Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1E5C8BB1C960715B62CEF2F80625BD655F7D65F55CAD6162EDCCD363D9862E57/0/3133312e3139362e302e302f32322d3234203d3e203232393237.roa
File:                     3133312e3139362e302e302f32322d3234203d3e203232393237.roa (raw, json)
Hash identifier:          bFb2hcV/fbprRCXjxbyEZdnobzqTlw0x4wwAYaxpugs=
Subject key identifier:   74:5E:86:57:3F:41:D9:DD:AC:0A:4E:6A:35:9F:B4:AD:E3:6D:8B:BC
Certificate issuer:       /CN=3927FF3B5B92C88A2841A61BED02284FDFE90814
Certificate serial:       46DD4264DB3645A9CF35426C1C2235911C24FACF
Authority key identifier: 39:27:FF:3B:5B:92:C8:8A:28:41:A6:1B:ED:02:28:4F:DF:E9:08:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3927FF3B5B92C88A2841A61BED02284FDFE90814.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1E5C8BB1C960715B62CEF2F80625BD655F7D65F55CAD6162EDCCD363D9862E57/0/3133312e3139362e302e302f32322d3234203d3e203232393237.roa
Signing time:             Fri 13 Feb 2026 18:05:00 +0000
ROA not before:           Fri 13 Feb 2026 18:00:00 +0000
ROA not after:            Fri 12 Feb 2027 18:05:00 +0000
asID:                     22927
IP address blocks:        131.196.0.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1E5C8BB1C960715B62CEF2F80625BD655F7D65F55CAD6162EDCCD363D9862E57/0/3927FF3B5B92C88A2841A61BED02284FDFE90814.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1E5C8BB1C960715B62CEF2F80625BD655F7D65F55CAD6162EDCCD363D9862E57/0/3927FF3B5B92C88A2841A61BED02284FDFE90814.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3927FF3B5B92C88A2841A61BED02284FDFE90814.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Mar 2026 22:38:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:dd:42:64:db:36:45:a9:cf:35:42:6c:1c:22:35:91:1c:24:fa:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3927FF3B5B92C88A2841A61BED02284FDFE90814
        Validity
            Not Before: Feb 13 18:00:00 2026 GMT
            Not After : Feb 12 18:05:00 2027 GMT
        Subject: CN=745E86573F41D9DDAC0A4E6A359FB4ADE36D8BBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:4b:7e:e0:80:44:2f:e2:74:cb:a4:91:25:42:
                    76:55:f4:be:3f:8f:1d:fe:6c:9e:fe:11:d7:0a:55:
                    31:56:ee:71:2a:ad:67:7b:b5:24:f4:b6:fe:f3:45:
                    db:f3:b6:7d:b6:a6:41:67:27:7b:9f:e0:cb:20:b9:
                    bb:84:6c:02:53:a0:0b:04:b5:41:fc:4f:78:5b:45:
                    44:c1:c8:98:85:10:4c:4b:09:e6:a1:39:34:6c:1b:
                    67:5c:e0:01:ce:6e:df:9a:7e:7f:fa:99:3e:16:1d:
                    e1:76:40:04:77:d7:63:1d:d3:a5:50:d3:5c:36:a5:
                    ba:d3:8b:06:7b:a0:e4:b2:12:98:d6:f2:6b:2c:6d:
                    3c:7b:63:9a:5e:dc:85:05:15:17:8f:5a:13:50:15:
                    93:64:59:4d:b4:83:14:19:f0:37:c2:fb:51:da:9a:
                    a6:4b:fc:e7:15:e2:a9:bf:16:7c:29:56:72:7f:15:
                    cd:e3:9f:cf:0b:4c:f9:bc:b3:82:69:97:c1:01:d3:
                    4f:b4:db:90:1a:db:22:3e:a7:be:ca:c8:91:7b:aa:
                    30:d3:5c:98:3b:8d:48:00:15:fd:19:00:08:b4:4a:
                    1a:0a:4e:5d:22:6b:18:f8:fa:a9:af:2c:39:7f:e3:
                    55:06:16:03:c6:94:ab:cd:c4:4b:b1:05:6e:8f:b9:
                    00:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:5E:86:57:3F:41:D9:DD:AC:0A:4E:6A:35:9F:B4:AD:E3:6D:8B:BC
            X509v3 Authority Key Identifier:
                keyid:39:27:FF:3B:5B:92:C8:8A:28:41:A6:1B:ED:02:28:4F:DF:E9:08:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1E5C8BB1C960715B62CEF2F80625BD655F7D65F55CAD6162EDCCD363D9862E57/0/3927FF3B5B92C88A2841A61BED02284FDFE90814.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3927FF3B5B92C88A2841A61BED02284FDFE90814.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1E5C8BB1C960715B62CEF2F80625BD655F7D65F55CAD6162EDCCD363D9862E57/0/3133312e3139362e302e302f32322d3234203d3e203232393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:23:95:0c:96:9b:2f:e6:96:c0:be:2a:d3:05:23:89:84:70:
         15:6b:cc:c8:05:fe:a4:cb:07:0d:ad:d4:2f:64:15:96:75:3f:
         50:3c:e4:f6:fb:08:51:ae:76:a3:07:59:fc:18:bc:4b:12:e1:
         1b:74:30:06:40:4f:35:70:66:cf:ae:67:1e:f0:fb:36:09:52:
         2c:cc:b9:e3:c5:23:39:0c:da:f6:22:05:71:f8:29:c5:89:a4:
         18:91:38:82:af:f2:85:53:70:84:e0:25:5a:c4:03:59:cc:28:
         73:7b:91:04:ab:07:eb:e0:c8:4d:f6:b7:88:2a:89:19:1b:cf:
         b6:f0:7a:93:e1:02:c1:fc:48:58:30:4c:93:7c:40:3d:0d:73:
         a1:f4:68:05:6b:66:dd:e5:a2:4d:a4:3d:14:91:b1:07:80:69:
         40:47:55:65:b6:18:3f:48:86:b5:7d:2c:43:af:29:d1:22:57:
         46:2f:49:2d:7d:78:6c:06:9f:b3:03:28:12:fc:40:e2:ec:3d:
         db:67:7e:b6:ec:3a:cd:63:5e:2b:44:f0:85:11:66:4d:d7:77:
         b7:f5:dc:a7:b7:a1:59:ba:53:6d:c7:ed:d2:d3:fe:8e:8b:a0:
         10:83:7c:1a:bd:f3:d4:e3:38:f6:6f:ff:ac:33:56:20:2c:cf:
         76:dc:02:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:53:14 2026 by rpki-client