Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/3134382e3230382e3136332e302f32342d3234203d3e20323732333233.roa
File:                     3134382e3230382e3136332e302f32342d3234203d3e20323732333233.roa (raw, json)
Hash identifier:          gLK8Y4SCOyrlMeJopH6R3sk6SGFL/9G8F/goeMjK+5I=
Subject key identifier:   9C:54:AB:B7:01:F3:04:C9:E2:DD:26:C5:79:E4:50:8A:86:3A:3F:4D
Certificate issuer:       /CN=8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB
Certificate serial:       017FD6686FD26DC8CC9F10FC0E18630722B2E515
Authority key identifier: 8A:12:67:DC:B4:DC:6F:FA:9F:CD:D7:FE:A9:D7:F9:F7:8C:37:91:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/3134382e3230382e3136332e302f32342d3234203d3e20323732333233.roa
Signing time:             Fri 22 May 2026 17:43:43 +0000
ROA not before:           Fri 22 May 2026 17:38:43 +0000
ROA not after:            Fri 21 May 2027 17:43:43 +0000
asID:                     272323
IP address blocks:        148.208.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 02 Jun 2026 13:41:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:7f:d6:68:6f:d2:6d:c8:cc:9f:10:fc:0e:18:63:07:22:b2:e5:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB
        Validity
            Not Before: May 22 17:38:43 2026 GMT
            Not After : May 21 17:43:43 2027 GMT
        Subject: CN=9C54ABB701F304C9E2DD26C579E4508A863A3F4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:06:b9:99:37:24:1e:17:5e:06:a1:ee:d2:3f:
                    62:dd:5f:a6:d3:c4:d0:50:31:70:c6:92:d9:1a:99:
                    67:30:99:3c:25:de:66:44:6d:df:8c:ba:74:4f:a1:
                    18:6d:a0:76:29:20:f7:19:72:44:3f:bd:0f:35:31:
                    4b:9d:61:e8:ea:61:d4:eb:63:dd:02:13:c7:d7:69:
                    ed:e6:f4:24:9c:06:8d:66:07:15:3e:05:ff:bf:20:
                    65:82:94:5c:87:c8:cc:38:7c:eb:06:78:ed:49:8d:
                    29:3e:28:69:59:7c:bc:38:1e:62:d5:02:9c:d5:7e:
                    99:4d:85:ce:ec:b2:49:96:fb:f1:01:b7:56:b4:b7:
                    ab:83:58:4d:b6:18:d8:dd:da:02:45:30:b7:2a:8f:
                    1f:d5:04:ea:0f:ef:88:7d:c9:c7:8d:e5:c8:51:c9:
                    da:fe:20:e8:c5:ce:a1:be:be:39:7e:c3:8a:9e:b4:
                    12:b5:f7:d4:f1:6b:85:5a:5f:79:79:ef:0e:15:75:
                    09:68:64:f0:b4:fa:7f:15:d1:d3:74:ab:1e:7f:b8:
                    23:be:9a:87:82:ef:ec:f5:1e:f6:42:76:51:95:60:
                    eb:2d:2f:9f:ca:7f:1a:51:bc:81:36:2e:18:f2:92:
                    00:e5:24:9c:92:8d:2f:6c:05:34:aa:4c:38:5f:2b:
                    4e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:54:AB:B7:01:F3:04:C9:E2:DD:26:C5:79:E4:50:8A:86:3A:3F:4D
            X509v3 Authority Key Identifier:
                keyid:8A:12:67:DC:B4:DC:6F:FA:9F:CD:D7:FE:A9:D7:F9:F7:8C:37:91:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/3134382e3230382e3136332e302f32342d3234203d3e20323732333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.208.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:56:2f:fb:68:aa:ff:a7:be:99:b1:8c:49:2c:ed:14:98:de:
         22:3e:82:4c:a8:68:1f:c8:e2:8a:60:72:03:7a:48:0c:85:8a:
         f7:ec:1b:fd:4f:ed:cb:04:f7:f2:c2:41:3d:74:78:06:5e:32:
         10:73:57:5e:fb:4b:48:ab:56:52:f9:d6:99:8c:84:f4:ec:24:
         d4:66:17:19:7a:b4:48:ab:80:0f:47:d7:f6:69:5d:74:7d:05:
         27:38:35:ef:a6:15:dd:78:0f:d5:53:eb:9e:97:31:7e:22:a8:
         24:ed:eb:2e:3b:2a:50:07:e1:72:b5:80:53:da:eb:76:75:5c:
         ab:89:62:e2:f6:a9:6f:8c:ec:7e:55:b3:19:2d:66:62:98:a4:
         11:35:ce:fb:f7:d7:08:90:50:f3:47:85:5d:50:99:88:7e:af:
         62:79:d3:a8:f7:38:b4:3d:9c:89:e7:79:41:34:f8:a9:ff:c5:
         31:b7:e7:ee:2e:42:cb:70:25:9c:d6:0e:8a:8c:7f:87:42:32:
         68:b9:f7:31:03:fa:88:8d:9c:8c:b6:c7:1a:65:8f:ca:73:55:
         44:fa:7b:b7:56:fb:3e:85:cd:6f:8a:59:73:e8:2a:cc:5f:d2:
         02:ec:e7:40:46:ba:71:8c:d6:44:ae:5f:09:13:d8:ce:7d:31:
         ab:5c:f3:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 01:46:43 2026 by rpki-client