Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29B8B0B5027D8D861D7CA62358652D20126B06A83B7179BC698D7D2A0E733F4D/0/3133382e33362e39372e302f32342d3234203d3e20323633373236.roa
File:                     3133382e33362e39372e302f32342d3234203d3e20323633373236.roa (raw, json)
Hash identifier:          EDY86D2fXdWmqaiLQhyJEsAFb5YIL8bk3KvV+vVenn4=
Subject key identifier:   A6:25:55:98:84:70:7C:FB:59:49:B4:0A:7D:80:53:D4:FA:B2:A8:F4
Certificate issuer:       /CN=A1C86299C5FA84F9AB35C2974EACE4484F0A087A
Certificate serial:       4CF3B4B0F7032E9033E68C8391EEB807E9BBF1B8
Authority key identifier: A1:C8:62:99:C5:FA:84:F9:AB:35:C2:97:4E:AC:E4:48:4F:0A:08:7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1C86299C5FA84F9AB35C2974EACE4484F0A087A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29B8B0B5027D8D861D7CA62358652D20126B06A83B7179BC698D7D2A0E733F4D/0/3133382e33362e39372e302f32342d3234203d3e20323633373236.roa
Signing time:             Fri 13 Feb 2026 21:30:33 +0000
ROA not before:           Fri 13 Feb 2026 21:25:33 +0000
ROA not after:            Fri 12 Feb 2027 21:30:33 +0000
asID:                     263726
IP address blocks:        138.36.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/29B8B0B5027D8D861D7CA62358652D20126B06A83B7179BC698D7D2A0E733F4D/0/A1C86299C5FA84F9AB35C2974EACE4484F0A087A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/29B8B0B5027D8D861D7CA62358652D20126B06A83B7179BC698D7D2A0E733F4D/0/A1C86299C5FA84F9AB35C2974EACE4484F0A087A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1C86299C5FA84F9AB35C2974EACE4484F0A087A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:f3:b4:b0:f7:03:2e:90:33:e6:8c:83:91:ee:b8:07:e9:bb:f1:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1C86299C5FA84F9AB35C2974EACE4484F0A087A
        Validity
            Not Before: Feb 13 21:25:33 2026 GMT
            Not After : Feb 12 21:30:33 2027 GMT
        Subject: CN=A625559884707CFB5949B40A7D8053D4FAB2A8F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f5:c2:18:9b:ed:72:3d:27:76:04:b9:4b:18:
                    f4:d9:e0:f3:43:b8:e1:16:01:3f:e8:04:53:74:06:
                    f8:93:e1:24:52:38:bc:db:c8:1d:ef:3e:3d:d9:f5:
                    1d:fd:fe:86:a8:d4:b5:ae:d7:de:7e:9a:73:60:14:
                    92:7b:b5:f6:19:43:ec:84:2a:27:cb:dc:32:63:09:
                    27:94:86:23:c8:31:75:f5:3c:8d:ba:d9:3a:ca:bd:
                    0e:bc:c3:c0:3f:2f:d1:36:02:02:f9:5b:68:3a:d4:
                    7a:3d:2b:4f:37:76:19:16:ad:18:5e:df:c5:5d:ee:
                    58:b4:22:6c:0a:0b:98:1a:af:b2:e7:c0:37:54:3e:
                    f9:e3:8a:cc:d4:48:24:e4:77:bc:7c:88:b9:ee:7a:
                    46:26:d5:2e:a5:2f:87:ee:64:c6:80:1d:36:5f:b0:
                    68:0b:ff:d5:6a:31:0b:fb:7d:87:1b:9a:9b:42:56:
                    33:a3:45:5e:05:2a:54:78:2f:c8:a6:06:1b:6b:89:
                    b5:42:52:01:70:4c:81:42:3a:84:d9:96:d4:2d:cc:
                    fd:13:1b:d2:64:d7:1c:63:80:80:95:23:46:5a:03:
                    b4:c6:a5:c2:9a:ac:c9:05:26:19:08:c6:b3:37:ea:
                    23:5b:62:8c:51:41:c4:4d:ae:bd:2a:d6:85:05:2d:
                    dd:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:25:55:98:84:70:7C:FB:59:49:B4:0A:7D:80:53:D4:FA:B2:A8:F4
            X509v3 Authority Key Identifier:
                keyid:A1:C8:62:99:C5:FA:84:F9:AB:35:C2:97:4E:AC:E4:48:4F:0A:08:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29B8B0B5027D8D861D7CA62358652D20126B06A83B7179BC698D7D2A0E733F4D/0/A1C86299C5FA84F9AB35C2974EACE4484F0A087A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1C86299C5FA84F9AB35C2974EACE4484F0A087A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29B8B0B5027D8D861D7CA62358652D20126B06A83B7179BC698D7D2A0E733F4D/0/3133382e33362e39372e302f32342d3234203d3e20323633373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:68:27:f4:81:b1:e5:19:ef:ca:98:57:df:6f:de:fe:2e:a0:
         82:88:94:be:fc:35:b4:c4:08:97:d2:85:f0:85:3c:33:a9:e2:
         f4:69:d5:8f:00:60:63:89:1b:54:90:89:6e:b2:47:a3:25:f0:
         6b:3d:c2:21:34:ed:aa:18:26:8b:13:90:47:2d:6f:5e:19:3c:
         10:7d:0f:1e:d6:64:bd:09:3e:c9:50:e9:ed:8a:96:ec:59:a4:
         93:4b:b8:28:51:f2:d4:ff:ed:d8:2e:4c:a8:4e:da:f9:4b:82:
         14:65:71:3f:97:9b:0d:ea:73:4b:e3:86:0e:41:6a:4e:62:ca:
         86:d9:b3:f5:c1:be:b9:7a:31:5a:92:18:9c:2a:a3:ed:ca:46:
         58:41:80:a5:ab:73:39:90:85:45:6d:4e:9f:bc:e3:12:3e:72:
         58:83:6b:b0:3c:0b:17:13:d5:d6:1b:27:f8:74:46:72:bd:06:
         cc:95:88:cb:54:ca:1b:a4:c4:7a:18:0a:c5:c3:7e:fa:e5:98:
         04:28:a6:8f:49:5a:7c:38:25:39:96:77:7a:e0:38:ae:df:6d:
         2c:78:a3:a3:47:22:aa:00:8f:e2:f5:c0:c8:01:34:f3:c9:20:
         1a:5a:fe:4f:15:b9:a3:83:03:ab:f8:35:26:18:4d:9c:6a:27:
         f8:82:e2:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:59:36 2026 by rpki-client