Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48D8FB9176041AB5764933AF43A9F6E1C8B31C3D69E0D43467A11CAD31D66869/0/3230312e3133392e31312e302f32342d3234203d3e203138343439.roa
File:                     3230312e3133392e31312e302f32342d3234203d3e203138343439.roa (raw, json)
Hash identifier:          I/20CbaOGSkTJWUr8sHjabyTCyRO7GHACGzO9PByKmA=
Subject key identifier:   DF:CA:2B:D6:DC:4F:7B:4D:D5:22:C7:6B:FE:61:BF:0B:48:54:7A:68
Certificate issuer:       /CN=96DDD0A970E0BB193FC5B9D9029B75465FB170DD
Certificate serial:       06CD016ABCBCD8880849D2176B05EC8FBEEB88A6
Authority key identifier: 96:DD:D0:A9:70:E0:BB:19:3F:C5:B9:D9:02:9B:75:46:5F:B1:70:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96DDD0A970E0BB193FC5B9D9029B75465FB170DD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/48D8FB9176041AB5764933AF43A9F6E1C8B31C3D69E0D43467A11CAD31D66869/0/3230312e3133392e31312e302f32342d3234203d3e203138343439.roa
Signing time:             Thu 12 Feb 2026 01:30:08 +0000
ROA not before:           Thu 12 Feb 2026 01:25:08 +0000
ROA not after:            Thu 11 Feb 2027 01:30:08 +0000
asID:                     18449
IP address blocks:        201.139.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48D8FB9176041AB5764933AF43A9F6E1C8B31C3D69E0D43467A11CAD31D66869/0/96DDD0A970E0BB193FC5B9D9029B75465FB170DD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48D8FB9176041AB5764933AF43A9F6E1C8B31C3D69E0D43467A11CAD31D66869/0/96DDD0A970E0BB193FC5B9D9029B75465FB170DD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96DDD0A970E0BB193FC5B9D9029B75465FB170DD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:cd:01:6a:bc:bc:d8:88:08:49:d2:17:6b:05:ec:8f:be:eb:88:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96DDD0A970E0BB193FC5B9D9029B75465FB170DD
        Validity
            Not Before: Feb 12 01:25:08 2026 GMT
            Not After : Feb 11 01:30:08 2027 GMT
        Subject: CN=DFCA2BD6DC4F7B4DD522C76BFE61BF0B48547A68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9a:20:9c:e2:2b:67:27:57:44:15:be:1e:e6:
                    ee:2a:fe:29:13:81:a6:69:53:35:11:30:09:9e:80:
                    79:5a:a0:b8:7c:92:9c:0a:e2:fe:74:aa:43:bc:7b:
                    65:a5:e3:dd:57:6c:46:66:04:07:04:2e:fc:4a:b4:
                    b3:a4:35:1d:f2:5b:d9:bf:8a:31:14:40:95:51:18:
                    e9:45:e2:da:8f:fa:fb:21:1b:fe:41:cb:8d:1f:52:
                    55:6d:5a:40:99:e8:47:9c:07:04:6d:53:08:7c:00:
                    38:60:fa:17:60:96:fe:3b:85:5f:12:39:49:42:07:
                    9c:80:6a:97:fc:62:13:23:fc:ba:9f:20:9c:b5:0e:
                    24:6a:f0:2a:45:01:7e:4d:d1:b4:2f:4a:40:3d:8c:
                    39:56:0c:40:d2:92:48:c2:d6:20:ec:58:49:aa:aa:
                    95:54:48:30:79:53:c2:76:2b:4c:dd:c5:d7:42:3f:
                    71:26:f4:93:c5:6f:89:64:ed:9b:2d:0f:6e:89:8e:
                    18:14:af:0a:92:65:64:48:5a:1a:88:e9:78:07:6b:
                    5f:42:09:a8:5b:bb:6c:88:90:8c:8c:38:f8:17:a9:
                    6f:32:02:04:c9:7e:92:34:53:d8:57:0c:7b:22:6e:
                    f3:36:dc:93:06:f1:b2:ac:71:59:fc:0e:11:67:72:
                    37:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:CA:2B:D6:DC:4F:7B:4D:D5:22:C7:6B:FE:61:BF:0B:48:54:7A:68
            X509v3 Authority Key Identifier:
                keyid:96:DD:D0:A9:70:E0:BB:19:3F:C5:B9:D9:02:9B:75:46:5F:B1:70:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48D8FB9176041AB5764933AF43A9F6E1C8B31C3D69E0D43467A11CAD31D66869/0/96DDD0A970E0BB193FC5B9D9029B75465FB170DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96DDD0A970E0BB193FC5B9D9029B75465FB170DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/48D8FB9176041AB5764933AF43A9F6E1C8B31C3D69E0D43467A11CAD31D66869/0/3230312e3133392e31312e302f32342d3234203d3e203138343439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.139.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:c5:ef:e1:2b:12:75:9b:b7:65:60:07:25:68:f8:45:21:90:
         e2:a5:3c:19:92:23:25:ad:1f:ef:07:70:a5:8d:0c:dd:ad:81:
         f0:1f:9e:5c:6f:cb:23:fc:ac:f4:f2:8f:b4:39:04:3a:03:f8:
         eb:18:92:a9:44:bc:f2:e0:95:a4:88:07:2c:51:8b:a9:92:17:
         7c:19:b6:ff:a9:70:9a:f2:aa:2b:72:e6:3f:07:58:31:87:f3:
         54:89:ce:ec:d1:e0:33:46:55:59:a4:ae:b0:26:80:2f:4c:02:
         99:52:c3:a3:cc:d6:d8:b5:90:f6:5d:93:15:14:f4:67:c5:73:
         30:6b:05:63:46:8a:44:6e:d0:f2:6d:83:13:2b:72:5e:11:02:
         31:13:74:b8:83:1c:74:3c:d2:aa:6b:ad:0c:4e:3a:18:4a:60:
         72:07:ce:48:87:a9:28:3f:6e:b0:70:a5:1c:60:cd:fd:25:6f:
         bd:be:3d:27:02:77:18:f7:8d:e9:a8:9b:99:42:f8:d3:8f:96:
         c8:89:c4:83:bd:f8:60:4a:64:a2:36:ed:f4:63:09:41:56:9f:
         39:a4:88:da:8a:2f:c2:87:c1:b8:4d:c4:4a:98:60:19:d7:6b:
         ac:ca:e3:0e:6e:0e:f7:24:b4:62:ef:ad:79:57:2e:a9:60:3c:
         3e:5f:73:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:28:02 2026 by rpki-client