Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/AS267788.roa
File:                     AS267788.roa (raw, json)
Hash identifier:          v4oc8ROeJVtRxeyD2Jw+I1dwJslxLdjhJv9TKxd4WtQ=
Subject key identifier:   BF:B5:D2:D3:A6:2F:32:6E:74:08:DB:09:0D:6B:F2:6C:48:34:C9:1F
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       446E3E68C82975D7E83198BF7EC8F4A947138DB8
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/AS267788.roa
Signing time:             Thu 04 Jun 2026 04:40:01 +0000
ROA not before:           Thu 04 Jun 2026 04:35:01 +0000
ROA not after:            Thu 03 Jun 2027 04:40:01 +0000
asID:                     267788
IP address blocks:        179.1.137.0/24 maxlen: 24
                          190.90.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jun 2026 05:16:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:6e:3e:68:c8:29:75:d7:e8:31:98:bf:7e:c8:f4:a9:47:13:8d:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Jun  4 04:35:01 2026 GMT
            Not After : Jun  3 04:40:01 2027 GMT
        Subject: CN=BFB5D2D3A62F326E7408DB090D6BF26C4834C91F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3d:b4:76:c3:32:a6:fe:d2:f3:ff:c1:eb:59:
                    77:d5:90:54:26:60:35:9c:8f:2e:f5:c3:5b:5a:82:
                    a0:e2:f5:5c:98:17:51:c2:8f:f2:d5:b3:aa:46:c1:
                    3c:d1:00:0d:36:a1:ff:9e:c6:63:7f:2a:f6:92:8a:
                    73:bd:50:8a:4b:a7:69:3e:8a:8e:fa:b4:a5:2e:41:
                    80:af:a7:6f:2c:1f:e3:8f:3c:97:e3:87:5f:a4:86:
                    9e:a3:99:51:32:df:49:ca:0d:15:1b:b8:24:fa:31:
                    95:83:96:e1:ce:04:e9:74:87:6a:93:66:77:76:9f:
                    e1:fd:76:13:58:83:12:d8:d2:ea:4d:d4:5e:9d:97:
                    77:5a:dc:4c:8d:86:47:ce:df:f5:e9:9a:6c:c9:04:
                    d0:3e:af:8a:6a:a8:46:4b:f5:8c:07:e9:32:39:56:
                    0a:25:ba:a8:e1:b0:f2:60:87:7b:86:36:d2:8c:43:
                    91:36:25:6b:d0:31:0a:4b:bb:4b:95:08:44:e6:af:
                    b4:b3:45:60:e9:af:b8:9d:5f:1e:92:c1:79:aa:5e:
                    92:9a:37:81:76:d1:d1:5f:b3:5e:4c:ed:88:e2:20:
                    e2:7f:e5:2e:3b:69:f1:b4:dc:f5:78:6a:05:d4:37:
                    62:15:60:6f:15:f4:9a:61:0e:aa:0d:31:fc:a1:ac:
                    5c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:B5:D2:D3:A6:2F:32:6E:74:08:DB:09:0D:6B:F2:6C:48:34:C9:1F
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/AS267788.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.1.137.0/24
                  190.90.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:9e:e3:5d:32:34:af:63:15:d3:48:ce:82:6d:ce:6d:0e:70:
         8f:0f:da:be:5a:22:51:a3:33:19:3f:c8:b6:53:5b:65:98:be:
         47:33:05:e7:d9:b2:43:5a:37:08:73:21:b8:25:de:18:f9:74:
         bd:43:af:ca:a3:8f:cd:e9:f3:22:d1:39:74:39:4c:4f:3d:cd:
         e1:37:0c:7d:20:74:81:00:fd:86:7a:c3:fa:d6:35:cf:45:db:
         11:4d:fe:0a:e4:3b:b0:32:54:52:02:2f:c3:40:9d:30:64:16:
         77:d6:58:0d:cf:11:0a:c2:5b:88:fa:a1:61:9e:d2:95:00:35:
         66:09:8a:b3:a9:74:9f:b9:e7:6a:ee:67:91:f0:0b:16:c0:05:
         d8:f3:f4:f1:e2:ea:eb:cf:49:1d:46:de:96:c3:de:c1:95:c0:
         47:ad:84:ae:9a:31:4d:2d:63:a7:50:16:73:57:6f:5d:c9:62:
         1b:d1:4b:b2:0f:66:c6:b5:44:1c:bd:15:94:12:96:b4:04:84:
         87:e5:e7:37:91:46:78:1d:6d:0e:57:cb:fa:19:2c:71:6f:e9:
         dd:f1:50:6f:11:0d:23:7b:5f:81:89:fb:ee:18:e9:b4:fa:85:
         a6:ce:c0:f2:ab:d4:b3:19:ec:3e:4b:39:21:aa:e3:89:e4:3d:
         de:19:92:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 7 00:00:21 2026 by rpki-client