Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3136382e3232382e3132352e302f32342d3234203d3e20323632313931.roa
File:                     3136382e3232382e3132352e302f32342d3234203d3e20323632313931.roa (raw, json)
Hash identifier:          FCnSmVae1KYS3/5zff7yboqvk5ydtWwlR12/uZGTzGU=
Subject key identifier:   C9:D2:FB:54:73:19:59:19:66:73:03:48:7F:07:02:F5:1B:42:46:26
Certificate issuer:       /CN=F8384152DEE38D62B98700A59634A5B9FAF406B3
Certificate serial:       55B8CD548C520B740D0FEC9BB8BA2C4240AA4730
Authority key identifier: F8:38:41:52:DE:E3:8D:62:B9:87:00:A5:96:34:A5:B9:FA:F4:06:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3136382e3232382e3132352e302f32342d3234203d3e20323632313931.roa
Signing time:             Fri 30 Jan 2026 06:41:13 +0000
ROA not before:           Fri 30 Jan 2026 06:36:13 +0000
ROA not after:            Fri 29 Jan 2027 06:41:13 +0000
asID:                     262191
IP address blocks:        168.228.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:b8:cd:54:8c:52:0b:74:0d:0f:ec:9b:b8:ba:2c:42:40:aa:47:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8384152DEE38D62B98700A59634A5B9FAF406B3
        Validity
            Not Before: Jan 30 06:36:13 2026 GMT
            Not After : Jan 29 06:41:13 2027 GMT
        Subject: CN=C9D2FB5473195919667303487F0702F51B424626
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f3:2a:3b:37:fc:0e:7b:5b:8a:4e:91:eb:40:
                    b6:b4:34:d6:a7:33:e6:c7:c9:e1:42:91:75:71:19:
                    86:78:3f:1b:cd:b5:2e:3d:9b:42:0e:35:c4:fe:78:
                    c9:63:96:dd:b0:a2:3c:bd:e2:24:69:96:a2:1a:59:
                    cc:0c:88:33:9d:03:50:c0:f0:e1:cc:70:cc:f1:a0:
                    c2:4d:b8:6d:46:b7:1b:7d:69:d3:5b:84:30:69:b9:
                    f3:9b:4e:1b:5c:71:3f:23:5c:76:b8:d7:a1:43:71:
                    85:3e:14:5a:ae:61:29:86:05:4b:b8:d8:d0:81:54:
                    a5:e7:62:9e:61:75:51:b3:71:09:fc:c2:4a:79:4f:
                    31:17:cf:84:7f:ad:b1:43:d1:66:45:7c:8d:6c:68:
                    e9:88:e2:0b:26:84:9b:18:8b:10:05:7f:ad:c2:9c:
                    ad:32:38:cb:ec:3f:e2:54:9f:ee:e1:53:29:a6:9f:
                    03:d6:78:9e:c9:8a:34:8e:6a:ee:82:54:3a:da:bd:
                    c3:ea:80:9f:01:b9:8d:54:de:94:20:ad:f0:55:d3:
                    33:03:72:22:43:a9:50:36:80:bc:9e:85:d9:b2:9a:
                    71:2b:07:ff:65:51:c8:86:8a:fb:93:3a:73:b2:1f:
                    41:f8:c7:62:b0:42:b7:fa:38:f3:b2:33:6e:c6:c0:
                    fe:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:D2:FB:54:73:19:59:19:66:73:03:48:7F:07:02:F5:1B:42:46:26
            X509v3 Authority Key Identifier:
                keyid:F8:38:41:52:DE:E3:8D:62:B9:87:00:A5:96:34:A5:B9:FA:F4:06:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3136382e3232382e3132352e302f32342d3234203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:8d:3f:5e:b1:51:7a:da:7b:62:1d:56:be:e1:8f:0b:6f:4a:
         ee:54:ce:da:64:74:3a:0c:b1:41:37:1e:9c:bd:ad:3f:0b:b3:
         0e:a9:25:2a:e4:3d:96:b7:8f:0d:4f:82:da:e1:8c:68:5c:69:
         b2:df:f3:17:38:7c:11:e7:3b:ad:44:a7:7d:02:de:53:0d:79:
         af:44:17:5c:a3:42:94:b0:d5:5f:34:60:b8:9c:ba:82:38:bc:
         65:c3:07:8d:47:07:d9:3e:13:52:9d:ed:1d:28:25:ad:7c:49:
         27:8d:b8:62:22:e3:79:2b:a4:e5:39:7e:18:29:42:c7:e3:85:
         f8:87:15:23:2a:3e:f5:1d:e9:1f:88:49:10:c5:2e:e9:1f:1f:
         3f:b7:57:79:d0:bc:f6:b2:d4:81:cf:d0:b9:15:1d:0f:ad:7c:
         8c:ea:38:23:fb:30:8b:68:9a:0c:21:75:ce:aa:45:bd:84:5b:
         98:64:5c:25:65:a2:a0:2d:05:ad:58:98:09:cc:9b:85:e8:3e:
         85:ca:a0:0d:25:5a:5e:0e:8d:7c:13:8f:8d:c8:cd:6a:e8:95:
         88:d6:07:f6:2f:46:7e:41:6a:a2:be:57:e4:df:13:cb:84:cc:
         22:30:02:4a:9c:24:17:19:04:21:6e:27:fa:63:6a:d5:78:fd:
         b6:99:8d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:44:55 2026 by rpki-client