Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F75D7846CDF9FB1CA71BE06C6457403E505E7413414D57C619D92F7AD559ADFB/0/3136382e3233322e3137312e302f32342d3234203d3e20323634363936.roa
File:                     3136382e3233322e3137312e302f32342d3234203d3e20323634363936.roa (raw, json)
Hash identifier:          4VGkAaYCQibKCEE4AIFBTUCNc0st/UTCxje5GNKTmVM=
Subject key identifier:   7D:2C:21:AE:0B:46:4C:4F:53:D5:38:42:6A:88:10:86:BB:84:12:6A
Certificate issuer:       /CN=D2A5337FA87797971D233BE327907396D0813D5E
Certificate serial:       6A552DC1CAFDA8BE45893AA52C03CF0DC340C8B3
Authority key identifier: D2:A5:33:7F:A8:77:97:97:1D:23:3B:E3:27:90:73:96:D0:81:3D:5E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2A5337FA87797971D233BE327907396D0813D5E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F75D7846CDF9FB1CA71BE06C6457403E505E7413414D57C619D92F7AD559ADFB/0/3136382e3233322e3137312e302f32342d3234203d3e20323634363936.roa
Signing time:             Tue 20 Jan 2026 22:26:24 +0000
ROA not before:           Tue 20 Jan 2026 22:21:24 +0000
ROA not after:            Tue 19 Jan 2027 22:26:24 +0000
asID:                     264696
IP address blocks:        168.232.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F75D7846CDF9FB1CA71BE06C6457403E505E7413414D57C619D92F7AD559ADFB/0/D2A5337FA87797971D233BE327907396D0813D5E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F75D7846CDF9FB1CA71BE06C6457403E505E7413414D57C619D92F7AD559ADFB/0/D2A5337FA87797971D233BE327907396D0813D5E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2A5337FA87797971D233BE327907396D0813D5E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Feb 2026 22:16:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:55:2d:c1:ca:fd:a8:be:45:89:3a:a5:2c:03:cf:0d:c3:40:c8:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2A5337FA87797971D233BE327907396D0813D5E
        Validity
            Not Before: Jan 20 22:21:24 2026 GMT
            Not After : Jan 19 22:26:24 2027 GMT
        Subject: CN=7D2C21AE0B464C4F53D538426A881086BB84126A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:40:59:ce:18:4e:37:3e:89:09:45:40:9a:95:
                    8c:37:20:ae:bc:a1:cf:53:aa:40:6d:a5:cd:f2:6a:
                    da:79:b8:f5:b0:82:44:da:af:97:d5:8a:83:d2:66:
                    6e:c8:af:f6:5b:c8:62:64:ca:d3:f8:f6:9f:d5:eb:
                    0d:1d:60:f5:d2:ab:0c:03:31:0e:c5:e6:62:57:6d:
                    d9:47:e7:3f:96:11:0c:89:43:74:d2:08:c1:f3:a8:
                    af:e6:bb:85:da:e2:88:23:a9:04:91:35:85:fb:d2:
                    a2:0b:96:44:21:cd:f8:9b:5e:23:95:85:d2:ce:84:
                    3c:4a:6c:17:41:57:f0:37:de:f0:1c:57:7b:47:f3:
                    ab:d6:d7:26:f0:bb:14:c2:d6:dc:ad:53:d8:db:60:
                    a2:f0:10:e6:16:82:ae:0a:24:1e:d0:58:31:79:0d:
                    0f:a1:46:3e:ea:a3:0c:d3:73:d1:19:9e:a8:68:f8:
                    ce:f1:e8:06:74:92:32:f6:82:2f:8d:2a:88:b7:8d:
                    b6:e6:3f:e1:80:df:c2:d4:31:a1:9c:80:eb:1e:83:
                    4a:72:f9:97:e3:3b:1f:9f:ae:8f:fc:52:26:83:45:
                    c1:da:66:ce:b4:f2:60:5a:02:40:e6:c3:90:66:13:
                    7c:75:5a:03:11:11:8e:e6:df:f7:14:ad:04:72:b0:
                    d8:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:2C:21:AE:0B:46:4C:4F:53:D5:38:42:6A:88:10:86:BB:84:12:6A
            X509v3 Authority Key Identifier:
                keyid:D2:A5:33:7F:A8:77:97:97:1D:23:3B:E3:27:90:73:96:D0:81:3D:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F75D7846CDF9FB1CA71BE06C6457403E505E7413414D57C619D92F7AD559ADFB/0/D2A5337FA87797971D233BE327907396D0813D5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2A5337FA87797971D233BE327907396D0813D5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F75D7846CDF9FB1CA71BE06C6457403E505E7413414D57C619D92F7AD559ADFB/0/3136382e3233322e3137312e302f32342d3234203d3e20323634363936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:10:34:75:3c:69:b7:39:d9:de:91:ce:c3:f7:ba:b6:17:b8:
         e9:54:b5:a2:a3:ee:ae:1b:9b:5f:af:75:0a:db:be:37:34:1d:
         a6:18:2e:bf:8b:98:31:96:ba:01:24:40:46:ee:82:e2:88:9b:
         df:ea:8a:53:a0:ad:15:a5:90:a0:99:42:9a:99:d8:c5:ed:56:
         bc:6b:a3:5c:d1:ff:6c:07:5f:7e:6e:66:e8:ae:3b:4c:d8:73:
         23:14:4e:4d:54:ab:57:71:15:6d:ee:c8:7e:0d:3d:da:d4:05:
         1a:8e:1d:93:48:41:18:25:92:14:a9:9e:0a:3d:58:75:16:e1:
         03:1f:52:26:a7:4f:75:09:13:5f:c1:87:48:8a:bb:ad:b9:e6:
         51:75:e1:40:51:64:56:0e:8d:1b:51:f1:b3:23:57:e6:c0:98:
         d5:91:7a:05:de:be:01:ca:64:7f:25:4d:ab:21:94:a5:ab:cc:
         89:2d:4c:a3:f2:e2:8c:48:8a:13:62:95:89:35:8f:d9:14:a8:
         51:21:28:99:ed:54:47:e3:47:ec:05:dd:c6:fe:3f:19:de:78:
         e6:a6:7a:37:30:c3:36:2d:a2:f2:9f:a5:eb:d1:71:b3:a2:ae:
         b1:35:45:e8:2b:7b:8c:54:20:67:76:12:f1:07:6e:b1:db:eb:
         89:00:ec:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 18 21:04:08 2026 by rpki-client