Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/AS262199.roa
File:                     AS262199.roa (raw, json)
Hash identifier:          U3ZZ9wS6SwCcBNLtzaZCFaoWAI2if/vZR0EmHgogr5M=
Subject key identifier:   64:D4:D0:D4:A8:AD:CC:37:02:64:4D:42:27:0F:64:BA:42:53:32:7C
Certificate issuer:       /CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
Certificate serial:       6A347FFCF8E4AB7CEC99F93A097298C4E7E88A3B
Authority key identifier: 76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/AS262199.roa
Signing time:             Tue 02 Jun 2026 17:45:40 +0000
ROA not before:           Tue 02 Jun 2026 17:40:40 +0000
ROA not after:            Tue 01 Jun 2027 17:45:40 +0000
asID:                     262199
IP address blocks:        190.242.121.0/24 maxlen: 24
                          190.242.148.0/22 maxlen: 22
                          190.242.158.0/23 maxlen: 24
                          190.242.160.0/23 maxlen: 24
                          190.242.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl
                          rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 12:46:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:34:7f:fc:f8:e4:ab:7c:ec:99:f9:3a:09:72:98:c4:e7:e8:8a:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
        Validity
            Not Before: Jun  2 17:40:40 2026 GMT
            Not After : Jun  1 17:45:40 2027 GMT
        Subject: CN=64D4D0D4A8ADCC3702644D42270F64BA4253327C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:61:33:0f:34:a3:92:51:bd:58:5b:4a:f5:7a:
                    14:55:85:22:43:22:17:a1:03:64:7a:28:50:eb:27:
                    20:a3:2a:d2:9c:94:98:9d:98:e9:53:bd:df:7f:13:
                    e6:2a:72:e7:0c:34:cb:4d:2c:e2:89:42:08:2c:ed:
                    57:3b:9b:5c:3c:5d:01:7a:93:bd:d2:33:1f:a9:06:
                    06:4d:53:3f:fc:42:da:e9:b2:3a:3b:5c:ef:4c:02:
                    b7:a0:b7:4d:19:9c:ee:9c:02:71:34:eb:bb:16:5f:
                    41:5c:3e:5a:5b:ef:b4:a7:b0:99:e5:59:95:8d:0f:
                    29:a7:4a:38:a0:21:fb:8f:57:36:25:b8:31:77:90:
                    c5:a4:a3:cf:e2:53:7b:d4:5b:5f:8e:dc:15:8c:ef:
                    f5:ce:b2:10:90:57:ba:af:06:a3:ea:bc:bd:db:54:
                    81:1f:e5:aa:fb:d5:12:b1:2b:a5:d5:8e:64:b3:3f:
                    65:96:58:d5:81:c1:c9:bf:21:3b:d9:41:bb:52:67:
                    f4:3f:3d:47:05:9e:b3:33:6c:d8:23:83:3a:e5:a7:
                    7c:f0:4a:6c:0a:c9:ee:d2:5a:db:bd:d6:59:3f:77:
                    57:c1:b6:5b:aa:82:71:6e:86:c6:cf:00:bf:a5:c3:
                    94:81:7f:bd:bc:2c:d7:ef:dc:12:2b:49:31:82:e3:
                    46:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:D4:D0:D4:A8:AD:CC:37:02:64:4D:42:27:0F:64:BA:42:53:32:7C
            X509v3 Authority Key Identifier:
                keyid:76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/AS262199.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.242.121.0/24
                  190.242.148.0/22
                  190.242.158.0-190.242.162.255

    Signature Algorithm: sha256WithRSAEncryption
         1d:fe:b0:e6:39:53:f7:c6:c5:a2:b2:74:e3:32:82:01:03:35:
         ae:05:2c:19:cb:d8:52:7e:27:75:de:1e:23:fb:da:75:73:5c:
         31:b4:c4:a2:6f:af:2a:8c:3d:11:b3:98:ca:5b:f4:34:7d:33:
         81:01:16:d1:a2:f6:32:51:4c:93:5f:e8:16:85:b0:36:50:b3:
         e6:d2:fe:e0:33:aa:9d:b5:c2:66:13:e0:56:59:5b:74:81:7d:
         76:c0:9c:7a:e2:d9:2f:10:30:7e:14:1c:3a:f8:6c:8d:55:f0:
         b3:ca:98:6e:dc:86:70:2c:2d:b6:68:20:33:b1:f8:98:5e:c5:
         fd:24:53:15:9b:d0:0a:ef:c1:72:b4:c2:2a:e8:9b:40:4d:a2:
         cd:5c:e5:9e:e0:5e:5b:0e:dd:d4:97:6c:81:16:7e:2a:68:1b:
         f5:01:12:36:5b:00:46:64:03:84:5b:aa:1b:dd:89:ea:6c:55:
         94:72:a2:58:f6:89:f6:d2:32:56:68:71:6b:b1:f8:ed:a9:6b:
         3f:1a:9b:4c:c0:95:b8:28:fb:de:f0:8e:71:ff:d0:28:a1:02:
         f5:15:f4:93:23:1d:4f:14:d1:0d:d0:9a:79:3c:30:41:fb:c7:
         8b:09:c1:5d:51:9e:83:f9:e1:bb:85:ab:5d:c8:5e:7a:a1:6f:
         fe:f4:56:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 14:40:15 2026 by rpki-client