Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/3133322e3235352e3136342e302f32322d3234203d3e20323639373833.roa
File:                     3133322e3235352e3136342e302f32322d3234203d3e20323639373833.roa (raw, json)
Hash identifier:          20Ey+/zCuyAY4aZatffwcYp1TKH65NEG+06wPdK+OVI=
Subject key identifier:   2F:23:6E:91:1F:CE:57:5F:DF:50:C7:09:38:D8:11:C3:98:59:D7:9D
Certificate issuer:       /CN=89CB216508CEF38CB2A68E45EBF4D418531E3799
Certificate serial:       266E1BB9B15CCA8A66A05CED613EA39B4E4DAC2C
Authority key identifier: 89:CB:21:65:08:CE:F3:8C:B2:A6:8E:45:EB:F4:D4:18:53:1E:37:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/3133322e3235352e3136342e302f32322d3234203d3e20323639373833.roa
Signing time:             Mon 06 Jul 2026 12:05:02 +0000
ROA not before:           Mon 06 Jul 2026 12:00:02 +0000
ROA not after:            Mon 05 Jul 2027 12:05:02 +0000
asID:                     269783
IP address blocks:        132.255.164.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 16 Jul 2026 23:46:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:6e:1b:b9:b1:5c:ca:8a:66:a0:5c:ed:61:3e:a3:9b:4e:4d:ac:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89CB216508CEF38CB2A68E45EBF4D418531E3799
        Validity
            Not Before: Jul  6 12:00:02 2026 GMT
            Not After : Jul  5 12:05:02 2027 GMT
        Subject: CN=2F236E911FCE575FDF50C70938D811C39859D79D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:2c:d9:6b:67:9b:b3:96:68:11:8c:1c:15:c0:
                    f3:fa:fb:04:93:a7:76:da:e4:ae:bf:6a:c1:c6:9e:
                    14:41:53:8a:9c:ff:09:12:9a:ed:2b:fb:e6:6c:cb:
                    69:15:7e:82:c1:fb:4f:2a:2a:ec:5c:ef:9d:6f:5c:
                    31:95:00:0d:1c:9e:cd:f3:14:ff:e1:00:79:2b:c6:
                    f2:b0:75:d1:ab:b0:a9:ae:6c:db:9c:84:2e:26:81:
                    e9:5a:37:32:4f:74:37:c8:b6:df:39:0f:99:c1:4e:
                    b6:10:ec:a5:b4:6e:84:e8:2b:4d:b9:d4:79:50:e8:
                    f2:2c:46:b7:82:dc:80:78:4f:70:e9:46:67:49:72:
                    3d:98:2e:99:2f:6a:a7:f3:bb:3f:27:9c:a9:91:7e:
                    71:6c:8b:17:be:22:4b:a9:30:b2:e2:39:bc:23:ba:
                    5e:64:b0:86:f4:45:11:64:1f:3d:9b:cc:68:25:df:
                    33:f5:c4:91:e7:ff:ed:08:9f:b1:a4:91:64:ea:ba:
                    73:0c:c2:ad:e2:f1:f7:ab:e9:3b:fd:f3:77:8c:43:
                    7c:4c:5e:ea:6d:3a:be:59:4a:58:c7:63:83:86:9b:
                    e9:da:2b:56:d8:65:bf:7b:8c:65:c8:71:7c:7b:93:
                    92:b2:94:ff:fc:e0:7b:38:5b:23:1a:43:91:41:a3:
                    cf:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:23:6E:91:1F:CE:57:5F:DF:50:C7:09:38:D8:11:C3:98:59:D7:9D
            X509v3 Authority Key Identifier:
                keyid:89:CB:21:65:08:CE:F3:8C:B2:A6:8E:45:EB:F4:D4:18:53:1E:37:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/3133322e3235352e3136342e302f32322d3234203d3e20323639373833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         aa:d0:1f:3c:08:30:5e:e2:18:7e:d2:88:cd:57:4d:50:a8:eb:
         01:b3:31:c8:2e:09:45:ca:2f:93:e7:06:11:4c:12:11:51:39:
         eb:98:32:56:4a:cb:96:3e:6a:22:31:9c:1c:d4:9e:28:8c:4a:
         a9:a0:e9:14:11:2c:c9:60:b2:95:59:a3:69:ec:66:26:01:f0:
         af:bc:1b:b1:50:45:57:c0:ed:cc:5c:59:7b:81:62:37:4b:07:
         4e:75:fa:e9:55:d5:f4:95:13:c8:33:4d:a9:64:64:72:c0:03:
         a9:4b:40:b4:3c:5e:15:b7:87:81:c2:94:fb:f0:07:7d:1c:91:
         d0:d2:91:6a:50:03:09:65:a4:ce:81:ac:8c:b8:82:1f:2c:62:
         c0:2f:77:d1:16:d2:1b:4c:fd:1b:81:07:e5:e4:99:ad:5e:0d:
         77:db:8b:42:a4:55:c1:93:ce:27:43:9a:00:08:c2:35:52:19:
         a1:2f:97:df:ad:bb:f0:5f:d8:f3:33:e5:1f:16:8d:75:a7:e7:
         86:a1:94:6c:f8:5d:e7:db:1c:13:41:43:9d:a9:56:a2:cd:82:
         08:44:b4:e1:8b:01:2d:1b:be:ef:ce:85:4c:cc:07:5f:f2:fb:
         f2:0c:a0:52:58:2d:73:01:0e:2d:79:a6:f9:7b:ef:91:07:c2:
         1e:6e:a3:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 07:01:07 2026 by rpki-client