Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/272F092A75BD0846536D3BEE5324BCB694670AD89D90C846635905835368D231/0/3138352e31322e372e302f32342d3234203d3e20323730313138.roa
File:                     3138352e31322e372e302f32342d3234203d3e20323730313138.roa (raw, json)
Hash identifier:          Fo5YqPkIRryH0+FuEGLWzJm/sk4j3n3zKJzGvrQ/HR4=
Subject key identifier:   CB:CF:E3:40:F9:C4:BD:61:F4:55:62:E0:3B:8D:05:8B:C9:26:B3:D9
Certificate issuer:       /CN=7066D598BBBAB42A965098E6208D6AB7BD0740D6
Certificate serial:       074B8D03B49B0D7FFFE4D906D7C481B88407B709
Authority key identifier: 70:66:D5:98:BB:BA:B4:2A:96:50:98:E6:20:8D:6A:B7:BD:07:40:D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7066D598BBBAB42A965098E6208D6AB7BD0740D6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/272F092A75BD0846536D3BEE5324BCB694670AD89D90C846635905835368D231/0/3138352e31322e372e302f32342d3234203d3e20323730313138.roa
Signing time:             Wed 02 Sep 2026 16:05:00 +0000
ROA not before:           Wed 02 Sep 2026 16:00:00 +0000
ROA not after:            Wed 01 Sep 2027 16:05:00 +0000
asID:                     270118
IP address blocks:        185.12.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/272F092A75BD0846536D3BEE5324BCB694670AD89D90C846635905835368D231/0/7066D598BBBAB42A965098E6208D6AB7BD0740D6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/272F092A75BD0846536D3BEE5324BCB694670AD89D90C846635905835368D231/0/7066D598BBBAB42A965098E6208D6AB7BD0740D6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7066D598BBBAB42A965098E6208D6AB7BD0740D6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:4b:8d:03:b4:9b:0d:7f:ff:e4:d9:06:d7:c4:81:b8:84:07:b7:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7066D598BBBAB42A965098E6208D6AB7BD0740D6
        Validity
            Not Before: Sep  2 16:00:00 2026 GMT
            Not After : Sep  1 16:05:00 2027 GMT
        Subject: CN=CBCFE340F9C4BD61F45562E03B8D058BC926B3D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b8:45:cd:11:1b:b7:15:25:a8:66:c9:71:b5:
                    3a:89:b7:16:f1:bb:93:7a:67:0d:30:ba:80:6d:cf:
                    3c:3c:ee:45:83:24:c4:d4:9a:30:12:4e:f5:a6:97:
                    ad:88:b5:e5:e9:ab:3a:09:ad:8a:09:a8:0c:3d:84:
                    96:d6:20:fd:c5:4b:95:74:08:64:74:86:76:18:5c:
                    9c:3e:2d:88:fc:e8:ba:4e:2a:65:1d:32:e4:5a:3f:
                    a1:76:57:88:b7:77:89:bd:d9:64:1a:ba:b8:c2:1f:
                    e9:98:d3:3e:e4:60:33:7b:28:b8:fa:7e:9b:8f:2b:
                    2b:6b:22:94:33:66:eb:12:42:8b:bb:03:a1:69:65:
                    9d:41:8d:c8:75:9a:79:ac:b3:49:c5:ef:80:e3:f1:
                    20:70:f6:d3:da:47:1d:ad:dc:66:7d:e4:ee:9c:29:
                    07:13:55:bc:66:4e:6e:ba:d6:4f:6a:a7:57:a3:f4:
                    bf:d5:0d:f9:9d:e6:de:21:28:cc:c3:49:db:99:5f:
                    bc:4c:d6:85:0b:9e:de:11:28:00:96:09:b0:bd:28:
                    7e:37:1d:67:32:81:9f:db:7a:14:44:be:73:d3:a4:
                    77:8a:10:16:7e:b9:89:ef:df:1e:ca:53:2f:d5:e3:
                    f5:3b:03:16:8a:58:5b:f8:65:9b:4e:1d:94:de:b1:
                    98:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:CF:E3:40:F9:C4:BD:61:F4:55:62:E0:3B:8D:05:8B:C9:26:B3:D9
            X509v3 Authority Key Identifier:
                keyid:70:66:D5:98:BB:BA:B4:2A:96:50:98:E6:20:8D:6A:B7:BD:07:40:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/272F092A75BD0846536D3BEE5324BCB694670AD89D90C846635905835368D231/0/7066D598BBBAB42A965098E6208D6AB7BD0740D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7066D598BBBAB42A965098E6208D6AB7BD0740D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/272F092A75BD0846536D3BEE5324BCB694670AD89D90C846635905835368D231/0/3138352e31322e372e302f32342d3234203d3e20323730313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.12.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:93:aa:a2:d3:66:dd:70:ed:1d:0c:bb:db:c2:c3:86:5b:d2:
         d2:a1:d3:ef:26:20:df:66:ab:8c:87:cc:9b:0a:dc:36:0a:d6:
         c6:0b:ac:42:54:7b:e4:df:7e:f2:0e:9b:e3:0d:15:df:97:48:
         c4:51:c7:e5:62:56:0c:01:1e:c4:37:57:61:9c:3d:fc:b4:52:
         67:e4:7e:d6:a9:54:8e:70:9c:51:2a:02:59:2b:18:53:ef:e7:
         f6:5a:48:ca:57:56:34:98:07:6f:ff:16:bd:46:ad:94:be:40:
         6a:07:c9:a3:7f:fb:14:64:0e:20:70:ca:df:c8:bc:5f:08:a4:
         ba:b5:aa:de:4e:91:2c:75:14:69:14:ba:c7:9f:2a:c2:89:98:
         8c:33:7a:a8:b5:7a:e7:df:29:18:02:4e:79:e3:43:f7:12:0d:
         25:ed:a2:d8:6d:3b:b8:4f:80:5b:bb:15:71:35:39:f4:42:63:
         60:35:d1:bc:f3:dd:fb:e4:1a:d7:76:e0:9c:c3:12:8e:be:4e:
         2e:13:0d:1d:b3:fa:de:b9:c2:72:bf:cf:75:e1:8a:71:f4:85:
         8d:63:3d:f8:ad:7c:11:f6:ce:03:54:6f:02:6d:43:2f:c4:83:
         bd:77:cc:90:18:c3:0f:74:44:25:07:11:29:c8:ad:4d:38:a0:
         32:aa:f9:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 18:05:47 2026 by rpki-client