Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS267786.roa
File:                     AS267786.roa (raw, json)
Hash identifier:          JlghybzdFlOiqjlWmgoCs3MPxkejQa7yaYtTeTxMJ0E=
Subject key identifier:   9D:4C:58:6B:23:DD:AA:DA:FA:DC:19:6C:F5:31:D3:07:DA:C8:1D:B1
Certificate issuer:       /CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
Certificate serial:       38C7C2AC87B18213D633E4A3AE6D9D89BC9666DA
Authority key identifier: 41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS267786.roa
Signing time:             Wed 30 Sep 2026 17:37:30 +0000
ROA not before:           Wed 30 Sep 2026 17:32:30 +0000
ROA not after:            Wed 29 Sep 2027 17:37:30 +0000
asID:                     267786
IP address blocks:        186.38.99.0/24 maxlen: 24
                          201.251.136.128/25 maxlen: 25
                          201.251.146.0/24 maxlen: 24
                          201.251.160.128/25 maxlen: 25
                          201.251.206.0/24 maxlen: 24
                          201.251.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 16:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:c7:c2:ac:87:b1:82:13:d6:33:e4:a3:ae:6d:9d:89:bc:96:66:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
        Validity
            Not Before: Sep 30 17:32:30 2026 GMT
            Not After : Sep 29 17:37:30 2027 GMT
        Subject: CN=9D4C586B23DDAADAFADC196CF531D307DAC81DB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:8d:f4:cc:65:65:5e:0a:e1:63:e8:59:14:ae:
                    95:eb:0b:ed:b7:93:45:2c:47:f2:bc:a5:a1:f8:ac:
                    a8:aa:63:b6:8e:bd:3d:79:5a:2d:ee:7e:91:05:bb:
                    41:02:ec:b4:4d:76:c7:61:9a:bd:5b:c5:3e:f3:ee:
                    be:3a:69:15:c7:16:9b:76:92:3c:ce:44:15:1d:f1:
                    8f:1c:b2:ec:82:2c:a3:0e:a5:bc:9b:4f:b6:f7:45:
                    91:27:37:96:7b:86:1f:84:f6:26:c7:88:25:51:38:
                    33:54:a7:9b:31:66:b4:9e:2b:de:2d:75:93:52:03:
                    da:7f:7d:a7:f7:59:9a:67:c5:65:e5:1a:ad:c9:2d:
                    1f:2b:05:95:22:df:69:50:08:ac:79:9f:55:65:23:
                    f4:a0:80:4c:23:25:63:30:31:9d:48:6e:e9:e6:1a:
                    82:9a:55:6d:e8:e7:28:57:87:35:43:3e:a8:07:4d:
                    2c:2f:42:1d:89:77:3e:ba:99:c0:83:09:81:20:1d:
                    bb:9b:34:29:3c:c8:86:6e:15:5a:a0:86:40:cf:5d:
                    d6:03:41:1b:2f:92:1e:fa:e2:8d:ed:6c:bf:92:7c:
                    2e:6c:38:3d:a5:91:ac:04:03:e8:5b:49:27:90:8f:
                    1a:e9:b6:ac:23:3d:cb:62:46:61:19:8f:b0:48:03:
                    d2:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:4C:58:6B:23:DD:AA:DA:FA:DC:19:6C:F5:31:D3:07:DA:C8:1D:B1
            X509v3 Authority Key Identifier:
                keyid:41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS267786.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.38.99.0/24
                  201.251.136.128/25
                  201.251.146.0/24
                  201.251.160.128/25
                  201.251.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         73:03:30:f5:10:c1:85:e9:72:f8:3f:60:55:75:e6:c3:36:42:
         fd:3b:b5:a6:41:7c:31:92:62:ac:86:63:49:8e:db:cb:c6:41:
         bc:ce:ed:b2:ee:69:c9:1a:b1:d9:14:97:e2:a3:42:a6:be:89:
         12:69:a0:ce:75:9d:81:a6:32:6b:be:3b:5c:1c:b8:4e:db:03:
         dd:21:5c:ac:ff:3a:19:59:ec:ad:d3:7e:c7:c3:f1:3e:ce:bd:
         d0:77:8b:ca:6e:c6:b2:4c:6f:6f:f1:dc:fc:77:94:c0:dd:a0:
         dc:25:fd:84:5a:f5:77:49:fa:77:8d:9e:26:2d:d7:ec:77:ec:
         ba:88:d2:39:fd:be:9f:00:3c:91:ff:73:1f:6a:c7:49:d3:48:
         5e:71:85:08:88:86:13:76:b8:e6:48:83:47:5f:7e:b0:74:de:
         f1:2e:36:47:a3:de:1b:39:39:58:b6:e2:c7:f7:c4:38:d1:a4:
         ea:df:ec:ad:4e:ce:0e:c5:06:36:dd:25:70:d5:93:5a:79:a5:
         da:e5:2e:2b:9c:11:30:c6:33:ae:f1:e6:75:ef:8b:37:e8:be:
         4d:ed:11:48:2d:3c:20:60:97:63:86:cc:c2:94:e1:1d:20:08:
         dc:a0:b7:d7:48:61:16:22:74:a3:26:bb:d8:3d:b1:6f:b3:b8:
         51:5b:5c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:32:48 2026 by rpki-client