Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/8B5CCFD453A229B9F6C4385704CBADA93C76B2F2844CCD556677C12D8C7A97C1/0/3138392e34352e3137362e302f32332d3233203d3e20323639393738.roa
File:                     3138392e34352e3137362e302f32332d3233203d3e20323639393738.roa (raw, json)
Hash identifier:          u6ykeUjjSnqbWq8U3pNAt6gDUG6YVxpIlasA46drP6o=
Subject key identifier:   9A:4E:47:6B:E6:20:66:9A:C7:8E:D2:A6:64:9A:27:23:36:FA:58:B1
Certificate issuer:       /CN=6A3360A7AAF500169AA1D3966EF9EDFA825A544E
Certificate serial:       510DD4D3191F70823D6B5921A13E6E120F8D64C9
Authority key identifier: 6A:33:60:A7:AA:F5:00:16:9A:A1:D3:96:6E:F9:ED:FA:82:5A:54:4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A3360A7AAF500169AA1D3966EF9EDFA825A544E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8B5CCFD453A229B9F6C4385704CBADA93C76B2F2844CCD556677C12D8C7A97C1/0/3138392e34352e3137362e302f32332d3233203d3e20323639393738.roa
Signing time:             Tue 27 Oct 2026 23:43:18 +0000
ROA not before:           Tue 27 Oct 2026 23:38:18 +0000
ROA not after:            Tue 26 Oct 2027 23:43:18 +0000
asID:                     269978
IP address blocks:        189.45.176.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8B5CCFD453A229B9F6C4385704CBADA93C76B2F2844CCD556677C12D8C7A97C1/0/6A3360A7AAF500169AA1D3966EF9EDFA825A544E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8B5CCFD453A229B9F6C4385704CBADA93C76B2F2844CCD556677C12D8C7A97C1/0/6A3360A7AAF500169AA1D3966EF9EDFA825A544E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A3360A7AAF500169AA1D3966EF9EDFA825A544E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 15:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:0d:d4:d3:19:1f:70:82:3d:6b:59:21:a1:3e:6e:12:0f:8d:64:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A3360A7AAF500169AA1D3966EF9EDFA825A544E
        Validity
            Not Before: Oct 27 23:38:18 2026 GMT
            Not After : Oct 26 23:43:18 2027 GMT
        Subject: CN=9A4E476BE620669AC78ED2A6649A272336FA58B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:47:30:13:81:fe:cc:fd:57:74:86:fe:4e:2b:
                    87:e4:a4:c5:ad:76:e9:f7:4e:31:79:7a:88:8b:fe:
                    c2:77:f4:a8:8a:48:25:08:c5:78:4d:ec:11:94:c5:
                    09:88:30:14:84:92:fb:2e:94:e2:72:8d:d5:88:b1:
                    06:1e:83:c7:e7:6b:85:6b:4a:58:d1:17:c5:6c:2f:
                    5c:a9:1e:f2:cf:e6:e8:85:e2:f9:81:de:63:52:df:
                    d7:c0:ee:17:1e:a8:81:72:c0:a3:96:25:54:f6:91:
                    02:f1:fc:ca:37:73:c4:62:9a:39:7c:f9:ea:23:b4:
                    68:ca:2c:94:f0:b6:29:dd:94:8c:f6:b8:e0:d7:fe:
                    da:08:62:8d:a0:5e:f1:3d:0d:78:ad:58:6d:33:ac:
                    ab:fa:44:02:55:15:bc:bc:62:6f:1d:fc:b7:65:6a:
                    0f:e6:0f:73:30:62:c7:e9:e1:a2:ca:b3:9e:b8:1d:
                    2d:75:be:e6:8c:82:5c:eb:0d:e7:39:b7:bc:a2:23:
                    b5:53:0e:f0:90:5a:ad:98:a3:90:df:c8:3e:1f:da:
                    13:a6:e0:95:5a:5e:70:e1:9a:c3:8c:69:07:82:f4:
                    d3:17:47:8d:87:4b:e7:4f:ae:07:54:35:53:1c:4d:
                    bb:b9:af:79:77:e6:6e:ac:30:93:f4:12:5d:02:a5:
                    bd:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:4E:47:6B:E6:20:66:9A:C7:8E:D2:A6:64:9A:27:23:36:FA:58:B1
            X509v3 Authority Key Identifier:
                keyid:6A:33:60:A7:AA:F5:00:16:9A:A1:D3:96:6E:F9:ED:FA:82:5A:54:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8B5CCFD453A229B9F6C4385704CBADA93C76B2F2844CCD556677C12D8C7A97C1/0/6A3360A7AAF500169AA1D3966EF9EDFA825A544E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A3360A7AAF500169AA1D3966EF9EDFA825A544E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8B5CCFD453A229B9F6C4385704CBADA93C76B2F2844CCD556677C12D8C7A97C1/0/3138392e34352e3137362e302f32332d3233203d3e20323639393738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.45.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a3:9a:89:d2:c5:98:44:d2:01:e6:94:00:7c:e3:3f:f4:b9:c8:
         28:25:0e:4c:8f:71:d2:0e:91:f6:9f:9e:e7:72:d8:ea:57:47:
         21:9c:41:f0:d2:4b:b5:d8:1d:36:a4:f8:34:54:d4:52:83:7a:
         61:8f:9e:2b:55:14:ed:64:f8:ca:33:e2:a0:48:18:56:64:16:
         f8:86:94:98:dc:d6:f1:52:26:3d:6a:9c:41:64:da:a5:ce:41:
         a3:28:6e:7c:1d:7f:51:6f:dc:9c:71:58:0b:5e:4b:5d:00:bd:
         02:47:5f:e7:71:07:5e:fb:a2:10:f3:fe:b4:82:1a:59:74:13:
         a9:75:e0:b7:b7:01:91:0d:0d:fa:81:80:2c:bd:24:63:e4:e3:
         11:fd:e4:81:4b:12:18:ec:6e:1f:1f:b3:bc:86:34:cf:79:63:
         18:90:d2:b6:2d:1a:47:af:58:04:92:4f:96:eb:ed:58:84:e6:
         ac:68:2f:2b:b1:5f:8d:c7:ab:27:52:db:40:4d:6b:4e:81:dc:
         54:75:ac:2d:a6:84:66:d8:55:6f:ae:97:ca:46:ff:98:fd:63:
         52:7b:ef:62:e3:9f:12:23:1c:c9:f9:9f:af:35:4c:92:f7:fb:
         0f:0e:36:36:bf:f1:62:73:04:c1:52:9a:dd:21:d0:a1:7f:df:
         97:d3:29:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:47:24 2026 by rpki-client