Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/322e3135322e382e302f32312d3234203d3e20323632313931.roa
File:                     322e3135322e382e302f32312d3234203d3e20323632313931.roa (raw, json)
Hash identifier:          x0Ik3RU8SUDd8CbmMaTw/UrlwCbXAQkxIlFHmYtQHec=
Subject key identifier:   60:5A:B7:24:4D:27:EA:F3:CD:21:C5:A0:BF:39:F5:F2:8F:23:93:8E
Certificate issuer:       /CN=F8384152DEE38D62B98700A59634A5B9FAF406B3
Certificate serial:       2233553F6047DC1285FBDB4E63D8508676D0F426
Authority key identifier: F8:38:41:52:DE:E3:8D:62:B9:87:00:A5:96:34:A5:B9:FA:F4:06:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/322e3135322e382e302f32312d3234203d3e20323632313931.roa
Signing time:             Wed 05 Aug 2026 17:05:00 +0000
ROA not before:           Wed 05 Aug 2026 17:00:00 +0000
ROA not after:            Wed 04 Aug 2027 17:05:00 +0000
asID:                     262191
IP address blocks:        2.152.8.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Aug 2026 10:05:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:33:55:3f:60:47:dc:12:85:fb:db:4e:63:d8:50:86:76:d0:f4:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8384152DEE38D62B98700A59634A5B9FAF406B3
        Validity
            Not Before: Aug  5 17:00:00 2026 GMT
            Not After : Aug  4 17:05:00 2027 GMT
        Subject: CN=605AB7244D27EAF3CD21C5A0BF39F5F28F23938E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a6:c1:17:99:f8:cd:35:cd:7f:0d:3c:ac:7e:
                    73:73:44:fd:a4:ad:23:f4:8b:02:d4:31:c5:68:1f:
                    ee:7d:52:82:0a:95:ab:bc:9c:5a:2a:15:00:1f:de:
                    3f:0f:71:9e:7b:48:48:90:30:61:7a:71:9d:e4:eb:
                    f2:89:b5:08:a3:ac:89:b0:0b:13:a6:d6:83:a9:44:
                    9e:f9:3e:b8:96:d7:20:55:29:e7:1e:d8:cc:2b:6c:
                    29:dd:92:12:d2:15:16:b8:28:87:10:09:36:b0:b5:
                    01:3d:29:60:f3:d7:7a:d0:ed:97:eb:4c:ea:58:74:
                    91:c8:42:7b:2c:0f:43:f8:3e:69:60:5d:a2:4f:9b:
                    63:2e:97:8c:54:6f:3d:f8:71:8e:c3:da:40:4e:6d:
                    0a:b2:fe:46:41:ba:35:00:c6:52:e5:56:14:e3:2c:
                    21:92:d3:ad:e5:cb:80:9e:b8:cf:3c:15:ce:17:41:
                    a7:9d:6d:72:b8:0b:ec:5e:80:1b:73:b7:ca:22:45:
                    09:59:a5:b0:b2:fd:51:80:50:52:7e:a3:1f:ec:05:
                    5e:88:d8:a2:79:63:58:a5:d3:bb:17:26:9d:f6:48:
                    95:5d:0a:a8:b5:c0:ac:96:cc:57:3c:e3:e1:f8:e7:
                    3a:e2:67:9b:e0:a1:6e:3b:e6:0c:b6:91:26:74:5c:
                    9f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:5A:B7:24:4D:27:EA:F3:CD:21:C5:A0:BF:39:F5:F2:8F:23:93:8E
            X509v3 Authority Key Identifier:
                keyid:F8:38:41:52:DE:E3:8D:62:B9:87:00:A5:96:34:A5:B9:FA:F4:06:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/322e3135322e382e302f32312d3234203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.152.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         82:a4:f3:45:81:6b:7c:87:40:1d:3a:61:73:f3:e5:e1:3f:96:
         0e:e0:35:46:b9:11:b8:d1:a8:86:c9:00:36:da:8d:81:df:10:
         3f:f2:57:55:df:54:30:e5:19:e1:40:bf:8e:84:90:4a:89:99:
         aa:37:e1:89:4a:74:43:91:11:a5:d8:60:48:80:5b:b9:e3:c2:
         47:02:46:3c:72:d6:26:f5:b4:f0:0c:11:52:86:2f:5e:f9:26:
         20:2f:30:91:31:db:48:bb:72:54:17:20:99:03:45:96:f0:2c:
         24:8f:23:ae:87:78:bc:ad:90:a8:0e:1a:db:16:6b:46:f2:e0:
         48:f7:c4:dc:83:08:e7:79:7a:2d:89:65:56:1a:1b:2b:62:c4:
         61:18:11:79:ab:6b:0c:35:cd:4f:e4:66:26:9c:a7:f2:63:fb:
         db:fd:54:07:98:43:4e:bf:6b:64:0a:89:74:85:5d:ac:50:c4:
         98:66:6d:a6:37:90:aa:78:12:d1:47:40:e7:b2:22:f9:0a:97:
         7f:82:3c:6f:74:98:7d:b6:78:bb:77:bf:60:f5:76:6d:35:30:
         2b:90:01:17:87:21:66:6d:03:e8:fc:62:89:6f:59:34:55:aa:
         a4:46:80:85:09:a2:0c:9d:4b:c8:8a:a5:01:e7:e2:f8:5e:06:
         ca:ee:61:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:15:29 2026 by rpki-client