Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS269996.roa
File:                     AS269996.roa (raw, json)
Hash identifier:          2a/SNIz61ZJJErdzujdWh//ap3Sxc2I19+FfURL+4Bs=
Subject key identifier:   3F:DC:81:1E:BE:5B:1D:FE:7C:82:80:06:93:52:7E:B2:CC:27:14:20
Certificate issuer:       /CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
Certificate serial:       18F343B2CD8691CFCFC015CAE0979FDDB7D4DA6D
Authority key identifier: 41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS269996.roa
Signing time:             Mon 01 Sep 2025 14:15:00 +0000
ROA not before:           Mon 01 Sep 2025 14:10:00 +0000
ROA not after:            Mon 31 Aug 2026 14:15:00 +0000
asID:                     269996
IP address blocks:        186.56.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Sep 2025 23:39:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:f3:43:b2:cd:86:91:cf:cf:c0:15:ca:e0:97:9f:dd:b7:d4:da:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
        Validity
            Not Before: Sep  1 14:10:00 2025 GMT
            Not After : Aug 31 14:15:00 2026 GMT
        Subject: CN=3FDC811EBE5B1DFE7C82800693527EB2CC271420
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:43:e7:63:ad:d9:96:d9:3e:55:37:b5:5f:fe:
                    bc:8f:cb:24:07:e6:97:33:ed:36:03:82:ea:cc:d3:
                    bf:8b:7c:e1:2b:da:98:4f:2b:e6:84:c7:b0:6e:03:
                    72:ca:29:6b:22:23:9d:42:f0:46:1d:de:6a:3a:5c:
                    70:a9:3b:b7:57:f1:37:59:56:5d:4c:f6:24:34:f0:
                    0b:04:75:67:c5:42:4d:51:8e:e2:c4:f3:52:d7:69:
                    5b:a4:60:53:f7:c6:4a:77:57:f1:de:0e:b8:10:70:
                    dc:fa:ef:9a:0b:01:dd:ca:2d:12:56:9e:6c:80:7f:
                    43:aa:8c:4d:3b:fe:7f:60:ca:a3:17:fa:3a:b6:0b:
                    1e:a9:43:d3:85:88:e4:e0:ef:8c:29:73:74:32:07:
                    79:d1:b8:7d:04:85:2e:0f:3c:39:24:f2:f7:48:33:
                    75:39:ed:96:96:d8:91:7c:da:84:fa:3a:7a:75:a1:
                    60:c1:59:ca:d9:16:a7:34:44:51:54:75:ad:78:5d:
                    69:0a:65:55:86:f1:0b:09:eb:51:ce:8f:f4:6d:a6:
                    14:41:50:0f:26:27:89:e8:ec:f1:8c:35:b6:59:cd:
                    47:cd:03:4e:09:db:d9:4e:f0:c4:e9:a5:a8:46:b1:
                    0a:a4:5a:56:42:87:15:32:37:b7:a6:d4:b5:f5:8f:
                    85:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:DC:81:1E:BE:5B:1D:FE:7C:82:80:06:93:52:7E:B2:CC:27:14:20
            X509v3 Authority Key Identifier:
                keyid:41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS269996.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.56.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:9e:80:77:0a:ad:4e:7f:7f:f7:0f:ab:47:0f:23:dc:ae:82:
         d3:9f:d1:b2:72:7b:73:e2:8f:cc:40:cc:b5:e9:ad:4a:de:45:
         1e:a2:41:ee:c5:51:fc:71:3e:ff:d0:ab:b9:9b:dd:ad:b9:4b:
         0c:42:69:c0:01:04:b8:d6:25:5d:ff:f3:46:3c:44:f0:64:55:
         d3:61:49:06:f8:b1:0e:81:aa:da:74:b5:0b:80:97:97:89:b0:
         84:4f:49:fc:66:9a:98:b4:d4:ce:ec:00:35:24:47:a8:bf:8b:
         49:3d:b1:61:b1:d9:95:20:9d:c1:fd:70:f8:6c:8a:a8:22:82:
         56:8e:d8:f8:c6:a7:fc:0a:1a:2f:c4:86:b0:23:5b:d8:a1:e5:
         ff:18:dd:7b:8f:85:2e:57:01:b2:bf:2e:57:8c:14:f5:49:64:
         c0:f7:29:ff:b7:23:93:87:24:bf:80:8f:36:62:05:29:ee:fa:
         74:c8:da:c2:53:c5:db:13:17:62:24:52:ce:2c:6c:0f:1e:b4:
         ba:55:84:e1:22:2a:e3:96:0d:c2:8c:ac:35:04:d9:7a:34:79:
         14:e9:46:4f:97:0a:92:37:ae:d6:5c:97:67:37:e4:67:30:68:
         86:36:e5:9e:b8:e7:ad:5c:6c:01:29:e5:c9:78:14:7f:44:e6:
         6b:21:70:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 02:15:41 2025 by rpki-client