Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/9B53C7950BBE656EF7F2EC865AA04CF91DC6A83A8DAB1AF2DAF457FB1F0DB562/0/3138372e3235312e36342e302f31392d3234203d3e203238343538.roa
File:                     3138372e3235312e36342e302f31392d3234203d3e203238343538.roa (raw, json)
Hash identifier:          sAiJftXwI9lRZSO+fofxGoR2Z6SunJk+cdYzu8n1uxg=
Subject key identifier:   58:32:26:EF:CB:61:63:44:79:02:EE:D4:5F:3D:55:E4:18:87:FD:E1
Certificate issuer:       /CN=ABF23E4AFAADE37425B619826C8E00E07EE26BEF
Certificate serial:       6248A8880C2463DCB03DFDF214CFC0ACC19AAD5B
Authority key identifier: AB:F2:3E:4A:FA:AD:E3:74:25:B6:19:82:6C:8E:00:E0:7E:E2:6B:EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ABF23E4AFAADE37425B619826C8E00E07EE26BEF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9B53C7950BBE656EF7F2EC865AA04CF91DC6A83A8DAB1AF2DAF457FB1F0DB562/0/3138372e3235312e36342e302f31392d3234203d3e203238343538.roa
Signing time:             Tue 18 Aug 2026 14:25:49 +0000
ROA not before:           Tue 18 Aug 2026 14:20:49 +0000
ROA not after:            Tue 17 Aug 2027 14:25:49 +0000
asID:                     28458
IP address blocks:        187.251.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9B53C7950BBE656EF7F2EC865AA04CF91DC6A83A8DAB1AF2DAF457FB1F0DB562/0/ABF23E4AFAADE37425B619826C8E00E07EE26BEF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9B53C7950BBE656EF7F2EC865AA04CF91DC6A83A8DAB1AF2DAF457FB1F0DB562/0/ABF23E4AFAADE37425B619826C8E00E07EE26BEF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ABF23E4AFAADE37425B619826C8E00E07EE26BEF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Sep 2026 15:08:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:48:a8:88:0c:24:63:dc:b0:3d:fd:f2:14:cf:c0:ac:c1:9a:ad:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABF23E4AFAADE37425B619826C8E00E07EE26BEF
        Validity
            Not Before: Aug 18 14:20:49 2026 GMT
            Not After : Aug 17 14:25:49 2027 GMT
        Subject: CN=583226EFCB6163447902EED45F3D55E41887FDE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d5:75:d6:1e:6b:6e:d5:2a:ba:df:b4:28:0f:
                    ab:e7:3a:aa:a5:fd:ad:b2:06:af:d3:32:38:72:73:
                    f0:37:ac:af:fa:3f:50:f2:07:27:6d:53:18:ba:8d:
                    d9:d6:0f:c4:23:dc:f3:6a:b9:b8:0d:34:90:29:68:
                    b6:00:5d:2f:48:c8:5f:b1:88:43:46:88:60:18:99:
                    3e:cf:7d:ea:cf:01:e8:4c:a3:a2:eb:e2:5d:83:e1:
                    fe:5b:8a:92:c9:ce:42:f5:04:1b:e1:f6:df:46:fa:
                    98:31:13:2f:b7:55:65:26:53:10:2b:a9:b3:24:7d:
                    7f:2c:ea:08:d9:e5:c5:6a:25:45:a9:00:7d:ec:37:
                    e7:91:8e:6d:0d:ae:5a:7d:c4:82:c1:f8:7b:f4:c4:
                    64:fb:3e:3e:ab:c2:73:00:fa:97:5a:c5:c9:47:39:
                    96:75:6f:cb:77:49:77:00:4e:a5:46:59:95:e8:82:
                    b1:27:24:8d:1c:8e:58:11:9e:b1:13:29:e2:fa:10:
                    30:aa:3d:9c:70:97:e0:c1:9d:dc:42:7f:bf:8b:6b:
                    c0:d1:50:5a:1e:03:32:2a:d5:6a:04:56:c2:48:47:
                    63:07:4f:29:ce:a9:30:dc:06:90:4b:1d:23:ec:48:
                    2c:8f:61:47:93:6e:eb:fe:39:b1:d1:7a:8c:05:28:
                    8e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:32:26:EF:CB:61:63:44:79:02:EE:D4:5F:3D:55:E4:18:87:FD:E1
            X509v3 Authority Key Identifier:
                keyid:AB:F2:3E:4A:FA:AD:E3:74:25:B6:19:82:6C:8E:00:E0:7E:E2:6B:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9B53C7950BBE656EF7F2EC865AA04CF91DC6A83A8DAB1AF2DAF457FB1F0DB562/0/ABF23E4AFAADE37425B619826C8E00E07EE26BEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ABF23E4AFAADE37425B619826C8E00E07EE26BEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9B53C7950BBE656EF7F2EC865AA04CF91DC6A83A8DAB1AF2DAF457FB1F0DB562/0/3138372e3235312e36342e302f31392d3234203d3e203238343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.251.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a6:c2:35:19:8f:7f:e4:e6:25:ab:f0:0a:c4:0e:fb:9a:24:7b:
         5f:c4:24:0f:e1:8c:b5:bf:5e:e9:d5:8d:24:97:97:8d:f6:97:
         ca:cb:7d:e1:9b:2e:f3:30:fd:d4:4d:c7:4d:33:f1:50:de:d3:
         e3:e1:60:49:9d:a8:87:af:44:3e:34:9c:ef:aa:af:e4:da:48:
         09:60:4d:69:e1:ac:fa:25:92:40:3e:d1:48:64:25:a9:2c:ba:
         61:23:e3:d0:45:11:d5:ae:f2:b3:19:e7:0d:91:ef:ee:53:8a:
         36:89:3a:24:9b:fa:d0:75:4b:d2:14:b2:cd:fc:4f:88:dc:65:
         30:95:0e:69:4c:91:64:42:8f:c5:da:d1:fb:20:40:fd:85:fe:
         73:f8:06:9a:ee:49:12:c4:96:1c:83:3b:c0:f8:83:7e:35:f7:
         b6:bb:5a:4c:c0:a9:b0:73:c7:83:f7:cd:ee:1c:b4:05:12:a9:
         f9:a1:cf:4d:a7:a4:6a:ba:6a:93:cb:21:97:52:13:9e:a8:2a:
         95:70:9e:fe:c5:d2:f1:2c:4e:73:42:e0:8a:19:aa:d4:50:f2:
         e0:4d:5c:28:51:61:89:04:17:62:20:51:b9:a3:9c:08:94:bf:
         c0:39:65:9d:fa:40:61:a0:41:69:8c:b5:07:84:df:23:6e:65:
         d7:46:8a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:43:50 2026 by rpki-client