Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB5091115C1DA031B792EADFF54498AA3ACA566EAFC77F650EEB9BF8C6770728/0/3136372e3235302e3233362e302f32332d3233203d3e20323732303236.roa
File:                     3136372e3235302e3233362e302f32332d3233203d3e20323732303236.roa (raw, json)
Hash identifier:          yz+3zH3hp7soUDGidtSpHWSD9cvY4ewdxgjGgbI4esU=
Subject key identifier:   33:16:04:AC:91:07:02:F2:93:C4:C5:6D:23:A3:5D:11:23:2C:8D:AA
Certificate issuer:       /CN=3C3B7B469CAC485C79640430F65FB7E54F99A890
Certificate serial:       7B04D8BE7B0E253511D09DA7109562955AAC6B52
Authority key identifier: 3C:3B:7B:46:9C:AC:48:5C:79:64:04:30:F6:5F:B7:E5:4F:99:A8:90
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C3B7B469CAC485C79640430F65FB7E54F99A890.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB5091115C1DA031B792EADFF54498AA3ACA566EAFC77F650EEB9BF8C6770728/0/3136372e3235302e3233362e302f32332d3233203d3e20323732303236.roa
Signing time:             Sun 29 Mar 2026 04:36:28 +0000
ROA not before:           Sun 29 Mar 2026 04:31:28 +0000
ROA not after:            Sun 28 Mar 2027 04:36:28 +0000
asID:                     272026
IP address blocks:        167.250.236.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB5091115C1DA031B792EADFF54498AA3ACA566EAFC77F650EEB9BF8C6770728/0/3C3B7B469CAC485C79640430F65FB7E54F99A890.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB5091115C1DA031B792EADFF54498AA3ACA566EAFC77F650EEB9BF8C6770728/0/3C3B7B469CAC485C79640430F65FB7E54F99A890.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C3B7B469CAC485C79640430F65FB7E54F99A890.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 11 Apr 2026 01:45:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:04:d8:be:7b:0e:25:35:11:d0:9d:a7:10:95:62:95:5a:ac:6b:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C3B7B469CAC485C79640430F65FB7E54F99A890
        Validity
            Not Before: Mar 29 04:31:28 2026 GMT
            Not After : Mar 28 04:36:28 2027 GMT
        Subject: CN=331604AC910702F293C4C56D23A35D11232C8DAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9e:3b:ab:64:89:43:10:f7:b8:e7:a8:b0:f3:
                    92:ab:1f:ea:d4:1f:5d:9f:ed:d6:cd:38:3e:49:64:
                    44:59:72:92:a1:22:a4:ec:ce:a6:02:3d:8d:11:0d:
                    a1:26:2a:3f:f7:79:a3:ff:7d:c4:d4:81:cb:78:ee:
                    53:6e:0f:1f:86:05:0b:de:dd:71:6f:27:e3:96:76:
                    49:9c:c0:e2:37:d0:04:d7:09:e8:e8:41:98:af:95:
                    e4:70:a3:61:30:46:9e:e0:9c:39:d1:99:e0:a9:9b:
                    b1:8e:50:a7:37:a7:01:8e:e6:f4:7f:70:6f:c2:6e:
                    e2:80:a1:7f:b8:e1:6a:9f:df:b9:d7:aa:a0:05:1d:
                    97:69:bd:bf:17:97:77:81:3c:5d:84:a6:70:91:6b:
                    4a:f6:8f:47:03:8e:6a:0d:d9:fe:65:3e:b1:b0:3b:
                    54:70:72:27:4d:e7:8e:1a:68:85:57:72:09:69:1a:
                    43:f6:75:68:7e:cb:0f:29:ca:51:2e:95:60:69:c6:
                    45:18:8d:46:21:f0:f4:8c:f5:1e:8d:0c:81:f8:77:
                    b0:56:e1:0b:21:fb:d7:1d:97:2e:66:e6:6e:ff:52:
                    14:fa:38:64:5a:10:74:f3:c4:22:7d:33:3d:ff:4e:
                    76:d6:08:fe:ac:5c:b8:72:33:7c:2a:f1:c4:f5:27:
                    89:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:16:04:AC:91:07:02:F2:93:C4:C5:6D:23:A3:5D:11:23:2C:8D:AA
            X509v3 Authority Key Identifier:
                keyid:3C:3B:7B:46:9C:AC:48:5C:79:64:04:30:F6:5F:B7:E5:4F:99:A8:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB5091115C1DA031B792EADFF54498AA3ACA566EAFC77F650EEB9BF8C6770728/0/3C3B7B469CAC485C79640430F65FB7E54F99A890.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C3B7B469CAC485C79640430F65FB7E54F99A890.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB5091115C1DA031B792EADFF54498AA3ACA566EAFC77F650EEB9BF8C6770728/0/3136372e3235302e3233362e302f32332d3233203d3e20323732303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         40:8b:76:0a:ae:c0:87:04:07:29:0a:f8:7f:bc:8f:5f:a5:30:
         72:f2:9d:5c:37:09:22:88:d6:9d:01:19:97:95:3d:c9:55:f8:
         b6:f6:bd:27:b7:9f:8b:db:12:62:44:c8:00:f5:c8:2e:0d:1f:
         e0:ab:23:05:51:14:f7:b7:fe:86:b6:11:81:cb:05:07:1b:99:
         83:f0:2d:a1:9f:91:40:ae:74:41:fe:05:67:a1:7d:19:d4:d0:
         98:2f:f7:87:12:02:f8:e6:df:57:59:42:91:4c:a9:2f:53:3a:
         d8:4a:b2:ac:2b:a2:74:3f:c4:65:f4:e0:2d:55:96:70:ec:31:
         0a:ea:57:0d:be:03:71:4c:d1:3f:9d:5f:31:61:20:ec:54:dc:
         17:68:a1:55:ce:24:96:64:cd:7a:a7:45:58:ec:52:b8:61:f8:
         77:63:58:bf:37:4a:43:5d:33:c0:28:64:83:9c:c2:41:71:bf:
         81:1f:e9:ac:9f:a7:9e:db:77:4d:fd:c7:e5:de:66:f2:b0:38:
         91:6c:9b:07:17:aa:a5:34:56:2b:2c:62:27:5e:60:0c:f8:f1:
         e9:4c:8d:d3:71:28:b5:20:c7:d5:d7:72:f8:55:e4:4e:14:0a:
         cd:ec:ec:19:8b:27:98:5a:2d:53:f5:ed:d9:f8:a5:8e:68:76:
         29:e9:0b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 05:15:43 2026 by rpki-client