Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/28DBB833190C713EFEC20FB952446B234F53847EEEB1AF550D4A043C331856C4/0/322e3135322e3234362e302f32342d3234203d3e20323734303736.roa
File:                     322e3135322e3234362e302f32342d3234203d3e20323734303736.roa (raw, json)
Hash identifier:          gJMUOJyUTkXUXUUI5Picwxsth///fxJkkDQqBIT4Oiw=
Subject key identifier:   26:3A:A5:E5:03:25:E5:2F:F3:FC:51:8F:E0:D1:58:82:57:34:E8:BB
Certificate issuer:       /CN=0A93A6C0EAF8441DE8352B346208D2723EDB984A
Certificate serial:       097F4695354A29DB82B997A9C4FB24915DDA698C
Authority key identifier: 0A:93:A6:C0:EA:F8:44:1D:E8:35:2B:34:62:08:D2:72:3E:DB:98:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A93A6C0EAF8441DE8352B346208D2723EDB984A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/28DBB833190C713EFEC20FB952446B234F53847EEEB1AF550D4A043C331856C4/0/322e3135322e3234362e302f32342d3234203d3e20323734303736.roa
Signing time:             Sun 02 Aug 2026 03:40:00 +0000
ROA not before:           Sun 02 Aug 2026 03:35:00 +0000
ROA not after:            Sun 01 Aug 2027 03:40:00 +0000
asID:                     274076
IP address blocks:        2.152.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/28DBB833190C713EFEC20FB952446B234F53847EEEB1AF550D4A043C331856C4/0/0A93A6C0EAF8441DE8352B346208D2723EDB984A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/28DBB833190C713EFEC20FB952446B234F53847EEEB1AF550D4A043C331856C4/0/0A93A6C0EAF8441DE8352B346208D2723EDB984A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A93A6C0EAF8441DE8352B346208D2723EDB984A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 15 Sep 2026 10:15:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:7f:46:95:35:4a:29:db:82:b9:97:a9:c4:fb:24:91:5d:da:69:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A93A6C0EAF8441DE8352B346208D2723EDB984A
        Validity
            Not Before: Aug  2 03:35:00 2026 GMT
            Not After : Aug  1 03:40:00 2027 GMT
        Subject: CN=263AA5E50325E52FF3FC518FE0D158825734E8BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d2:ef:a3:f9:0e:eb:3a:29:bd:a9:9b:1b:62:
                    db:47:79:bc:18:08:8a:58:df:ba:f6:fc:d7:fe:48:
                    f6:a2:1b:60:e8:4d:60:39:2c:4e:1d:ba:9d:a0:ef:
                    04:df:e7:df:c6:e9:91:78:95:1d:2f:9f:8a:35:52:
                    b2:4d:45:7c:e5:c6:12:75:4b:ed:b7:18:80:99:98:
                    b2:3a:16:9f:4c:04:07:3c:be:5e:c3:4f:10:3c:71:
                    e0:ad:86:84:bb:52:49:6c:cd:93:84:8e:81:e5:42:
                    ef:e8:be:11:47:b4:9b:78:e9:fd:9b:b9:07:59:3a:
                    8b:f0:f3:fc:8b:ca:4b:35:24:26:15:16:89:be:2d:
                    e4:24:b4:e8:5e:84:f3:fd:ae:2f:94:4a:7c:84:5c:
                    18:e3:1e:51:66:31:22:2f:95:e4:ed:6d:a8:47:62:
                    ae:03:b6:59:e3:29:66:c7:77:ff:7c:34:bd:f5:12:
                    29:4a:6b:50:52:c3:a3:ea:7c:06:3f:ab:24:53:00:
                    31:45:d0:35:83:5a:32:1b:11:94:29:32:e4:38:bd:
                    3b:b0:f6:7f:49:b3:c5:e2:7a:ca:d3:0a:3a:90:bc:
                    c0:85:43:e5:5b:cf:5e:40:94:b1:8f:9b:21:e3:14:
                    66:d7:66:9b:f2:70:3b:29:11:dd:d0:87:a1:b6:f2:
                    c8:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:3A:A5:E5:03:25:E5:2F:F3:FC:51:8F:E0:D1:58:82:57:34:E8:BB
            X509v3 Authority Key Identifier:
                keyid:0A:93:A6:C0:EA:F8:44:1D:E8:35:2B:34:62:08:D2:72:3E:DB:98:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/28DBB833190C713EFEC20FB952446B234F53847EEEB1AF550D4A043C331856C4/0/0A93A6C0EAF8441DE8352B346208D2723EDB984A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A93A6C0EAF8441DE8352B346208D2723EDB984A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/28DBB833190C713EFEC20FB952446B234F53847EEEB1AF550D4A043C331856C4/0/322e3135322e3234362e302f32342d3234203d3e20323734303736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.152.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:bb:1c:cf:a3:27:77:5a:ca:f2:c3:7d:90:89:e0:fb:53:2b:
         c7:c9:dc:0f:32:6f:bf:0e:2a:22:66:16:84:15:f2:c0:3c:40:
         52:1a:a1:60:f8:ca:c5:05:4b:9c:7a:11:40:12:7c:8d:35:56:
         06:fd:ad:e9:2c:e7:0e:26:3e:a9:aa:bd:9f:df:5b:0b:8a:af:
         eb:ad:c0:c0:55:aa:6e:16:5a:1a:7d:86:5a:f1:33:0c:d0:8b:
         1e:ef:f1:ad:4c:22:c6:23:b4:4a:ec:ab:1a:1a:fb:f5:c5:7d:
         a0:22:86:61:a5:a9:48:bd:03:d7:04:03:01:91:6b:67:f4:99:
         54:52:cb:8c:bd:9b:bf:1f:ae:c2:64:30:10:e7:19:b6:63:98:
         7d:d3:b7:52:56:6a:e6:c9:bc:a7:c0:a0:ed:fd:f5:7b:e9:2a:
         6e:61:4a:f1:49:6b:c1:c6:78:50:8d:de:2e:2a:06:51:e1:7e:
         72:67:9b:2e:e5:0e:3d:78:a4:c4:58:e8:75:85:7e:a2:e3:a7:
         3b:6e:f8:9e:bc:5f:94:23:ae:f5:63:5e:10:ec:11:88:98:18:
         43:dd:37:43:be:70:39:4c:ff:d9:ad:01:dd:0a:15:c4:3d:6a:
         1a:9e:ad:65:e0:6d:c3:43:b2:3f:22:fd:14:d7:c0:59:da:27:
         e9:88:4d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 15:31:42 2026 by rpki-client