Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BB20FF6CF92550E986AE22A9D697D4F917F9817C4D9BA54A4C692160005A3ECC/0/3136372e3234392e32382e302f32332d3233203d3e203634313339.roa
File:                     3136372e3234392e32382e302f32332d3233203d3e203634313339.roa (raw, json)
Hash identifier:          DpIRwY0Yx4LQd5+hnpdXO8JML5dHvIvJVUJvqZA3/ng=
Subject key identifier:   B3:4F:52:CE:91:71:43:53:44:C6:22:E9:50:CD:11:F9:24:65:6A:9B
Certificate issuer:       /CN=E26827C02EA6431AE7B4F616C8625DC85A94F800
Certificate serial:       38C3ABF30D6ECA6434456B30431C8C7CAC555972
Authority key identifier: E2:68:27:C0:2E:A6:43:1A:E7:B4:F6:16:C8:62:5D:C8:5A:94:F8:00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E26827C02EA6431AE7B4F616C8625DC85A94F800.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BB20FF6CF92550E986AE22A9D697D4F917F9817C4D9BA54A4C692160005A3ECC/0/3136372e3234392e32382e302f32332d3233203d3e203634313339.roa
Signing time:             Tue 23 Jun 2026 17:10:00 +0000
ROA not before:           Tue 23 Jun 2026 17:05:00 +0000
ROA not after:            Tue 22 Jun 2027 17:10:00 +0000
asID:                     64139
IP address blocks:        167.249.28.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BB20FF6CF92550E986AE22A9D697D4F917F9817C4D9BA54A4C692160005A3ECC/0/E26827C02EA6431AE7B4F616C8625DC85A94F800.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BB20FF6CF92550E986AE22A9D697D4F917F9817C4D9BA54A4C692160005A3ECC/0/E26827C02EA6431AE7B4F616C8625DC85A94F800.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E26827C02EA6431AE7B4F616C8625DC85A94F800.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Jul 2026 11:42:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:c3:ab:f3:0d:6e:ca:64:34:45:6b:30:43:1c:8c:7c:ac:55:59:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E26827C02EA6431AE7B4F616C8625DC85A94F800
        Validity
            Not Before: Jun 23 17:05:00 2026 GMT
            Not After : Jun 22 17:10:00 2027 GMT
        Subject: CN=B34F52CE9171435344C622E950CD11F924656A9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:31:de:3a:9d:bf:0f:23:eb:21:ab:22:26:34:
                    77:fd:c9:24:59:d4:8f:3d:61:59:89:9e:53:f3:4b:
                    83:d3:d6:b9:9c:ac:14:34:71:61:d9:28:d5:32:28:
                    c8:58:45:3c:38:d3:0f:30:46:b2:4a:22:f6:ea:12:
                    fd:0a:dc:ed:7b:2f:bb:83:56:f4:f6:9c:fd:87:ed:
                    7b:94:36:8c:d0:a4:d3:46:c0:3c:cc:33:9a:22:6b:
                    53:ab:6b:f1:ed:53:42:d0:f8:3b:e2:de:6c:9f:44:
                    a3:b0:8d:a3:02:60:79:7b:eb:64:46:cf:4a:83:35:
                    fc:66:ac:45:49:c6:00:5c:7e:5a:34:2e:6e:bc:74:
                    67:ad:0f:90:03:08:d2:7a:dd:e9:f0:98:93:5f:57:
                    1e:da:b7:fa:eb:4b:45:81:88:76:f5:7b:65:28:9b:
                    56:65:bc:ae:7b:4c:3b:f9:1d:64:ac:2f:69:11:1b:
                    29:ba:c1:0a:4e:a2:08:32:8d:d5:14:f9:b0:20:67:
                    73:40:53:0e:74:0b:8a:2e:0c:48:d1:cf:58:fa:d7:
                    64:e6:c3:9c:f4:1f:df:88:7a:bb:88:21:17:45:7f:
                    d8:b0:4e:ad:82:9e:e1:c8:f4:a3:4d:fc:d1:90:f2:
                    e5:78:17:bb:2b:1f:c9:86:0b:c8:da:6d:7b:5f:68:
                    02:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:4F:52:CE:91:71:43:53:44:C6:22:E9:50:CD:11:F9:24:65:6A:9B
            X509v3 Authority Key Identifier:
                keyid:E2:68:27:C0:2E:A6:43:1A:E7:B4:F6:16:C8:62:5D:C8:5A:94:F8:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BB20FF6CF92550E986AE22A9D697D4F917F9817C4D9BA54A4C692160005A3ECC/0/E26827C02EA6431AE7B4F616C8625DC85A94F800.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E26827C02EA6431AE7B4F616C8625DC85A94F800.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BB20FF6CF92550E986AE22A9D697D4F917F9817C4D9BA54A4C692160005A3ECC/0/3136372e3234392e32382e302f32332d3233203d3e203634313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         12:21:a1:f8:0c:a2:0b:a2:37:15:7c:84:92:0a:e6:a7:b7:a9:
         52:9d:48:f4:b6:8f:55:89:c3:a3:4e:2e:f1:4e:3a:7f:36:9a:
         eb:a3:dd:40:6e:a9:07:d3:3c:60:3e:7b:88:ad:d2:9e:1e:87:
         77:70:48:bd:58:61:87:14:00:32:e4:45:75:fc:97:88:0a:fa:
         7c:25:00:4a:fc:4a:a0:c2:c0:02:39:77:71:e7:68:d0:a2:28:
         07:d7:2a:8a:22:7f:72:2e:b3:1c:e5:d7:70:66:72:6b:7f:c8:
         14:84:0e:95:52:fc:62:48:a5:63:7e:a6:d7:e4:ec:eb:11:dd:
         35:bb:80:46:d6:e2:82:c2:55:d7:ad:9a:d5:90:51:cc:5c:6b:
         c1:3d:29:40:c4:c7:33:97:e0:80:a0:d5:36:ae:c6:ba:36:dd:
         ef:b0:19:24:c3:26:69:1c:05:0b:da:01:21:99:85:d7:72:de:
         29:4d:95:e7:b8:4c:53:aa:6a:5c:b0:49:ea:52:aa:8e:d7:4f:
         63:9e:69:a5:7d:bc:03:64:55:6b:cc:1e:7d:b7:dc:2d:fa:77:
         42:43:8f:66:af:73:ef:2f:e4:95:72:a0:07:ea:77:f6:04:11:
         f9:00:de:36:26:c0:59:04:f9:22:a8:64:cb:4e:56:e1:09:ac:
         f7:7c:dc:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 04:40:54 2026 by rpki-client