Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AFACFB8BC7A43BB957D8E486209C80BC90118DFD3ED5EB2CD3282DFA17EA1639/0/AS18734.roa
File:                     AS18734.roa (raw, json)
Hash identifier:          KJwTTJtIjTXrA8SzdkyQXbxE0DM/rEQlz/o9sNEKcTY=
Subject key identifier:   08:B8:93:6C:63:93:1C:9A:A4:D9:E0:DE:A7:F1:79:B4:AF:20:F8:5A
Certificate issuer:       /CN=E1BAAC863FA77DA084FB6FF68CC4D5008C31552A
Certificate serial:       63402CD516736365304C5CC29A6219F5ED4A1083
Authority key identifier: E1:BA:AC:86:3F:A7:7D:A0:84:FB:6F:F6:8C:C4:D5:00:8C:31:55:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1BAAC863FA77DA084FB6FF68CC4D5008C31552A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AFACFB8BC7A43BB957D8E486209C80BC90118DFD3ED5EB2CD3282DFA17EA1639/0/AS18734.roa
Signing time:             Wed 20 May 2026 05:10:00 +0000
ROA not before:           Wed 20 May 2026 05:05:00 +0000
ROA not after:            Wed 19 May 2027 05:10:00 +0000
asID:                     18734
IP address blocks:        2806:250:9f0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AFACFB8BC7A43BB957D8E486209C80BC90118DFD3ED5EB2CD3282DFA17EA1639/0/E1BAAC863FA77DA084FB6FF68CC4D5008C31552A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AFACFB8BC7A43BB957D8E486209C80BC90118DFD3ED5EB2CD3282DFA17EA1639/0/E1BAAC863FA77DA084FB6FF68CC4D5008C31552A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1BAAC863FA77DA084FB6FF68CC4D5008C31552A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 May 2026 07:41:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:40:2c:d5:16:73:63:65:30:4c:5c:c2:9a:62:19:f5:ed:4a:10:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1BAAC863FA77DA084FB6FF68CC4D5008C31552A
        Validity
            Not Before: May 20 05:05:00 2026 GMT
            Not After : May 19 05:10:00 2027 GMT
        Subject: CN=08B8936C63931C9AA4D9E0DEA7F179B4AF20F85A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a5:7f:f6:bd:ec:ef:5b:f4:f7:01:f3:b0:f6:
                    70:a3:dc:14:a5:52:5d:ac:e2:00:ce:27:32:57:a1:
                    75:c3:30:b5:cd:a5:de:97:ae:88:2d:19:31:20:89:
                    d0:14:e5:92:c2:a0:6c:a6:5a:32:ff:26:d4:03:a8:
                    97:2a:1a:09:a0:64:9c:63:09:e8:16:af:1b:6a:11:
                    05:8b:a0:9e:ce:49:78:9b:42:55:99:3a:4d:87:a3:
                    80:e7:8a:41:7a:72:54:8f:43:a5:1c:40:22:a4:3a:
                    1e:36:b6:bb:b8:8f:a7:a9:24:13:e1:91:07:0b:29:
                    58:70:e5:f9:b7:ed:9f:c9:66:77:19:7c:40:c4:c8:
                    bc:77:3f:65:f6:49:4b:86:e4:5a:6f:27:94:df:37:
                    13:66:d1:b8:02:b9:2a:90:c9:ca:29:d2:bc:b3:cc:
                    1d:c3:47:f3:e0:67:35:ce:51:bd:36:af:57:58:6b:
                    f1:2f:2c:71:7e:b4:54:0b:1d:9c:81:f7:5d:a2:06:
                    47:88:9f:c2:9d:8a:9b:a8:ff:31:ee:47:a1:7c:a0:
                    f0:49:c8:8a:ad:17:eb:26:aa:53:2c:81:26:43:db:
                    38:98:c7:62:77:da:0e:90:53:0f:15:dc:df:ff:8b:
                    96:47:ae:92:b8:35:88:4a:45:8a:00:f9:67:5a:fc:
                    54:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:B8:93:6C:63:93:1C:9A:A4:D9:E0:DE:A7:F1:79:B4:AF:20:F8:5A
            X509v3 Authority Key Identifier:
                keyid:E1:BA:AC:86:3F:A7:7D:A0:84:FB:6F:F6:8C:C4:D5:00:8C:31:55:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AFACFB8BC7A43BB957D8E486209C80BC90118DFD3ED5EB2CD3282DFA17EA1639/0/E1BAAC863FA77DA084FB6FF68CC4D5008C31552A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1BAAC863FA77DA084FB6FF68CC4D5008C31552A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AFACFB8BC7A43BB957D8E486209C80BC90118DFD3ED5EB2CD3282DFA17EA1639/0/AS18734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:250:9f0::/48

    Signature Algorithm: sha256WithRSAEncryption
         15:a0:39:60:19:c6:6f:6e:c4:c6:1f:60:2f:9a:4f:0b:d1:53:
         07:e9:fb:c5:81:b2:74:78:58:b8:ca:f8:40:88:76:25:ec:ee:
         98:c9:c6:1f:9f:38:59:a6:af:9e:50:3d:d2:70:35:f5:bf:63:
         a2:33:7a:11:8e:fd:be:a6:3b:30:7b:a2:9e:91:4c:24:40:bc:
         b4:21:8d:02:a6:fe:ff:e4:c0:4d:67:c2:9e:e4:eb:57:f5:7c:
         e3:11:ba:94:a4:9f:4b:21:3c:4c:9f:32:cb:5d:a5:4b:35:55:
         14:2a:43:92:2c:36:94:af:76:e5:b9:b8:65:04:b1:60:f2:0d:
         30:97:1f:16:f2:28:ff:55:31:cf:db:c0:07:11:de:7f:41:68:
         b7:8e:1e:32:a7:c1:45:40:63:b2:bf:fe:73:ef:d4:46:d4:b6:
         9f:09:d0:66:90:ab:2d:a7:8e:07:30:50:8f:b4:ce:76:6b:4c:
         29:68:3f:77:d0:8d:c3:25:d6:e6:58:d9:04:08:a2:6a:06:c4:
         e4:81:a2:85:e6:08:3d:ed:df:91:33:5b:87:d6:e4:50:44:c2:
         ef:40:b9:b2:2b:df:e4:49:82:98:a0:a7:74:4c:11:1c:d3:db:
         4c:34:36:43:15:f6:bf:13:b6:06:43:13:18:84:2d:b7:ce:9d:
         2d:4d:f3:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 18:51:58 2026 by rpki-client