Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7884ED7C3480EF4CA98888836D406E9097A38AA938DB6DB1F003EDAD4556C571/0/3230312e3134382e3130372e302f32342d3234203d3e20323635383339.roa
File:                     3230312e3134382e3130372e302f32342d3234203d3e20323635383339.roa (raw, json)
Hash identifier:          Nvsf3LRfX3uND6gs/pZbdf2TSTPDEurQlBVcErNv698=
Subject key identifier:   77:3D:E2:1D:36:B0:20:E7:20:D2:CC:88:27:55:3F:C6:7A:FD:87:0C
Certificate issuer:       /CN=B167745D3C13890CC27EF4697BB0058F2C2076C8
Certificate serial:       7FB7F2210CCD2DB497DE16D2AF90990176CE356D
Authority key identifier: B1:67:74:5D:3C:13:89:0C:C2:7E:F4:69:7B:B0:05:8F:2C:20:76:C8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B167745D3C13890CC27EF4697BB0058F2C2076C8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7884ED7C3480EF4CA98888836D406E9097A38AA938DB6DB1F003EDAD4556C571/0/3230312e3134382e3130372e302f32342d3234203d3e20323635383339.roa
Signing time:             Fri 13 Feb 2026 16:30:25 +0000
ROA not before:           Fri 13 Feb 2026 16:25:25 +0000
ROA not after:            Fri 12 Feb 2027 16:30:25 +0000
asID:                     265839
IP address blocks:        201.148.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7884ED7C3480EF4CA98888836D406E9097A38AA938DB6DB1F003EDAD4556C571/0/B167745D3C13890CC27EF4697BB0058F2C2076C8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7884ED7C3480EF4CA98888836D406E9097A38AA938DB6DB1F003EDAD4556C571/0/B167745D3C13890CC27EF4697BB0058F2C2076C8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B167745D3C13890CC27EF4697BB0058F2C2076C8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:b7:f2:21:0c:cd:2d:b4:97:de:16:d2:af:90:99:01:76:ce:35:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B167745D3C13890CC27EF4697BB0058F2C2076C8
        Validity
            Not Before: Feb 13 16:25:25 2026 GMT
            Not After : Feb 12 16:30:25 2027 GMT
        Subject: CN=773DE21D36B020E720D2CC8827553FC67AFD870C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:60:2c:5d:4b:ab:1a:b2:74:47:b9:12:a3:a3:
                    63:53:0b:c3:d8:fc:9c:d5:cc:bc:fa:bc:80:b1:81:
                    55:b8:06:08:8b:cc:da:93:6e:3f:0c:ff:7b:f0:fc:
                    30:d6:85:d3:1c:17:ee:c7:6f:85:df:b2:97:0a:a6:
                    b7:f6:24:54:0e:7d:e6:97:65:7a:5a:f1:0e:77:a5:
                    15:52:ad:ed:17:0e:23:94:03:b6:e1:f6:46:b9:a4:
                    e3:85:c2:cf:43:f0:d5:05:c2:58:e6:5e:92:59:1d:
                    aa:c7:12:de:a2:a7:5a:0a:05:0d:5e:a9:ca:2c:50:
                    85:ec:19:04:f5:1f:a8:4c:cf:19:05:47:bf:5c:2b:
                    3e:88:34:6a:65:10:1c:ad:fb:80:3f:47:88:40:e7:
                    b8:70:53:45:79:20:7d:57:bc:bd:68:56:fc:e0:d7:
                    fc:29:ea:50:46:0c:d1:cf:de:49:26:f6:bb:b3:9d:
                    02:ff:6d:33:00:af:b0:c9:18:e0:e1:40:97:17:66:
                    cd:b2:68:4e:9e:c8:0c:03:56:f0:74:93:a9:26:76:
                    06:12:26:7e:6d:73:b5:6d:66:8b:c2:a8:f2:0c:1f:
                    50:37:9c:19:cb:7f:c2:8a:0e:08:09:10:e0:a8:7c:
                    6c:e0:6f:72:78:fb:cb:fd:d0:0d:26:5c:65:77:1f:
                    69:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:3D:E2:1D:36:B0:20:E7:20:D2:CC:88:27:55:3F:C6:7A:FD:87:0C
            X509v3 Authority Key Identifier:
                keyid:B1:67:74:5D:3C:13:89:0C:C2:7E:F4:69:7B:B0:05:8F:2C:20:76:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7884ED7C3480EF4CA98888836D406E9097A38AA938DB6DB1F003EDAD4556C571/0/B167745D3C13890CC27EF4697BB0058F2C2076C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B167745D3C13890CC27EF4697BB0058F2C2076C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7884ED7C3480EF4CA98888836D406E9097A38AA938DB6DB1F003EDAD4556C571/0/3230312e3134382e3130372e302f32342d3234203d3e20323635383339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.148.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:44:7b:44:89:b7:91:e4:79:d0:55:42:d2:02:14:ff:0a:a0:
         36:f9:98:65:32:e6:ea:cd:a1:ff:d7:b1:ea:ad:8a:2d:17:a0:
         86:60:a1:17:86:40:52:98:0b:62:cd:e5:5f:86:66:25:31:f9:
         33:bf:4a:be:7e:a9:83:fa:99:01:69:bd:16:aa:80:7e:cc:af:
         68:3d:5e:06:64:7c:bb:cb:ce:36:fc:67:07:de:2b:e0:14:5d:
         df:43:14:3f:61:c9:11:98:45:9f:7c:9c:bc:74:9a:b3:dc:31:
         1e:d3:39:96:17:71:a9:19:86:d2:8c:30:3d:a8:b7:95:01:38:
         98:65:98:0f:ba:f4:48:40:0c:3e:bf:83:f8:48:94:14:ce:73:
         6a:71:23:b1:80:20:50:92:05:8b:6f:ce:8f:f1:d5:ab:5f:ed:
         65:e8:05:84:37:10:20:60:b7:af:ff:94:b6:91:5f:dd:81:4b:
         80:40:0a:d2:91:c7:ab:34:b1:8e:cb:ee:c6:16:80:cd:50:60:
         ee:3b:57:b0:0f:a3:ea:8b:7b:ce:68:4a:ba:0e:6a:c1:91:fa:
         df:76:a5:63:44:38:59:94:0e:41:b3:9d:26:1f:59:de:22:11:
         55:7b:0b:d4:12:18:85:ec:21:c2:85:bf:72:a0:c3:fc:45:3b:
         e1:9f:6c:9d
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUf7fyIQzNLbSX3hbSr5CZAXbONW0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjE2Nzc0NUQzQzEzODkwQ0MyN0VGNDY5N0JCMDA1OEYy
QzIwNzZDODAeFw0yNjAyMTMxNjI1MjVaFw0yNzAyMTIxNjMwMjVaMDMxMTAvBgNV
BAMTKDc3M0RFMjFEMzZCMDIwRTcyMEQyQ0M4ODI3NTUzRkM2N0FGRDg3MEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxYCxdS6sasnRHuRKjo2NTC8PY
/JzVzLz6vICxgVW4BgiLzNqTbj8M/3vw/DDWhdMcF+7Hb4XfspcKprf2JFQOfeaX
ZXpa8Q53pRVSre0XDiOUA7bh9ka5pOOFws9D8NUFwljmXpJZHarHEt6ip1oKBQ1e
qcosUIXsGQT1H6hMzxkFR79cKz6INGplEByt+4A/R4hA57hwU0V5IH1XvL1oVvzg
1/wp6lBGDNHP3kkm9ruznQL/bTMAr7DJGODhQJcXZs2yaE6eyAwDVvB0k6kmdgYS
Jn5tc7VtZovCqPIMH1A3nBnLf8KKDggJEOCofGzgb3J4+8v90A0mXGV3H2nJAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUdz3iHTawIOcg0syIJ1U/xnr9hwwwHwYDVR0j
BBgwFoAUsWd0XTwTiQzCfvRpe7AFjywgdsgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83ODg0RUQ3QzM0ODBFRjRDQTk4ODg4ODM2RDQwNkU5MDk3
QTM4QUE5MzhEQjZEQjFGMDAzRURBRDQ1NTZDNTcxLzAvQjE2Nzc0NUQzQzEzODkw
Q0MyN0VGNDY5N0JCMDA1OEYyQzIwNzZDOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CMTY3NzQ1RDNDMTM4OTBDQzI3
RUY0Njk3QkIwMDU4RjJDMjA3NkM4LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzg4NEVEN0MzNDgwRUY0Q0E5ODg4ODgzNkQ0MDZFOTA5N0EzOEFBOTM4
REI2REIxRjAwM0VEQUQ0NTU2QzU3MS8wLzMyMzAzMTJlMzEzNDM4MmUzMTMwMzcy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzUzODMzMzkucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADJ
lGswDQYJKoZIhvcNAQELBQADggEBAC9Ee0SJt5HkedBVQtICFP8KoDb5mGUy5urN
of/Xseqtii0XoIZgoReGQFKYC2LN5V+GZiUx+TO/Sr5+qYP6mQFpvRaqgH7Mr2g9
XgZkfLvLzjb8ZwfeK+AUXd9DFD9hyRGYRZ98nLx0mrPcMR7TOZYXcakZhtKMMD2o
t5UBOJhlmA+69EhADD6/g/hIlBTOc2pxI7GAIFCSBYtvzo/x1atf7WXoBYQ3ECBg
t6//lLaRX92BS4BACtKRx6s0sY7L7sYWgM1QYO47V7APo+qLe85oSroOasGR+t92
pWNEOFmUDkGznSYfWd4iEVV7C9QSGIXsIcKFv3Kgw/xFO+GfbJ0=
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:53:06 2026 by rpki-client