Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/07F7E70533B53DEB460E345785342E0ED22DD2C75131E2C43F4624E1A2435ADA/0/3134382e3232342e35362e302f32332d3234203d3e20323732343033.roa
File:                     3134382e3232342e35362e302f32332d3234203d3e20323732343033.roa (raw, json)
Hash identifier:          YccB7Bye0WzfaT0Vt4lYOWCIEo3n4ZhAUVWVsMElFCo=
Subject key identifier:   97:C7:37:AA:8F:76:CD:88:9C:94:1D:80:AD:55:5B:95:55:A8:51:87
Certificate issuer:       /CN=9F6F899DA067FC03FDE230388E44F7A4A92EC00B
Certificate serial:       6E2C23C1E5C9201522CA2F716AC686C3CE8E1506
Authority key identifier: 9F:6F:89:9D:A0:67:FC:03:FD:E2:30:38:8E:44:F7:A4:A9:2E:C0:0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F6F899DA067FC03FDE230388E44F7A4A92EC00B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/07F7E70533B53DEB460E345785342E0ED22DD2C75131E2C43F4624E1A2435ADA/0/3134382e3232342e35362e302f32332d3234203d3e20323732343033.roa
Signing time:             Tue 17 Feb 2026 17:45:00 +0000
ROA not before:           Tue 17 Feb 2026 17:40:00 +0000
ROA not after:            Tue 16 Feb 2027 17:45:00 +0000
asID:                     272403
IP address blocks:        148.224.56.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/07F7E70533B53DEB460E345785342E0ED22DD2C75131E2C43F4624E1A2435ADA/0/9F6F899DA067FC03FDE230388E44F7A4A92EC00B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/07F7E70533B53DEB460E345785342E0ED22DD2C75131E2C43F4624E1A2435ADA/0/9F6F899DA067FC03FDE230388E44F7A4A92EC00B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F6F899DA067FC03FDE230388E44F7A4A92EC00B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Mar 2026 21:19:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:2c:23:c1:e5:c9:20:15:22:ca:2f:71:6a:c6:86:c3:ce:8e:15:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F6F899DA067FC03FDE230388E44F7A4A92EC00B
        Validity
            Not Before: Feb 17 17:40:00 2026 GMT
            Not After : Feb 16 17:45:00 2027 GMT
        Subject: CN=97C737AA8F76CD889C941D80AD555B9555A85187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:88:b2:bf:92:55:a9:c2:0c:d3:74:4a:69:cd:
                    73:4b:bb:3e:e9:7c:3d:60:33:c4:25:44:c8:d5:e4:
                    51:06:3d:f5:20:bf:b3:d9:9c:4a:09:31:fe:3c:33:
                    49:49:e5:1f:6b:3e:67:b9:e6:da:eb:c7:e3:4d:a2:
                    4a:42:56:aa:9b:3e:d3:d8:fa:99:69:4e:08:b1:d0:
                    29:f6:82:6f:91:97:e8:5e:13:ff:20:6c:11:12:b8:
                    1d:54:9d:5f:ac:a9:64:6c:23:92:42:28:4b:f9:c9:
                    34:64:89:8c:24:e7:6b:92:d1:81:21:7c:d1:05:11:
                    81:11:d1:04:18:3e:33:98:82:32:be:4e:72:02:30:
                    2f:f6:2e:f9:63:31:5f:f0:14:a9:73:e4:10:c4:b7:
                    e6:14:78:6c:9a:ba:14:87:fc:14:95:1f:d8:d9:8a:
                    11:48:b9:23:63:b0:38:30:65:1a:dd:94:54:50:ac:
                    d7:69:ab:ae:86:ae:5f:62:95:b9:03:0e:1c:54:1e:
                    9e:6a:d0:86:ab:82:70:58:18:9e:6d:e4:91:52:53:
                    47:ac:28:fe:4f:88:79:86:e6:7f:92:e2:fa:bb:29:
                    d4:c7:b5:87:c2:dd:98:52:fb:c4:2b:4f:c4:57:06:
                    39:0b:74:bf:dc:13:e1:10:bb:93:96:61:77:3f:56:
                    b6:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:C7:37:AA:8F:76:CD:88:9C:94:1D:80:AD:55:5B:95:55:A8:51:87
            X509v3 Authority Key Identifier:
                keyid:9F:6F:89:9D:A0:67:FC:03:FD:E2:30:38:8E:44:F7:A4:A9:2E:C0:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/07F7E70533B53DEB460E345785342E0ED22DD2C75131E2C43F4624E1A2435ADA/0/9F6F899DA067FC03FDE230388E44F7A4A92EC00B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F6F899DA067FC03FDE230388E44F7A4A92EC00B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/07F7E70533B53DEB460E345785342E0ED22DD2C75131E2C43F4624E1A2435ADA/0/3134382e3232342e35362e302f32332d3234203d3e20323732343033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.224.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         06:06:8e:dd:f3:16:ab:f3:a0:cf:3d:92:0a:e3:bb:6b:b1:62:
         bd:52:c3:25:b0:41:dd:4b:1a:ad:09:f5:12:f1:bc:0e:fd:da:
         f3:50:95:18:27:c8:69:eb:cd:0e:cd:90:7d:d9:1c:1a:ad:2a:
         a4:3a:10:75:d7:b1:b6:05:cb:7e:36:12:78:d2:5c:f4:71:64:
         4d:82:0e:12:56:6a:8d:0e:cd:be:c0:1c:4c:30:6d:b2:13:0f:
         35:09:c2:41:51:08:ef:e8:2d:9b:5b:f1:1f:e9:c0:50:72:61:
         46:c6:eb:cb:12:aa:d2:59:ba:ed:39:a7:86:50:2d:8a:79:7d:
         aa:85:19:22:21:16:32:f8:20:5d:e8:03:1b:f1:b4:4d:a5:72:
         ea:7a:4f:03:5c:6d:4f:ba:ad:a6:3f:22:09:aa:f7:ab:a5:48:
         c7:0f:a7:b5:d6:88:bb:6e:30:33:56:27:b4:74:b6:06:21:79:
         cd:74:7d:09:d5:4b:c1:5c:5a:bd:b8:c9:b3:a5:eb:7c:06:4d:
         25:93:91:e8:46:f4:cf:60:22:2c:92:7e:03:4b:fa:dd:88:3b:
         da:3b:e5:d5:bb:af:fb:77:e8:da:74:8a:fc:40:7d:38:58:6f:
         35:ca:99:a1:f6:0c:7b:e0:4c:f1:39:67:6d:aa:44:03:e6:c1:
         6a:32:93:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:37:40 2026 by rpki-client