Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/3135322e3233312e32362e302f32342d3234203d3e20323636383737.roa
File:                     3135322e3233312e32362e302f32342d3234203d3e20323636383737.roa (raw, json)
Hash identifier:          tXe/ENjti/B5LmUCy3N45t+jKUBzdwZhYLxiXCr4bVg=
Subject key identifier:   B6:8C:A3:BE:04:72:AF:13:7F:79:E4:F4:34:75:DA:02:48:35:5F:53
Certificate issuer:       /CN=631ADD36A3A071B54A98E2664662D6CDCD1464FA
Certificate serial:       5EBDF0998898017103A20CBA9D739987B5A766A0
Authority key identifier: 63:1A:DD:36:A3:A0:71:B5:4A:98:E2:66:46:62:D6:CD:CD:14:64:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/3135322e3233312e32362e302f32342d3234203d3e20323636383737.roa
Signing time:             Fri 11 Jul 2025 21:25:04 +0000
ROA not before:           Fri 11 Jul 2025 21:20:04 +0000
ROA not after:            Fri 10 Jul 2026 21:25:04 +0000
asID:                     266877
IP address blocks:        152.231.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 24 Jul 2025 19:47:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:bd:f0:99:88:98:01:71:03:a2:0c:ba:9d:73:99:87:b5:a7:66:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=631ADD36A3A071B54A98E2664662D6CDCD1464FA
        Validity
            Not Before: Jul 11 21:20:04 2025 GMT
            Not After : Jul 10 21:25:04 2026 GMT
        Subject: CN=B68CA3BE0472AF137F79E4F43475DA0248355F53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a9:d3:ec:e0:6a:93:4f:79:e3:a1:3c:f4:e7:
                    0a:76:72:ee:60:cd:7c:9a:e0:e6:3e:84:0b:ef:46:
                    fb:f9:44:20:58:92:89:cd:35:4b:17:77:30:56:06:
                    50:49:f3:2c:6c:26:a2:ce:6f:62:ef:32:5a:1e:a8:
                    d7:ca:91:92:60:e6:02:16:c6:54:df:e5:21:2d:f7:
                    06:d3:b6:52:94:28:4b:2c:81:d6:cb:be:b8:ba:67:
                    da:af:5a:be:3d:cf:c6:7d:8a:2d:b8:31:87:3a:9f:
                    c0:cd:de:01:2f:54:84:10:c0:b5:ee:aa:35:6c:8e:
                    ba:bc:2a:89:11:62:42:40:34:ce:25:1f:8f:0d:1b:
                    02:86:8e:9b:d8:ec:9c:93:91:80:67:b9:4a:96:29:
                    83:2d:3b:d0:53:b7:67:32:97:f7:5b:58:76:58:c7:
                    f9:99:0a:bd:63:99:20:8f:4f:1d:d8:05:09:ed:12:
                    28:16:4d:96:59:80:5d:c6:15:62:cd:2b:81:b3:ac:
                    25:9c:c3:a4:d6:3b:1a:b3:8b:12:5e:29:91:08:b9:
                    38:83:17:77:3c:8d:e6:00:82:ae:5f:8c:18:a9:a9:
                    73:93:47:06:e5:e7:2e:20:43:23:7c:04:a6:f7:c7:
                    5e:90:31:a7:3d:c0:1e:36:4d:68:ba:54:6d:e4:9c:
                    1b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:8C:A3:BE:04:72:AF:13:7F:79:E4:F4:34:75:DA:02:48:35:5F:53
            X509v3 Authority Key Identifier:
                keyid:63:1A:DD:36:A3:A0:71:B5:4A:98:E2:66:46:62:D6:CD:CD:14:64:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/3135322e3233312e32362e302f32342d3234203d3e20323636383737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.231.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:91:6a:e9:c2:7f:2e:6a:a4:6d:1a:56:74:7a:99:83:b8:8a:
         7e:07:af:b7:c1:7d:87:0a:f0:2b:b1:86:bb:17:c8:f9:d5:0e:
         16:df:d7:39:e3:a8:30:82:62:06:67:8f:b8:e7:43:6b:1d:f1:
         0a:17:79:00:f4:6e:4a:72:01:dc:8c:24:c6:58:4b:a5:19:41:
         a9:9b:f9:bd:9f:c9:be:88:36:23:4b:f4:da:2d:5d:00:0b:3a:
         9b:4d:46:08:e5:e0:ce:b6:52:5a:d0:1e:1e:35:72:e4:95:4c:
         1a:a4:c2:0d:ec:c4:de:14:e4:53:75:85:27:7d:04:10:f7:c5:
         47:81:29:4d:b5:50:5f:8b:4d:98:d0:e8:6c:60:83:32:ad:4e:
         74:4b:29:0e:1f:9d:ed:9e:35:4b:86:b0:cc:27:66:df:bd:f9:
         f7:0e:f0:8d:be:be:ee:40:bf:63:3c:34:c6:e5:02:13:96:64:
         8a:d2:c6:30:78:88:ea:e8:31:dd:a7:7c:74:fe:36:1c:5d:bf:
         2c:41:45:76:85:3a:7c:07:46:b1:3e:65:50:e6:f1:1c:14:7e:
         47:f3:09:7f:01:c4:4a:96:60:f8:af:a1:40:74:c6:47:d2:a1:
         a8:20:a1:6e:5d:4f:f2:a9:ea:1e:70:1b:fd:fd:c5:0c:29:1c:
         33:1c:55:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 18:48:35 2025 by rpki-client