Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/3134382e3230382e3133372e302f32342d3234203d3e20323730313439.roa
File:                     3134382e3230382e3133372e302f32342d3234203d3e20323730313439.roa (raw, json)
Hash identifier:          hBOnK7VBai0RbS7wK6PjBD+8pHhwfnWdIFpwDiqDSPw=
Subject key identifier:   CE:37:78:16:40:EC:A0:89:0E:A9:D0:D8:0C:A7:AC:72:21:E2:A2:AC
Certificate issuer:       /CN=8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB
Certificate serial:       712A284E601E62DC79E8AA2A0998D7D76078B465
Authority key identifier: 8A:12:67:DC:B4:DC:6F:FA:9F:CD:D7:FE:A9:D7:F9:F7:8C:37:91:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/3134382e3230382e3133372e302f32342d3234203d3e20323730313439.roa
Signing time:             Fri 31 Jul 2026 14:19:24 +0000
ROA not before:           Fri 31 Jul 2026 14:14:24 +0000
ROA not after:            Fri 30 Jul 2027 14:19:24 +0000
asID:                     270149
IP address blocks:        148.208.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Sep 2026 10:20:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:2a:28:4e:60:1e:62:dc:79:e8:aa:2a:09:98:d7:d7:60:78:b4:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB
        Validity
            Not Before: Jul 31 14:14:24 2026 GMT
            Not After : Jul 30 14:19:24 2027 GMT
        Subject: CN=CE37781640ECA0890EA9D0D80CA7AC7221E2A2AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:90:35:31:6b:49:26:20:63:66:ce:40:63:16:
                    a7:b4:c1:fe:c8:47:66:78:fc:79:51:d6:03:64:77:
                    8b:4b:ff:f9:3d:22:ed:7c:16:35:a3:b6:a5:3f:e8:
                    e0:d8:12:1b:2c:10:77:c1:00:b3:e1:19:40:be:2e:
                    dd:bb:5c:8a:97:84:c1:9b:7b:32:4d:c1:70:91:dc:
                    68:97:95:86:23:74:54:52:92:1d:31:cb:11:12:d5:
                    3c:38:02:de:bf:45:71:b4:e2:2c:95:1e:7e:61:62:
                    6c:8c:a8:da:78:91:14:56:99:53:93:22:5d:dd:00:
                    5b:2c:de:44:f5:60:6e:3d:e5:aa:ff:7f:83:48:c2:
                    de:b8:de:6c:2b:8a:d5:23:de:50:87:b2:3f:c5:5d:
                    84:48:d7:ad:61:bc:7c:08:e8:1d:5f:60:75:65:a6:
                    6c:d4:30:90:ed:e5:b9:1c:13:bb:63:54:16:0e:47:
                    fc:3c:13:d7:3f:50:c6:6f:40:4c:25:56:99:97:62:
                    35:cb:78:3a:c8:a0:8a:7a:72:47:97:30:ce:b9:1f:
                    02:c5:f6:8d:80:28:60:9b:bb:7a:42:fc:0d:d9:7b:
                    b8:89:31:a1:8d:09:e6:6a:94:95:75:40:0e:96:e1:
                    e5:50:b2:c9:df:b0:03:2a:26:18:72:ae:f1:33:c0:
                    9e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:37:78:16:40:EC:A0:89:0E:A9:D0:D8:0C:A7:AC:72:21:E2:A2:AC
            X509v3 Authority Key Identifier:
                keyid:8A:12:67:DC:B4:DC:6F:FA:9F:CD:D7:FE:A9:D7:F9:F7:8C:37:91:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/3134382e3230382e3133372e302f32342d3234203d3e20323730313439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.208.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:39:b7:85:e3:43:8a:79:ad:cf:e5:41:aa:6b:4b:02:a8:2d:
         39:17:dc:47:d5:8a:77:a8:b8:cc:70:e2:6b:2a:f5:0d:a7:1f:
         73:52:16:ce:29:4c:fb:cc:f2:a3:22:2a:ea:c2:bb:51:8f:31:
         93:57:96:d8:99:45:5d:c2:28:97:62:7e:0e:62:3f:34:c2:ee:
         97:1c:c7:16:50:1b:54:7f:37:df:79:c6:02:68:dc:cb:44:da:
         58:2f:67:26:52:92:a2:3f:ec:70:2d:50:7c:73:11:f4:84:e0:
         99:9b:ee:c2:c1:78:b2:12:48:ed:bc:c5:82:a0:04:e9:6b:1e:
         35:9e:26:44:55:fa:94:76:78:39:90:0d:61:dc:90:7e:bf:99:
         55:b5:cf:3d:a1:87:d4:62:d0:39:82:87:db:dd:ef:2e:4f:32:
         dd:56:69:cb:10:4a:c8:b9:e1:f2:e1:a9:ab:20:83:11:a4:65:
         18:6a:38:00:31:44:e7:c2:f5:a0:4f:9c:2b:9e:33:c7:c9:ae:
         c9:82:c2:ac:19:2b:f4:9d:39:4c:aa:75:12:08:1e:a6:56:63:
         ea:f1:d0:c7:42:46:bb:e2:25:8c:63:ac:7e:f4:7e:df:ab:80:
         a6:68:5a:02:d7:34:f0:d8:39:09:0d:ca:68:98:9c:57:e3:42:
         50:69:30:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 14 07:51:16 2026 by rpki-client