Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/3134392e31392e3136302e302f32302d3234203d3e203134353933.roa
File:                     3134392e31392e3136302e302f32302d3234203d3e203134353933.roa (raw, json)
Hash identifier:          4rq1XY7PbZoodzv3WRPo2Be1bPbiQZpBHvfgWnyRwvw=
Subject key identifier:   9E:2C:5E:79:80:08:DE:91:BB:6B:E8:9E:8D:B9:1C:81:47:12:69:E3
Certificate issuer:       /CN=15DA171D5AE09E55A7280DC227610D82A2AB0356
Certificate serial:       5152D9051931D7A6E21D857901AB09E08806C3C6
Authority key identifier: 15:DA:17:1D:5A:E0:9E:55:A7:28:0D:C2:27:61:0D:82:A2:AB:03:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15DA171D5AE09E55A7280DC227610D82A2AB0356.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/3134392e31392e3136302e302f32302d3234203d3e203134353933.roa
Signing time:             Fri 13 Feb 2026 21:00:00 +0000
ROA not before:           Fri 13 Feb 2026 20:55:00 +0000
ROA not after:            Fri 12 Feb 2027 21:00:00 +0000
asID:                     14593
IP address blocks:        149.19.160.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/15DA171D5AE09E55A7280DC227610D82A2AB0356.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/15DA171D5AE09E55A7280DC227610D82A2AB0356.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15DA171D5AE09E55A7280DC227610D82A2AB0356.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Mar 2026 21:05:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:52:d9:05:19:31:d7:a6:e2:1d:85:79:01:ab:09:e0:88:06:c3:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15DA171D5AE09E55A7280DC227610D82A2AB0356
        Validity
            Not Before: Feb 13 20:55:00 2026 GMT
            Not After : Feb 12 21:00:00 2027 GMT
        Subject: CN=9E2C5E798008DE91BB6BE89E8DB91C81471269E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:9b:bb:96:d3:69:5e:01:ef:5e:0a:c9:14:b1:
                    4b:da:39:30:ff:c8:8c:32:0c:4f:45:84:ed:ac:af:
                    98:f7:8e:12:51:a9:8e:60:17:8e:92:1c:18:8b:d6:
                    2e:4b:45:d5:05:10:12:9b:bb:8b:52:66:22:9d:41:
                    5a:4e:53:dd:45:d3:2b:1d:79:9b:b7:96:a9:92:c3:
                    df:f2:78:82:30:ee:0a:57:63:f8:c6:0b:02:3e:99:
                    f4:db:e8:27:2a:4d:56:6c:18:b5:15:dd:05:b5:fe:
                    1f:da:85:b6:fa:02:e3:b5:6f:24:4c:3b:2d:72:54:
                    32:cb:80:32:14:28:e7:b9:e3:18:95:ed:bf:0d:d2:
                    5d:21:85:8c:07:dc:c9:f0:5d:76:7f:b9:04:9f:84:
                    b8:b6:89:5f:b8:d3:fa:c1:9b:2c:c8:7d:10:b4:9a:
                    94:8b:da:7f:71:3b:46:e2:ae:28:f7:8d:b6:9e:f5:
                    96:56:c5:be:58:6d:60:08:a8:21:a8:86:d8:c0:d5:
                    57:b0:03:fa:61:64:42:30:d6:df:28:82:70:94:bc:
                    b0:7f:80:53:e8:5f:54:87:fd:e0:34:2f:f6:9a:61:
                    df:52:c3:34:0f:d5:87:0b:a7:33:a6:2b:ea:96:47:
                    3f:84:0f:77:4d:de:1e:9a:3b:d1:d8:7b:cd:31:fe:
                    7c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:2C:5E:79:80:08:DE:91:BB:6B:E8:9E:8D:B9:1C:81:47:12:69:E3
            X509v3 Authority Key Identifier:
                keyid:15:DA:17:1D:5A:E0:9E:55:A7:28:0D:C2:27:61:0D:82:A2:AB:03:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/15DA171D5AE09E55A7280DC227610D82A2AB0356.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15DA171D5AE09E55A7280DC227610D82A2AB0356.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/3134392e31392e3136302e302f32302d3234203d3e203134353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.19.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         46:ca:c9:4e:96:ee:81:60:81:1d:2c:f1:0b:98:98:50:b5:3e:
         4c:02:bf:f5:73:f8:1d:91:25:8e:87:0d:40:7d:b3:85:6a:0d:
         46:c1:e3:da:04:1e:bb:64:91:05:45:13:68:2a:5d:5e:e4:cd:
         7e:c8:83:62:f5:fd:14:07:42:8a:ca:92:46:3e:1c:17:fa:39:
         4a:dc:ad:c4:5e:e7:53:e4:6b:63:a6:3d:b4:00:c3:a7:be:53:
         16:33:84:2c:79:e4:b4:a9:55:e9:8b:b0:d0:ab:5b:ff:d2:69:
         94:d2:a3:2c:bc:7a:f4:59:7a:75:42:9b:51:d1:ab:a1:76:7c:
         ce:7a:c2:dc:22:12:0e:a8:f3:a6:85:b5:ac:35:7b:3e:21:60:
         75:1f:da:ed:87:ae:b4:44:0e:db:28:c8:90:53:73:df:3c:30:
         77:a0:28:90:b3:c2:16:32:5c:43:e4:2f:fc:ee:74:8c:d2:fa:
         a3:fa:b2:ef:34:7e:1d:80:d3:d8:68:e0:4c:fd:d9:d0:67:a5:
         1a:de:7f:bf:0c:87:41:69:d8:77:f2:ae:b8:6d:99:c4:99:a8:
         ae:ed:63:ed:65:c0:d9:9a:8e:76:7e:c0:96:b0:b0:a4:ab:4c:
         25:e1:4f:03:b8:28:86:27:6e:31:ed:58:e9:f9:2a:fd:b9:56:
         74:2d:a3:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:41:05 2026 by rpki-client