Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/86189BDFBC3D149CB43B597A46FAF1CAE399A277652B28DBF2887C051286ABB8/0/3134332e302e36372e302f32342d3234203d3e20323732303036.roa
File:                     3134332e302e36372e302f32342d3234203d3e20323732303036.roa (raw, json)
Hash identifier:          jRSi43HEf0x2YTeC03okijCBF+WZFmkhQjf5UaopnSU=
Subject key identifier:   22:16:CA:CE:F9:6F:C3:B8:45:9B:DA:D9:86:8C:7F:73:61:95:86:5B
Certificate issuer:       /CN=8AC4B3EBC3ADB80107711DD87A95CA1625852301
Certificate serial:       0CE32CB5830E21DCE100E3E26A80374706FC4829
Authority key identifier: 8A:C4:B3:EB:C3:AD:B8:01:07:71:1D:D8:7A:95:CA:16:25:85:23:01
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AC4B3EBC3ADB80107711DD87A95CA1625852301.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/86189BDFBC3D149CB43B597A46FAF1CAE399A277652B28DBF2887C051286ABB8/0/3134332e302e36372e302f32342d3234203d3e20323732303036.roa
Signing time:             Fri 19 Jun 2026 14:48:33 +0000
ROA not before:           Fri 19 Jun 2026 14:43:33 +0000
ROA not after:            Fri 18 Jun 2027 14:48:33 +0000
asID:                     272006
IP address blocks:        143.0.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/86189BDFBC3D149CB43B597A46FAF1CAE399A277652B28DBF2887C051286ABB8/0/8AC4B3EBC3ADB80107711DD87A95CA1625852301.crl
                          rsync://repository.lacnic.net/rpki/lacnic/86189BDFBC3D149CB43B597A46FAF1CAE399A277652B28DBF2887C051286ABB8/0/8AC4B3EBC3ADB80107711DD87A95CA1625852301.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AC4B3EBC3ADB80107711DD87A95CA1625852301.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Jul 2026 05:07:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:e3:2c:b5:83:0e:21:dc:e1:00:e3:e2:6a:80:37:47:06:fc:48:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AC4B3EBC3ADB80107711DD87A95CA1625852301
        Validity
            Not Before: Jun 19 14:43:33 2026 GMT
            Not After : Jun 18 14:48:33 2027 GMT
        Subject: CN=2216CACEF96FC3B8459BDAD9868C7F736195865B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9e:fb:62:4b:22:2d:9d:d2:ec:b2:b1:62:58:
                    c3:85:e1:ce:c0:b8:4d:71:74:7a:bd:4f:3c:d0:d7:
                    01:87:9b:df:98:c6:53:0e:3f:ba:46:05:85:6f:70:
                    c1:5d:8d:11:a4:44:f9:20:fc:ea:8d:0a:d3:03:04:
                    73:76:6a:19:60:4c:7d:7a:b2:c6:e8:e5:95:bb:06:
                    62:8f:4e:83:46:10:1d:1c:ad:83:e6:d9:b5:4a:25:
                    dc:7f:d7:bc:06:e9:51:eb:4d:20:5f:92:6f:04:17:
                    38:02:0f:0b:08:35:74:3d:9b:98:14:47:6d:1e:30:
                    ab:4e:ff:89:58:13:12:73:98:e7:33:d1:fe:b3:0c:
                    ca:9f:ab:e8:fe:f3:b2:dd:0a:3c:d4:ca:20:a4:a2:
                    4e:c4:a0:85:0e:a3:f1:9a:3f:9a:14:c0:eb:19:62:
                    df:ec:87:22:4c:7d:10:79:6b:05:3b:50:4f:bd:b4:
                    87:ec:8d:06:09:53:8d:42:76:8c:37:1b:a5:e4:0d:
                    96:31:d2:f9:72:d3:f7:e4:07:50:be:05:bc:a5:3d:
                    58:36:79:a4:bd:7b:b5:4a:17:c2:eb:58:3a:3f:0e:
                    6e:1a:d9:dd:1a:3b:df:7c:71:97:2b:ca:a7:ad:66:
                    2d:59:55:63:5e:f8:e2:b6:43:59:68:4f:51:bb:29:
                    8e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:16:CA:CE:F9:6F:C3:B8:45:9B:DA:D9:86:8C:7F:73:61:95:86:5B
            X509v3 Authority Key Identifier:
                keyid:8A:C4:B3:EB:C3:AD:B8:01:07:71:1D:D8:7A:95:CA:16:25:85:23:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/86189BDFBC3D149CB43B597A46FAF1CAE399A277652B28DBF2887C051286ABB8/0/8AC4B3EBC3ADB80107711DD87A95CA1625852301.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AC4B3EBC3ADB80107711DD87A95CA1625852301.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/86189BDFBC3D149CB43B597A46FAF1CAE399A277652B28DBF2887C051286ABB8/0/3134332e302e36372e302f32342d3234203d3e20323732303036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:82:38:3f:ac:aa:f6:54:25:e7:26:35:74:f0:f2:41:28:e2:
         1a:36:bc:d3:f0:9e:b7:78:78:a3:dd:51:a2:04:e5:64:9f:bb:
         86:78:f3:93:86:86:bb:3a:92:58:a5:c1:06:6f:0d:85:35:2f:
         d0:cf:9e:04:42:3e:74:5a:e5:35:e7:65:cf:58:23:25:73:78:
         de:84:76:a3:ac:9f:25:e7:b7:c0:03:af:ed:67:8c:9d:dd:cf:
         d0:ac:4d:ff:95:4f:34:4e:78:a7:79:1d:43:75:6f:80:2f:14:
         ff:39:ea:37:1e:4e:cb:9b:94:ef:0f:ac:a3:96:2b:24:57:3f:
         a4:f7:e0:ac:5a:f7:89:95:fb:04:77:3d:22:83:59:4c:4e:eb:
         2e:c5:f7:57:2d:b9:af:f7:6a:e1:b4:01:96:28:a7:f4:50:f6:
         97:be:86:92:0e:ca:39:36:35:73:6d:65:bc:1a:df:e7:81:fd:
         1a:44:3b:26:c1:f9:50:30:66:39:27:93:e6:7a:19:66:94:a0:
         cd:08:db:a1:36:14:b1:c2:ec:fe:51:55:40:96:5c:8c:0b:b8:
         79:d6:94:77:38:c4:7b:09:ea:a6:7d:9b:8f:29:09:a9:6c:eb:
         5e:09:bb:82:39:35:5f:c2:c8:90:92:e8:ab:af:c3:65:16:be:
         c4:70:ed:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 05:49:41 2026 by rpki-client