Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/764DD1F59D8F65A00A5F675707B94E718E636E338FE33C9C37048913E79F1614/0/322e3135322e3234382e302f32342d3234203d3e20323734393233.roa
File:                     322e3135322e3234382e302f32342d3234203d3e20323734393233.roa (raw, json)
Hash identifier:          M8yNRS7Qm2i3f0htPyO0cKKrmRDAsOQBNnmshgy8TiI=
Subject key identifier:   AA:89:3E:7A:A3:B6:47:1C:8F:48:91:51:2C:21:DC:BA:B3:90:98:1C
Certificate issuer:       /CN=A6EB6D9EC3209ED47407051C9C736B980904A8A3
Certificate serial:       77031E81CE94878C22BD73140E0CEFA5C6689540
Authority key identifier: A6:EB:6D:9E:C3:20:9E:D4:74:07:05:1C:9C:73:6B:98:09:04:A8:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6EB6D9EC3209ED47407051C9C736B980904A8A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/764DD1F59D8F65A00A5F675707B94E718E636E338FE33C9C37048913E79F1614/0/322e3135322e3234382e302f32342d3234203d3e20323734393233.roa
Signing time:             Wed 12 Aug 2026 13:50:00 +0000
ROA not before:           Wed 12 Aug 2026 13:45:00 +0000
ROA not after:            Wed 11 Aug 2027 13:50:00 +0000
asID:                     274923
IP address blocks:        2.152.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/764DD1F59D8F65A00A5F675707B94E718E636E338FE33C9C37048913E79F1614/0/A6EB6D9EC3209ED47407051C9C736B980904A8A3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/764DD1F59D8F65A00A5F675707B94E718E636E338FE33C9C37048913E79F1614/0/A6EB6D9EC3209ED47407051C9C736B980904A8A3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6EB6D9EC3209ED47407051C9C736B980904A8A3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 07:02:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:03:1e:81:ce:94:87:8c:22:bd:73:14:0e:0c:ef:a5:c6:68:95:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6EB6D9EC3209ED47407051C9C736B980904A8A3
        Validity
            Not Before: Aug 12 13:45:00 2026 GMT
            Not After : Aug 11 13:50:00 2027 GMT
        Subject: CN=AA893E7AA3B6471C8F4891512C21DCBAB390981C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a8:1c:68:6a:12:d7:fb:6a:a6:88:46:19:a2:
                    18:9d:2f:6e:91:b7:0d:4c:5a:d2:60:4e:68:2f:b8:
                    7f:f1:e3:18:81:91:1f:c8:aa:d7:4d:da:e0:d9:05:
                    c9:27:e9:db:bd:41:e5:d9:81:29:56:6b:eb:6e:02:
                    14:d2:15:37:7b:f9:48:a4:77:45:05:61:aa:40:85:
                    11:f3:aa:2d:10:45:6e:2f:08:6f:e2:e3:93:c0:1f:
                    8a:69:88:5a:60:55:1c:90:c3:c1:5d:fe:c8:51:6a:
                    bb:1e:9a:29:a8:57:6d:e6:8a:d6:e1:e0:fa:bc:81:
                    03:03:7a:b7:26:2e:c6:f4:32:25:50:cb:12:a2:91:
                    e3:55:0b:4d:a3:ca:af:d7:2d:ad:3f:d2:40:ca:f3:
                    c4:56:7e:1a:3c:37:c2:85:55:0a:9f:50:11:6c:a7:
                    48:ea:03:3a:3a:bd:b7:3d:cb:e9:9a:14:80:85:cb:
                    11:f9:76:b1:c9:9a:a9:3a:3b:14:7b:f0:bd:94:ba:
                    28:aa:5c:f3:f2:b0:1f:28:f2:a2:ac:f8:10:9c:35:
                    16:8e:3b:3f:93:65:8f:ab:2c:3a:05:d4:cf:ce:e1:
                    48:51:b0:18:03:07:0c:f6:b7:93:d7:fb:d4:ad:1b:
                    a3:af:7d:34:77:1b:71:98:02:c0:60:0f:bc:16:1d:
                    b0:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:89:3E:7A:A3:B6:47:1C:8F:48:91:51:2C:21:DC:BA:B3:90:98:1C
            X509v3 Authority Key Identifier:
                keyid:A6:EB:6D:9E:C3:20:9E:D4:74:07:05:1C:9C:73:6B:98:09:04:A8:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/764DD1F59D8F65A00A5F675707B94E718E636E338FE33C9C37048913E79F1614/0/A6EB6D9EC3209ED47407051C9C736B980904A8A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6EB6D9EC3209ED47407051C9C736B980904A8A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/764DD1F59D8F65A00A5F675707B94E718E636E338FE33C9C37048913E79F1614/0/322e3135322e3234382e302f32342d3234203d3e20323734393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.152.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:ff:03:25:0d:95:f0:d5:9d:e2:aa:63:54:95:97:49:55:4e:
         fb:c7:63:b5:3a:a8:07:b7:ee:67:ea:a0:e9:b2:1e:1d:bd:db:
         0d:9c:61:95:9d:03:71:e1:4f:a7:37:07:a6:c4:8a:c5:66:e5:
         f4:92:c1:2e:f5:fc:ee:72:56:e7:93:6a:0f:54:fb:a8:cc:42:
         40:4e:2f:e6:a4:da:35:52:b9:a3:31:cd:ac:dc:ea:bf:70:79:
         f9:21:4f:5b:7c:57:f1:ba:76:ea:b0:95:ed:68:4e:77:60:9b:
         b9:59:38:ef:89:c4:c0:f3:89:b1:f9:9f:83:97:25:86:fb:44:
         f6:93:8a:86:ce:51:70:a3:a9:d9:59:da:0a:fb:5d:39:52:0f:
         af:af:ec:b8:1a:a4:c5:8c:fc:77:7f:35:c5:1d:3a:72:9e:e1:
         38:ce:c5:24:8e:cb:d5:72:c3:d7:be:da:73:68:06:59:13:ff:
         f0:25:04:57:de:39:0c:a7:bb:8a:22:5a:9d:ab:5a:2e:85:a7:
         fa:83:60:8b:c8:b5:70:f9:54:bd:1e:ee:37:45:70:aa:70:f5:
         4d:bb:a6:e9:b5:6c:a9:dc:57:06:db:4e:e0:1c:ce:d7:de:3f:
         13:11:6d:28:f4:96:62:a3:21:59:f5:96:f5:2e:d0:6e:90:39:
         f1:71:f5:56
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUdwMegc6Uh4wivXMUDgzvpcZolUAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTZFQjZEOUVDMzIwOUVENDc0MDcwNTFDOUM3MzZCOTgw
OTA0QThBMzAeFw0yNjA4MTIxMzQ1MDBaFw0yNzA4MTExMzUwMDBaMDMxMTAvBgNV
BAMTKEFBODkzRTdBQTNCNjQ3MUM4RjQ4OTE1MTJDMjFEQ0JBQjM5MDk4MUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnqBxoahLX+2qmiEYZohidL26R
tw1MWtJgTmgvuH/x4xiBkR/IqtdN2uDZBckn6du9QeXZgSlWa+tuAhTSFTd7+Uik
d0UFYapAhRHzqi0QRW4vCG/i45PAH4ppiFpgVRyQw8Fd/shRarsemimoV23mitbh
4Pq8gQMDercmLsb0MiVQyxKikeNVC02jyq/XLa0/0kDK88RWfho8N8KFVQqfUBFs
p0jqAzo6vbc9y+maFICFyxH5drHJmqk6OxR78L2UuiiqXPPysB8o8qKs+BCcNRaO
Oz+TZY+rLDoF1M/O4UhRsBgDBwz2t5PX+9StG6OvfTR3G3GYAsBgD7wWHbBLAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUqok+eqO2RxyPSJFRLCHcurOQmBwwHwYDVR0j
BBgwFoAUputtnsMgntR0BwUcnHNrmAkEqKMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83NjRERDFGNTlEOEY2NUEwMEE1RjY3NTcwN0I5NEU3MThF
NjM2RTMzOEZFMzNDOUMzNzA0ODkxM0U3OUYxNjE0LzAvQTZFQjZEOUVDMzIwOUVE
NDc0MDcwNTFDOUM3MzZCOTgwOTA0QThBMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BNkVCNkQ5RUMzMjA5RUQ0NzQw
NzA1MUM5QzczNkI5ODA5MDRBOEEzLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzY0REQxRjU5RDhGNjVBMDBBNUY2NzU3MDdCOTRFNzE4RTYzNkUzMzhG
RTMzQzlDMzcwNDg5MTNFNzlGMTYxNC8wLzMyMmUzMTM1MzIyZTMyMzQzODJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzczNDM5MzIzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAAKY+DAN
BgkqhkiG9w0BAQsFAAOCAQEAYf8DJQ2V8NWd4qpjVJWXSVVO+8djtTqoB7fuZ+qg
6bIeHb3bDZxhlZ0DceFPpzcHpsSKxWbl9JLBLvX87nJW55NqD1T7qMxCQE4v5qTa
NVK5ozHNrNzqv3B5+SFPW3xX8bp26rCV7WhOd2CbuVk474nEwPOJsfmfg5clhvtE
9pOKhs5RcKOp2VnaCvtdOVIPr6/suBqkxYz8d381xR06cp7hOM7FJI7L1XLD177a
c2gGWRP/8CUEV945DKe7iiJanataLoWn+oNgi8i1cPlUvR7uN0VwqnD1Tbum6bVs
qdxXBttO4BzO194/ExFtKPSWYqMhWfWW9S7QbpA58XH1Vg==
-----END CERTIFICATE-----
Generated at Fri Sep 18 20:05:13 2026 by rpki-client