Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FC60C9DA0B072FAAB19BC51C5DE33A8E7138352000994794564E328D959CF17D/0/3136382e3138312e3232382e302f32322d3232203d3e20323633383239.roa
File:                     3136382e3138312e3232382e302f32322d3232203d3e20323633383239.roa (raw, json)
Hash identifier:          AruXr8SeXAZQ8Wd2lixr3XIsiXtlPL8rToodj5nRruA=
Subject key identifier:   24:99:1F:59:1E:E4:E7:49:18:C2:31:8D:87:60:CD:7C:34:A7:EA:4F
Certificate issuer:       /CN=533F533C8354549C5674B43113DA207BD7EF1A31
Certificate serial:       2D171CB7B068827C8B88F827F50B514DA59D7581
Authority key identifier: 53:3F:53:3C:83:54:54:9C:56:74:B4:31:13:DA:20:7B:D7:EF:1A:31
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/533F533C8354549C5674B43113DA207BD7EF1A31.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FC60C9DA0B072FAAB19BC51C5DE33A8E7138352000994794564E328D959CF17D/0/3136382e3138312e3232382e302f32322d3232203d3e20323633383239.roa
Signing time:             Tue 06 Jan 2026 19:34:02 +0000
ROA not before:           Tue 06 Jan 2026 19:29:02 +0000
ROA not after:            Tue 05 Jan 2027 19:34:02 +0000
asID:                     263829
IP address blocks:        168.181.228.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FC60C9DA0B072FAAB19BC51C5DE33A8E7138352000994794564E328D959CF17D/0/533F533C8354549C5674B43113DA207BD7EF1A31.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC60C9DA0B072FAAB19BC51C5DE33A8E7138352000994794564E328D959CF17D/0/533F533C8354549C5674B43113DA207BD7EF1A31.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/533F533C8354549C5674B43113DA207BD7EF1A31.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Feb 2026 22:16:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:17:1c:b7:b0:68:82:7c:8b:88:f8:27:f5:0b:51:4d:a5:9d:75:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=533F533C8354549C5674B43113DA207BD7EF1A31
        Validity
            Not Before: Jan  6 19:29:02 2026 GMT
            Not After : Jan  5 19:34:02 2027 GMT
        Subject: CN=24991F591EE4E74918C2318D8760CD7C34A7EA4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:8a:e1:3c:41:ae:cb:10:5a:6b:2d:6e:92:6c:
                    21:63:50:da:a2:03:48:bb:6c:c5:34:ed:74:70:35:
                    09:8d:8f:ab:d7:fd:6c:1a:79:30:81:a7:4d:30:4e:
                    d3:f3:a8:ce:8a:fc:ed:22:15:e1:07:10:e2:cb:61:
                    bd:78:6c:2d:ea:bf:30:c5:4a:bc:eb:b5:c4:ed:e1:
                    f7:0d:06:c6:dc:d9:64:82:4d:a2:94:05:eb:4f:f3:
                    ae:aa:8e:c9:87:1e:58:aa:c4:b4:6f:74:44:dc:19:
                    aa:95:b7:1c:a1:1c:e7:9e:5e:2f:f4:23:37:20:0b:
                    74:f2:af:0d:62:c4:71:b3:3d:ba:68:de:4f:96:3a:
                    9d:14:16:d0:d9:c5:9d:b8:0c:8e:dd:fc:af:b0:ee:
                    c7:f7:9f:49:e4:d1:97:1c:02:08:c4:bc:4d:8e:7f:
                    33:1d:be:6c:77:6a:5f:06:a5:04:03:9d:75:72:f3:
                    65:03:e0:60:26:12:71:56:2d:fc:57:fd:f2:d8:69:
                    55:4c:21:b7:ea:2b:b3:e1:b0:55:93:e0:a5:3d:56:
                    1c:22:33:d3:59:5b:fb:cd:c7:7d:93:43:64:72:c2:
                    b0:1c:c5:7d:60:36:0d:44:9c:67:b5:a7:aa:63:3b:
                    5c:ed:9f:08:72:44:2b:e7:7b:96:3d:bc:16:0e:8b:
                    92:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:99:1F:59:1E:E4:E7:49:18:C2:31:8D:87:60:CD:7C:34:A7:EA:4F
            X509v3 Authority Key Identifier:
                keyid:53:3F:53:3C:83:54:54:9C:56:74:B4:31:13:DA:20:7B:D7:EF:1A:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FC60C9DA0B072FAAB19BC51C5DE33A8E7138352000994794564E328D959CF17D/0/533F533C8354549C5674B43113DA207BD7EF1A31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/533F533C8354549C5674B43113DA207BD7EF1A31.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FC60C9DA0B072FAAB19BC51C5DE33A8E7138352000994794564E328D959CF17D/0/3136382e3138312e3232382e302f32322d3232203d3e20323633383239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:5e:71:67:d7:0d:0a:4d:46:4a:3e:c4:5f:19:48:f8:88:9d:
         55:90:3a:fb:5a:66:54:2e:2f:96:ff:0e:46:e4:9c:76:c1:43:
         b7:6b:73:65:e9:6b:95:48:84:03:c2:5d:38:2f:ff:70:ab:58:
         59:19:c0:7a:89:d3:eb:18:2a:b1:8b:26:7c:66:24:de:a2:13:
         2c:65:66:e7:aa:64:b1:0f:16:4b:36:e2:d7:88:12:b2:9e:0e:
         99:0a:14:bd:10:42:5f:f4:8d:ec:93:6f:9a:03:41:a1:f8:da:
         60:f5:bc:00:99:06:31:2b:1b:06:38:af:30:17:50:4e:f9:ec:
         6d:ae:1a:d6:5c:50:b6:a6:ce:43:1e:5b:21:34:a3:6f:87:81:
         70:91:96:f8:90:75:ad:b1:cb:29:89:84:59:1d:70:52:98:ca:
         aa:2a:33:41:79:13:6b:ac:67:a8:be:26:0e:bd:a0:2f:4d:0b:
         85:32:64:eb:d5:bb:95:c0:45:7d:d4:db:28:0a:95:3c:7d:33:
         e3:2e:90:79:24:74:91:2a:27:82:7f:8d:19:c1:d2:2c:15:8b:
         27:6a:bf:34:6d:60:dd:5b:47:43:4c:1e:70:44:e7:c3:34:82:
         ce:bd:5b:e6:e5:b4:0c:de:fa:02:b5:df:94:b9:86:2c:12:d4:
         b3:e5:3b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 18 23:02:31 2026 by rpki-client