Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/3134382e3230382e302e302f31362d3136203d3e20323732333233.roa
File:                     3134382e3230382e302e302f31362d3136203d3e20323732333233.roa (raw, json)
Hash identifier:          MVmzqvVRSY0gFfuQFFO5inGQc4AtnCombdL7Vy2rKcw=
Subject key identifier:   7B:9F:69:D0:CE:85:D9:60:80:9E:CB:45:4D:3C:06:C4:F3:DF:6C:2F
Certificate issuer:       /CN=8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB
Certificate serial:       2D3603C5334EDD1A3895A04D4D2E7BE2DEAC16C4
Authority key identifier: 8A:12:67:DC:B4:DC:6F:FA:9F:CD:D7:FE:A9:D7:F9:F7:8C:37:91:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/3134382e3230382e302e302f31362d3136203d3e20323732333233.roa
Signing time:             Fri 31 Jul 2026 01:19:22 +0000
ROA not before:           Fri 31 Jul 2026 01:14:22 +0000
ROA not after:            Fri 30 Jul 2027 01:19:22 +0000
asID:                     272323
IP address blocks:        148.208.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Sep 2026 10:20:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:36:03:c5:33:4e:dd:1a:38:95:a0:4d:4d:2e:7b:e2:de:ac:16:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB
        Validity
            Not Before: Jul 31 01:14:22 2026 GMT
            Not After : Jul 30 01:19:22 2027 GMT
        Subject: CN=7B9F69D0CE85D960809ECB454D3C06C4F3DF6C2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f2:e4:9e:11:18:2d:a1:fc:59:57:e5:1c:55:
                    d0:49:62:be:3b:50:a9:cb:6d:36:1c:a1:ac:0d:05:
                    e0:b2:ce:26:50:65:67:07:13:43:84:c7:db:15:02:
                    63:45:15:82:88:dc:9b:11:fa:b5:3d:dd:72:c2:a4:
                    e9:f5:ee:6c:33:70:07:fc:9c:69:8a:52:a2:19:db:
                    53:f6:12:cb:fd:10:a3:57:5f:07:91:29:29:00:37:
                    ee:9b:84:38:82:c2:2f:da:f9:9f:3c:3b:f1:1b:45:
                    5c:03:51:8d:c4:88:5a:e8:3e:db:9b:55:5a:02:b5:
                    6f:c8:1e:60:ad:44:4a:cf:82:2f:75:f4:8c:3f:1e:
                    60:3f:82:c7:85:18:a1:04:05:fa:8c:ec:48:4c:f2:
                    58:ca:e6:2d:5a:bb:77:76:3d:17:44:94:36:1b:b2:
                    1a:e4:42:03:50:3a:4f:1e:47:39:c9:7d:e2:e2:e7:
                    5e:fb:66:15:e4:bd:97:7a:97:2b:1e:2c:bd:e9:a9:
                    8a:91:f6:7d:2b:b8:44:8b:04:cf:92:52:2d:d5:e8:
                    8d:94:9f:35:74:f7:44:92:7f:a9:96:93:86:a6:82:
                    d7:82:83:e3:1e:88:2a:df:00:9c:7a:06:79:6e:78:
                    d5:20:8a:ce:be:cc:d2:d2:40:b7:9e:11:3d:9b:31:
                    95:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:9F:69:D0:CE:85:D9:60:80:9E:CB:45:4D:3C:06:C4:F3:DF:6C:2F
            X509v3 Authority Key Identifier:
                keyid:8A:12:67:DC:B4:DC:6F:FA:9F:CD:D7:FE:A9:D7:F9:F7:8C:37:91:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/3134382e3230382e302e302f31362d3136203d3e20323732333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.208.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         75:15:de:7d:75:38:fe:19:e2:62:af:54:b0:cb:c5:90:1d:d3:
         96:4d:12:62:16:ce:d9:cd:0b:31:05:c0:77:90:6c:a2:f1:0f:
         54:d1:f8:95:f0:9b:80:f1:36:2b:cf:5f:e0:78:0a:57:c3:5c:
         3f:aa:8c:43:39:02:77:a4:7e:fd:63:a7:d4:84:fc:3c:c4:97:
         db:1e:5f:f6:21:be:73:10:8f:d7:79:cb:70:17:09:7e:1b:80:
         76:f6:de:32:43:d1:39:3f:6a:27:e7:df:30:fe:ea:52:36:38:
         c1:0a:c3:b0:c0:57:f6:ba:dd:ae:64:7d:f9:f8:3e:11:ad:9f:
         79:95:51:84:37:03:ea:43:72:d4:93:5f:9e:66:c9:59:72:91:
         e8:47:9c:8a:62:dd:ea:65:68:bc:03:fe:33:a9:a7:30:6d:1d:
         74:e9:6b:7b:99:29:13:da:fb:d3:95:c4:e0:07:9a:36:2b:dc:
         9d:51:60:24:be:e2:17:89:83:b5:74:59:56:72:73:2f:c2:34:
         bb:3e:d3:81:d7:8e:e2:70:46:c1:34:04:b3:3d:7e:89:f5:8e:
         60:3e:06:ba:b8:8a:63:eb:42:29:b2:9f:f9:b4:eb:20:02:f5:
         dd:ed:7f:d8:32:15:bd:16:66:b4:b9:c2:d9:d1:3c:cd:70:40:
         74:92:91:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 14 06:24:34 2026 by rpki-client