:87:b3:
                    b6:59:13:73:38:40:3c:1a:d5:c6:5b:82:c7:80:10:
                    7a:b1:75:4b:fd:2d:29:2e:5a:ff:f0:28:62:f8:31:
                    05:3f:d5:df:38:98:f7:8e:86:ed:34:55:c1:99:b9:
                    e2:50:9a:7c:d7:87:61:be:36:fa:5f:7e:88:95:3b:
                    f3:9b:52:84:1f:10:10:e2:44:13:ed:21:34:04:46:
                    49:07:58:b0:0b:3b:be:97:3d:fa:94:68:20:d1:f6:
                    a2:ac:b5:66:3f:cb:fe:8f:ca:8b:c1:d2:e2:a7:b4:
                    14:ee:9d:51:70:c7:7e:29:9e:d8:fc:f9:36:73:37:
                    df:0b:1f:fc:72:af:f6:be:00:d6:17:2c:26:68:d7:
                    01:b0:f0:7c:60:e0:73:a9:a2:a6:8b:6e:be:78:f4:
                    d8:1e:98:16:f4:05:1a:5e:94:a3:88:7b:48:35:7b:
                    98:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:E6:A6:67:0B:7A:17:4D:8E:58:DF:1D:5C:98:98:6B:22:4C:05:52
            X509v3 Authority Key Identifier:
                keyid:A4:3F:1B:6C:CD:8E:C4:C0:5D:6D:9C:29:8D:CE:82:1A:2D:44:44:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/3139322e38342e31322e302f32342d3234203d3e2033363430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.84.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:30:42:de:1d:3d:00:b2:d5:8e:86:df:97:2f:23:97:17:31:
         2b:58:00:c2:61:ad:f5:c5:59:27:6a:66:5c:37:b4:b6:5b:99:
         9a:87:ad:fe:61:a5:fe:7c:fd:55:3d:6f:16:91:44:43:af:3e:
         85:b8:ff:a9:00:76:1f:49:75:79:59:53:28:fa:76:e3:15:b4:
         f4:a8:b5:4f:d4:5e:3d:2c:d1:9c:73:8e:17:12:e3:c2:93:04:
         83:4d:0c:a0:39:2d:e8:94:75:f1:04:17:81:4e:00:2e:d7:85:
         c5:a7:12:6e:b4:e3:37:80:3e:e4:63:a4:c2:33:8d:db:d0:c8:
         16:e8:b1:4b:9e:e9:fd:a8:55:ad:c6:98:8a:57:4d:24:13:56:
         79:e9:60:c0:73:71:61:b3:07:0e:7a:0a:c4:79:06:cd:b8:16:
         8c:c7:b6:3d:e8:9a:37:8e:48:ef:89:4a:93:c3:c3:8e:b9:f6:
         4d:8a:5b:4a:da:7e:c8:ae:23:4b:f9:9c:5e:6d:70:fd:44:f6:
         5b:73:71:a4:1a:71:4a:0f:e9:90:0b:f6:6d:bd:ca:c8:42:73:
         2d:90:32:7a:21:e2:ea:a5:4b:9b:14:c4:b2:21:88:bf:97:e3:
         73:6a:2f:11:8d:87:e3:7f:41:61:f2:e1:61:c5:6b:37:63:c6:
         b6:41:48:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 00:07:37 2026 by rpki-client