Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/40D8D4094F75BD5906A686CCC3F9D606251C695E3353C569059D12601809ED2D/0/AS266669.roa
File:                     AS266669.roa (raw, json)
Hash identifier:          BrENLFpOBXwusyYyxOJnDJub3nHW1mr8GlfcxEmRQ30=
Subject key identifier:   10:EE:B8:85:A9:0D:8E:88:40:17:CC:0A:12:C7:48:B9:22:70:B2:12
Certificate issuer:       /CN=6ECA7CB8912ADEFBC99484E053EBE852A3A0E8C2
Certificate serial:       6A9973FD2A42249D19798420FFC8D996F33DEB1B
Authority key identifier: 6E:CA:7C:B8:91:2A:DE:FB:C9:94:84:E0:53:EB:E8:52:A3:A0:E8:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6ECA7CB8912ADEFBC99484E053EBE852A3A0E8C2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/40D8D4094F75BD5906A686CCC3F9D606251C695E3353C569059D12601809ED2D/0/AS266669.roa
Signing time:             Fri 24 Apr 2026 17:39:56 +0000
ROA not before:           Fri 24 Apr 2026 17:34:56 +0000
ROA not after:            Fri 23 Apr 2027 17:39:56 +0000
asID:                     266669
IP address blocks:        186.146.8.0/24 maxlen: 24
                          186.146.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/40D8D4094F75BD5906A686CCC3F9D606251C695E3353C569059D12601809ED2D/0/6ECA7CB8912ADEFBC99484E053EBE852A3A0E8C2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/40D8D4094F75BD5906A686CCC3F9D606251C695E3353C569059D12601809ED2D/0/6ECA7CB8912ADEFBC99484E053EBE852A3A0E8C2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6ECA7CB8912ADEFBC99484E053EBE852A3A0E8C2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 03 May 2026 07:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:99:73:fd:2a:42:24:9d:19:79:84:20:ff:c8:d9:96:f3:3d:eb:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ECA7CB8912ADEFBC99484E053EBE852A3A0E8C2
        Validity
            Not Before: Apr 24 17:34:56 2026 GMT
            Not After : Apr 23 17:39:56 2027 GMT
        Subject: CN=10EEB885A90D8E884017CC0A12C748B92270B212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:5a:2d:3c:9a:39:6e:82:10:11:07:13:91:30:
                    e0:96:74:4c:c6:be:a7:d9:35:6d:c6:60:8b:32:68:
                    b7:fe:42:88:fb:46:b0:80:15:09:aa:ca:28:11:d4:
                    a8:85:a8:73:eb:6f:88:7d:43:95:93:c8:c0:0b:b5:
                    a1:9e:30:f8:0f:4b:96:9b:87:be:ac:a5:96:66:cb:
                    b7:5c:4c:7e:e9:71:cd:bd:b8:5d:19:45:66:05:34:
                    66:00:7a:bb:0a:f4:08:68:41:83:67:e2:b1:21:46:
                    d0:9c:50:04:f0:f8:b1:ea:76:90:30:d4:43:ef:30:
                    f9:a9:99:3e:1d:47:3f:df:55:a9:09:af:9a:d3:45:
                    cc:96:70:6e:9f:d4:8e:ce:d0:ed:fe:eb:47:a8:1b:
                    69:6c:5a:3a:69:27:bb:23:a7:53:7a:5f:65:a9:56:
                    60:42:a4:62:1b:bc:49:82:eb:ed:9d:34:d6:56:54:
                    f2:3b:8a:0d:06:5e:63:ff:84:90:f0:44:0e:42:36:
                    00:25:9d:e4:62:d9:3e:7f:13:67:76:1b:37:28:da:
                    b9:48:78:3c:ab:a0:8e:ec:3d:64:d3:1d:5d:fa:d9:
                    c1:26:5b:c2:68:94:15:b2:81:17:cd:29:95:c1:29:
                    f6:f7:53:89:1d:5c:36:6d:c4:4f:ec:45:0c:6f:23:
                    76:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:EE:B8:85:A9:0D:8E:88:40:17:CC:0A:12:C7:48:B9:22:70:B2:12
            X509v3 Authority Key Identifier:
                keyid:6E:CA:7C:B8:91:2A:DE:FB:C9:94:84:E0:53:EB:E8:52:A3:A0:E8:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/40D8D4094F75BD5906A686CCC3F9D606251C695E3353C569059D12601809ED2D/0/6ECA7CB8912ADEFBC99484E053EBE852A3A0E8C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6ECA7CB8912ADEFBC99484E053EBE852A3A0E8C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/40D8D4094F75BD5906A686CCC3F9D606251C695E3353C569059D12601809ED2D/0/AS266669.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.146.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         62:7f:22:65:a1:61:c0:03:eb:c8:0d:d6:0f:81:7e:d5:28:eb:
         18:63:63:f8:4c:e2:35:a1:3a:a1:7f:1f:a0:bc:da:15:d2:5a:
         2b:5d:ce:be:d6:df:c8:59:61:d2:e7:08:f2:a5:8b:4c:29:96:
         35:bf:70:83:fc:60:64:31:a7:32:f8:ae:49:a1:ed:63:89:a5:
         15:d3:6a:ab:8a:8b:13:82:ec:71:3a:bb:32:69:8f:03:33:b4:
         bb:16:7c:86:05:88:52:1f:b8:4d:5d:5f:e2:ed:e4:d7:c6:e9:
         65:7b:51:ca:c6:4a:6d:51:d5:ce:80:db:4c:a4:fb:54:2f:78:
         ec:5e:5f:21:8b:48:10:d8:ff:39:b9:83:ed:b6:39:5e:05:51:
         b5:23:09:20:11:93:fd:d1:f2:43:63:5d:b5:cf:a1:10:24:a7:
         fc:84:e2:16:f3:41:21:61:9d:8f:0c:b3:96:57:a8:c8:b6:d8:
         08:2d:4a:4f:32:0d:0d:74:11:c1:21:41:5f:12:32:35:2d:c2:
         2b:e3:fb:86:60:7c:48:50:b4:6f:0c:93:8d:34:6b:94:c6:f2:
         cf:14:3c:72:41:d5:3c:ba:76:21:7e:bb:a4:13:ac:c2:d9:75:
         b7:fe:21:11:a1:68:be:8a:d1:f7:62:a9:41:ea:69:6b:6d:d0:
         f7:77:fd:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 08:26:55 2026 by rpki-client