Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DAA6AC625BA95DDD02AAE75BB21A588A2D05CBF3D851C77F67998CC5BC25D626/0/3136382e3139372e3231382e302f32342d3234203d3e20323634373834.roa
File:                     3136382e3139372e3231382e302f32342d3234203d3e20323634373834.roa (raw, json)
Hash identifier:          ka8z6Ea9rzZxnuJGG1C+3h840fWP4kr3S4SshMXqrj4=
Subject key identifier:   24:99:C5:68:AB:68:EA:04:CD:79:BC:53:EC:30:CF:04:6B:57:0B:62
Certificate issuer:       /CN=7328461355B304B789F60508DF555EAC428848F4
Certificate serial:       6A2AE1F88F001E1119A9D7390D516437DB6C9EAB
Authority key identifier: 73:28:46:13:55:B3:04:B7:89:F6:05:08:DF:55:5E:AC:42:88:48:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7328461355B304B789F60508DF555EAC428848F4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DAA6AC625BA95DDD02AAE75BB21A588A2D05CBF3D851C77F67998CC5BC25D626/0/3136382e3139372e3231382e302f32342d3234203d3e20323634373834.roa
Signing time:             Fri 15 May 2026 13:40:00 +0000
ROA not before:           Fri 15 May 2026 13:35:00 +0000
ROA not after:            Fri 14 May 2027 13:40:00 +0000
asID:                     264784
IP address blocks:        168.197.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DAA6AC625BA95DDD02AAE75BB21A588A2D05CBF3D851C77F67998CC5BC25D626/0/7328461355B304B789F60508DF555EAC428848F4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DAA6AC625BA95DDD02AAE75BB21A588A2D05CBF3D851C77F67998CC5BC25D626/0/7328461355B304B789F60508DF555EAC428848F4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7328461355B304B789F60508DF555EAC428848F4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 02 Jun 2026 03:55:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:2a:e1:f8:8f:00:1e:11:19:a9:d7:39:0d:51:64:37:db:6c:9e:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7328461355B304B789F60508DF555EAC428848F4
        Validity
            Not Before: May 15 13:35:00 2026 GMT
            Not After : May 14 13:40:00 2027 GMT
        Subject: CN=2499C568AB68EA04CD79BC53EC30CF046B570B62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:cc:b6:b5:54:98:29:78:33:89:47:16:e4:34:
                    78:33:8e:f9:59:16:7d:dd:4b:36:6e:5b:99:0d:06:
                    39:6f:dc:d6:b8:30:63:94:62:53:8a:17:c7:9c:10:
                    68:19:dd:68:a0:68:3c:e2:e2:80:91:6f:fb:56:bf:
                    d3:19:36:45:38:82:3e:9e:48:24:15:5f:0c:48:21:
                    d4:36:14:80:97:2b:c3:04:61:36:0d:13:a3:a3:12:
                    e3:84:e4:e8:55:2a:93:33:c0:cd:68:f8:19:60:6d:
                    75:d0:a3:f8:37:0f:8a:e7:02:8e:ad:d8:cd:0d:66:
                    0d:2f:7f:ae:7a:33:2a:b3:83:de:2e:a5:f3:d3:15:
                    31:f5:84:8c:8b:56:13:72:e3:88:c5:77:b6:ae:a9:
                    a5:96:43:bb:88:b8:13:74:94:9c:3b:c6:2b:d7:87:
                    36:01:0f:0d:c1:d7:1d:1e:8c:f4:4c:46:56:ee:8a:
                    da:03:06:be:a3:e8:9b:d6:f8:db:9f:5c:4b:0e:f1:
                    4d:51:0b:60:43:a8:58:ef:54:74:1e:de:d5:8c:0f:
                    0f:80:75:f7:f3:e5:21:90:b0:f2:55:c6:d0:57:84:
                    d4:04:24:f1:e5:00:8e:6d:24:60:31:0f:82:af:0b:
                    41:d2:66:60:59:2d:ef:70:f6:b7:1b:e8:ec:60:51:
                    9d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:99:C5:68:AB:68:EA:04:CD:79:BC:53:EC:30:CF:04:6B:57:0B:62
            X509v3 Authority Key Identifier:
                keyid:73:28:46:13:55:B3:04:B7:89:F6:05:08:DF:55:5E:AC:42:88:48:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DAA6AC625BA95DDD02AAE75BB21A588A2D05CBF3D851C77F67998CC5BC25D626/0/7328461355B304B789F60508DF555EAC428848F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7328461355B304B789F60508DF555EAC428848F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DAA6AC625BA95DDD02AAE75BB21A588A2D05CBF3D851C77F67998CC5BC25D626/0/3136382e3139372e3231382e302f32342d3234203d3e20323634373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:93:f2:e6:df:b3:c0:a1:99:89:72:a3:07:c9:99:cf:a1:be:
         d3:ed:ed:3a:5a:57:7b:f8:dc:a3:28:e6:6c:65:ed:7c:49:c2:
         ba:50:0a:7b:7d:d9:59:1c:5e:7f:03:15:47:f4:2f:b5:a5:ed:
         27:b3:d7:c5:0b:e3:3f:f9:58:7d:7e:54:c9:00:af:4b:a6:f4:
         30:1d:96:5f:fd:5d:9f:e1:89:d7:66:e9:77:65:d7:0c:4b:8d:
         fa:11:11:d2:5a:af:68:1b:b7:9a:1f:60:c5:94:33:3b:63:74:
         75:87:a7:cf:d3:27:4e:0d:0a:13:a5:ff:20:46:6b:18:0e:6a:
         78:5f:f1:36:ba:e8:41:65:95:ff:50:97:9b:be:82:fc:2f:98:
         17:b1:04:ad:c6:03:a7:8a:ac:5e:d5:ed:ca:18:1b:40:27:e9:
         04:d4:41:d9:e9:40:23:85:e5:27:5c:f8:ee:b2:b5:bd:04:5d:
         ac:10:a2:95:f6:8b:92:0f:0c:ad:4b:19:29:0e:2a:59:1d:4e:
         27:5f:f5:cf:b2:ae:31:4b:a8:e2:58:da:fc:fa:ef:5d:1c:9e:
         71:9c:4b:46:ae:0e:55:b8:38:fe:ae:1d:d4:d3:4b:ce:f7:a7:
         44:f8:5f:a5:c5:b7:9d:8c:d2:0f:9a:d3:e8:a0:34:2f:2d:96:
         4d:26:a8:6c
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUairh+I8AHhEZqdc5DVFkN9tsnqswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzMyODQ2MTM1NUIzMDRCNzg5RjYwNTA4REY1NTVFQUM0
Mjg4NDhGNDAeFw0yNjA1MTUxMzM1MDBaFw0yNzA1MTQxMzQwMDBaMDMxMTAvBgNV
BAMTKDI0OTlDNTY4QUI2OEVBMDRDRDc5QkM1M0VDMzBDRjA0NkI1NzBCNjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDizLa1VJgpeDOJRxbkNHgzjvlZ
Fn3dSzZuW5kNBjlv3Na4MGOUYlOKF8ecEGgZ3WigaDzi4oCRb/tWv9MZNkU4gj6e
SCQVXwxIIdQ2FICXK8MEYTYNE6OjEuOE5OhVKpMzwM1o+BlgbXXQo/g3D4rnAo6t
2M0NZg0vf656Myqzg94upfPTFTH1hIyLVhNy44jFd7auqaWWQ7uIuBN0lJw7xivX
hzYBDw3B1x0ejPRMRlbuitoDBr6j6JvW+NufXEsO8U1RC2BDqFjvVHQe3tWMDw+A
dffz5SGQsPJVxtBXhNQEJPHlAI5tJGAxD4KvC0HSZmBZLe9w9rcb6OxgUZ3NAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUJJnFaKto6gTNebxT7DDPBGtXC2IwHwYDVR0j
BBgwFoAUcyhGE1WzBLeJ9gUI31VerEKISPQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EQUE2QUM2MjVCQTk1REREMDJBQUU3NUJCMjFBNTg4QTJE
MDVDQkYzRDg1MUM3N0Y2Nzk5OENDNUJDMjVENjI2LzAvNzMyODQ2MTM1NUIzMDRC
Nzg5RjYwNTA4REY1NTVFQUM0Mjg4NDhGNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83MzI4NDYxMzU1QjMwNEI3ODlG
NjA1MDhERjU1NUVBQzQyODg0OEY0LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREFBNkFDNjI1QkE5NURERDAyQUFFNzVCQjIxQTU4OEEyRDA1Q0JGM0Q4
NTFDNzdGNjc5OThDQzVCQzI1RDYyNi8wLzMxMzYzODJlMzEzOTM3MmUzMjMxMzgy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzQzNzM4MzQucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACo
xdowDQYJKoZIhvcNAQELBQADggEBAMGT8ubfs8ChmYlyowfJmc+hvtPt7TpaV3v4
3KMo5mxl7XxJwrpQCnt92VkcXn8DFUf0L7Wl7Sez18UL4z/5WH1+VMkAr0um9DAd
ll/9XZ/hiddm6Xdl1wxLjfoREdJar2gbt5ofYMWUMztjdHWHp8/TJ04NChOl/yBG
axgOanhf8Ta66EFllf9Ql5u+gvwvmBexBK3GA6eKrF7V7coYG0An6QTUQdnpQCOF
5Sdc+O6ytb0EXawQopX2i5IPDK1LGSkOKlkdTidf9c+yrjFLqOJY2vz6710cnnGc
S0auDlW4OP6uHdTTS873p0T4X6XFt52M0g+a0+igNC8tlk0mqGw=
-----END CERTIFICATE-----
Generated at Fri May 29 22:26:45 2026 by rpki-client