Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1E5C8BB1C960715B62CEF2F80625BD655F7D65F55CAD6162EDCCD363D9862E57/0/3133312e3139362e302e302f32322d3234203d3e2037303439.roa
File:                     3133312e3139362e302e302f32322d3234203d3e2037303439.roa (raw, json)
Hash identifier:          yDZh9xC4OOU7XPKFxG1isUXBcF5ICffJ2tVsLP/8flM=
Subject key identifier:   99:88:5C:11:04:B1:03:9C:35:28:5F:DC:C8:1E:3D:6F:D3:96:93:8D
Certificate issuer:       /CN=3927FF3B5B92C88A2841A61BED02284FDFE90814
Certificate serial:       3101D0BA84426BC3785FAB1FD4AA3089304F171D
Authority key identifier: 39:27:FF:3B:5B:92:C8:8A:28:41:A6:1B:ED:02:28:4F:DF:E9:08:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3927FF3B5B92C88A2841A61BED02284FDFE90814.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1E5C8BB1C960715B62CEF2F80625BD655F7D65F55CAD6162EDCCD363D9862E57/0/3133312e3139362e302e302f32322d3234203d3e2037303439.roa
Signing time:             Fri 13 Feb 2026 18:05:00 +0000
ROA not before:           Fri 13 Feb 2026 18:00:00 +0000
ROA not after:            Fri 12 Feb 2027 18:05:00 +0000
asID:                     7049
IP address blocks:        131.196.0.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1E5C8BB1C960715B62CEF2F80625BD655F7D65F55CAD6162EDCCD363D9862E57/0/3927FF3B5B92C88A2841A61BED02284FDFE90814.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1E5C8BB1C960715B62CEF2F80625BD655F7D65F55CAD6162EDCCD363D9862E57/0/3927FF3B5B92C88A2841A61BED02284FDFE90814.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3927FF3B5B92C88A2841A61BED02284FDFE90814.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Mar 2026 22:38:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:01:d0:ba:84:42:6b:c3:78:5f:ab:1f:d4:aa:30:89:30:4f:17:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3927FF3B5B92C88A2841A61BED02284FDFE90814
        Validity
            Not Before: Feb 13 18:00:00 2026 GMT
            Not After : Feb 12 18:05:00 2027 GMT
        Subject: CN=99885C1104B1039C35285FDCC81E3D6FD396938D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e7:f7:b3:93:0f:fb:35:50:fa:04:70:32:89:
                    0b:94:6b:aa:e0:e6:75:08:2e:46:eb:33:8c:cb:62:
                    0e:b0:fc:99:f4:b4:91:22:a6:6c:76:ef:d1:d1:19:
                    42:75:99:a2:f2:e1:8d:84:47:34:25:59:1b:2e:1f:
                    88:55:5d:13:f9:89:cb:f8:09:73:34:98:54:cb:56:
                    57:e8:01:4b:b0:9c:6b:31:e8:97:72:af:28:7c:ea:
                    40:32:59:89:45:f9:fe:b4:9a:37:29:f1:69:ea:6b:
                    2c:28:a9:46:b0:f6:5c:fa:8b:f6:76:0d:80:7d:10:
                    31:a5:e4:9d:48:c4:af:53:5e:3c:2f:ef:56:87:79:
                    2b:cc:50:4b:93:bc:be:fa:22:02:d1:bf:4e:44:f9:
                    10:ab:ad:2e:c0:52:db:22:52:ef:ad:71:a3:e3:cb:
                    f3:f1:f7:c7:e0:3a:6b:2e:2b:4a:84:67:ca:6f:12:
                    9c:bd:60:8d:0e:41:2d:23:89:73:6b:cc:1f:0e:0a:
                    80:e2:ef:0a:46:cc:e6:8c:e1:6a:56:b0:05:ae:fc:
                    bd:c1:77:c3:00:d4:8b:94:d5:3d:9a:19:b8:f1:f8:
                    59:84:a3:50:70:5a:19:9a:45:3b:23:31:19:66:fc:
                    6a:73:d8:9c:ff:e9:a6:5f:b4:34:59:78:38:2a:3d:
                    6e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:88:5C:11:04:B1:03:9C:35:28:5F:DC:C8:1E:3D:6F:D3:96:93:8D
            X509v3 Authority Key Identifier:
                keyid:39:27:FF:3B:5B:92:C8:8A:28:41:A6:1B:ED:02:28:4F:DF:E9:08:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1E5C8BB1C960715B62CEF2F80625BD655F7D65F55CAD6162EDCCD363D9862E57/0/3927FF3B5B92C88A2841A61BED02284FDFE90814.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3927FF3B5B92C88A2841A61BED02284FDFE90814.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1E5C8BB1C960715B62CEF2F80625BD655F7D65F55CAD6162EDCCD363D9862E57/0/3133312e3139362e302e302f32322d3234203d3e2037303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         06:7c:53:5e:34:94:ad:76:23:f2:64:bd:7d:84:b0:23:24:a6:
         a5:ce:3c:89:4a:0c:a7:04:90:78:f0:10:ca:7c:10:af:9b:dd:
         cf:90:b0:6d:d1:cc:19:98:fe:5e:fd:99:ee:99:cf:5b:34:80:
         a7:e8:11:db:33:98:e8:7a:e2:33:1b:6b:2e:1a:b0:eb:64:b4:
         9f:65:f6:84:57:50:da:86:7c:9c:6e:85:2e:6d:10:87:cb:53:
         a4:26:f0:aa:bf:a8:e4:c1:af:e2:7e:de:04:70:4f:f5:a5:29:
         09:5d:b7:d3:60:e1:6f:81:e1:53:24:b7:d5:37:d0:2c:33:ce:
         fa:4a:60:69:1b:af:53:90:2c:ee:36:c1:85:59:ce:44:ec:ca:
         25:8a:76:94:d6:3c:9c:e3:45:5d:b9:83:42:57:42:ee:d2:36:
         76:ff:8f:e5:db:4a:4f:12:b1:fd:33:cf:9f:93:b4:a2:f3:c9:
         7c:aa:59:49:1d:89:44:f5:3a:c4:16:37:c8:d1:b1:f2:74:68:
         0b:f2:68:3c:fb:fa:00:67:d9:82:28:72:af:45:d6:5f:9a:f0:
         cc:08:3f:0d:81:9e:5f:f5:c3:99:7d:5b:cb:55:af:9f:dc:b2:
         56:7e:83:81:c7:07:7c:bc:78:49:35:de:d0:79:c0:c7:f1:96:
         90:6a:4c:d6
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUMQHQuoRCa8N4X6sf1KowiTBPFx0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzkyN0ZGM0I1QjkyQzg4QTI4NDFBNjFCRUQwMjI4NEZE
RkU5MDgxNDAeFw0yNjAyMTMxODAwMDBaFw0yNzAyMTIxODA1MDBaMDMxMTAvBgNV
BAMTKDk5ODg1QzExMDRCMTAzOUMzNTI4NUZEQ0M4MUUzRDZGRDM5NjkzOEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+5/ezkw/7NVD6BHAyiQuUa6rg
5nUILkbrM4zLYg6w/Jn0tJEipmx279HRGUJ1maLy4Y2ERzQlWRsuH4hVXRP5icv4
CXM0mFTLVlfoAUuwnGsx6Jdyryh86kAyWYlF+f60mjcp8WnqaywoqUaw9lz6i/Z2
DYB9EDGl5J1IxK9TXjwv71aHeSvMUEuTvL76IgLRv05E+RCrrS7AUtsiUu+tcaPj
y/Px98fgOmsuK0qEZ8pvEpy9YI0OQS0jiXNrzB8OCoDi7wpGzOaM4WpWsAWu/L3B
d8MA1IuU1T2aGbjx+FmEo1BwWhmaRTsjMRlm/Gpz2Jz/6aZftDRZeDgqPW7vAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUmYhcEQSxA5w1KF/cyB49b9OWk40wHwYDVR0j
BBgwFoAUOSf/O1uSyIooQaYb7QIoT9/pCBQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xRTVDOEJCMUM5NjA3MTVCNjJDRUYyRjgwNjI1QkQ2NTVG
N0Q2NUY1NUNBRDYxNjJFRENDRDM2M0Q5ODYyRTU3LzAvMzkyN0ZGM0I1QjkyQzg4
QTI4NDFBNjFCRUQwMjI4NEZERkU5MDgxNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zOTI3RkYzQjVCOTJDODhBMjg0
MUE2MUJFRDAyMjg0RkRGRTkwODE0LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUU1QzhCQjFDOTYwNzE1QjYyQ0VGMkY4MDYyNUJENjU1RjdENjVGNTVD
QUQ2MTYyRURDQ0QzNjNEOTg2MkU1Ny8wLzMxMzMzMTJlMzEzOTM2MmUzMDJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDM3MzAzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg8QAMA0GCSqG
SIb3DQEBCwUAA4IBAQAGfFNeNJStdiPyZL19hLAjJKalzjyJSgynBJB48BDKfBCv
m93PkLBt0cwZmP5e/Znumc9bNICn6BHbM5joeuIzG2suGrDrZLSfZfaEV1Dahnyc
boUubRCHy1OkJvCqv6jkwa/ift4EcE/1pSkJXbfTYOFvgeFTJLfVN9AsM876SmBp
G69TkCzuNsGFWc5E7MolinaU1jyc40VduYNCV0Lu0jZ2/4/l20pPErH9M8+fk7Si
88l8qllJHYlE9TrEFjfI0bHydGgL8mg8+/oAZ9mCKHKvRdZfmvDMCD8NgZ5f9cOZ
fVvLVa+f3LJWfoOBxwd8vHhJNd7QecDH8ZaQakzW
-----END CERTIFICATE-----
Generated at Mon Mar 2 21:53:10 2026 by rpki-client