Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/3130332e3231392e3233342e302f32342d3234203d3e203532343638.roa
File:                     3130332e3231392e3233342e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          /0XXuvFvTe+RRLt28jMT/aw23p3zTygDi7TIDOpa6W0=
Subject key identifier:   B4:46:22:88:4A:85:B7:C5:10:49:CD:D5:9F:2A:B3:D0:49:A7:70:7F
Certificate issuer:       /CN=0F225EF900A741ED0067293A5D9297AE3DA8CE60
Certificate serial:       09126D394318AFF533D034DC30E71920056AA9F5
Authority key identifier: 0F:22:5E:F9:00:A7:41:ED:00:67:29:3A:5D:92:97:AE:3D:A8:CE:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/3130332e3231392e3233342e302f32342d3234203d3e203532343638.roa
Signing time:             Sat 29 Aug 2026 02:45:04 +0000
ROA not before:           Sat 29 Aug 2026 02:40:04 +0000
ROA not after:            Sat 28 Aug 2027 02:45:04 +0000
asID:                     52468
IP address blocks:        103.219.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 15 Sep 2026 01:31:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:12:6d:39:43:18:af:f5:33:d0:34:dc:30:e7:19:20:05:6a:a9:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F225EF900A741ED0067293A5D9297AE3DA8CE60
        Validity
            Not Before: Aug 29 02:40:04 2026 GMT
            Not After : Aug 28 02:45:04 2027 GMT
        Subject: CN=B44622884A85B7C51049CDD59F2AB3D049A7707F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:62:f2:25:1c:d5:79:3e:24:12:67:8e:4b:cc:
                    7a:a5:04:95:29:f3:f3:cb:73:b5:57:ec:dc:a0:73:
                    48:aa:f5:37:8c:10:a5:b6:88:2e:c5:46:3c:5b:11:
                    ec:c1:ea:0c:07:8d:77:a2:45:d3:0a:21:36:40:ce:
                    fa:69:2e:4e:52:6b:1e:80:a9:1a:28:68:3f:16:c4:
                    95:2f:eb:8f:b5:5b:7f:a9:78:51:62:e6:48:aa:de:
                    2f:9c:34:45:b3:5d:90:8c:cd:92:54:0d:8b:3f:c9:
                    b3:eb:3f:45:59:35:27:c7:a0:94:9e:2b:1c:6a:aa:
                    e3:2b:95:f3:6b:24:4d:91:32:ea:bf:8b:bf:8d:fd:
                    2d:55:1c:75:cb:ad:88:cb:31:c9:00:ff:28:cf:37:
                    0b:45:eb:ac:6a:7a:15:e9:29:83:d9:c9:e4:eb:31:
                    31:88:32:e9:52:1a:9b:c6:a7:ea:9c:d7:05:d5:73:
                    79:6c:4e:01:10:a4:a8:83:86:eb:78:c7:53:99:17:
                    7d:aa:10:f5:72:ac:a0:53:4d:55:57:6d:c5:43:9a:
                    1d:ae:4b:65:cf:c9:5d:30:56:78:11:f5:31:fd:cb:
                    4a:93:7d:d4:c3:c2:87:7e:b4:2d:69:56:7d:29:6c:
                    aa:9e:15:56:c5:e3:f1:f4:25:ae:f4:16:0f:98:43:
                    f2:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:46:22:88:4A:85:B7:C5:10:49:CD:D5:9F:2A:B3:D0:49:A7:70:7F
            X509v3 Authority Key Identifier:
                keyid:0F:22:5E:F9:00:A7:41:ED:00:67:29:3A:5D:92:97:AE:3D:A8:CE:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/3130332e3231392e3233342e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.219.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:31:ac:bf:d4:f7:90:82:b9:95:2f:bf:b7:51:bf:e6:a1:05:
         d9:0b:9d:5c:08:d4:53:3f:df:4c:3f:4a:db:58:27:06:a3:87:
         55:39:60:29:e2:4c:ad:9e:06:6c:0b:1b:91:6f:a0:56:be:eb:
         d7:7a:7b:20:2c:c2:fe:af:2e:c9:82:6b:87:18:e3:2e:b8:2e:
         1e:5a:a4:36:89:17:e9:a5:3b:be:3f:6b:9c:ab:66:e8:d8:ab:
         6f:68:69:38:6c:71:81:03:0e:b8:fb:ae:73:9d:36:13:5b:b2:
         29:4b:be:7f:51:51:b7:c1:4f:84:38:5d:77:52:38:7e:b0:9f:
         e6:c9:d6:e7:bf:88:2b:b6:0c:d7:b3:3c:d8:d0:16:35:a4:62:
         25:87:a1:b6:b9:91:cb:96:ec:73:da:d8:89:ba:6c:1b:52:37:
         e0:79:84:42:ec:d2:55:97:f9:f0:96:d4:9c:e7:b3:ad:8f:90:
         2e:56:92:5c:a2:0f:1b:78:a3:98:c3:71:ea:49:23:52:5c:77:
         79:ae:6a:e3:aa:26:58:fd:d9:a1:ef:3c:cc:95:22:6f:68:4c:
         68:4e:f2:bc:75:2a:b5:12:03:19:6c:10:7e:21:9e:4a:60:3e:
         b4:17:72:f1:57:76:9b:0f:02:c8:c8:1f:25:d3:94:91:64:73:
         7a:4c:d5:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 11:06:05 2026 by rpki-client