Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BB20FF6CF92550E986AE22A9D697D4F917F9817C4D9BA54A4C692160005A3ECC/0/3136372e3234392e32382e302f32342d3234203d3e203634313339.roa
File:                     3136372e3234392e32382e302f32342d3234203d3e203634313339.roa (raw, json)
Hash identifier:          JiJy55g8AAc0SbqjTje+QpNCIBlKo7t9EkVlMof7Wmk=
Subject key identifier:   35:CC:3C:80:5C:DF:F5:F6:7E:BE:1F:82:E8:E4:0F:8B:0E:F4:39:04
Certificate issuer:       /CN=E26827C02EA6431AE7B4F616C8625DC85A94F800
Certificate serial:       5AE33501636F6EF788BE3857D5F1D9255D8A5D63
Authority key identifier: E2:68:27:C0:2E:A6:43:1A:E7:B4:F6:16:C8:62:5D:C8:5A:94:F8:00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E26827C02EA6431AE7B4F616C8625DC85A94F800.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BB20FF6CF92550E986AE22A9D697D4F917F9817C4D9BA54A4C692160005A3ECC/0/3136372e3234392e32382e302f32342d3234203d3e203634313339.roa
Signing time:             Tue 23 Jun 2026 17:10:00 +0000
ROA not before:           Tue 23 Jun 2026 17:05:00 +0000
ROA not after:            Tue 22 Jun 2027 17:10:00 +0000
asID:                     64139
IP address blocks:        167.249.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BB20FF6CF92550E986AE22A9D697D4F917F9817C4D9BA54A4C692160005A3ECC/0/E26827C02EA6431AE7B4F616C8625DC85A94F800.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BB20FF6CF92550E986AE22A9D697D4F917F9817C4D9BA54A4C692160005A3ECC/0/E26827C02EA6431AE7B4F616C8625DC85A94F800.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E26827C02EA6431AE7B4F616C8625DC85A94F800.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Jul 2026 11:42:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:e3:35:01:63:6f:6e:f7:88:be:38:57:d5:f1:d9:25:5d:8a:5d:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E26827C02EA6431AE7B4F616C8625DC85A94F800
        Validity
            Not Before: Jun 23 17:05:00 2026 GMT
            Not After : Jun 22 17:10:00 2027 GMT
        Subject: CN=35CC3C805CDFF5F67EBE1F82E8E40F8B0EF43904
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:aa:6a:1c:3c:2c:58:c2:62:35:92:07:5f:d1:
                    1b:f3:44:e1:06:d8:da:22:50:bd:00:42:4f:b2:ac:
                    db:d2:b8:0a:72:cf:88:7d:39:6f:af:20:08:e5:7a:
                    e2:ef:93:26:b4:43:8f:c5:82:a7:61:64:9d:e5:ad:
                    be:b5:10:e3:ea:2e:65:6f:c9:bb:b5:fb:cd:0c:7b:
                    92:e7:b8:7b:29:d4:9a:82:d6:07:97:63:19:e2:fe:
                    ac:53:ce:47:c8:69:89:d0:81:65:be:74:17:29:75:
                    cb:be:ab:49:91:e3:0b:dc:3c:31:86:d8:b4:9d:be:
                    b9:09:ec:79:24:38:5a:c2:28:f1:cd:35:7e:ee:21:
                    53:27:75:49:44:b9:04:fe:e7:08:83:38:65:3f:be:
                    f3:75:d3:d8:fd:7e:92:13:f7:75:ab:ef:a1:88:ba:
                    26:4d:1c:93:94:18:c8:5c:35:33:16:12:7b:a8:d6:
                    1a:9d:28:9b:11:bb:25:00:5f:47:c9:13:9e:93:cd:
                    d0:9a:47:b7:da:82:fd:a4:8d:f2:c4:9b:9b:4f:3e:
                    30:dd:87:47:4e:4a:f4:51:75:36:e8:7c:23:71:22:
                    03:c4:05:2e:60:93:10:0f:86:65:45:6a:95:f7:4e:
                    12:e3:b2:a6:e5:9c:35:a1:fa:b6:d4:bc:b4:cb:cf:
                    a8:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:CC:3C:80:5C:DF:F5:F6:7E:BE:1F:82:E8:E4:0F:8B:0E:F4:39:04
            X509v3 Authority Key Identifier:
                keyid:E2:68:27:C0:2E:A6:43:1A:E7:B4:F6:16:C8:62:5D:C8:5A:94:F8:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BB20FF6CF92550E986AE22A9D697D4F917F9817C4D9BA54A4C692160005A3ECC/0/E26827C02EA6431AE7B4F616C8625DC85A94F800.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E26827C02EA6431AE7B4F616C8625DC85A94F800.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BB20FF6CF92550E986AE22A9D697D4F917F9817C4D9BA54A4C692160005A3ECC/0/3136372e3234392e32382e302f32342d3234203d3e203634313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:bd:f4:be:9b:3c:71:26:ad:e1:11:53:bd:f2:d3:6a:b3:b6:
         93:04:26:0b:d8:95:cb:95:a3:d4:6f:83:65:d0:8f:67:48:2e:
         33:24:2a:1a:bc:60:a5:a7:a3:d7:68:a1:5f:16:78:91:84:89:
         70:aa:29:e0:b0:7b:f8:c5:18:3a:10:02:be:ae:6f:e7:92:9f:
         90:7f:1b:e4:f7:5d:2d:7d:ce:af:4b:f8:43:c0:e9:50:d3:74:
         5c:8c:c6:72:b2:42:ac:05:5f:41:1e:82:87:95:14:f5:db:9e:
         f7:11:b5:c2:52:3c:d6:c9:14:60:08:46:4e:80:23:ec:9e:f7:
         26:9e:d6:40:d7:ac:83:69:02:38:54:05:36:f5:80:41:26:39:
         4c:df:8a:84:6c:64:3d:fb:dd:fd:b4:9b:8c:0e:94:6b:df:69:
         20:e8:af:df:61:a5:37:b6:11:35:85:38:90:29:b6:92:21:39:
         e9:c1:fa:6a:91:24:ad:72:a2:6f:d5:3f:0f:f8:5b:46:cf:1a:
         f5:56:64:40:d1:b8:7f:86:70:40:56:f3:0e:11:9a:37:45:57:
         78:3c:b3:09:3d:96:4f:28:d2:1f:de:2a:dd:cd:33:d1:ad:05:
         fe:98:7b:60:92:23:b4:79:0c:7f:79:65:0f:e9:d3:0e:84:f8:
         ce:53:da:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 04:40:54 2026 by rpki-client