Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A511D681E72F9D814F7BD8FC39D1FED7EA3F94AB704F688C8C38F1A51732BDC/0/3136302e3233382e3138362e302f32332d3233203d3e20323635373238.roa
File:                     3136302e3233382e3138362e302f32332d3233203d3e20323635373238.roa (raw, json)
Hash identifier:          6KylB6gGlTw8SaB1En5gUeacHWBS3sEZfOynXepf6Ek=
Subject key identifier:   EB:FA:DC:92:3D:9B:B9:27:4C:7F:A2:1C:96:DE:2F:3A:E1:C3:23:3E
Certificate issuer:       /CN=B7E1ABEC010ABB9AF463BF22B16C561B5C2C4444
Certificate serial:       1277EE38D0E6968FF0550B034EB862BE0A1E8203
Authority key identifier: B7:E1:AB:EC:01:0A:BB:9A:F4:63:BF:22:B1:6C:56:1B:5C:2C:44:44
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B7E1ABEC010ABB9AF463BF22B16C561B5C2C4444.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A511D681E72F9D814F7BD8FC39D1FED7EA3F94AB704F688C8C38F1A51732BDC/0/3136302e3233382e3138362e302f32332d3233203d3e20323635373238.roa
Signing time:             Fri 03 Apr 2026 21:37:30 +0000
ROA not before:           Fri 03 Apr 2026 21:32:30 +0000
ROA not after:            Fri 02 Apr 2027 21:37:30 +0000
asID:                     265728
IP address blocks:        160.238.186.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A511D681E72F9D814F7BD8FC39D1FED7EA3F94AB704F688C8C38F1A51732BDC/0/B7E1ABEC010ABB9AF463BF22B16C561B5C2C4444.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A511D681E72F9D814F7BD8FC39D1FED7EA3F94AB704F688C8C38F1A51732BDC/0/B7E1ABEC010ABB9AF463BF22B16C561B5C2C4444.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B7E1ABEC010ABB9AF463BF22B16C561B5C2C4444.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 11 Apr 2026 23:05:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:77:ee:38:d0:e6:96:8f:f0:55:0b:03:4e:b8:62:be:0a:1e:82:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7E1ABEC010ABB9AF463BF22B16C561B5C2C4444
        Validity
            Not Before: Apr  3 21:32:30 2026 GMT
            Not After : Apr  2 21:37:30 2027 GMT
        Subject: CN=EBFADC923D9BB9274C7FA21C96DE2F3AE1C3233E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:7c:de:6f:f7:e4:40:8f:6a:a2:d6:57:3a:ad:
                    17:95:4f:fd:58:f1:e4:3a:82:b9:73:12:c8:79:29:
                    43:63:09:aa:be:50:a2:84:a6:93:3c:77:4b:7a:d7:
                    6e:74:9a:3d:36:af:60:ca:7b:2d:02:52:be:54:1b:
                    fe:36:88:20:66:f8:db:1b:40:6f:99:86:de:06:60:
                    c0:ac:3f:56:cd:79:97:b2:24:52:62:2e:58:5f:0a:
                    ef:b6:72:da:7b:1f:ac:5e:1b:db:ee:13:be:de:1b:
                    5f:82:60:53:52:00:ad:14:b8:ec:be:fd:f5:64:90:
                    28:12:d8:b1:bc:51:b5:68:d7:e7:2a:57:d3:9f:e9:
                    30:a0:a0:41:38:18:b0:7e:60:49:4b:5c:ba:ae:01:
                    a6:fb:92:7c:17:ed:03:2c:b2:cd:82:4d:72:49:0b:
                    9a:dc:52:cb:c5:97:6a:4e:0b:9d:f2:1f:57:72:eb:
                    83:3f:66:e3:f9:8f:96:20:62:69:ce:ae:b5:d5:5c:
                    3d:60:76:70:99:a9:6a:28:90:4a:15:bd:fd:bd:2b:
                    45:46:4c:77:44:b6:9a:a4:20:88:f6:a6:ff:dc:c3:
                    00:46:f6:45:03:12:b7:bb:24:aa:3b:e3:ce:80:6f:
                    79:ba:64:b7:b2:0e:ee:ee:ca:fc:25:ef:44:ee:16:
                    1c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:FA:DC:92:3D:9B:B9:27:4C:7F:A2:1C:96:DE:2F:3A:E1:C3:23:3E
            X509v3 Authority Key Identifier:
                keyid:B7:E1:AB:EC:01:0A:BB:9A:F4:63:BF:22:B1:6C:56:1B:5C:2C:44:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A511D681E72F9D814F7BD8FC39D1FED7EA3F94AB704F688C8C38F1A51732BDC/0/B7E1ABEC010ABB9AF463BF22B16C561B5C2C4444.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B7E1ABEC010ABB9AF463BF22B16C561B5C2C4444.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A511D681E72F9D814F7BD8FC39D1FED7EA3F94AB704F688C8C38F1A51732BDC/0/3136302e3233382e3138362e302f32332d3233203d3e20323635373238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         80:f5:23:6d:9b:8d:b3:a8:2b:28:07:8d:d4:88:a5:b0:38:f2:
         70:76:01:a5:d3:05:14:9b:01:42:df:41:dd:c0:1c:7d:c8:80:
         5a:87:28:95:01:51:6a:37:9b:38:42:79:75:ce:0e:c3:11:87:
         b8:2b:49:6a:55:e5:3e:26:54:d6:dc:ee:34:28:d4:03:35:7c:
         dd:0d:96:49:0a:80:40:1e:6d:10:8f:8c:19:47:df:0a:b4:a5:
         69:0b:d4:ad:5f:c8:d2:07:c6:4b:8c:50:52:35:99:15:eb:3d:
         b9:dc:74:a2:d4:69:71:d9:85:b0:b2:0e:b7:59:47:12:c5:06:
         c1:6b:b7:77:98:6c:a3:bd:07:6b:47:b1:ec:64:68:4c:9b:e4:
         be:54:90:d5:51:e4:bb:d7:86:1c:00:5a:df:ff:43:64:ec:56:
         37:e6:7a:6f:16:f7:5f:ca:ec:d5:8c:fa:16:3a:1a:9b:3e:b7:
         f5:d0:83:6c:71:4e:70:26:f6:1a:3c:9e:2b:42:55:c7:92:3c:
         ad:63:a2:dd:59:9b:a5:06:e2:d3:5f:6c:e1:9f:56:54:eb:c3:
         87:68:81:ed:b0:a4:e9:ed:e5:c1:a7:1e:11:95:38:a0:18:7d:
         f9:ee:e9:63:a6:81:b6:75:9e:68:50:09:ab:9a:f9:cc:cf:9c:
         df:b9:96:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 06:21:34 2026 by rpki-client