Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0F5DE5FE5414B3639D59BF50B1FD9BC019A8A484710FA86FB3773FC3157E0455/0/3136382e39302e39322e302f32322d3232203d3e2033343931.roa
File:                     3136382e39302e39322e302f32322d3232203d3e2033343931.roa (raw, json)
Hash identifier:          HCIoNXp2ouAMWZzankZe/rEmKFfhT9cBn5zOL1RD3nM=
Subject key identifier:   D2:69:D6:E8:32:52:72:87:08:A3:27:D9:5A:A0:A9:82:9F:04:E0:EE
Certificate issuer:       /CN=95437FDD7E9CE880C04872F735B12D11192067BA
Certificate serial:       303BD2883EFFB9715EEFB89E7FE0CA0CFF05EA99
Authority key identifier: 95:43:7F:DD:7E:9C:E8:80:C0:48:72:F7:35:B1:2D:11:19:20:67:BA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/95437FDD7E9CE880C04872F735B12D11192067BA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0F5DE5FE5414B3639D59BF50B1FD9BC019A8A484710FA86FB3773FC3157E0455/0/3136382e39302e39322e302f32322d3232203d3e2033343931.roa
Signing time:             Wed 25 Feb 2026 17:15:00 +0000
ROA not before:           Wed 25 Feb 2026 17:10:00 +0000
ROA not after:            Wed 24 Feb 2027 17:15:00 +0000
asID:                     3491
IP address blocks:        168.90.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0F5DE5FE5414B3639D59BF50B1FD9BC019A8A484710FA86FB3773FC3157E0455/0/95437FDD7E9CE880C04872F735B12D11192067BA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0F5DE5FE5414B3639D59BF50B1FD9BC019A8A484710FA86FB3773FC3157E0455/0/95437FDD7E9CE880C04872F735B12D11192067BA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/95437FDD7E9CE880C04872F735B12D11192067BA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 01:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:3b:d2:88:3e:ff:b9:71:5e:ef:b8:9e:7f:e0:ca:0c:ff:05:ea:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95437FDD7E9CE880C04872F735B12D11192067BA
        Validity
            Not Before: Feb 25 17:10:00 2026 GMT
            Not After : Feb 24 17:15:00 2027 GMT
        Subject: CN=D269D6E83252728708A327D95AA0A9829F04E0EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2c:56:05:a8:18:24:ed:00:d4:ec:14:a9:32:
                    78:a9:65:77:89:e9:70:2d:1b:ab:8a:cd:49:64:03:
                    b8:86:f9:8c:b2:ad:36:83:b5:01:eb:25:20:1d:ad:
                    41:f3:e5:00:0a:a0:2f:12:b5:93:0b:18:1b:6f:7b:
                    ac:f9:c3:44:bd:0d:b3:16:d0:6d:b4:0f:49:17:fd:
                    ae:94:2b:aa:53:60:fe:d2:98:5a:46:63:35:bf:93:
                    7e:6d:f2:3f:0b:a8:c6:98:2d:ca:0f:a5:ed:d7:94:
                    85:d8:ef:08:07:6b:93:91:0c:95:2a:7d:63:36:a2:
                    b6:bf:d6:3b:25:1f:88:c3:ca:b1:65:49:e1:a7:27:
                    d1:de:66:dd:f7:d2:d2:e7:08:6b:c1:fc:24:ba:53:
                    b4:ca:01:c9:ed:88:ac:62:54:cd:de:16:31:cd:49:
                    cc:b5:79:3a:ad:3d:f9:81:e5:84:cc:2e:85:6f:59:
                    41:73:b0:32:f2:4e:9c:7c:52:7c:18:eb:d2:29:36:
                    58:24:ba:8a:29:c1:9e:ca:b7:1f:01:da:8b:e5:24:
                    15:31:c0:67:bc:7e:b5:6e:50:87:7e:bb:63:04:a9:
                    fe:00:41:06:60:98:6b:3e:62:ec:12:59:3d:5d:d0:
                    4b:37:9b:cb:2e:4b:a4:14:03:b7:25:bb:af:c9:9e:
                    0f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:69:D6:E8:32:52:72:87:08:A3:27:D9:5A:A0:A9:82:9F:04:E0:EE
            X509v3 Authority Key Identifier:
                keyid:95:43:7F:DD:7E:9C:E8:80:C0:48:72:F7:35:B1:2D:11:19:20:67:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0F5DE5FE5414B3639D59BF50B1FD9BC019A8A484710FA86FB3773FC3157E0455/0/95437FDD7E9CE880C04872F735B12D11192067BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/95437FDD7E9CE880C04872F735B12D11192067BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0F5DE5FE5414B3639D59BF50B1FD9BC019A8A484710FA86FB3773FC3157E0455/0/3136382e39302e39322e302f32322d3232203d3e2033343931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:f0:17:d9:20:8e:c6:8c:7e:4f:72:da:31:0e:25:e2:46:7c:
         f4:c0:c6:da:81:93:de:e3:ea:b6:4c:e8:de:6b:62:ca:c3:2e:
         25:8e:99:7d:9d:bd:d1:8c:e8:10:5a:bf:82:cb:1a:30:f9:9e:
         0b:a3:54:22:47:db:43:95:14:0d:f4:d2:12:a0:ad:20:6f:eb:
         17:bd:30:f6:5f:56:3a:d4:8d:59:80:96:b4:cd:3a:19:63:b1:
         70:0d:63:57:c1:29:b1:4a:72:b6:1b:1d:3d:a9:b0:27:ee:4f:
         a0:ba:4a:b1:d6:b8:71:2c:42:a8:b2:1a:02:4f:56:f3:53:e0:
         71:ca:cc:e1:79:1b:ad:0b:f0:d6:68:b4:72:85:51:1b:bc:99:
         68:8f:7b:98:a2:f1:0b:a4:1b:92:7c:69:b7:62:c1:19:cf:e5:
         8a:7d:85:6e:09:8d:51:d1:45:15:cd:c0:2b:95:f1:62:6c:8f:
         db:9f:5c:7b:bb:ba:e8:e1:42:e4:b1:26:ce:1a:c1:df:d4:88:
         38:46:32:30:79:5e:97:9a:ea:dd:ed:ab:49:7f:2f:c3:61:e6:
         76:b6:60:f6:30:46:b9:a0:44:3e:3f:c2:c9:af:58:69:aa:5b:
         d3:fb:a2:45:00:c1:a4:1e:08:bb:5e:c4:fd:f8:d7:5b:fd:2a:
         ec:9c:8d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:40:29 2026 by rpki-client