Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6888F0635BFCD890E69538C4F4480933B04941B21E1D85B156AF0B5CD685CFE1/0/3136312e3233382e3233362e302f32342d3234203d3e20323633373538.roa
File:                     3136312e3233382e3233362e302f32342d3234203d3e20323633373538.roa (raw, json)
Hash identifier:          TlsjOHvwoXxCgXxnuFLcI4dPX+idIiQYW0qIFppB0XU=
Subject key identifier:   30:0D:E8:5E:12:BD:10:B6:1D:2E:63:EF:E2:7C:08:54:E0:56:DF:E8
Certificate issuer:       /CN=6AF2210EC798A4DD44D1A8A7F55D135CD13483E5
Certificate serial:       6F9E0566E13548B305D3BAFDEC28757052A0A1AE
Authority key identifier: 6A:F2:21:0E:C7:98:A4:DD:44:D1:A8:A7:F5:5D:13:5C:D1:34:83:E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6AF2210EC798A4DD44D1A8A7F55D135CD13483E5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6888F0635BFCD890E69538C4F4480933B04941B21E1D85B156AF0B5CD685CFE1/0/3136312e3233382e3233362e302f32342d3234203d3e20323633373538.roa
Signing time:             Mon 18 May 2026 22:43:03 +0000
ROA not before:           Mon 18 May 2026 22:38:03 +0000
ROA not after:            Mon 17 May 2027 22:43:03 +0000
asID:                     263758
IP address blocks:        161.238.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6888F0635BFCD890E69538C4F4480933B04941B21E1D85B156AF0B5CD685CFE1/0/6AF2210EC798A4DD44D1A8A7F55D135CD13483E5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6888F0635BFCD890E69538C4F4480933B04941B21E1D85B156AF0B5CD685CFE1/0/6AF2210EC798A4DD44D1A8A7F55D135CD13483E5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6AF2210EC798A4DD44D1A8A7F55D135CD13483E5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:9e:05:66:e1:35:48:b3:05:d3:ba:fd:ec:28:75:70:52:a0:a1:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AF2210EC798A4DD44D1A8A7F55D135CD13483E5
        Validity
            Not Before: May 18 22:38:03 2026 GMT
            Not After : May 17 22:43:03 2027 GMT
        Subject: CN=300DE85E12BD10B61D2E63EFE27C0854E056DFE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:62:d9:45:65:7b:28:44:07:36:61:e2:2a:e6:
                    19:8e:de:80:6c:b7:d8:29:00:29:e3:51:48:52:45:
                    7b:a2:0d:ac:c1:df:3f:cb:6b:50:76:3e:96:d2:ed:
                    02:d4:0d:90:da:be:d2:ad:aa:00:b4:63:33:94:d2:
                    b1:e5:f6:ac:d9:23:05:ac:33:81:3c:a5:a4:93:dc:
                    81:9f:35:43:5c:0a:a0:ce:10:fd:08:02:0a:a0:d7:
                    4a:a8:8b:46:52:58:40:ed:dd:be:1f:0e:8a:04:ee:
                    80:04:39:2b:8e:80:b3:2a:27:37:b4:ce:20:0d:83:
                    9b:6d:3e:40:b6:64:34:a1:a2:e6:a1:41:29:ca:ea:
                    c0:c9:92:7f:42:f2:be:eb:54:57:57:ec:b3:9e:6d:
                    50:9a:b9:f4:15:20:80:ad:37:4b:e3:7f:35:ef:93:
                    40:f6:ad:1f:82:d4:62:3f:f9:f6:e4:cc:1c:a8:82:
                    65:8b:61:16:ad:d7:75:59:ac:4b:cc:c1:78:8e:17:
                    7b:9b:e1:21:1c:95:b5:65:e1:97:66:07:73:19:1d:
                    50:ef:11:5f:2f:a0:bc:f0:99:a3:55:af:2f:60:42:
                    83:f9:0c:a5:24:38:96:e9:b7:9b:17:51:db:27:e6:
                    14:b6:51:61:d1:f6:2f:d4:77:c9:f8:15:41:ae:dd:
                    ee:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:0D:E8:5E:12:BD:10:B6:1D:2E:63:EF:E2:7C:08:54:E0:56:DF:E8
            X509v3 Authority Key Identifier:
                keyid:6A:F2:21:0E:C7:98:A4:DD:44:D1:A8:A7:F5:5D:13:5C:D1:34:83:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6888F0635BFCD890E69538C4F4480933B04941B21E1D85B156AF0B5CD685CFE1/0/6AF2210EC798A4DD44D1A8A7F55D135CD13483E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6AF2210EC798A4DD44D1A8A7F55D135CD13483E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6888F0635BFCD890E69538C4F4480933B04941B21E1D85B156AF0B5CD685CFE1/0/3136312e3233382e3233362e302f32342d3234203d3e20323633373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.238.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:c1:bb:f1:09:fc:e6:64:47:98:4d:1f:8d:ba:0e:bb:48:f6:
         5a:ca:e7:5a:c4:5f:cb:f8:28:3c:86:68:4b:8f:df:4a:97:b5:
         a5:60:d6:c7:64:97:36:5e:35:1e:0d:26:17:5b:45:b0:ce:4d:
         cc:78:9a:d7:a7:bf:1a:b8:18:10:41:a6:46:b0:be:37:39:88:
         28:2a:4e:c6:dd:25:27:d1:92:ae:33:99:11:1e:61:85:92:be:
         68:7a:b6:53:a5:a8:10:f6:12:4c:a9:50:22:84:01:81:ad:4c:
         1a:d8:f7:91:32:bc:74:22:b5:e6:13:6f:e7:11:38:e0:51:a5:
         0c:be:0d:59:18:06:42:39:97:04:04:0a:6b:10:0c:55:67:a3:
         67:5d:f5:c5:11:4c:d4:7e:6c:be:fc:02:70:e5:7b:09:33:3f:
         f7:54:e8:4a:6e:b5:4a:e6:bf:d4:c1:27:2d:cf:e7:09:0a:b5:
         4d:07:48:bf:90:16:a7:b2:ed:1a:c2:5e:e4:b0:90:74:2a:89:
         a3:77:47:19:f0:1b:cb:04:1e:ea:0c:d2:cf:6d:b5:3d:53:df:
         da:47:6c:e5:96:16:ff:54:2f:57:a9:3e:63:0e:e0:b4:6f:60:
         0d:a3:28:f3:5f:38:23:09:f6:53:e0:eb:27:6b:53:04:74:ab:
         d2:aa:9c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:37:32 2026 by rpki-client