Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/AS266832.roa
File:                     AS266832.roa (raw, json)
Hash identifier:          aasx5OMjFdAk9j6RcYr5YlnxTL0aSfwIe1b+8VnY+bM=
Subject key identifier:   CA:C7:2F:25:03:02:81:4C:0E:D1:31:FE:33:64:B5:A8:C6:D0:A4:62
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       0883AB6BD13E45192559F53771A02DD3E7EFCB9E
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/AS266832.roa
Signing time:             Thu 04 Jun 2026 04:40:02 +0000
ROA not before:           Thu 04 Jun 2026 04:35:02 +0000
ROA not after:            Thu 03 Jun 2027 04:40:02 +0000
asID:                     266832
IP address blocks:        190.90.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jun 2026 05:16:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:83:ab:6b:d1:3e:45:19:25:59:f5:37:71:a0:2d:d3:e7:ef:cb:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Jun  4 04:35:02 2026 GMT
            Not After : Jun  3 04:40:02 2027 GMT
        Subject: CN=CAC72F250302814C0ED131FE3364B5A8C6D0A462
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:62:15:ce:a3:47:3a:1c:31:47:05:4e:b9:1c:
                    83:a0:9a:23:a1:92:fe:1e:24:90:5b:2c:96:4c:48:
                    cc:d9:d5:cf:45:45:f7:0b:97:14:1b:81:2e:58:87:
                    13:5c:92:94:5c:c5:7d:0e:e6:aa:15:ca:20:a3:1a:
                    5e:f8:f4:88:4e:03:6e:e1:9c:80:ab:0e:fe:1a:99:
                    5c:01:6f:89:de:95:17:af:75:ae:a4:ef:d0:2e:11:
                    29:ce:a5:eb:2d:86:ff:76:a5:ed:32:e9:3a:a1:27:
                    55:b9:0c:5f:e1:f8:c9:f1:c3:54:1e:44:cc:64:97:
                    73:07:ec:c9:96:f6:75:44:e3:b3:dc:59:d7:b2:af:
                    ad:0d:1e:ac:29:a9:b3:b8:7a:84:08:0b:2d:ee:d4:
                    4d:d5:00:e9:03:02:9f:9c:fe:36:43:40:ec:8e:d3:
                    96:02:ee:f3:69:0f:72:15:a8:96:9b:0c:e5:70:21:
                    ae:41:70:3f:17:9e:d8:be:ce:ec:16:f8:3b:54:28:
                    62:29:12:3a:ae:6c:38:53:11:26:aa:3a:cb:d9:1f:
                    e6:ef:00:82:9b:8e:85:e3:f0:39:fe:f1:cf:9d:23:
                    f0:d3:94:99:38:1d:fa:00:5e:95:94:1f:2e:68:61:
                    cc:bf:28:b1:81:50:34:d3:66:c7:5d:c3:83:8e:5a:
                    4d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:C7:2F:25:03:02:81:4C:0E:D1:31:FE:33:64:B5:A8:C6:D0:A4:62
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/AS266832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:99:85:05:22:d9:70:74:1a:58:ad:bc:e5:b0:38:f1:b9:86:
         53:15:94:8b:e7:07:52:99:86:95:20:10:05:56:aa:8b:d1:f8:
         37:43:a6:59:1b:8a:1f:9e:f2:26:15:97:20:4f:7c:4e:17:1d:
         65:8a:04:e7:2b:e8:27:83:2b:12:89:1d:53:b5:0d:8a:3e:4a:
         f0:3a:f3:fe:38:87:4d:b4:56:cc:fb:21:8f:96:6b:19:60:99:
         f9:63:1b:5b:4d:66:d0:0d:16:f5:77:d5:95:ae:07:6c:20:77:
         f1:ab:a0:81:ce:04:12:e8:cf:68:dd:ea:38:56:98:0a:f1:d2:
         a8:4c:c5:98:69:ee:14:d7:17:3e:6f:d3:fe:f3:92:6f:72:2c:
         86:22:fe:e9:12:b4:0d:cc:82:69:2c:e0:10:e7:6f:d6:37:76:
         41:8a:97:54:a6:61:a8:bd:fd:1f:bc:b2:b0:bc:1d:bf:85:85:
         09:08:91:2a:24:4f:17:f2:86:be:91:e6:bb:46:8a:4e:18:f9:
         40:3a:44:a1:bb:a6:43:3f:ab:40:ee:31:b4:56:9f:28:b5:bf:
         e4:12:72:b2:fe:b2:5c:b6:5d:15:1f:89:ce:0e:35:79:63:12:
         68:a0:39:cf:95:85:c8:a0:9d:00:f6:3e:94:d5:bd:71:4b:44:
         c9:51:99:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 23:59:17 2026 by rpki-client