Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230312e3233342e3134362e3230382f32392d3239203d3e2033333536.roa
File:                     3230312e3233342e3134362e3230382f32392d3239203d3e2033333536.roa (raw, json)
Hash identifier:          1f2VDKu6CJ2CsPxuVeDf9dQaRb271u6kUjVDCypcg6A=
Subject key identifier:   01:19:00:78:BC:5E:41:40:68:D5:FC:D3:4C:2A:13:D0:40:14:9F:97
Certificate issuer:       /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial:       38DBDC63A29F1D453F1DC46A83B55F78BECF73C9
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230312e3233342e3134362e3230382f32392d3239203d3e2033333536.roa
Signing time:             Tue 17 Feb 2026 21:00:00 +0000
ROA not before:           Tue 17 Feb 2026 20:55:00 +0000
ROA not after:            Tue 16 Feb 2027 21:00:00 +0000
asID:                     3356
IP address blocks:        201.234.146.208/29 maxlen: 29
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Mar 2026 19:55:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:db:dc:63:a2:9f:1d:45:3f:1d:c4:6a:83:b5:5f:78:be:cf:73:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
        Validity
            Not Before: Feb 17 20:55:00 2026 GMT
            Not After : Feb 16 21:00:00 2027 GMT
        Subject: CN=01190078BC5E414068D5FCD34C2A13D040149F97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:11:e5:85:ac:11:3a:db:d5:2d:69:b2:af:8d:
                    16:6d:71:8e:64:04:3e:53:16:1e:42:0a:82:5e:62:
                    28:28:71:29:e9:39:aa:b2:91:f8:21:2c:24:11:75:
                    56:eb:97:5e:a6:a7:7e:79:76:cb:f8:15:c6:b9:da:
                    b2:a4:b4:d6:a6:50:22:ad:90:a3:9c:48:f1:32:a9:
                    ef:26:9d:c4:52:f1:ba:4f:9a:b7:ee:53:08:82:fc:
                    53:7d:34:06:c4:32:a0:65:2e:f1:af:7d:d6:3b:31:
                    5d:38:34:b6:c1:1c:f0:74:04:d0:f7:07:82:5d:58:
                    6a:69:f6:f0:e4:07:1b:30:53:46:53:35:ab:59:ee:
                    17:50:39:1f:c3:3c:f4:25:1a:0a:f0:3a:6b:ee:b9:
                    bf:26:a1:cf:1e:f8:06:ab:72:05:6f:99:9f:02:bb:
                    a3:b0:2c:7f:a5:e1:0b:c8:14:14:32:44:f6:62:c6:
                    ed:3e:fb:3c:64:61:75:09:99:09:46:87:2e:57:3c:
                    0b:2a:2e:63:31:50:df:62:36:91:66:58:73:fb:b4:
                    ec:cb:8f:38:e3:5a:dc:c9:99:f5:f7:05:27:df:27:
                    40:67:64:a4:3d:89:6c:40:d7:9b:41:9c:86:af:89:
                    59:ea:e3:d8:e0:62:14:a9:7a:a0:ff:7c:e3:1c:6e:
                    5e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:19:00:78:BC:5E:41:40:68:D5:FC:D3:4C:2A:13:D0:40:14:9F:97
            X509v3 Authority Key Identifier:
                keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230312e3233342e3134362e3230382f32392d3239203d3e2033333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.234.146.208/29

    Signature Algorithm: sha256WithRSAEncryption
         8b:ef:dd:30:1e:8d:6b:ae:d8:d5:6a:a0:de:58:ef:dd:98:e7:
         c4:b1:49:a1:a4:04:d8:12:65:02:4d:e8:a0:61:37:76:da:ac:
         a7:7c:cb:fa:dc:67:ea:0e:31:af:e9:aa:3a:ab:54:d4:3b:71:
         69:32:55:eb:29:9e:31:2d:ed:0f:14:8f:b7:f8:b1:65:54:b0:
         54:2e:44:8b:86:02:f1:a5:1f:2b:58:a8:60:92:25:ad:76:dd:
         11:05:e4:fc:e0:22:b7:54:01:4b:c5:21:00:aa:9b:00:71:2d:
         87:37:f3:e5:7e:bb:67:11:46:ee:3c:8e:10:09:b7:d1:96:f5:
         ff:5f:13:f2:86:a3:08:2d:73:06:33:d7:fe:ae:97:b3:25:35:
         12:4b:a3:f7:21:00:72:ab:8e:ce:99:ad:fc:fa:8c:0f:20:8f:
         d5:bf:5c:64:bc:0e:5a:fb:47:7e:7a:69:f8:61:8b:b3:c0:ab:
         2a:7a:d2:8a:25:f8:eb:81:03:58:0d:a9:ba:98:57:10:bc:92:
         fd:db:a2:50:69:1d:ce:c9:af:f6:16:c8:a3:e3:2e:0f:95:f7:
         75:04:9e:cd:b9:dc:ea:19:68:bc:12:65:5c:c5:e9:8b:67:58:
         2d:04:24:1f:47:7a:ec:70:d7:7c:77:b1:c0:bc:a3:8a:e3:90:
         8a:dd:bc:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:23:54 2026 by rpki-client