Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/73B6868E56B12C35C63B0AB763023F2508123C311CD7EF4F5161EF6D0A55299E/0/AS26613.roa
File:                     AS26613.roa (raw, json)
Hash identifier:          FQgJhAmjx6tsKkMuaV6MSTwmpRQ0QdhEI+H2KMvm2KI=
Subject key identifier:   34:03:DD:19:49:09:9C:8C:AA:EB:35:1D:30:CC:55:40:B4:70:3B:05
Certificate issuer:       /CN=B6F8E7D0BF951583E0959B2A92A8920330CEBE59
Certificate serial:       211BBB74A3EAAE23848DA3A067D35002BD1078FD
Authority key identifier: B6:F8:E7:D0:BF:95:15:83:E0:95:9B:2A:92:A8:92:03:30:CE:BE:59
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6F8E7D0BF951583E0959B2A92A8920330CEBE59.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/73B6868E56B12C35C63B0AB763023F2508123C311CD7EF4F5161EF6D0A55299E/0/AS26613.roa
Signing time:             Thu 27 Aug 2026 21:35:01 +0000
ROA not before:           Thu 27 Aug 2026 21:30:01 +0000
ROA not after:            Thu 26 Aug 2027 21:35:01 +0000
asID:                     26613
IP address blocks:        181.113.192.0/24 maxlen: 24
                          186.46.168.0/24 maxlen: 24
                          190.152.95.0/24 maxlen: 24
                          190.152.110.0/24 maxlen: 24
                          190.152.238.0/24 maxlen: 24
                          190.152.251.0/24 maxlen: 24
                          190.152.252.0/24 maxlen: 24
                          190.152.253.0/24 maxlen: 24
                          190.152.254.0/24 maxlen: 24
                          190.152.255.0/24 maxlen: 24
                          190.214.220.0/22 maxlen: 24
                          190.214.250.0/24 maxlen: 24
                          190.214.252.0/24 maxlen: 24
                          190.214.253.0/24 maxlen: 24
                          200.107.0.0/18 maxlen: 24
                          200.125.206.0/24 maxlen: 24
                          201.219.56.0/24 maxlen: 24
                          2800:370:4::/48 maxlen: 64
                          2800:370:18::/48 maxlen: 64
                          2800:370:2a::/48 maxlen: 64
                          2800:370:3e::/48 maxlen: 64
                          2800:370:4007::/48 maxlen: 64
                          2800:370:c000::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/73B6868E56B12C35C63B0AB763023F2508123C311CD7EF4F5161EF6D0A55299E/0/B6F8E7D0BF951583E0959B2A92A8920330CEBE59.crl
                          rsync://repository.lacnic.net/rpki/lacnic/73B6868E56B12C35C63B0AB763023F2508123C311CD7EF4F5161EF6D0A55299E/0/B6F8E7D0BF951583E0959B2A92A8920330CEBE59.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6F8E7D0BF951583E0959B2A92A8920330CEBE59.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Sep 2026 07:29:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:1b:bb:74:a3:ea:ae:23:84:8d:a3:a0:67:d3:50:02:bd:10:78:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6F8E7D0BF951583E0959B2A92A8920330CEBE59
        Validity
            Not Before: Aug 27 21:30:01 2026 GMT
            Not After : Aug 26 21:35:01 2027 GMT
        Subject: CN=3403DD1949099C8CAAEB351D30CC5540B4703B05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:50:24:e1:10:93:38:3c:a3:a5:3b:9c:df:94:
                    2a:fc:e2:16:e5:f4:06:4c:fd:9c:71:7d:0c:49:72:
                    a4:b8:73:6e:0f:42:40:00:f2:58:7e:57:8f:22:96:
                    10:00:70:2e:4e:ad:d1:5c:75:7c:7f:9f:8e:f9:33:
                    ac:0e:8b:93:27:68:4c:dd:2b:5e:8d:00:d4:f5:b1:
                    cb:03:b6:35:55:eb:e5:2d:f8:7c:0d:37:5c:40:fe:
                    de:ea:10:ca:fa:0d:99:93:45:d4:f5:d9:84:a3:40:
                    05:77:52:9d:55:1e:31:5c:3f:18:48:77:68:42:41:
                    36:59:31:2e:64:a2:3e:20:ee:da:29:86:db:99:e1:
                    b5:bb:39:75:c4:72:ef:4e:fb:fa:95:b3:eb:38:1a:
                    9e:53:12:50:8d:ca:cb:10:e3:8f:8a:e1:54:f4:ef:
                    78:ad:22:97:5e:86:1b:10:d4:28:95:31:20:ba:0a:
                    1c:75:7d:e1:8f:a9:da:22:4b:93:0c:01:42:5c:b7:
                    ac:86:03:58:98:ce:e2:0d:0b:c3:25:6d:6f:91:4f:
                    19:a1:1f:21:09:48:21:b5:c9:35:0a:13:8c:47:5b:
                    07:f4:99:5a:a7:f4:2e:e3:c3:50:9e:af:aa:6c:98:
                    f7:99:42:9e:75:4f:9c:e0:22:ef:d7:55:c5:bb:08:
                    56:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:03:DD:19:49:09:9C:8C:AA:EB:35:1D:30:CC:55:40:B4:70:3B:05
            X509v3 Authority Key Identifier:
                keyid:B6:F8:E7:D0:BF:95:15:83:E0:95:9B:2A:92:A8:92:03:30:CE:BE:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/73B6868E56B12C35C63B0AB763023F2508123C311CD7EF4F5161EF6D0A55299E/0/B6F8E7D0BF951583E0959B2A92A8920330CEBE59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6F8E7D0BF951583E0959B2A92A8920330CEBE59.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/73B6868E56B12C35C63B0AB763023F2508123C311CD7EF4F5161EF6D0A55299E/0/AS26613.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.113.192.0/24
                  186.46.168.0/24
                  190.152.95.0/24
                  190.152.110.0/24
                  190.152.238.0/24
                  190.152.251.0-190.152.255.255
                  190.214.220.0/22
                  190.214.250.0/24
                  190.214.252.0/23
                  200.107.0.0/18
                  200.125.206.0/24
                  201.219.56.0/24
                IPv6:
                  2800:370:4::/48
                  2800:370:18::/48
                  2800:370:2a::/48
                  2800:370:3e::/48
                  2800:370:4007::/48
                  2800:370:c000::/48

    Signature Algorithm: sha256WithRSAEncryption
         70:2d:26:e5:df:b0:c2:d2:40:e8:a3:3d:24:68:26:de:2d:e6:
         81:80:92:59:32:03:c7:00:41:b2:68:a4:4d:a8:62:2f:ae:73:
         18:08:cf:e4:38:eb:a5:bd:21:3c:ee:35:d5:c0:35:08:7b:a2:
         31:2b:b3:65:04:a0:c2:99:79:c3:5b:59:3b:39:bb:3c:31:9b:
         6d:37:2c:99:67:e3:81:7b:b8:75:83:42:a5:e3:06:cd:9e:8e:
         06:6a:27:f6:7f:d7:07:4b:c2:fe:7e:d2:ce:2d:82:23:5c:41:
         47:11:b6:a0:d8:ce:c6:4b:fe:25:f6:2d:31:4c:ce:98:8a:dd:
         b1:c0:63:3d:96:0e:63:78:1d:19:55:62:d3:a7:c7:d7:d8:1e:
         99:9d:6d:01:7b:41:2b:7e:a4:e1:a8:c1:07:68:c1:99:f3:d5:
         7f:81:a9:c1:ec:11:99:33:4a:c3:46:6c:d2:b1:54:d3:c9:b8:
         d3:d8:24:ed:43:d6:c7:20:7a:c0:2e:12:b7:02:d0:8d:36:42:
         10:bc:33:47:1f:f9:f8:ba:c7:b6:77:7f:70:be:91:9b:a2:b1:
         48:b4:95:e1:76:30:7c:5b:28:aa:d2:bc:8a:4f:3d:e8:40:5d:
         6f:27:af:56:f2:1e:5e:42:6d:bd:fc:17:c2:a0:18:e3:f2:db:
         b5:9a:7d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 14 17:59:10 2026 by rpki-client