Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/286A91BA89AF978CCE2BB0FA7581486B216EA959BDF3E8E24B7EDCFF177D5193/0/3136382e39302e3233322e302f32322d3234203d3e203134313738.roa
File:                     3136382e39302e3233322e302f32322d3234203d3e203134313738.roa (raw, json)
Hash identifier:          MIumVsLWZADDpKmJy5RGp4VOgzlqe7EqP4RUsHbXadE=
Subject key identifier:   3D:22:4D:21:08:A8:72:AD:DE:41:63:1E:F1:56:BE:E6:F7:65:BA:2A
Certificate issuer:       /CN=7B516BC52FDBEAD0CF80516E1794A01BEFD23DDD
Certificate serial:       6B3E8E834BF35F58004D2E543F27F82A4AC78D09
Authority key identifier: 7B:51:6B:C5:2F:DB:EA:D0:CF:80:51:6E:17:94:A0:1B:EF:D2:3D:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B516BC52FDBEAD0CF80516E1794A01BEFD23DDD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/286A91BA89AF978CCE2BB0FA7581486B216EA959BDF3E8E24B7EDCFF177D5193/0/3136382e39302e3233322e302f32322d3234203d3e203134313738.roa
Signing time:             Thu 10 Sep 2026 07:20:01 +0000
ROA not before:           Thu 10 Sep 2026 07:15:01 +0000
ROA not after:            Thu 09 Sep 2027 07:20:01 +0000
asID:                     14178
IP address blocks:        168.90.232.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/286A91BA89AF978CCE2BB0FA7581486B216EA959BDF3E8E24B7EDCFF177D5193/0/7B516BC52FDBEAD0CF80516E1794A01BEFD23DDD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/286A91BA89AF978CCE2BB0FA7581486B216EA959BDF3E8E24B7EDCFF177D5193/0/7B516BC52FDBEAD0CF80516E1794A01BEFD23DDD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B516BC52FDBEAD0CF80516E1794A01BEFD23DDD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:3e:8e:83:4b:f3:5f:58:00:4d:2e:54:3f:27:f8:2a:4a:c7:8d:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B516BC52FDBEAD0CF80516E1794A01BEFD23DDD
        Validity
            Not Before: Sep 10 07:15:01 2026 GMT
            Not After : Sep  9 07:20:01 2027 GMT
        Subject: CN=3D224D2108A872ADDE41631EF156BEE6F765BA2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:50:cb:35:8a:85:35:4e:b6:f0:30:09:e8:8e:
                    99:7e:3c:75:64:03:27:82:63:37:e3:a8:9b:75:74:
                    6c:b1:12:b9:cb:9a:2c:ad:b0:fe:dd:58:36:d6:78:
                    4d:7e:16:87:67:34:aa:27:78:60:22:b5:3e:fa:2d:
                    cb:63:fc:2b:f6:66:95:d2:fe:5f:50:20:d0:f2:fd:
                    d6:67:e1:92:d2:f7:d6:e0:36:cc:56:64:a2:07:54:
                    2d:55:f3:f7:76:94:fa:36:2e:bb:e5:15:ac:c3:40:
                    57:ed:d1:70:86:78:3c:0e:82:9c:82:66:16:62:f6:
                    23:36:e5:3a:80:86:de:89:d8:39:94:98:9c:66:c7:
                    03:4a:81:8f:d7:70:c4:52:4a:f6:a5:12:ed:15:17:
                    cd:2e:99:eb:ec:9f:97:85:6a:3a:72:01:22:03:9b:
                    23:88:a0:52:8b:40:87:a0:a2:71:19:7e:03:e7:2c:
                    26:d1:78:a2:88:db:ae:12:e7:7d:dc:96:18:5d:ef:
                    bb:cf:f0:05:5c:b5:a4:71:58:7d:9e:06:16:a5:a7:
                    1a:a6:54:dd:2c:ad:88:94:4c:25:cb:73:30:a2:1d:
                    03:7a:a1:86:09:ab:c3:f3:74:76:36:d2:aa:9f:bd:
                    78:77:75:74:69:da:a1:5f:04:78:3a:b1:f9:e1:ed:
                    61:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:22:4D:21:08:A8:72:AD:DE:41:63:1E:F1:56:BE:E6:F7:65:BA:2A
            X509v3 Authority Key Identifier:
                keyid:7B:51:6B:C5:2F:DB:EA:D0:CF:80:51:6E:17:94:A0:1B:EF:D2:3D:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/286A91BA89AF978CCE2BB0FA7581486B216EA959BDF3E8E24B7EDCFF177D5193/0/7B516BC52FDBEAD0CF80516E1794A01BEFD23DDD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B516BC52FDBEAD0CF80516E1794A01BEFD23DDD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/286A91BA89AF978CCE2BB0FA7581486B216EA959BDF3E8E24B7EDCFF177D5193/0/3136382e39302e3233322e302f32322d3234203d3e203134313738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a3:3f:c5:7d:16:2e:20:b9:62:d6:06:36:0f:27:51:bd:c2:d3:
         e8:18:0a:e2:ff:0b:eb:17:34:ed:c5:84:0d:14:04:fc:5a:5a:
         15:54:32:68:ea:24:49:91:43:d0:9e:93:02:15:cb:a3:ac:79:
         77:51:c9:80:8c:0d:6d:f7:14:44:90:e1:c7:7c:7d:3f:ad:55:
         51:9d:60:87:1d:77:fc:1e:d1:eb:1f:46:1a:86:14:6a:5a:be:
         81:92:f0:ea:ea:db:42:fc:13:5c:44:a2:c3:59:20:f4:b0:db:
         c5:54:49:df:1c:78:e7:66:a0:ee:2b:36:9f:e4:15:ac:7c:ae:
         f7:1f:76:56:d3:5e:aa:cf:44:e0:9b:30:f3:39:a7:36:b2:2b:
         5b:0a:dd:05:ab:be:d2:af:be:5d:9a:87:85:38:0c:0c:05:af:
         0d:3f:72:04:03:ad:fd:a2:dc:6f:20:06:b7:9b:c5:db:2a:37:
         b1:8b:a1:aa:85:ca:65:a3:ce:f4:63:66:3f:34:0c:03:14:09:
         1b:1c:0a:6d:cc:7f:c8:1e:27:c5:37:b4:98:b4:c0:20:7f:a9:
         17:5a:5e:31:20:9e:fe:9f:79:cb:39:20:3b:1f:4f:46:c1:94:
         f3:36:5b:06:a8:c4:e0:84:0e:eb:26:95:dc:76:de:9f:31:95:
         ce:a6:4b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 20:04:31 2026 by rpki-client