Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7884ED7C3480EF4CA98888836D406E9097A38AA938DB6DB1F003EDAD4556C571/0/3230312e3134382e3130352e302f32342d3234203d3e20323635383339.roa
File:                     3230312e3134382e3130352e302f32342d3234203d3e20323635383339.roa (raw, json)
Hash identifier:          2aS5SfmAFD8EU7Vbm/+14NpchT4qyZrkR1dgkaLdm9k=
Subject key identifier:   91:0A:67:5E:31:D8:0C:9F:43:46:1E:AE:3D:97:54:BB:70:EB:E0:43
Certificate issuer:       /CN=B167745D3C13890CC27EF4697BB0058F2C2076C8
Certificate serial:       25CC04ED23B1601AE91EDEC962275D98AAF86F4D
Authority key identifier: B1:67:74:5D:3C:13:89:0C:C2:7E:F4:69:7B:B0:05:8F:2C:20:76:C8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B167745D3C13890CC27EF4697BB0058F2C2076C8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7884ED7C3480EF4CA98888836D406E9097A38AA938DB6DB1F003EDAD4556C571/0/3230312e3134382e3130352e302f32342d3234203d3e20323635383339.roa
Signing time:             Fri 13 Feb 2026 16:30:24 +0000
ROA not before:           Fri 13 Feb 2026 16:25:24 +0000
ROA not after:            Fri 12 Feb 2027 16:30:24 +0000
asID:                     265839
IP address blocks:        201.148.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7884ED7C3480EF4CA98888836D406E9097A38AA938DB6DB1F003EDAD4556C571/0/B167745D3C13890CC27EF4697BB0058F2C2076C8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7884ED7C3480EF4CA98888836D406E9097A38AA938DB6DB1F003EDAD4556C571/0/B167745D3C13890CC27EF4697BB0058F2C2076C8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B167745D3C13890CC27EF4697BB0058F2C2076C8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:cc:04:ed:23:b1:60:1a:e9:1e:de:c9:62:27:5d:98:aa:f8:6f:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B167745D3C13890CC27EF4697BB0058F2C2076C8
        Validity
            Not Before: Feb 13 16:25:24 2026 GMT
            Not After : Feb 12 16:30:24 2027 GMT
        Subject: CN=910A675E31D80C9F43461EAE3D9754BB70EBE043
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:d3:9a:c4:7e:bb:f9:b9:5f:96:9f:d0:03:e9:
                    a2:04:01:42:18:d2:37:5b:f8:28:12:a2:ae:93:27:
                    75:b0:b7:f3:4d:87:36:87:80:0c:cc:a5:72:bd:34:
                    4b:4d:ef:18:c7:b7:13:d6:74:c9:5a:0f:28:e3:d1:
                    c2:80:46:ce:10:9c:31:2c:d2:b3:29:c6:94:f7:e5:
                    6b:4b:d2:51:aa:8f:53:74:14:6b:41:4c:30:da:ab:
                    21:e8:4b:2b:5a:15:d9:24:69:c2:69:8b:d5:f2:34:
                    b5:0d:28:80:1c:cd:29:e5:44:b1:89:62:06:98:3b:
                    df:00:2b:c9:fe:8f:99:ae:6c:31:71:6c:39:ee:9b:
                    d0:aa:bf:94:9a:8f:99:07:a5:b0:d2:59:bc:2f:d8:
                    12:9e:52:5f:0b:5e:c7:f3:55:6d:71:7d:b7:33:fe:
                    6a:69:c7:b5:c2:5d:3b:16:5b:76:03:f7:32:8d:30:
                    bd:93:bc:8c:11:a7:10:2a:91:6e:4f:69:98:48:2e:
                    3a:fb:e8:46:f9:bd:94:a2:e6:f9:40:6b:0b:31:f5:
                    92:89:d4:1d:0e:ee:7c:db:1c:1b:45:7d:52:cb:94:
                    ff:99:35:fe:43:04:7f:09:84:c9:67:21:4d:04:9b:
                    b0:ef:08:60:9a:19:a2:e3:bd:39:26:0a:be:73:2a:
                    8e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:0A:67:5E:31:D8:0C:9F:43:46:1E:AE:3D:97:54:BB:70:EB:E0:43
            X509v3 Authority Key Identifier:
                keyid:B1:67:74:5D:3C:13:89:0C:C2:7E:F4:69:7B:B0:05:8F:2C:20:76:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7884ED7C3480EF4CA98888836D406E9097A38AA938DB6DB1F003EDAD4556C571/0/B167745D3C13890CC27EF4697BB0058F2C2076C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B167745D3C13890CC27EF4697BB0058F2C2076C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7884ED7C3480EF4CA98888836D406E9097A38AA938DB6DB1F003EDAD4556C571/0/3230312e3134382e3130352e302f32342d3234203d3e20323635383339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.148.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:49:47:af:e0:10:e9:97:83:5b:09:10:bc:05:29:a0:7d:09:
         61:eb:9f:b6:45:bd:4b:2e:9b:cd:aa:77:a7:2f:dd:1a:2d:0e:
         64:d1:3e:67:9c:6c:d5:1e:cf:de:ed:86:6d:91:d1:1a:88:04:
         b1:a9:df:5b:19:52:8f:1c:1e:1d:e3:3c:2e:c4:fd:91:3d:e7:
         7a:ba:99:9f:3d:69:8f:8e:7a:25:f0:3d:55:a3:06:95:fb:57:
         59:48:6d:8b:a1:be:36:67:cc:f4:00:30:8d:60:0e:e4:9b:4a:
         4e:b7:f5:39:f8:f5:d1:ad:71:a4:d6:58:ef:e7:93:c4:a9:1c:
         24:33:c2:81:7f:0e:66:be:92:da:c5:38:21:59:4a:a6:37:18:
         77:47:e5:40:59:56:42:f1:57:79:60:cd:38:24:fd:2c:c3:bf:
         b7:88:61:1d:d5:7c:2d:da:be:a4:da:05:47:53:20:39:13:0d:
         1c:e5:43:03:5e:38:c0:7d:71:1e:6d:c9:e1:c0:8a:87:78:ce:
         15:75:04:44:af:6e:db:d5:b5:fe:48:79:ec:dd:8a:1b:8d:a0:
         b8:3f:c2:57:9e:27:37:a8:43:da:28:d3:4e:45:69:24:63:07:
         01:99:37:16:2b:de:3d:f6:2c:73:c5:33:ff:6f:49:9a:9b:d3:
         da:8b:be:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:53:04 2026 by rpki-client