Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/AS262187.roa
File:                     AS262187.roa (raw, json)
Hash identifier:          4PvO2RsOO2sPhVO6W1hMNuDNl4e37J/uXh8aFOHOWUg=
Subject key identifier:   51:67:DE:7A:79:DB:61:08:F8:F4:6E:55:F2:9C:07:5C:FF:F2:95:66
Certificate issuer:       /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial:       4854E7430745EBA2DCC65FC293A5DBF6B537C59F
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/AS262187.roa
Signing time:             Fri 27 Mar 2026 21:05:02 +0000
ROA not before:           Fri 27 Mar 2026 21:00:02 +0000
ROA not after:            Fri 26 Mar 2027 21:05:02 +0000
asID:                     262187
IP address blocks:        190.216.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 04:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:54:e7:43:07:45:eb:a2:dc:c6:5f:c2:93:a5:db:f6:b5:37:c5:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
        Validity
            Not Before: Mar 27 21:00:02 2026 GMT
            Not After : Mar 26 21:05:02 2027 GMT
        Subject: CN=5167DE7A79DB6108F8F46E55F29C075CFFF29566
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d0:89:54:9c:d6:95:8f:3a:bd:00:fa:90:74:
                    e0:7e:3e:b7:17:ae:fa:96:ec:83:6c:50:90:9d:dc:
                    28:04:cd:3d:78:90:36:fc:c7:cc:32:e0:39:40:9c:
                    fa:1c:e6:3b:41:1f:20:9e:63:7a:e1:9b:43:c7:e1:
                    c7:02:f7:fc:53:5a:39:e7:8d:94:0e:e5:79:fe:7a:
                    91:e7:70:72:6b:20:d5:ca:24:f8:a9:94:cd:5a:aa:
                    2d:bb:90:2c:67:28:b2:1f:74:5c:8c:e0:60:23:82:
                    56:5f:8d:73:11:ce:33:3e:9d:16:71:e5:17:34:b9:
                    b1:4c:0c:73:fb:7d:db:e4:0a:e4:fe:ca:8b:90:54:
                    53:49:c3:7b:73:37:75:27:8b:0d:a0:c7:4a:34:bf:
                    74:5f:f0:d6:a7:34:81:04:99:d7:c6:83:c5:e8:95:
                    95:95:8f:58:32:84:27:b2:43:25:5e:61:3e:52:87:
                    26:86:e2:f8:f8:29:cf:6a:82:e9:53:a9:81:67:b0:
                    4a:d1:b6:30:12:ad:3b:50:ad:39:a2:dd:bf:21:7f:
                    60:ec:de:71:c6:7d:d9:44:01:fe:a3:52:86:05:be:
                    cb:b5:12:59:af:6d:d1:74:0b:d5:71:7c:2e:84:23:
                    16:61:7b:7f:b9:da:b8:7c:64:52:14:b7:72:bd:74:
                    a6:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:67:DE:7A:79:DB:61:08:F8:F4:6E:55:F2:9C:07:5C:FF:F2:95:66
            X509v3 Authority Key Identifier:
                keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/AS262187.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.216.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:e0:69:ae:cc:06:3e:25:6a:2b:d3:3a:5b:46:c7:37:a6:30:
         08:3f:58:e3:6e:c8:b9:ef:ca:5b:46:af:fd:89:65:37:69:5d:
         36:32:8b:00:06:7a:e4:55:91:5e:7d:da:8e:97:61:41:33:2f:
         86:86:77:eb:88:71:60:82:57:9d:22:28:03:c6:f4:78:16:d7:
         ba:b1:20:09:47:c7:8e:8a:ef:10:a3:67:a2:ec:4e:bc:7c:35:
         87:5c:83:13:80:92:5e:c8:de:4b:77:7c:86:fe:04:e1:de:43:
         9e:32:76:16:cd:55:e3:b5:9c:2d:9e:bf:60:b5:76:15:e0:a9:
         a8:dd:aa:aa:7b:23:44:34:2f:42:11:f4:9b:f2:c1:55:63:a3:
         22:fa:2b:76:d0:25:f4:71:60:68:60:8e:e3:66:a7:0b:6d:4c:
         d5:9c:5c:6e:5c:fa:81:9b:52:42:f6:11:20:76:0c:67:44:44:
         28:ea:98:e1:c6:54:d8:5d:3a:7a:d7:06:62:4e:13:48:a2:1d:
         67:f6:47:63:11:88:39:fb:fb:9a:5a:6d:6b:bc:d6:18:43:2a:
         ec:5b:be:5c:7d:04:aa:b7:73:d0:02:70:db:6a:fc:f2:5a:70:
         76:f8:52:27:13:fa:d9:9f:af:4c:61:8d:c3:1d:54:74:0e:74:
         cf:32:6e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:29:35 2026 by rpki-client