Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/3139322e3134302e3132362e302f32342d3234203d3e20323635373331.roa
File:                     3139322e3134302e3132362e302f32342d3234203d3e20323635373331.roa (raw, json)
Hash identifier:          3Wr8SZpBqMwK0FSnpqM3GGzd+SiUdwNDbvQmYC+ez7E=
Subject key identifier:   CF:A3:E7:A2:AA:A4:99:DF:A5:FB:D2:A8:C3:C1:B9:8C:82:DF:A5:F8
Certificate issuer:       /CN=D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600
Certificate serial:       29E14D605DF1A973E922FE1E5318FA66297937B5
Authority key identifier: D8:E6:D9:C0:6E:4D:8F:FC:DC:C2:2A:FF:4B:4C:A3:92:C1:A7:D6:00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/3139322e3134302e3132362e302f32342d3234203d3e20323635373331.roa
Signing time:             Mon 19 Oct 2026 12:41:52 +0000
ROA not before:           Mon 19 Oct 2026 12:36:52 +0000
ROA not after:            Mon 18 Oct 2027 12:41:52 +0000
asID:                     265731
IP address blocks:        192.140.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 08 Nov 2026 10:31:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:e1:4d:60:5d:f1:a9:73:e9:22:fe:1e:53:18:fa:66:29:79:37:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600
        Validity
            Not Before: Oct 19 12:36:52 2026 GMT
            Not After : Oct 18 12:41:52 2027 GMT
        Subject: CN=CFA3E7A2AAA499DFA5FBD2A8C3C1B98C82DFA5F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:3a:4e:26:57:56:fa:77:2b:0d:c8:16:3d:4c:
                    af:93:8d:c7:41:a7:86:52:36:0b:47:52:21:3c:b2:
                    18:74:01:62:02:89:39:76:0d:b3:9e:d0:44:51:be:
                    3a:a6:9d:aa:ce:f6:61:f5:28:c5:6c:0f:6f:aa:28:
                    e5:75:4b:e5:6c:e9:ae:1e:06:6c:5b:73:40:59:87:
                    bb:ff:c6:c8:5d:18:4c:ce:9a:cc:91:b2:6d:8f:99:
                    86:b2:a6:91:40:91:e0:de:06:48:06:ab:2a:fc:fe:
                    02:f4:2d:ad:a0:c1:63:7b:f7:5c:82:2e:4a:47:0b:
                    60:75:64:eb:3c:d0:bb:c9:27:5c:5f:ff:10:4c:c6:
                    70:a5:5c:c8:94:3a:f6:31:70:18:60:40:95:3f:f4:
                    36:0c:33:73:c2:6c:ae:b9:08:1b:a1:08:ea:50:27:
                    e3:77:74:c0:f4:1b:fd:41:d6:1d:b3:31:b4:e9:29:
                    de:b7:fc:6c:85:aa:08:65:43:c9:e4:d5:16:15:27:
                    ed:71:6d:78:1e:21:cf:23:bd:2d:a2:8d:21:10:f4:
                    b7:33:95:31:32:51:57:26:69:1f:fe:76:56:5d:ea:
                    4b:ca:fa:c7:48:44:ab:21:6c:ed:9d:1d:3e:6d:d3:
                    a7:27:96:e1:8f:f4:15:ed:13:33:48:b4:cc:5a:f6:
                    52:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:A3:E7:A2:AA:A4:99:DF:A5:FB:D2:A8:C3:C1:B9:8C:82:DF:A5:F8
            X509v3 Authority Key Identifier:
                keyid:D8:E6:D9:C0:6E:4D:8F:FC:DC:C2:2A:FF:4B:4C:A3:92:C1:A7:D6:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/3139322e3134302e3132362e302f32342d3234203d3e20323635373331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:88:89:fa:d8:11:5c:ee:64:64:69:cc:14:1d:37:3b:50:fe:
         92:c3:bf:d6:fd:e9:11:41:3d:88:63:60:48:0a:24:cb:95:a1:
         cd:6c:09:fd:c5:0b:da:1b:35:86:7c:3b:c5:9a:dc:9a:7a:77:
         6d:cd:b5:d1:6d:49:d7:e7:d1:1e:e3:52:4c:71:80:7a:51:b6:
         b8:9a:92:71:c7:b5:a6:a8:64:2a:26:d5:13:ba:99:79:fc:92:
         c8:48:54:62:d8:b0:32:c7:67:53:ad:70:c7:bc:67:37:42:20:
         fa:e6:1a:43:32:5e:2c:c0:c1:bb:1d:81:d6:0c:c4:fe:ea:30:
         e1:27:5c:df:f3:8f:d0:dc:57:0e:aa:20:31:68:fa:88:66:83:
         9c:9a:2f:20:df:1b:95:9a:bd:5c:6d:70:44:38:26:c9:7f:de:
         ea:27:de:0c:9d:83:c6:e3:98:a3:96:bb:51:df:1f:f0:76:e7:
         ba:5c:b3:fe:f7:ed:f3:64:b4:31:1f:f6:9b:5a:30:15:ae:0d:
         68:0c:58:27:00:c2:f5:75:2f:41:0d:6e:2d:ae:f0:9e:55:f0:
         a8:8e:6d:fb:39:6d:a1:d2:c4:c0:30:71:3f:1a:29:c0:70:07:
         60:4e:6c:dc:54:a8:58:01:13:f3:3b:de:73:af:bc:fa:c2:8b:
         f5:2b:9a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 12:48:11 2026 by rpki-client