Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/3134382e3230382e3135392e302f32342d3234203d3e20323732333233.roa
File:                     3134382e3230382e3135392e302f32342d3234203d3e20323732333233.roa (raw, json)
Hash identifier:          Shemf7K/IJJCrij4vVizu04q/Tlsc2YSgjfK85l6UZc=
Subject key identifier:   E2:48:16:DD:E9:72:E2:0B:A9:50:29:4F:3B:7A:A4:BB:93:D8:26:6B
Certificate issuer:       /CN=8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB
Certificate serial:       3D3A1AE9764C3B5E369E6399B7AD746EE324A419
Authority key identifier: 8A:12:67:DC:B4:DC:6F:FA:9F:CD:D7:FE:A9:D7:F9:F7:8C:37:91:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/3134382e3230382e3135392e302f32342d3234203d3e20323732333233.roa
Signing time:             Fri 22 May 2026 17:43:45 +0000
ROA not before:           Fri 22 May 2026 17:38:45 +0000
ROA not after:            Fri 21 May 2027 17:43:45 +0000
asID:                     272323
IP address blocks:        148.208.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 02 Jun 2026 13:41:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:3a:1a:e9:76:4c:3b:5e:36:9e:63:99:b7:ad:74:6e:e3:24:a4:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB
        Validity
            Not Before: May 22 17:38:45 2026 GMT
            Not After : May 21 17:43:45 2027 GMT
        Subject: CN=E24816DDE972E20BA950294F3B7AA4BB93D8266B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a8:b1:6b:65:91:c4:e4:bd:d0:cd:c5:6b:95:
                    0b:16:08:de:17:4a:1b:96:18:f3:cf:48:b7:fb:d1:
                    cf:fa:7c:7e:32:90:73:12:05:32:65:ed:2f:0a:61:
                    c3:19:8f:78:8b:88:c1:2d:57:9f:1c:ac:00:8a:ae:
                    ff:1c:e3:c8:5a:20:5e:11:74:9a:3a:54:68:bd:75:
                    8d:e9:0d:c0:96:29:ed:85:dd:67:ba:2d:5f:eb:03:
                    47:f7:c8:80:83:5c:5d:ab:0e:71:71:99:d7:cb:fb:
                    8d:15:3e:53:f3:80:0b:53:5d:e9:02:61:6b:37:e0:
                    9d:c5:1a:1e:01:7b:00:01:5b:d9:c1:b3:a0:fd:ef:
                    23:70:02:d5:ad:f8:42:fd:f8:d7:f7:9e:39:a3:4e:
                    9a:ce:ee:4b:1b:f6:35:44:07:ca:01:56:c4:cb:15:
                    b2:38:3a:ad:6c:42:99:af:57:1f:b6:28:b0:bc:e7:
                    ee:c9:40:cb:87:91:da:5f:7e:6d:4e:40:67:1e:11:
                    12:d0:c0:56:68:8c:92:d9:b4:ea:eb:ed:4a:28:a7:
                    a0:8d:c6:24:73:04:58:c9:de:a5:9d:1b:3a:11:33:
                    2d:fb:dc:45:cc:cb:6b:df:da:90:75:6c:39:9a:fe:
                    5d:93:d9:8b:b7:fb:4e:d2:67:d2:87:29:d0:c0:7a:
                    ca:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:48:16:DD:E9:72:E2:0B:A9:50:29:4F:3B:7A:A4:BB:93:D8:26:6B
            X509v3 Authority Key Identifier:
                keyid:8A:12:67:DC:B4:DC:6F:FA:9F:CD:D7:FE:A9:D7:F9:F7:8C:37:91:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/3134382e3230382e3135392e302f32342d3234203d3e20323732333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.208.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:26:4c:22:d0:90:c6:af:6b:a1:98:2b:53:d7:ec:85:0c:60:
         54:57:34:22:53:43:3e:83:e9:f2:c6:a0:e3:6b:70:5d:39:38:
         e7:ec:fc:f9:df:ad:7f:51:36:77:ce:32:dc:df:38:df:fe:92:
         6c:0a:66:d5:e9:c8:1e:eb:ab:71:c2:fd:c6:fb:b8:9c:64:17:
         9c:f3:46:cc:dc:5f:57:50:da:c7:d0:e5:94:80:80:ca:d3:94:
         b9:3d:8d:80:96:e2:15:52:88:59:78:d3:77:db:05:d6:91:35:
         92:5f:f4:13:81:dc:96:1f:10:60:b7:3c:61:a4:81:6c:55:79:
         ae:9e:c2:3a:1a:3a:5a:ee:4d:d1:bd:5b:50:cf:8b:b4:59:31:
         9e:0b:62:dd:1e:07:dc:d7:16:99:43:60:de:3b:87:67:d0:30:
         63:dd:9e:f2:41:eb:48:02:23:6d:aa:e1:92:b2:20:39:d3:d4:
         97:f6:f2:90:8e:aa:01:53:58:6b:3e:d8:f1:d2:6b:4b:82:23:
         df:dd:64:4a:3c:4b:0a:9b:b8:4a:37:77:d3:00:b9:8b:c5:33:
         74:20:2b:86:90:30:14:d9:cc:e5:b2:a1:44:02:84:99:0a:42:
         f9:cd:10:40:c9:15:83:94:13:47:4c:3a:57:e4:0d:4b:3d:67:
         a8:c6:cc:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 01:46:42 2026 by rpki-client