Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/3136372e3235302e33362e302f32322d3234203d3e20323639373833.roa
File:                     3136372e3235302e33362e302f32322d3234203d3e20323639373833.roa (raw, json)
Hash identifier:          WfeijFWKqh1Dg/7m1/a+UoPAVLtHt6gsH+9bqJER+Aw=
Subject key identifier:   A2:D4:1D:4E:37:9B:0C:68:6D:32:41:F1:F1:FE:44:CC:DF:D5:29:76
Certificate issuer:       /CN=89CB216508CEF38CB2A68E45EBF4D418531E3799
Certificate serial:       46C9947C755E61EB27BB083A3789E9DD17982DB8
Authority key identifier: 89:CB:21:65:08:CE:F3:8C:B2:A6:8E:45:EB:F4:D4:18:53:1E:37:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/3136372e3235302e33362e302f32322d3234203d3e20323639373833.roa
Signing time:             Mon 06 Jul 2026 12:05:03 +0000
ROA not before:           Mon 06 Jul 2026 12:00:03 +0000
ROA not after:            Mon 05 Jul 2027 12:05:03 +0000
asID:                     269783
IP address blocks:        167.250.36.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 16 Jul 2026 23:46:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:c9:94:7c:75:5e:61:eb:27:bb:08:3a:37:89:e9:dd:17:98:2d:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89CB216508CEF38CB2A68E45EBF4D418531E3799
        Validity
            Not Before: Jul  6 12:00:03 2026 GMT
            Not After : Jul  5 12:05:03 2027 GMT
        Subject: CN=A2D41D4E379B0C686D3241F1F1FE44CCDFD52976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d0:e3:e8:00:30:e8:f6:1a:97:c8:5b:45:2f:
                    34:a7:1b:ca:ca:f1:06:94:ab:87:d5:e7:20:77:2f:
                    4c:eb:6b:5b:11:c6:79:0b:e5:db:9f:21:25:6e:9a:
                    98:03:45:04:94:c8:e2:95:ac:61:ff:3e:21:89:2f:
                    b2:93:05:f8:dd:eb:db:99:9c:ba:37:c2:7e:a0:96:
                    95:c7:79:56:48:ec:95:28:e0:e8:69:0f:01:41:c0:
                    49:78:44:73:35:04:29:19:aa:72:48:e9:c4:94:58:
                    bb:2a:0a:a5:98:9c:db:fb:15:93:40:63:80:56:2a:
                    c3:51:ba:8d:1e:f1:d5:13:a6:1a:c2:d1:53:88:67:
                    aa:7b:81:d9:93:18:78:86:f2:c3:f2:e9:e2:39:7b:
                    d0:c0:d9:91:28:f6:9b:35:44:7a:35:94:0e:85:4f:
                    b0:b1:e6:c0:20:09:61:4f:0d:52:9b:b6:ce:93:1e:
                    f6:3f:0d:9c:88:b5:c4:0f:07:9d:88:2f:7c:a5:98:
                    6a:7b:78:65:e6:7a:d8:f7:02:9d:27:cf:62:20:0a:
                    65:d3:f5:99:60:5c:8e:35:c7:5a:d2:3e:3a:f4:5e:
                    07:23:9d:1b:bd:73:0e:d6:b6:30:fd:02:fc:a9:0a:
                    fd:b3:4e:85:c5:cf:70:4e:d9:72:d7:56:dd:05:bc:
                    41:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:D4:1D:4E:37:9B:0C:68:6D:32:41:F1:F1:FE:44:CC:DF:D5:29:76
            X509v3 Authority Key Identifier:
                keyid:89:CB:21:65:08:CE:F3:8C:B2:A6:8E:45:EB:F4:D4:18:53:1E:37:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/3136372e3235302e33362e302f32322d3234203d3e20323639373833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c7:10:f5:2a:4a:91:dd:cc:a1:3d:c4:59:79:9c:f5:e8:4a:81:
         bf:bc:9b:9e:87:fc:b6:00:4a:76:5b:01:7d:d4:59:e7:62:54:
         40:ab:f9:11:73:af:71:d3:be:b8:cb:4a:3f:cd:1d:54:95:31:
         9e:42:14:ed:ca:e0:39:90:a0:8f:b8:78:47:46:37:57:a2:80:
         bf:94:50:6c:b9:aa:47:7e:04:4b:8c:fc:eb:8e:7c:16:65:03:
         56:09:c6:29:14:bc:d0:7a:36:52:b8:21:b9:e5:31:ec:82:ab:
         aa:32:d8:26:16:b3:63:4c:13:c9:fc:b4:cd:82:f8:7c:ae:f9:
         09:a4:db:7a:59:2c:e4:cd:7b:e3:00:e4:3a:6d:69:ff:c0:a1:
         02:5e:27:fb:5b:5c:eb:fa:55:aa:7e:bb:4e:d4:e8:e5:86:5d:
         f0:81:ec:cd:19:0b:bb:05:3f:76:61:dc:2c:cb:0e:e2:af:0b:
         88:12:e4:7c:5e:0b:d1:bf:d8:53:2e:f5:9d:1d:ef:82:4d:35:
         17:f1:e1:4c:21:e7:12:31:c4:1e:40:dc:d3:43:5f:2e:46:dc:
         96:fc:1d:52:5c:3d:7f:34:46:fe:e2:0a:85:8c:ff:4a:91:21:
         a8:04:fa:b2:b3:dd:44:68:b5:56:de:33:15:e1:07:7c:1c:f8:
         6f:1e:18:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 06:58:41 2026 by rpki-client