Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/3138312e3138392e3139322e302f31392d3234203d3e203237373932.roa
File:                     3138312e3138392e3139322e302f31392d3234203d3e203237373932.roa (raw, json)
Hash identifier:          9XjbICLl2s/ctEClRVHXS9ueZ21pct4vg3RtL4ujWHI=
Subject key identifier:   36:B1:0C:75:24:CB:94:1D:48:B0:DF:53:EF:47:81:2C:A6:CE:2E:4F
Certificate issuer:       /CN=AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6
Certificate serial:       08FAEBC9196A513A833DC5F10E1DED661CFAFA6B
Authority key identifier: AF:3F:9A:6B:D1:49:BB:2C:B7:62:7F:3B:2E:5B:74:29:C5:5B:7B:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/3138312e3138392e3139322e302f31392d3234203d3e203237373932.roa
Signing time:             Tue 06 Jan 2026 19:15:43 +0000
ROA not before:           Tue 06 Jan 2026 19:10:43 +0000
ROA not after:            Tue 05 Jan 2027 19:15:43 +0000
asID:                     27792
IP address blocks:        181.189.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:fa:eb:c9:19:6a:51:3a:83:3d:c5:f1:0e:1d:ed:66:1c:fa:fa:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6
        Validity
            Not Before: Jan  6 19:10:43 2026 GMT
            Not After : Jan  5 19:15:43 2027 GMT
        Subject: CN=36B10C7524CB941D48B0DF53EF47812CA6CE2E4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6b:d2:f4:1b:ec:b4:13:1b:09:cc:ca:bc:12:
                    3d:ee:e1:01:1a:6d:45:69:d6:f2:9c:0f:1a:d8:db:
                    93:3a:28:04:52:4e:57:f1:a8:d7:78:f9:19:6a:49:
                    2e:b2:7d:00:c7:78:30:97:d5:c8:3d:4d:da:57:62:
                    90:12:e6:b8:71:3a:ca:02:1a:af:05:7d:e0:b0:04:
                    e5:30:fa:32:07:6d:4e:c6:97:c7:85:31:40:b2:41:
                    3b:51:84:2c:15:4c:06:a2:08:fb:be:13:61:b8:e8:
                    bf:17:ce:c1:80:48:7b:fe:6f:71:81:29:b4:30:d4:
                    9c:e9:ef:0b:3e:82:be:61:c8:59:85:c1:bc:5c:ad:
                    75:9f:ad:cb:56:12:e7:5d:2b:cf:77:d6:90:a7:cb:
                    ef:55:87:d9:62:29:2f:7a:9e:7a:af:8b:88:7e:ea:
                    66:c8:37:91:a9:c3:88:ca:54:6f:00:84:c5:db:2b:
                    52:a6:d1:ca:ab:b5:6e:ee:2a:5d:18:a9:26:5c:ec:
                    cb:fc:18:30:5a:21:12:dc:9e:5b:32:2c:ea:d8:c2:
                    f2:78:e0:55:12:15:60:f5:3f:2c:89:d1:0f:f4:08:
                    44:9b:ac:c5:23:10:58:06:89:77:5b:2a:86:a4:e7:
                    84:36:30:f9:85:9f:51:fe:42:23:9d:7b:99:20:f4:
                    ce:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:B1:0C:75:24:CB:94:1D:48:B0:DF:53:EF:47:81:2C:A6:CE:2E:4F
            X509v3 Authority Key Identifier:
                keyid:AF:3F:9A:6B:D1:49:BB:2C:B7:62:7F:3B:2E:5B:74:29:C5:5B:7B:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/3138312e3138392e3139322e302f31392d3234203d3e203237373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         08:8f:bf:8b:20:c0:ef:00:db:6a:a0:81:9d:14:bb:5f:09:7b:
         4a:2b:c4:17:63:f0:8c:7d:c1:a0:1e:5c:fa:2c:75:6d:68:df:
         7e:39:6a:40:7b:a1:70:82:ed:b0:0c:3f:0d:80:7f:8b:1d:01:
         42:66:81:7d:77:69:30:16:78:c4:c8:eb:24:0d:dd:61:b5:6c:
         a8:07:de:d1:8a:a1:c7:38:b8:e7:c8:50:5d:32:af:92:3b:48:
         c9:c1:cf:5b:6c:94:7a:61:01:66:1b:d0:ce:e7:33:6c:df:00:
         68:7c:f7:8b:e3:e2:ff:ba:69:df:23:85:89:69:34:7b:25:f9:
         15:3f:97:1d:73:0e:51:91:bf:dc:d1:1d:8d:1d:24:b0:b4:82:
         7d:a4:b5:c5:51:bb:9d:cc:31:d6:d0:a7:90:bf:1c:a7:3b:61:
         c3:c7:ca:9d:13:6a:a3:76:50:f1:f1:ec:66:ec:87:71:b8:a8:
         f4:7e:47:17:4c:bc:ed:26:1b:75:ec:dd:db:69:99:d2:96:50:
         f8:ac:7d:9e:1b:52:71:0f:b1:40:32:5b:62:27:a2:42:29:e7:
         cb:5a:df:28:fd:59:46:5f:12:e9:d5:75:a5:9c:36:e2:8b:54:
         b7:e3:8e:2b:04:9b:06:b1:fb:d6:8f:77:b4:19:6b:5e:08:57:
         b3:27:11:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 00:13:11 2026 by rpki-client