Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3134382e3232372e3232322e302f32342d3234203d3e203236363137.roa
File:                     3134382e3232372e3232322e302f32342d3234203d3e203236363137.roa (raw, json)
Hash identifier:          LTttBGatZ8vh/xUDHnoAcwdFRdZg6ez+5f2bz1ph5OE=
Subject key identifier:   89:0E:D3:3F:BE:A9:C1:BF:CC:88:B2:D2:1F:97:EE:36:F3:3E:1C:A7
Certificate issuer:       /CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
Certificate serial:       4289E6E3F2AA59E551DEAE89F3A1EB237514B56D
Authority key identifier: 4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3134382e3232372e3232322e302f32342d3234203d3e203236363137.roa
Signing time:             Thu 05 Mar 2026 21:25:03 +0000
ROA not before:           Thu 05 Mar 2026 21:20:03 +0000
ROA not after:            Thu 04 Mar 2027 21:25:03 +0000
asID:                     26617
IP address blocks:        148.227.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 13 Mar 2026 23:46:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:89:e6:e3:f2:aa:59:e5:51:de:ae:89:f3:a1:eb:23:75:14:b5:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
        Validity
            Not Before: Mar  5 21:20:03 2026 GMT
            Not After : Mar  4 21:25:03 2027 GMT
        Subject: CN=890ED33FBEA9C1BFCC88B2D21F97EE36F33E1CA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:8e:83:e6:28:3f:18:20:d7:68:81:5f:0a:19:
                    6c:8b:22:2f:19:83:e3:e2:52:da:13:8a:7a:c8:24:
                    48:c0:eb:87:b4:c2:e7:3d:51:b8:87:28:cf:37:4f:
                    cb:d3:4a:55:39:91:89:e1:4e:fd:13:8c:54:81:1c:
                    b4:27:48:66:2a:54:1f:7a:25:2e:66:a2:c9:2d:6e:
                    75:a6:2c:3d:eb:fd:90:cc:40:81:4b:c8:02:8d:58:
                    b1:d9:92:fc:ca:0d:0a:71:a7:73:f1:97:40:22:49:
                    ab:8a:38:a3:b1:34:bf:81:1e:31:9e:b0:4c:80:8f:
                    55:af:0b:98:1a:bd:3a:bc:f7:d5:a7:db:c7:b6:8a:
                    31:00:29:44:2b:91:ca:e6:e1:0a:c3:6d:47:5e:61:
                    41:61:48:a4:62:37:dd:22:70:33:85:90:33:2a:a9:
                    07:d4:2e:cd:8b:93:f9:ac:81:ca:68:39:af:90:c5:
                    dc:7b:9b:f9:43:d1:6a:7e:c6:92:35:89:c8:27:4f:
                    21:7c:ad:3c:1d:9e:73:26:7f:b6:28:ee:09:b5:1e:
                    1f:9e:be:40:42:0b:de:18:5b:a4:aa:43:61:b3:a6:
                    2f:fc:9b:28:ef:4c:f7:2c:4c:60:4f:35:88:49:ad:
                    5c:3c:61:88:1c:6b:b1:c6:34:b8:89:d6:a8:b9:86:
                    45:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:0E:D3:3F:BE:A9:C1:BF:CC:88:B2:D2:1F:97:EE:36:F3:3E:1C:A7
            X509v3 Authority Key Identifier:
                keyid:4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3134382e3232372e3232322e302f32342d3234203d3e203236363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.227.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:36:6c:70:44:6e:36:e6:95:cb:1d:f4:1a:3a:ee:2f:28:4a:
         4c:0d:09:0a:d3:31:a2:0c:b6:d4:64:df:13:93:c8:ea:f2:d3:
         bb:76:c2:ee:5c:7d:81:77:16:7b:08:bb:1d:44:87:e6:58:5d:
         9c:fe:b4:37:92:54:d5:1b:b6:8d:4a:36:14:ae:0e:f8:23:c8:
         61:89:ce:27:ba:e1:41:f8:c8:65:e5:b2:f6:9e:3e:da:1f:be:
         87:28:79:cb:0f:49:7a:41:e6:ac:6c:25:c1:2e:8c:7e:49:6d:
         08:c5:99:ad:5f:df:31:ce:62:0b:9d:7f:90:43:10:0e:26:bc:
         62:6c:e3:79:e2:0f:15:11:02:f6:ba:91:4a:16:8d:d7:8b:b7:
         d1:d7:3d:ad:52:f6:2e:0a:42:2c:41:a6:ba:8f:da:00:6c:d7:
         00:23:4b:dc:55:4b:18:8f:bb:80:23:74:dd:3f:2c:81:f0:31:
         84:b7:d9:1f:2d:6e:2b:1e:65:8d:ab:59:a0:af:06:17:ee:e8:
         81:d7:c9:67:21:fb:a6:8d:be:c6:4e:21:c7:b4:c9:32:d6:df:
         ad:c1:dd:13:11:3e:65:2d:43:f8:b2:b8:01:d4:36:51:e0:2d:
         b6:a8:5b:56:65:6c:c8:7b:d9:3b:17:8c:8c:c1:7f:0c:1a:bf:
         ac:c5:3a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 10 13:38:49 2026 by rpki-client