Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB5091115C1DA031B792EADFF54498AA3ACA566EAFC77F650EEB9BF8C6770728/0/3136372e3235302e3233372e302f32342d3234203d3e20323732303236.roa
File:                     3136372e3235302e3233372e302f32342d3234203d3e20323732303236.roa (raw, json)
Hash identifier:          3YZ5MQLqSgI4FchzA+eWumfYBEBhLBJtW+6T1mJ1qIo=
Subject key identifier:   D7:38:1B:53:49:4B:14:D1:A5:CB:09:96:D0:BE:FD:7C:8C:B1:D3:28
Certificate issuer:       /CN=3C3B7B469CAC485C79640430F65FB7E54F99A890
Certificate serial:       2DFA41AB11BAD43A4B87BCA3A63F3B9737D96A48
Authority key identifier: 3C:3B:7B:46:9C:AC:48:5C:79:64:04:30:F6:5F:B7:E5:4F:99:A8:90
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C3B7B469CAC485C79640430F65FB7E54F99A890.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB5091115C1DA031B792EADFF54498AA3ACA566EAFC77F650EEB9BF8C6770728/0/3136372e3235302e3233372e302f32342d3234203d3e20323732303236.roa
Signing time:             Sun 29 Mar 2026 04:36:30 +0000
ROA not before:           Sun 29 Mar 2026 04:31:30 +0000
ROA not after:            Sun 28 Mar 2027 04:36:30 +0000
asID:                     272026
IP address blocks:        167.250.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB5091115C1DA031B792EADFF54498AA3ACA566EAFC77F650EEB9BF8C6770728/0/3C3B7B469CAC485C79640430F65FB7E54F99A890.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB5091115C1DA031B792EADFF54498AA3ACA566EAFC77F650EEB9BF8C6770728/0/3C3B7B469CAC485C79640430F65FB7E54F99A890.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C3B7B469CAC485C79640430F65FB7E54F99A890.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 11 Apr 2026 01:45:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:fa:41:ab:11:ba:d4:3a:4b:87:bc:a3:a6:3f:3b:97:37:d9:6a:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C3B7B469CAC485C79640430F65FB7E54F99A890
        Validity
            Not Before: Mar 29 04:31:30 2026 GMT
            Not After : Mar 28 04:36:30 2027 GMT
        Subject: CN=D7381B53494B14D1A5CB0996D0BEFD7C8CB1D328
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:83:9f:a7:49:be:ff:36:9e:2a:15:ae:1f:e9:
                    98:7d:9b:9d:df:3a:7b:72:0d:e2:88:4d:30:62:b3:
                    3c:a4:ae:ed:54:18:ec:55:73:3c:f0:8a:44:2b:aa:
                    a0:3a:2d:af:50:e9:13:f3:40:d0:2c:01:0b:e7:f7:
                    06:a3:99:57:b7:84:6d:89:a8:31:a5:07:6d:e0:2a:
                    f6:40:dd:fb:8a:66:99:ce:e2:7e:1c:be:d3:cf:86:
                    84:d0:27:0b:47:a4:8f:f3:36:9a:4b:74:2c:6f:f9:
                    70:a7:f4:55:29:0b:37:d8:f0:32:4c:07:a9:73:27:
                    d3:9d:5a:ea:8d:f7:ad:cc:48:2b:4b:0f:cd:97:47:
                    7f:f7:20:2a:d1:de:82:64:9a:50:99:8b:cb:cc:78:
                    81:cf:88:00:21:01:d5:9b:66:0a:01:c5:09:19:10:
                    75:4c:21:64:f3:23:a5:f0:f4:1f:8c:68:c4:8f:91:
                    51:ef:4f:65:ad:e7:5d:fc:b1:c1:eb:34:0a:8e:f9:
                    e2:4d:0c:36:27:a2:ed:5d:52:40:ed:26:56:da:78:
                    ea:d0:28:29:46:91:15:ed:e3:b2:86:62:79:47:33:
                    fa:04:59:7e:e3:92:fe:86:68:54:61:f1:c6:d3:dd:
                    7e:74:48:b8:73:12:3d:43:9b:ca:69:22:2c:b5:a2:
                    d4:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:38:1B:53:49:4B:14:D1:A5:CB:09:96:D0:BE:FD:7C:8C:B1:D3:28
            X509v3 Authority Key Identifier:
                keyid:3C:3B:7B:46:9C:AC:48:5C:79:64:04:30:F6:5F:B7:E5:4F:99:A8:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB5091115C1DA031B792EADFF54498AA3ACA566EAFC77F650EEB9BF8C6770728/0/3C3B7B469CAC485C79640430F65FB7E54F99A890.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C3B7B469CAC485C79640430F65FB7E54F99A890.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB5091115C1DA031B792EADFF54498AA3ACA566EAFC77F650EEB9BF8C6770728/0/3136372e3235302e3233372e302f32342d3234203d3e20323732303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:25:9a:dd:77:d5:bf:2c:32:5b:68:b0:f2:20:3e:bd:1b:0d:
         d6:a7:9d:89:6c:44:bf:38:a7:14:0d:3c:ee:ea:be:5f:a8:8a:
         d3:77:e6:53:b7:34:3a:cf:2a:d5:32:46:b4:3f:7e:63:d4:7f:
         ef:be:49:f4:e4:61:eb:3c:e2:a3:ef:7a:93:a0:aa:c2:a5:a7:
         11:e4:a5:ea:7b:04:ac:81:fa:fe:f9:d1:10:2f:c1:9b:40:27:
         88:f7:75:e1:9b:ee:7a:00:89:a6:8d:11:89:14:19:db:22:e8:
         7e:0d:a9:38:ea:1e:6e:db:31:8b:02:45:38:62:78:54:2e:95:
         62:b7:5f:c1:7e:e2:37:2c:3a:0e:1f:9f:13:2a:45:a5:e0:53:
         a0:9b:62:c0:e4:79:85:42:bc:dc:95:3d:d4:e3:58:45:11:b5:
         7a:c1:68:01:f8:70:cc:31:50:dc:a4:a3:d3:ee:11:aa:49:2d:
         1b:37:b1:4e:01:0f:22:cb:b3:4a:90:2b:7d:bb:07:92:ea:2c:
         73:39:c4:b7:9d:08:8c:e1:c1:2d:41:03:20:30:57:c6:55:36:
         ef:99:f4:e2:ea:c4:95:db:e8:f8:d5:4d:70:8e:7c:ea:88:fe:
         a2:89:df:d5:e2:63:07:54:86:9d:47:bd:60:b1:11:ae:4c:fe:
         f5:30:0b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 05:17:23 2026 by rpki-client