Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/3135322e3233312e32362e302f32342d3234203d3e203138363738.roa
File:                     3135322e3233312e32362e302f32342d3234203d3e203138363738.roa (raw, json)
Hash identifier:          Jaif3N16pbtcykZ1DjYCOi0iHnxLG0qoIwcddejQivM=
Subject key identifier:   54:D1:9E:D2:04:F6:59:66:A3:4E:51:38:19:F1:B9:A0:AA:EA:F7:D3
Certificate issuer:       /CN=631ADD36A3A071B54A98E2664662D6CDCD1464FA
Certificate serial:       317F2E3113CB1AA96315AF0DE9AB1EF35679B684
Authority key identifier: 63:1A:DD:36:A3:A0:71:B5:4A:98:E2:66:46:62:D6:CD:CD:14:64:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/3135322e3233312e32362e302f32342d3234203d3e203138363738.roa
Signing time:             Tue 25 Aug 2026 16:26:27 +0000
ROA not before:           Tue 25 Aug 2026 16:21:27 +0000
ROA not after:            Tue 24 Aug 2027 16:26:27 +0000
asID:                     18678
IP address blocks:        152.231.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:7f:2e:31:13:cb:1a:a9:63:15:af:0d:e9:ab:1e:f3:56:79:b6:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=631ADD36A3A071B54A98E2664662D6CDCD1464FA
        Validity
            Not Before: Aug 25 16:21:27 2026 GMT
            Not After : Aug 24 16:26:27 2027 GMT
        Subject: CN=54D19ED204F65966A34E513819F1B9A0AAEAF7D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:98:db:3e:7c:e6:70:06:d6:52:c3:6c:08:26:
                    14:67:c3:29:81:32:e7:ca:6b:4f:06:1f:b2:68:db:
                    65:e1:b0:65:21:eb:a8:c4:9f:8a:ed:e5:37:f4:db:
                    31:04:e4:4a:a4:a4:b3:e8:7f:05:f9:9d:53:d6:75:
                    2d:93:a9:b4:04:7c:c9:0d:69:5b:50:ec:e7:53:29:
                    4f:af:c0:45:93:ae:ae:92:7b:25:83:64:5e:26:4c:
                    43:97:a6:89:96:f3:07:d6:31:15:cc:10:77:fd:45:
                    a0:46:f2:3e:75:a3:09:ea:9c:e5:60:d1:ca:13:3c:
                    46:20:c9:c1:b8:2a:3f:80:e1:09:d7:4b:1f:47:8e:
                    84:dc:b5:0c:f4:e1:48:fc:0a:8b:11:16:62:fd:a3:
                    3c:3a:74:11:8a:d1:c1:6b:65:10:ea:0f:b1:42:d4:
                    52:9a:a1:9f:23:72:95:bb:3e:af:5c:2a:1c:e5:4b:
                    e7:25:a4:41:31:14:99:44:6a:cc:09:ac:ce:c1:5d:
                    34:eb:01:25:39:53:8a:78:fe:29:85:a9:d8:3d:66:
                    94:bc:2e:f9:3e:04:21:ca:e4:87:7f:b5:6d:ab:d5:
                    6d:af:68:9b:ad:9d:1d:b2:fc:da:cd:ba:2d:a0:bb:
                    b7:c7:93:65:0f:db:c4:b9:fe:a5:4f:26:4e:c3:2f:
                    40:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:D1:9E:D2:04:F6:59:66:A3:4E:51:38:19:F1:B9:A0:AA:EA:F7:D3
            X509v3 Authority Key Identifier:
                keyid:63:1A:DD:36:A3:A0:71:B5:4A:98:E2:66:46:62:D6:CD:CD:14:64:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/3135322e3233312e32362e302f32342d3234203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.231.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:85:65:bf:a2:5d:95:c4:33:59:53:71:e7:18:23:e6:eb:9c:
         08:4b:97:d3:69:5b:9c:c7:0e:ce:a9:18:ca:5e:b4:df:ac:2a:
         61:d7:bb:74:34:51:ca:66:54:af:34:63:a8:8d:76:41:5a:06:
         ea:10:83:89:ce:52:e5:03:49:ad:50:1e:6d:6a:66:58:80:3e:
         7d:5a:b1:e8:7c:57:6e:d7:f8:5c:f4:3d:91:12:33:32:d0:6a:
         77:3f:ee:f2:c3:e4:20:62:d7:7e:2b:64:35:cc:5c:19:87:7d:
         6b:2e:19:e4:80:32:3a:1f:23:f7:97:35:1d:5f:db:38:db:c6:
         06:48:f2:2d:51:72:c8:cf:03:69:f7:da:fb:58:13:6f:c5:01:
         df:8a:1a:70:4b:6b:2b:fb:4b:6a:d5:6e:21:d7:31:52:10:dc:
         ff:62:b3:1a:5d:37:df:4c:0d:35:cf:ee:0a:4a:a0:67:b1:b1:
         6f:8d:9a:d1:9d:b5:ec:0b:13:db:19:21:1f:b7:ba:44:e1:c6:
         d1:b0:f8:50:02:43:c5:31:0b:48:f4:50:7e:34:d4:cf:81:e5:
         f0:9b:fd:3f:0f:0a:e0:b4:79:59:8c:ae:ab:9d:bd:19:b3:3f:
         f1:58:6d:e2:40:61:0c:42:db:01:0f:22:99:a0:6f:88:f6:f1:
         b4:7b:a8:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 23:29:19 2026 by rpki-client