Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/86189BDFBC3D149CB43B597A46FAF1CAE399A277652B28DBF2887C051286ABB8/0/3134332e302e36362e302f32342d3234203d3e20323732303036.roa
File:                     3134332e302e36362e302f32342d3234203d3e20323732303036.roa (raw, json)
Hash identifier:          pSN8vPJKYKQI/RXdJJg/9uxgug1D+tvAZW3q5zBeFfc=
Subject key identifier:   2A:93:A8:F5:B8:94:25:9C:73:25:F0:3C:DF:44:12:A3:16:96:44:FD
Certificate issuer:       /CN=8AC4B3EBC3ADB80107711DD87A95CA1625852301
Certificate serial:       1C2EC799D83991657F24A5C0667CD1658703F72C
Authority key identifier: 8A:C4:B3:EB:C3:AD:B8:01:07:71:1D:D8:7A:95:CA:16:25:85:23:01
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AC4B3EBC3ADB80107711DD87A95CA1625852301.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/86189BDFBC3D149CB43B597A46FAF1CAE399A277652B28DBF2887C051286ABB8/0/3134332e302e36362e302f32342d3234203d3e20323732303036.roa
Signing time:             Fri 19 Jun 2026 14:48:34 +0000
ROA not before:           Fri 19 Jun 2026 14:43:34 +0000
ROA not after:            Fri 18 Jun 2027 14:48:34 +0000
asID:                     272006
IP address blocks:        143.0.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/86189BDFBC3D149CB43B597A46FAF1CAE399A277652B28DBF2887C051286ABB8/0/8AC4B3EBC3ADB80107711DD87A95CA1625852301.crl
                          rsync://repository.lacnic.net/rpki/lacnic/86189BDFBC3D149CB43B597A46FAF1CAE399A277652B28DBF2887C051286ABB8/0/8AC4B3EBC3ADB80107711DD87A95CA1625852301.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AC4B3EBC3ADB80107711DD87A95CA1625852301.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Jul 2026 05:07:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:2e:c7:99:d8:39:91:65:7f:24:a5:c0:66:7c:d1:65:87:03:f7:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AC4B3EBC3ADB80107711DD87A95CA1625852301
        Validity
            Not Before: Jun 19 14:43:34 2026 GMT
            Not After : Jun 18 14:48:34 2027 GMT
        Subject: CN=2A93A8F5B894259C7325F03CDF4412A3169644FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d8:60:b2:64:fe:45:8f:a4:15:31:b4:a5:10:
                    46:07:ae:a6:95:30:65:20:5e:fb:f9:60:66:c0:5c:
                    f5:e8:64:80:a0:ef:14:e6:a1:d5:d7:38:92:16:67:
                    a0:95:9c:d7:0c:70:f9:29:a1:92:61:4e:05:56:60:
                    1a:32:69:01:55:89:92:0c:71:bf:37:ee:12:11:43:
                    b9:7f:da:80:7b:db:9e:d1:4b:f8:0b:f2:b2:8b:36:
                    9e:0d:cf:4b:a9:39:d5:fd:9e:1e:df:89:dc:7b:1a:
                    89:92:fd:0f:88:33:47:63:f8:30:58:20:c7:6c:6a:
                    aa:c1:f9:d4:79:2e:bc:50:63:bc:a9:47:b2:7a:49:
                    fe:92:7c:3b:77:e0:68:5a:fe:7e:fe:7d:33:ab:a1:
                    3e:83:ce:76:0a:bb:28:94:52:b5:4b:0e:61:bd:01:
                    3c:ef:d2:b0:df:49:db:3f:91:49:18:db:84:af:37:
                    02:e0:c2:20:5d:04:8d:94:76:ae:f3:ab:de:7b:e2:
                    5e:71:cd:d5:d4:76:20:55:b2:24:ce:21:78:08:50:
                    c9:f3:81:aa:e9:94:b0:c2:41:74:5a:45:5d:57:b6:
                    bd:ab:3e:ef:8c:2b:82:62:c1:46:e9:6e:d4:24:22:
                    ad:a9:f4:71:7a:aa:e0:32:b9:4c:71:d3:07:4c:fa:
                    6f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:93:A8:F5:B8:94:25:9C:73:25:F0:3C:DF:44:12:A3:16:96:44:FD
            X509v3 Authority Key Identifier:
                keyid:8A:C4:B3:EB:C3:AD:B8:01:07:71:1D:D8:7A:95:CA:16:25:85:23:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/86189BDFBC3D149CB43B597A46FAF1CAE399A277652B28DBF2887C051286ABB8/0/8AC4B3EBC3ADB80107711DD87A95CA1625852301.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AC4B3EBC3ADB80107711DD87A95CA1625852301.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/86189BDFBC3D149CB43B597A46FAF1CAE399A277652B28DBF2887C051286ABB8/0/3134332e302e36362e302f32342d3234203d3e20323732303036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:00:3c:84:04:b8:15:8d:d8:d4:81:ba:47:12:95:12:86:9e:
         2b:ff:d2:45:f7:4c:b1:70:26:7e:47:2e:9e:49:38:f7:67:ba:
         31:75:ac:70:a7:dd:7d:6f:f9:8a:66:9d:e7:63:89:02:4f:3e:
         f6:7f:99:10:c1:f4:5c:a8:f8:90:b7:fe:26:a7:77:e9:16:d6:
         87:73:03:88:5f:12:2b:27:00:9d:7b:60:59:66:73:89:3c:11:
         82:14:f9:cb:20:d6:49:5a:60:44:3d:26:82:b0:01:a6:39:78:
         fe:19:02:93:33:1a:a0:06:38:2c:66:a1:ca:f6:09:65:78:87:
         84:70:f4:bf:9d:12:21:b5:66:23:05:cd:d7:38:68:9d:ea:63:
         b3:51:e6:17:08:b5:21:14:9e:42:a6:e8:a8:e6:40:fa:52:bf:
         2f:c7:85:dc:ad:08:41:95:ed:7b:8d:3d:34:8e:21:e0:2d:80:
         ca:e5:47:21:e3:3a:ad:bb:f2:a5:14:37:3e:42:24:e1:de:95:
         b9:2a:10:4d:34:02:88:dd:1c:ac:ce:e5:71:ca:1f:c3:5e:b7:
         79:91:66:ff:9f:94:e7:23:9e:0a:e9:1a:bb:65:13:10:d5:d9:
         7c:3a:d1:c3:7d:94:b6:51:6d:d1:2a:dd:a4:94:4a:df:de:ea:
         d2:28:45:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 05:49:40 2026 by rpki-client