Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/BBD6BE8166B61450C019664938FE6B78290AC1C3C29398708D26BF9A6D39C22C/0/3138362e312e3235322e302f32342d3234203d3e20323639383739.roa
File:                     3138362e312e3235322e302f32342d3234203d3e20323639383739.roa (raw, json)
Hash identifier:          4YL9O838CebxIg20NQREFDRTN0i0mJpuEycZpOO2bEQ=
Subject key identifier:   C6:98:D8:0A:D0:BC:3D:18:E1:00:DC:E4:3D:E1:7D:F7:C1:3A:79:8A
Certificate issuer:       /CN=5CF345A906A56B23EAB682075391A3046AE12C48
Certificate serial:       22D38521047B0833E916A57EDC9A6CAE0102E60E
Authority key identifier: 5C:F3:45:A9:06:A5:6B:23:EA:B6:82:07:53:91:A3:04:6A:E1:2C:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5CF345A906A56B23EAB682075391A3046AE12C48.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BBD6BE8166B61450C019664938FE6B78290AC1C3C29398708D26BF9A6D39C22C/0/3138362e312e3235322e302f32342d3234203d3e20323639383739.roa
Signing time:             Thu 08 Oct 2026 23:25:00 +0000
ROA not before:           Thu 08 Oct 2026 23:20:00 +0000
ROA not after:            Thu 07 Oct 2027 23:25:00 +0000
asID:                     269879
IP address blocks:        186.1.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BBD6BE8166B61450C019664938FE6B78290AC1C3C29398708D26BF9A6D39C22C/0/5CF345A906A56B23EAB682075391A3046AE12C48.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BBD6BE8166B61450C019664938FE6B78290AC1C3C29398708D26BF9A6D39C22C/0/5CF345A906A56B23EAB682075391A3046AE12C48.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5CF345A906A56B23EAB682075391A3046AE12C48.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 15:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:d3:85:21:04:7b:08:33:e9:16:a5:7e:dc:9a:6c:ae:01:02:e6:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CF345A906A56B23EAB682075391A3046AE12C48
        Validity
            Not Before: Oct  8 23:20:00 2026 GMT
            Not After : Oct  7 23:25:00 2027 GMT
        Subject: CN=C698D80AD0BC3D18E100DCE43DE17DF7C13A798A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:8c:9e:2b:57:c7:2a:0f:b5:1c:f5:74:47:5e:
                    02:c5:0f:c8:36:e1:52:f1:ed:fa:55:c1:91:b7:6d:
                    8a:65:c5:05:f6:fc:b9:ba:81:a7:49:f9:04:6f:f6:
                    4a:26:db:06:30:89:9e:d9:49:b5:fe:4b:2f:fd:08:
                    a3:d6:41:fd:4f:df:9d:02:56:fd:73:86:60:cd:66:
                    36:a6:b4:e5:1b:97:0d:76:db:48:bf:44:cb:00:51:
                    09:17:e0:4d:90:e3:48:79:8d:a7:f0:f9:15:96:38:
                    d3:02:3a:42:a8:5c:52:f5:80:f4:6d:62:4e:2c:b2:
                    53:dd:35:6e:83:db:a6:9e:39:01:bf:92:47:59:0b:
                    6a:c8:97:b9:94:2d:83:97:e8:5e:12:df:a1:3b:25:
                    65:6f:93:29:4f:11:54:7a:98:35:5f:2d:1b:47:e2:
                    70:4e:49:a8:38:a8:5e:3a:4e:21:25:2b:44:ec:e6:
                    70:6f:cc:2f:8b:89:c8:7e:81:98:35:f1:3e:8d:b8:
                    fe:cc:97:af:ea:fd:89:bd:0e:9b:75:05:43:e5:a9:
                    15:06:71:3e:20:7b:d5:50:01:3f:19:1e:bf:45:1a:
                    57:53:79:a1:6d:f0:68:77:d8:dd:e1:0b:d0:03:1c:
                    60:8f:92:d0:ec:a2:88:2b:95:bb:74:a0:a5:df:ac:
                    4d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:98:D8:0A:D0:BC:3D:18:E1:00:DC:E4:3D:E1:7D:F7:C1:3A:79:8A
            X509v3 Authority Key Identifier:
                keyid:5C:F3:45:A9:06:A5:6B:23:EA:B6:82:07:53:91:A3:04:6A:E1:2C:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BBD6BE8166B61450C019664938FE6B78290AC1C3C29398708D26BF9A6D39C22C/0/5CF345A906A56B23EAB682075391A3046AE12C48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5CF345A906A56B23EAB682075391A3046AE12C48.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BBD6BE8166B61450C019664938FE6B78290AC1C3C29398708D26BF9A6D39C22C/0/3138362e312e3235322e302f32342d3234203d3e20323639383739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.1.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:8a:be:e3:6f:2b:a1:8b:cb:04:51:92:4f:ee:5b:a2:40:83:
         4c:1d:be:e4:e1:5a:4c:99:43:85:03:f2:79:0e:df:ef:a4:a8:
         c8:d1:40:5e:19:a5:82:f9:a2:2c:ba:4c:5b:f9:6b:b4:8e:9b:
         8a:c1:5b:47:87:fe:de:ea:7d:eb:b7:80:bc:61:2c:d3:b8:d6:
         69:af:c7:68:a4:7c:40:6d:c5:e9:98:4e:6e:62:93:09:7c:e9:
         dc:db:ad:33:23:73:6d:9a:43:f4:bb:00:4e:50:c7:26:cd:9c:
         9e:54:9f:d5:62:98:a3:8b:2a:1f:1d:67:97:ed:aa:43:f0:d7:
         65:fd:d7:e3:6d:e9:1f:5a:31:78:7e:4a:cb:d0:c7:bf:07:d9:
         c7:49:8e:e8:b6:1e:0a:a0:25:1a:20:99:39:e5:b9:6c:78:a2:
         36:24:50:55:51:11:db:17:cd:a9:d1:4c:d3:54:02:8f:6e:eb:
         4b:ec:bf:53:a4:04:4c:04:b8:e0:99:90:ca:75:e1:69:2a:13:
         dc:24:a7:b7:35:ae:40:74:b3:52:27:fb:1d:5e:88:6d:85:85:
         7f:06:a5:a6:67:b7:f4:c4:ca:1b:15:44:bd:46:a0:7f:c4:df:
         19:35:25:69:73:57:37:fe:0e:64:ed:4f:6a:b7:1f:c6:9d:99:
         bc:29:97:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 16:53:42 2026 by rpki-client