Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29B8B0B5027D8D861D7CA62358652D20126B06A83B7179BC698D7D2A0E733F4D/0/3133382e33362e39362e302f32322d3232203d3e20323633373236.roa
File:                     3133382e33362e39362e302f32322d3232203d3e20323633373236.roa (raw, json)
Hash identifier:          S5mjlAEOsTvk6fCujGHNsbpS7oZdqbeyOc1bt/bDhmc=
Subject key identifier:   D7:DC:43:E0:40:D4:2B:69:C0:C5:BB:AC:29:F4:E8:8D:F2:1C:11:AB
Certificate issuer:       /CN=A1C86299C5FA84F9AB35C2974EACE4484F0A087A
Certificate serial:       2727E3E588A7DF3212C72983C702DD466229BE93
Authority key identifier: A1:C8:62:99:C5:FA:84:F9:AB:35:C2:97:4E:AC:E4:48:4F:0A:08:7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1C86299C5FA84F9AB35C2974EACE4484F0A087A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29B8B0B5027D8D861D7CA62358652D20126B06A83B7179BC698D7D2A0E733F4D/0/3133382e33362e39362e302f32322d3232203d3e20323633373236.roa
Signing time:             Fri 13 Feb 2026 21:30:34 +0000
ROA not before:           Fri 13 Feb 2026 21:25:34 +0000
ROA not after:            Fri 12 Feb 2027 21:30:34 +0000
asID:                     263726
IP address blocks:        138.36.96.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/29B8B0B5027D8D861D7CA62358652D20126B06A83B7179BC698D7D2A0E733F4D/0/A1C86299C5FA84F9AB35C2974EACE4484F0A087A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/29B8B0B5027D8D861D7CA62358652D20126B06A83B7179BC698D7D2A0E733F4D/0/A1C86299C5FA84F9AB35C2974EACE4484F0A087A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1C86299C5FA84F9AB35C2974EACE4484F0A087A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:27:e3:e5:88:a7:df:32:12:c7:29:83:c7:02:dd:46:62:29:be:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1C86299C5FA84F9AB35C2974EACE4484F0A087A
        Validity
            Not Before: Feb 13 21:25:34 2026 GMT
            Not After : Feb 12 21:30:34 2027 GMT
        Subject: CN=D7DC43E040D42B69C0C5BBAC29F4E88DF21C11AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:7e:37:01:4e:8c:88:7b:a7:50:39:14:ff:7b:
                    ee:89:b3:83:da:d6:4c:13:6e:5d:f1:3e:0b:eb:9b:
                    d5:27:9d:b3:dd:36:6e:9d:95:55:75:e1:35:03:e7:
                    e6:7b:20:b8:c9:a6:28:9f:a0:9d:de:57:4c:60:b1:
                    bf:3a:e6:9a:7e:8b:fb:2f:38:10:6f:bc:22:4f:1b:
                    62:0e:5e:a2:ad:a0:50:8e:00:6a:62:c5:60:80:b1:
                    af:f9:57:6a:1b:2d:00:d8:55:32:b6:a7:ea:b1:5c:
                    02:84:2e:7e:33:00:ee:41:63:3a:ec:7b:74:22:9d:
                    ff:02:cc:97:7c:ee:ee:60:54:04:e2:d0:65:72:33:
                    47:9e:91:2c:20:de:04:de:38:02:a0:04:2a:58:90:
                    08:80:65:02:1f:f3:dd:c1:3b:4a:e3:b9:2c:f6:51:
                    b7:7f:8f:dd:9a:92:d1:cc:97:4f:a6:fd:d2:24:11:
                    b6:2d:42:3e:42:08:ce:aa:b7:ef:93:f3:d4:27:9d:
                    70:54:e0:24:20:89:cf:23:be:3d:2f:95:30:cf:c1:
                    79:1d:31:cc:39:49:18:65:69:43:15:8e:74:aa:2b:
                    88:e6:7e:1b:72:1a:30:15:b0:ad:dc:dc:6b:b5:13:
                    ce:ff:d6:dc:b4:73:7c:ad:80:be:43:1d:ed:a2:05:
                    14:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:DC:43:E0:40:D4:2B:69:C0:C5:BB:AC:29:F4:E8:8D:F2:1C:11:AB
            X509v3 Authority Key Identifier:
                keyid:A1:C8:62:99:C5:FA:84:F9:AB:35:C2:97:4E:AC:E4:48:4F:0A:08:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29B8B0B5027D8D861D7CA62358652D20126B06A83B7179BC698D7D2A0E733F4D/0/A1C86299C5FA84F9AB35C2974EACE4484F0A087A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1C86299C5FA84F9AB35C2974EACE4484F0A087A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29B8B0B5027D8D861D7CA62358652D20126B06A83B7179BC698D7D2A0E733F4D/0/3133382e33362e39362e302f32322d3232203d3e20323633373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ab:f9:00:52:5c:5f:bb:74:c5:75:52:a0:8a:0d:10:ec:74:26:
         d7:f6:8f:03:ee:81:f1:db:73:3c:39:59:27:4c:76:a7:2a:db:
         63:fb:28:ce:03:6b:76:16:4d:b4:19:68:6b:ab:66:35:0d:15:
         b8:32:fb:c0:13:ef:c9:f6:09:6f:53:1d:10:0b:b9:e9:9e:1f:
         20:65:25:93:77:92:ce:0e:7e:8d:c4:62:bf:24:70:25:d9:42:
         10:9f:1f:7f:7a:b2:60:d5:50:86:e8:2a:c9:a6:22:ce:fd:6a:
         0e:1e:c2:66:b5:f8:c9:1f:11:13:94:c9:18:c4:f9:95:f2:d8:
         32:6d:cd:8f:cb:46:1a:2b:40:0e:2b:64:1c:8a:6f:7e:79:53:
         20:33:d5:0e:89:5f:ad:f9:02:a2:25:cc:a6:d3:41:09:23:ab:
         42:80:db:b3:02:ce:d5:3e:4b:3b:28:3d:91:e2:3f:b6:37:ad:
         4e:37:0c:62:f9:1f:b0:04:c5:9b:93:6c:fc:46:90:00:38:58:
         7c:c7:bb:d8:5d:c8:22:f1:a2:2b:06:f3:ca:db:27:44:81:46:
         f2:89:29:e6:27:0b:9a:1d:c7:08:eb:aa:87:fd:49:09:e8:90:
         38:1c:6e:9f:f0:24:22:4c:0e:ab:57:0d:36:e3:0a:a4:11:71:
         d2:95:1f:c3
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUJyfj5Yin3zISxymDxwLdRmIpvpMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTFDODYyOTlDNUZBODRGOUFCMzVDMjk3NEVBQ0U0NDg0
RjBBMDg3QTAeFw0yNjAyMTMyMTI1MzRaFw0yNzAyMTIyMTMwMzRaMDMxMTAvBgNV
BAMTKEQ3REM0M0UwNDBENDJCNjlDMEM1QkJBQzI5RjRFODhERjIxQzExQUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnfjcBToyIe6dQORT/e+6Js4Pa
1kwTbl3xPgvrm9UnnbPdNm6dlVV14TUD5+Z7ILjJpiifoJ3eV0xgsb865pp+i/sv
OBBvvCJPG2IOXqKtoFCOAGpixWCAsa/5V2obLQDYVTK2p+qxXAKELn4zAO5BYzrs
e3Qinf8CzJd87u5gVATi0GVyM0eekSwg3gTeOAKgBCpYkAiAZQIf893BO0rjuSz2
Ubd/j92aktHMl0+m/dIkEbYtQj5CCM6qt++T89QnnXBU4CQgic8jvj0vlTDPwXkd
Mcw5SRhlaUMVjnSqK4jmfhtyGjAVsK3c3Gu1E87/1ty0c3ytgL5DHe2iBRSbAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU19xD4EDUK2nAxbusKfTojfIcEaswHwYDVR0j
BBgwFoAUochimcX6hPmrNcKXTqzkSE8KCHowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yOUI4QjBCNTAyN0Q4RDg2MUQ3Q0E2MjM1ODY1MkQyMDEy
NkIwNkE4M0I3MTc5QkM2OThEN0QyQTBFNzMzRjRELzAvQTFDODYyOTlDNUZBODRG
OUFCMzVDMjk3NEVBQ0U0NDg0RjBBMDg3QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BMUM4NjI5OUM1RkE4NEY5QUIz
NUMyOTc0RUFDRTQ0ODRGMEEwODdBLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjlCOEIwQjUwMjdEOEQ4NjFEN0NBNjIzNTg2NTJEMjAxMjZCMDZBODNC
NzE3OUJDNjk4RDdEMkEwRTczM0Y0RC8wLzMxMzMzODJlMzMzNjJlMzkzNjJlMzAy
ZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzYzMzM3MzIzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAookYDAN
BgkqhkiG9w0BAQsFAAOCAQEAq/kAUlxfu3TFdVKgig0Q7HQm1/aPA+6B8dtzPDlZ
J0x2pyrbY/sozgNrdhZNtBloa6tmNQ0VuDL7wBPvyfYJb1MdEAu56Z4fIGUlk3eS
zg5+jcRivyRwJdlCEJ8ff3qyYNVQhugqyaYizv1qDh7CZrX4yR8RE5TJGMT5lfLY
Mm3Nj8tGGitADitkHIpvfnlTIDPVDolfrfkCoiXMptNBCSOrQoDbswLO1T5LOyg9
keI/tjetTjcMYvkfsATFm5Ns/EaQADhYfMe72F3IIvGiKwbzytsnRIFG8okp5icL
mh3HCOuqh/1JCeiQOBxun/AkIkwOq1cNNuMKpBFx0pUfww==
-----END CERTIFICATE-----
Generated at Tue Mar 3 02:31:59 2026 by rpki-client