Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/AS262208.roa
File:                     AS262208.roa (raw, json)
Hash identifier:          QsjMITxvX5PAyrp5quVys1E8WPe6nw0KVN+MF1A1+wI=
Subject key identifier:   F9:13:85:3A:56:BB:BC:AE:73:B4:1F:C6:71:19:C7:14:21:9E:B3:45
Certificate issuer:       /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial:       3507E80BE28856A46ED389F9EC6B1C6509531B8B
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/AS262208.roa
Signing time:             Fri 27 Mar 2026 21:05:00 +0000
ROA not before:           Fri 27 Mar 2026 21:00:00 +0000
ROA not after:            Fri 26 Mar 2027 21:05:00 +0000
asID:                     262208
IP address blocks:        201.234.3.0/24 maxlen: 24
                          201.234.6.0/24 maxlen: 24
                          201.234.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 04:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:07:e8:0b:e2:88:56:a4:6e:d3:89:f9:ec:6b:1c:65:09:53:1b:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
        Validity
            Not Before: Mar 27 21:00:00 2026 GMT
            Not After : Mar 26 21:05:00 2027 GMT
        Subject: CN=F913853A56BBBCAE73B41FC67119C714219EB345
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2f:2b:2f:39:48:a5:76:f4:1e:0b:a5:5f:8e:
                    7c:09:12:27:12:35:ca:f9:58:d8:30:18:a8:d3:b6:
                    17:2c:3c:00:7d:98:93:bf:e8:34:94:c9:10:c9:ef:
                    58:37:f4:fb:30:0a:65:a8:bf:05:41:0a:6a:8d:a0:
                    fe:fa:fc:3d:c6:f0:4a:1d:f4:4d:b5:24:aa:ec:63:
                    61:23:d5:2a:51:98:5d:0d:e3:66:40:3e:fe:a9:8b:
                    62:4e:54:37:04:e0:aa:86:30:e8:be:72:e6:37:0a:
                    e6:ca:6b:7a:99:5d:05:fe:59:88:35:32:83:96:5c:
                    87:4c:f9:ce:8e:e0:be:bd:25:60:74:74:26:d6:c8:
                    63:bf:49:61:2a:04:7a:62:8d:43:67:e5:8b:9b:c0:
                    95:93:65:58:84:1f:c9:fd:5c:6e:fa:dd:62:41:54:
                    6b:51:ce:d2:6c:7f:10:be:6b:ea:9b:b3:6d:d3:f7:
                    54:8d:44:d3:72:a9:7c:dc:df:75:be:78:0a:75:ac:
                    42:c3:6b:8e:c1:5e:cd:5c:96:fd:84:64:60:45:2d:
                    8b:65:af:46:95:bc:97:a5:dd:97:d6:7a:bd:57:5e:
                    32:fd:91:82:8a:03:fe:b8:6b:29:5d:3a:8c:f1:e2:
                    f8:d7:bf:ec:0f:10:09:57:9a:49:f1:09:23:1c:cb:
                    12:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:13:85:3A:56:BB:BC:AE:73:B4:1F:C6:71:19:C7:14:21:9E:B3:45
            X509v3 Authority Key Identifier:
                keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/AS262208.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.234.3.0/24
                  201.234.6.0/24
                  201.234.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:02:c6:e0:c5:2f:bc:c9:aa:23:fb:2a:29:7c:13:64:e0:63:
         f4:84:5f:11:14:13:9b:5c:70:e8:28:2a:13:6e:fa:17:ec:4c:
         ca:07:6b:0a:75:29:65:54:6b:db:ae:50:5d:fe:96:4b:13:bf:
         e8:26:17:52:2c:58:23:22:e9:aa:4e:1f:09:e1:8b:b1:ef:45:
         80:37:e3:aa:93:cb:3b:2b:0c:64:b2:f3:01:e0:b9:81:0b:c8:
         1e:e7:00:25:ae:ab:91:87:50:a1:8a:f2:bb:07:c3:53:df:c6:
         b0:1b:2d:12:9c:62:93:20:e2:9f:6f:37:57:2d:c5:68:26:a1:
         3c:3d:e7:5b:c4:cc:1f:05:35:ab:72:07:48:b5:bf:a2:22:0a:
         ad:e7:ac:fc:bc:9d:ea:5d:d1:55:88:06:7a:38:db:df:5e:7a:
         2e:89:05:33:0a:4b:77:89:1e:8b:92:30:3f:58:70:1b:44:91:
         88:bd:d6:60:a4:53:7f:9c:40:1d:8a:fc:6d:2d:40:72:d4:52:
         2c:43:a4:c8:5d:69:72:48:29:09:d7:24:6a:67:78:5e:a6:0b:
         68:78:db:cc:dc:70:b5:68:d8:e7:62:6f:a0:0c:df:c7:9f:f6:
         cf:3a:98:25:fe:c1:c0:b0:f8:d4:7a:24:0d:7a:ba:31:10:e6:
         d4:ed:49:1f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:29:25 2026 by rpki-client