Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9C2C1D48BCFB2DA7026499BE882AA7C0AFA81A33F6EEB4E472C06F360B209B98/0/3133312e3136312e38382e302f32322d3232203d3e2034323730.roa
File:                     3133312e3136312e38382e302f32322d3232203d3e2034323730.roa (raw, json)
Hash identifier:          L3eGHnQJDL3esJUQ4qlpy4AU5SCHN6rV9gp/CP9Ew+w=
Subject key identifier:   EB:35:98:06:73:59:EF:90:52:AA:9E:C6:B6:DF:48:F8:F9:CC:6B:E1
Certificate issuer:       /CN=E4EC1B4D362E53DBF38A896B85A9752AD9E1D1D3
Certificate serial:       0DC6ECA4F015E2B05D808E96A0EEB46F80E1975E
Authority key identifier: E4:EC:1B:4D:36:2E:53:DB:F3:8A:89:6B:85:A9:75:2A:D9:E1:D1:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E4EC1B4D362E53DBF38A896B85A9752AD9E1D1D3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9C2C1D48BCFB2DA7026499BE882AA7C0AFA81A33F6EEB4E472C06F360B209B98/0/3133312e3136312e38382e302f32322d3232203d3e2034323730.roa
Signing time:             Fri 20 Feb 2026 16:40:00 +0000
ROA not before:           Fri 20 Feb 2026 16:35:00 +0000
ROA not after:            Fri 19 Feb 2027 16:40:00 +0000
asID:                     4270
IP address blocks:        131.161.88.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9C2C1D48BCFB2DA7026499BE882AA7C0AFA81A33F6EEB4E472C06F360B209B98/0/E4EC1B4D362E53DBF38A896B85A9752AD9E1D1D3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9C2C1D48BCFB2DA7026499BE882AA7C0AFA81A33F6EEB4E472C06F360B209B98/0/E4EC1B4D362E53DBF38A896B85A9752AD9E1D1D3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E4EC1B4D362E53DBF38A896B85A9752AD9E1D1D3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Mar 2026 04:58:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:c6:ec:a4:f0:15:e2:b0:5d:80:8e:96:a0:ee:b4:6f:80:e1:97:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4EC1B4D362E53DBF38A896B85A9752AD9E1D1D3
        Validity
            Not Before: Feb 20 16:35:00 2026 GMT
            Not After : Feb 19 16:40:00 2027 GMT
        Subject: CN=EB3598067359EF9052AA9EC6B6DF48F8F9CC6BE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2b:61:c0:96:98:f5:88:b3:15:65:ae:e7:18:
                    39:66:00:3f:6b:4b:c7:13:ff:a9:e2:fe:21:08:31:
                    d8:d3:1b:0d:29:2d:b8:ed:d9:c6:45:97:86:43:bc:
                    94:94:11:1e:2c:6b:5f:f5:b1:ba:7a:0a:37:e0:f2:
                    48:0b:17:ac:87:1e:a0:65:76:0b:0f:b8:1c:c6:0f:
                    e3:03:80:10:4a:ab:7c:e9:23:21:d0:c2:73:c9:40:
                    46:86:50:f8:d6:10:d2:10:79:d7:dd:e1:f3:5a:50:
                    2d:5e:ed:3d:ad:9e:24:5c:e9:55:36:91:47:71:e7:
                    a6:0b:8a:9c:00:e0:ff:c0:d3:76:ef:fb:ce:b2:39:
                    6c:c6:44:4a:9c:3f:9f:46:c7:c4:47:1d:f5:fe:d9:
                    11:b5:a9:76:17:73:a6:34:f5:b7:2e:95:3b:93:d0:
                    46:cf:35:4c:af:6e:23:c7:a2:4c:3c:d2:dd:7c:32:
                    d8:2e:4f:4f:74:b0:b0:bb:8d:7b:f5:68:6f:a5:d3:
                    50:10:81:91:b2:11:93:34:13:c6:a6:b9:fe:5b:1b:
                    77:4a:5e:6e:d7:db:bd:53:4d:17:a6:17:ed:7e:39:
                    b4:c4:b2:b4:05:b7:31:59:c1:90:f2:22:45:df:27:
                    df:73:ff:60:35:0d:e8:20:16:c8:1a:4c:cd:b3:8c:
                    34:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:35:98:06:73:59:EF:90:52:AA:9E:C6:B6:DF:48:F8:F9:CC:6B:E1
            X509v3 Authority Key Identifier:
                keyid:E4:EC:1B:4D:36:2E:53:DB:F3:8A:89:6B:85:A9:75:2A:D9:E1:D1:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9C2C1D48BCFB2DA7026499BE882AA7C0AFA81A33F6EEB4E472C06F360B209B98/0/E4EC1B4D362E53DBF38A896B85A9752AD9E1D1D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E4EC1B4D362E53DBF38A896B85A9752AD9E1D1D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9C2C1D48BCFB2DA7026499BE882AA7C0AFA81A33F6EEB4E472C06F360B209B98/0/3133312e3136312e38382e302f32322d3232203d3e2034323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:31:b5:da:e2:af:04:8a:0f:af:4b:95:3f:1d:c4:9b:b5:34:
         23:23:f2:d7:b8:48:67:69:70:79:de:a1:c1:b0:dd:ab:54:63:
         bf:3f:6f:c9:e5:1f:3c:30:d5:de:b2:3d:45:b9:2b:38:25:99:
         a0:b5:27:15:da:f6:33:24:45:7d:c6:f5:52:a8:dc:fa:4e:44:
         d1:85:c5:56:b8:fa:f6:77:cc:a7:37:98:f3:26:b7:25:a5:b5:
         fc:a4:bd:12:24:72:17:e1:a1:a4:b9:85:65:fc:b7:14:4a:3c:
         e9:8b:6a:4e:43:50:75:14:65:0a:0f:87:38:ef:e0:5f:ec:9a:
         f4:e9:7c:ed:b9:a7:50:54:40:72:0c:da:9b:a5:59:56:b9:50:
         35:ee:45:6f:2c:34:3c:24:94:52:63:20:e4:e1:a3:c8:9b:d3:
         83:03:b1:4c:50:6c:c6:d1:66:24:29:30:f0:25:8a:74:dd:eb:
         9d:62:e6:e7:c1:b9:03:93:de:53:60:d1:f5:2e:52:d3:f3:90:
         c4:4f:26:ab:49:5b:26:f6:b6:66:70:ae:3f:67:13:ef:44:67:
         ea:15:00:06:2a:66:a2:d0:f6:7e:e7:5c:71:7f:3a:e3:7c:b9:
         d8:31:66:49:82:bb:1a:71:a8:e7:b3:70:ae:ce:92:e3:dd:a2:
         3c:39:24:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:22:21 2026 by rpki-client