Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/3134382e3230382e3133382e302f32342d3234203d3e20323730313439.roa
File:                     3134382e3230382e3133382e302f32342d3234203d3e20323730313439.roa (raw, json)
Hash identifier:          j3pMTpGfgKsC4OKA4XlWZMIUjToQb1ni57PgRn7905o=
Subject key identifier:   75:11:D1:CE:4A:FB:D4:D8:61:9F:56:5A:62:A1:9C:68:5C:91:19:1D
Certificate issuer:       /CN=8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB
Certificate serial:       36CD2B69A61011A552FB9973BF60C3DB6916B9B2
Authority key identifier: 8A:12:67:DC:B4:DC:6F:FA:9F:CD:D7:FE:A9:D7:F9:F7:8C:37:91:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/3134382e3230382e3133382e302f32342d3234203d3e20323730313439.roa
Signing time:             Fri 31 Jul 2026 01:19:23 +0000
ROA not before:           Fri 31 Jul 2026 01:14:23 +0000
ROA not after:            Fri 30 Jul 2027 01:19:23 +0000
asID:                     270149
IP address blocks:        148.208.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Sep 2026 10:20:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:cd:2b:69:a6:10:11:a5:52:fb:99:73:bf:60:c3:db:69:16:b9:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB
        Validity
            Not Before: Jul 31 01:14:23 2026 GMT
            Not After : Jul 30 01:19:23 2027 GMT
        Subject: CN=7511D1CE4AFBD4D8619F565A62A19C685C91191D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:53:46:88:5b:fe:15:19:2b:5c:b4:0c:5a:f2:
                    89:fe:e0:a5:d2:aa:4b:29:16:23:c9:ef:57:de:1c:
                    c7:52:14:be:e6:a7:d0:33:26:0f:9a:08:25:2c:0b:
                    7c:ad:4c:f5:10:71:ec:fc:b2:30:10:10:5a:29:4b:
                    4b:e7:6a:74:6e:ca:12:82:ee:af:cb:f2:43:e3:3c:
                    1f:a2:4e:28:e1:d1:68:ac:55:9d:3c:f2:40:72:76:
                    09:ca:b5:21:94:2f:0d:80:62:24:a0:b2:79:20:2c:
                    00:ac:da:29:71:64:1c:34:6a:30:38:6c:a8:33:c9:
                    7f:de:21:c9:60:48:ce:fa:6b:46:13:8e:0f:91:bc:
                    d8:80:62:0b:e3:7f:a8:4c:cf:03:55:69:3f:7b:00:
                    96:cc:8f:26:23:c4:37:57:82:d5:58:dc:1a:28:25:
                    ae:67:4a:42:d7:c6:ba:16:eb:b0:12:84:9f:49:3a:
                    01:0c:7d:0b:d1:74:4a:34:bf:af:4a:c6:97:9c:10:
                    1f:95:88:06:ef:bc:87:5e:91:e7:78:4f:ec:0d:d8:
                    e8:36:ca:39:03:21:ce:93:39:97:ae:22:55:c4:a1:
                    32:e4:b8:01:f9:63:2b:2e:6e:a6:7a:d0:4c:5a:5f:
                    47:56:78:ca:20:ba:16:ee:59:20:de:31:74:fc:ee:
                    2b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:11:D1:CE:4A:FB:D4:D8:61:9F:56:5A:62:A1:9C:68:5C:91:19:1D
            X509v3 Authority Key Identifier:
                keyid:8A:12:67:DC:B4:DC:6F:FA:9F:CD:D7:FE:A9:D7:F9:F7:8C:37:91:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/3134382e3230382e3133382e302f32342d3234203d3e20323730313439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.208.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:3d:61:f3:21:9f:fc:22:98:2c:3a:d2:c3:e1:03:51:01:9d:
         9d:14:2f:5b:48:76:ec:66:ba:93:7f:a4:cb:8d:29:90:73:53:
         14:58:44:ec:d0:f0:88:75:ed:a5:a7:95:df:77:37:68:e3:35:
         db:39:04:6a:3e:87:78:3d:35:ac:fb:b5:07:65:49:de:2a:53:
         02:d7:c8:41:13:bf:c7:d5:3a:a0:14:ae:b9:0e:0c:9c:61:a7:
         42:01:e6:18:c9:0e:5e:ea:6a:4f:25:95:dd:5f:72:ef:6e:29:
         47:c3:1c:fe:fb:35:9c:d1:9d:4a:99:32:31:dc:69:dc:41:43:
         62:9c:8f:2f:5f:d6:d5:92:6c:70:4a:90:5b:0c:4e:05:09:3f:
         6d:18:73:84:4c:28:89:e5:6d:4a:a7:90:7a:b4:a2:bb:f0:28:
         e6:c6:af:d2:b9:93:f8:ea:c5:17:4a:bf:e2:15:75:ad:14:13:
         ac:a1:c0:20:a9:ed:eb:30:e0:cf:38:1f:ea:c3:5b:12:5c:2a:
         c4:e7:2a:c2:91:68:b6:1c:5b:4f:0c:fc:d4:c3:45:a7:4e:ed:
         a1:bc:12:df:10:56:a7:a6:e6:69:67:52:96:8c:44:5d:6f:6d:
         8d:7d:38:fc:9b:96:8e:4f:47:bb:57:92:5f:c8:65:e7:f7:d8:
         79:56:f1:dc
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUNs0raaYQEaVS+5lzv2DD22kWubIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEExMjY3RENCNERDNkZGQTlGQ0REN0ZFQTlEN0Y5Rjc4
QzM3OTFEQjAeFw0yNjA3MzEwMTE0MjNaFw0yNzA3MzAwMTE5MjNaMDMxMTAvBgNV
BAMTKDc1MTFEMUNFNEFGQkQ0RDg2MTlGNTY1QTYyQTE5QzY4NUM5MTE5MUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhU0aIW/4VGStctAxa8on+4KXS
qkspFiPJ71feHMdSFL7mp9AzJg+aCCUsC3ytTPUQcez8sjAQEFopS0vnanRuyhKC
7q/L8kPjPB+iTijh0WisVZ088kBydgnKtSGULw2AYiSgsnkgLACs2ilxZBw0ajA4
bKgzyX/eIclgSM76a0YTjg+RvNiAYgvjf6hMzwNVaT97AJbMjyYjxDdXgtVY3Boo
Ja5nSkLXxroW67AShJ9JOgEMfQvRdEo0v69KxpecEB+ViAbvvIdeked4T+wN2Og2
yjkDIc6TOZeuIlXEoTLkuAH5YysubqZ60ExaX0dWeMoguhbuWSDeMXT87it9AgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUdRHRzkr71Nhhn1ZaYqGcaFyRGR0wHwYDVR0j
BBgwFoAUihJn3LTcb/qfzdf+qdf594w3kdswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yM0I3QzY5N0U5ODhDMTQ3MjgwMTVGNzVBRDRCRDYyMTc1
NUJCMzk4NzBFQTI4MzFCM0NEMDUzQjk4ODUzM0YxLzAvOEExMjY3RENCNERDNkZG
QTlGQ0REN0ZFQTlEN0Y5Rjc4QzM3OTFEQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84QTEyNjdEQ0I0REM2RkZBOUZD
REQ3RkVBOUQ3RjlGNzhDMzc5MURCLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjNCN0M2OTdFOTg4QzE0NzI4MDE1Rjc1QUQ0QkQ2MjE3NTVCQjM5ODcw
RUEyODMxQjNDRDA1M0I5ODg1MzNGMS8wLzMxMzQzODJlMzIzMDM4MmUzMTMzMzgy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3MzAzMTM0Mzkucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACU
0IowDQYJKoZIhvcNAQELBQADggEBAAc9YfMhn/wimCw60sPhA1EBnZ0UL1tIduxm
upN/pMuNKZBzUxRYROzQ8Ih17aWnld93N2jjNds5BGo+h3g9Naz7tQdlSd4qUwLX
yEETv8fVOqAUrrkODJxhp0IB5hjJDl7qak8lld1fcu9uKUfDHP77NZzRnUqZMjHc
adxBQ2Kcjy9f1tWSbHBKkFsMTgUJP20Yc4RMKInlbUqnkHq0orvwKObGr9K5k/jq
xRdKv+IVda0UE6yhwCCp7esw4M84H+rDWxJcKsTnKsKRaLYcW08M/NTDRadO7aG8
Et8QVqem5mlnUpaMRF1vbY19OPyblo5PR7tXkl/IZef32HlW8dw=
-----END CERTIFICATE-----
Generated at Mon Sep 14 07:51:17 2026 by rpki-client