Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6888F0635BFCD890E69538C4F4480933B04941B21E1D85B156AF0B5CD685CFE1/0/3136312e3233382e3233352e302f32342d3234203d3e20323633373538.roa
File:                     3136312e3233382e3233352e302f32342d3234203d3e20323633373538.roa (raw, json)
Hash identifier:          DjomGlP9DaLtqR1u1pM8I/z4J/dI/hhJMPGo3VSp8Do=
Subject key identifier:   2A:95:70:2F:97:49:13:87:E1:46:7D:73:7A:45:90:EC:B4:AE:70:AA
Certificate issuer:       /CN=6AF2210EC798A4DD44D1A8A7F55D135CD13483E5
Certificate serial:       5DA82578E0B9DCE89D46027353469BB9A30BA75D
Authority key identifier: 6A:F2:21:0E:C7:98:A4:DD:44:D1:A8:A7:F5:5D:13:5C:D1:34:83:E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6AF2210EC798A4DD44D1A8A7F55D135CD13483E5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6888F0635BFCD890E69538C4F4480933B04941B21E1D85B156AF0B5CD685CFE1/0/3136312e3233382e3233352e302f32342d3234203d3e20323633373538.roa
Signing time:             Mon 18 May 2026 22:43:03 +0000
ROA not before:           Mon 18 May 2026 22:38:03 +0000
ROA not after:            Mon 17 May 2027 22:43:03 +0000
asID:                     263758
IP address blocks:        161.238.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6888F0635BFCD890E69538C4F4480933B04941B21E1D85B156AF0B5CD685CFE1/0/6AF2210EC798A4DD44D1A8A7F55D135CD13483E5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6888F0635BFCD890E69538C4F4480933B04941B21E1D85B156AF0B5CD685CFE1/0/6AF2210EC798A4DD44D1A8A7F55D135CD13483E5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6AF2210EC798A4DD44D1A8A7F55D135CD13483E5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:a8:25:78:e0:b9:dc:e8:9d:46:02:73:53:46:9b:b9:a3:0b:a7:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AF2210EC798A4DD44D1A8A7F55D135CD13483E5
        Validity
            Not Before: May 18 22:38:03 2026 GMT
            Not After : May 17 22:43:03 2027 GMT
        Subject: CN=2A95702F97491387E1467D737A4590ECB4AE70AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ed:3e:56:ea:9a:b8:c4:e6:f6:39:10:38:b3:
                    c6:d0:98:36:3b:01:85:8c:10:5d:75:a3:59:17:ee:
                    96:d4:4c:b9:04:22:a3:e4:93:b8:15:13:93:2d:94:
                    c6:dc:d5:60:a4:66:8e:cf:df:cd:16:30:94:b8:6c:
                    83:37:50:9e:7c:f4:a4:43:0c:73:32:b5:ee:b1:94:
                    27:83:e7:cd:bf:7b:db:b1:d6:d7:d9:e3:75:ba:8b:
                    2b:a5:63:ea:7f:28:fc:9e:9d:28:47:69:53:d6:50:
                    50:d6:12:61:23:83:98:51:6e:9b:57:3c:38:98:e6:
                    50:fa:a0:92:ed:56:3c:72:d1:df:a2:2e:2b:fd:7d:
                    9a:c3:67:aa:c9:31:8a:66:42:de:2d:bd:fb:7d:81:
                    0d:a7:46:fd:f6:a4:b5:2b:fb:90:11:4c:54:a5:3a:
                    b3:21:ef:99:49:4d:3d:c7:fa:49:00:84:be:09:ae:
                    8d:7c:12:3c:c7:b2:5e:f2:9c:3d:bb:d4:ed:bd:e6:
                    e8:2b:74:91:c0:c7:a2:9d:73:c7:39:8f:27:57:75:
                    14:a4:d2:da:c8:f6:87:f1:4c:38:fe:35:ff:4e:f2:
                    db:12:36:eb:16:bc:ad:3c:0e:97:8c:6d:b5:9c:6d:
                    dc:3d:4d:4e:60:ca:72:4d:3e:7e:77:95:cb:25:ab:
                    1b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:95:70:2F:97:49:13:87:E1:46:7D:73:7A:45:90:EC:B4:AE:70:AA
            X509v3 Authority Key Identifier:
                keyid:6A:F2:21:0E:C7:98:A4:DD:44:D1:A8:A7:F5:5D:13:5C:D1:34:83:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6888F0635BFCD890E69538C4F4480933B04941B21E1D85B156AF0B5CD685CFE1/0/6AF2210EC798A4DD44D1A8A7F55D135CD13483E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6AF2210EC798A4DD44D1A8A7F55D135CD13483E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6888F0635BFCD890E69538C4F4480933B04941B21E1D85B156AF0B5CD685CFE1/0/3136312e3233382e3233352e302f32342d3234203d3e20323633373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.238.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:7e:bd:d3:22:3c:b7:c8:dc:1d:c9:09:eb:b5:ec:28:06:4a:
         28:2f:80:f2:89:7a:9f:64:d5:49:6a:d9:d0:72:c9:a5:0d:07:
         dc:71:ab:e1:85:97:ec:5e:c7:c0:f5:23:1d:f2:bf:9d:9c:60:
         34:fb:19:df:88:dd:5e:0f:3a:bd:5d:48:69:b8:15:91:54:8d:
         f6:17:8c:c6:e4:de:57:d4:64:3c:60:86:ac:31:36:e2:83:8a:
         10:ab:e3:4a:ad:09:22:a0:9a:55:36:6a:28:79:7f:33:5f:9b:
         46:1b:9d:00:66:86:d3:72:74:3f:84:c3:1a:b8:ce:c9:b7:f3:
         2d:42:ea:e9:fd:35:16:e8:ec:87:3b:2e:d5:d4:bb:40:25:a7:
         34:30:22:5d:02:1b:f4:28:49:df:1c:b0:f7:67:b3:e6:b0:f6:
         ed:c8:a4:ce:71:57:f6:3c:05:15:60:60:34:9d:18:7b:c0:eb:
         cb:53:cf:4a:0b:9e:14:d8:8b:ad:c4:55:b6:48:bb:1d:11:a8:
         bf:d5:d0:84:23:8d:57:72:fe:80:99:ae:a3:a3:03:27:eb:93:
         96:99:64:f3:a7:71:f9:14:b1:88:18:c3:71:07:6f:6e:0b:40:
         aa:d5:50:07:9b:ae:f9:66:b9:ac:96:0d:af:ec:ba:62:4d:fc:
         e7:32:1d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:37:32 2026 by rpki-client