Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/BBD6BE8166B61450C019664938FE6B78290AC1C3C29398708D26BF9A6D39C22C/0/3138362e312e3234392e302f32342d3234203d3e20323639383739.roa
File:                     3138362e312e3234392e302f32342d3234203d3e20323639383739.roa (raw, json)
Hash identifier:          2TKBJiv1dRiAy//2ejEKTAsei4r+WJ2dWLCHpRHYKfU=
Subject key identifier:   E6:6A:05:2E:7F:45:73:14:AB:91:9F:08:56:91:E8:EE:D1:22:14:45
Certificate issuer:       /CN=5CF345A906A56B23EAB682075391A3046AE12C48
Certificate serial:       72AA91B8E1BAD7D8C21174A5D2488438BCE434E2
Authority key identifier: 5C:F3:45:A9:06:A5:6B:23:EA:B6:82:07:53:91:A3:04:6A:E1:2C:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5CF345A906A56B23EAB682075391A3046AE12C48.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BBD6BE8166B61450C019664938FE6B78290AC1C3C29398708D26BF9A6D39C22C/0/3138362e312e3234392e302f32342d3234203d3e20323639383739.roa
Signing time:             Thu 08 Oct 2026 23:25:00 +0000
ROA not before:           Thu 08 Oct 2026 23:20:00 +0000
ROA not after:            Thu 07 Oct 2027 23:25:00 +0000
asID:                     269879
IP address blocks:        186.1.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BBD6BE8166B61450C019664938FE6B78290AC1C3C29398708D26BF9A6D39C22C/0/5CF345A906A56B23EAB682075391A3046AE12C48.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BBD6BE8166B61450C019664938FE6B78290AC1C3C29398708D26BF9A6D39C22C/0/5CF345A906A56B23EAB682075391A3046AE12C48.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5CF345A906A56B23EAB682075391A3046AE12C48.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 15:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:aa:91:b8:e1:ba:d7:d8:c2:11:74:a5:d2:48:84:38:bc:e4:34:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CF345A906A56B23EAB682075391A3046AE12C48
        Validity
            Not Before: Oct  8 23:20:00 2026 GMT
            Not After : Oct  7 23:25:00 2027 GMT
        Subject: CN=E66A052E7F457314AB919F085691E8EED1221445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f0:b1:b1:38:9b:e6:b6:77:68:aa:ec:67:4d:
                    61:42:1d:c5:72:82:87:2d:94:4b:df:35:09:95:ba:
                    14:a3:53:43:af:6c:bc:e6:fb:2d:d4:2c:93:d6:b9:
                    b3:25:7c:cb:bd:5b:76:51:b7:b9:b4:09:65:7c:e4:
                    dc:bc:36:a2:2c:06:a4:6a:3e:3f:01:c9:39:b2:45:
                    b9:c4:2f:47:9d:ea:01:58:b5:94:7e:21:82:f3:42:
                    2b:1d:c7:82:1a:d8:04:15:80:eb:67:f0:ce:06:80:
                    fe:87:28:98:4c:28:be:e7:7e:1d:31:f5:b7:b0:fa:
                    4e:78:22:31:c2:fa:2c:3c:e1:72:60:1c:57:d6:72:
                    ae:25:36:ae:8e:48:00:18:c2:f8:d5:cd:6f:83:31:
                    06:87:cc:4d:85:a5:a4:3c:cb:98:cf:ad:2f:81:a1:
                    24:69:91:76:ca:d5:75:27:82:00:c9:5f:f3:f6:17:
                    85:21:79:3e:18:87:49:92:b4:0b:cd:36:f0:a8:47:
                    48:b7:aa:b5:0b:69:21:f3:64:36:61:2f:16:f9:50:
                    28:82:7d:41:92:e7:f9:87:37:43:92:0d:f4:1a:eb:
                    c9:12:29:35:eb:93:55:0b:6c:3e:a4:27:15:78:39:
                    ed:c3:3c:bf:6d:12:7f:6b:1c:37:bd:7e:54:76:90:
                    80:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:6A:05:2E:7F:45:73:14:AB:91:9F:08:56:91:E8:EE:D1:22:14:45
            X509v3 Authority Key Identifier:
                keyid:5C:F3:45:A9:06:A5:6B:23:EA:B6:82:07:53:91:A3:04:6A:E1:2C:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BBD6BE8166B61450C019664938FE6B78290AC1C3C29398708D26BF9A6D39C22C/0/5CF345A906A56B23EAB682075391A3046AE12C48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5CF345A906A56B23EAB682075391A3046AE12C48.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BBD6BE8166B61450C019664938FE6B78290AC1C3C29398708D26BF9A6D39C22C/0/3138362e312e3234392e302f32342d3234203d3e20323639383739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.1.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:98:9f:de:ed:43:9d:41:ea:b8:7c:19:15:20:62:1d:99:38:
         a8:95:3d:0f:9e:27:b2:f0:12:4d:57:cd:ae:d8:aa:1f:93:26:
         96:3f:e7:fb:cd:c8:99:0d:a3:28:d3:fd:b4:0f:85:f6:29:84:
         fb:c3:7b:b3:f8:55:b1:79:28:1b:6b:b2:f9:cb:f8:89:e5:a2:
         0e:88:06:02:e8:35:53:8b:81:7c:e3:9d:d8:87:8c:76:0e:5c:
         3c:f2:f5:5b:ed:a2:4e:0b:ea:8e:5b:92:ae:4f:71:ca:fd:8f:
         97:be:25:ba:52:6a:ec:80:fe:2b:59:aa:32:cc:fc:69:6a:b5:
         3f:8e:bb:59:fb:b3:c4:6e:f4:b3:19:47:42:eb:1d:d9:9b:43:
         8b:bf:d7:71:87:2f:2d:fd:e5:0c:ee:93:5b:53:a0:ab:0d:52:
         f4:c4:b4:c9:1a:10:f1:e2:0b:1b:a7:1a:34:b9:4d:f4:3d:cb:
         a8:eb:d8:13:d4:16:8c:01:8a:93:9a:68:f0:78:c7:b5:d2:4e:
         60:6e:be:f4:5c:bb:cf:7a:04:80:2a:9a:ae:76:08:c9:98:6a:
         87:39:74:43:0b:e5:1f:af:05:0b:d2:49:4a:47:f3:4a:58:98:
         32:3c:8f:33:0e:bc:ff:e4:71:7b:e5:7b:ba:b5:1b:95:23:f0:
         cd:10:a2:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 15:18:56 2026 by rpki-client