Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/18D46FB38FCEA5E7E88051DAEC3F0E7A5884A6A872D3AA48DE664F81A7D64DDA/0/3230372e3234382e3136302e302f31392d3234203d3e203133353739.roa
File:                     3230372e3234382e3136302e302f31392d3234203d3e203133353739.roa (raw, json)
Hash identifier:          W9vU/kqyHQo33lry5148wcF4xiH0QtLaO3hmsWxZoEc=
Subject key identifier:   92:75:A0:CD:AE:37:65:23:44:AC:BE:C3:B3:28:BA:57:38:2A:A5:5F
Certificate issuer:       /CN=C2FEC792F35AA24D1CCC16C8432F4BD44BDFCEFA
Certificate serial:       684D1E9D20A135756EBB298E0FAF3F2192E294F7
Authority key identifier: C2:FE:C7:92:F3:5A:A2:4D:1C:CC:16:C8:43:2F:4B:D4:4B:DF:CE:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2FEC792F35AA24D1CCC16C8432F4BD44BDFCEFA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/18D46FB38FCEA5E7E88051DAEC3F0E7A5884A6A872D3AA48DE664F81A7D64DDA/0/3230372e3234382e3136302e302f31392d3234203d3e203133353739.roa
Signing time:             Tue 02 Jun 2026 23:46:22 +0000
ROA not before:           Tue 02 Jun 2026 23:41:22 +0000
ROA not after:            Tue 01 Jun 2027 23:46:22 +0000
asID:                     13579
IP address blocks:        207.248.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/18D46FB38FCEA5E7E88051DAEC3F0E7A5884A6A872D3AA48DE664F81A7D64DDA/0/C2FEC792F35AA24D1CCC16C8432F4BD44BDFCEFA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/18D46FB38FCEA5E7E88051DAEC3F0E7A5884A6A872D3AA48DE664F81A7D64DDA/0/C2FEC792F35AA24D1CCC16C8432F4BD44BDFCEFA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2FEC792F35AA24D1CCC16C8432F4BD44BDFCEFA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 12:34:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:4d:1e:9d:20:a1:35:75:6e:bb:29:8e:0f:af:3f:21:92:e2:94:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2FEC792F35AA24D1CCC16C8432F4BD44BDFCEFA
        Validity
            Not Before: Jun  2 23:41:22 2026 GMT
            Not After : Jun  1 23:46:22 2027 GMT
        Subject: CN=9275A0CDAE37652344ACBEC3B328BA57382AA55F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:28:af:fa:b6:32:50:12:7a:0c:0c:38:e9:54:
                    c6:b4:b3:c3:46:48:c1:92:a7:f5:fb:26:de:c0:72:
                    0c:0b:be:7a:ef:e4:95:99:27:87:ea:66:6c:4c:a3:
                    dc:41:7b:52:3e:43:21:0f:78:2c:ac:5c:c2:60:b7:
                    9b:3c:d2:49:4c:6b:ac:5b:8a:e9:5a:43:51:35:e5:
                    aa:ee:d1:c7:1b:eb:7f:17:e7:04:61:be:ea:ee:91:
                    52:3d:e3:df:b1:b7:ed:1b:ef:c5:7e:de:d9:89:c2:
                    2f:11:51:82:af:15:21:7a:6d:8c:15:a6:9a:15:91:
                    a9:85:ee:b1:65:3b:92:67:2a:85:07:42:88:2a:a5:
                    2b:b9:59:f4:26:96:e1:42:b4:ff:ed:1f:80:1c:8a:
                    ec:98:14:a2:4f:0c:61:dc:9e:1e:04:68:a3:7b:34:
                    ed:99:dc:c7:f1:e1:e8:1c:28:1a:6f:96:2e:e5:64:
                    75:3b:75:4a:73:c4:b0:31:43:58:66:61:68:c4:dd:
                    55:b1:2d:64:20:cf:93:80:e9:09:1a:a5:87:44:5a:
                    5f:18:e6:f6:56:80:e7:bb:f8:8c:62:e7:76:26:01:
                    d0:c7:f8:f2:6a:4c:89:60:2d:5f:36:e9:d4:a1:a9:
                    6c:d1:47:18:09:80:a6:50:88:99:3f:ef:3e:42:7f:
                    ca:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:75:A0:CD:AE:37:65:23:44:AC:BE:C3:B3:28:BA:57:38:2A:A5:5F
            X509v3 Authority Key Identifier:
                keyid:C2:FE:C7:92:F3:5A:A2:4D:1C:CC:16:C8:43:2F:4B:D4:4B:DF:CE:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/18D46FB38FCEA5E7E88051DAEC3F0E7A5884A6A872D3AA48DE664F81A7D64DDA/0/C2FEC792F35AA24D1CCC16C8432F4BD44BDFCEFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2FEC792F35AA24D1CCC16C8432F4BD44BDFCEFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18D46FB38FCEA5E7E88051DAEC3F0E7A5884A6A872D3AA48DE664F81A7D64DDA/0/3230372e3234382e3136302e302f31392d3234203d3e203133353739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.248.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         44:61:32:5b:bb:a8:ea:85:b5:e5:49:77:da:6b:b9:9d:17:84:
         49:2d:2b:02:5c:ab:89:60:9b:7b:37:5b:1b:cc:82:54:d4:6c:
         e2:cb:8b:04:07:20:d9:bd:a6:5b:aa:b1:a0:8a:b0:e4:ee:3e:
         8e:e8:27:e0:1d:aa:14:af:7e:f2:ef:37:06:6e:03:c1:5e:05:
         87:f0:23:5a:da:4e:3e:55:0e:0f:a1:72:c8:b2:69:2f:3b:fb:
         6e:dd:14:01:bf:a7:8d:77:f6:ad:89:26:4c:7c:e9:64:44:9c:
         a8:91:74:38:7d:92:bd:c1:11:b7:fc:f2:88:8e:b0:c0:d7:bc:
         67:1d:0a:d4:f0:5f:25:d8:c9:57:e2:d0:9d:c9:8b:d0:1b:e1:
         04:9b:8a:76:a1:29:f7:20:17:9a:42:09:1f:05:9f:55:a9:e1:
         24:9e:bb:68:48:51:14:3c:bb:3e:da:11:94:60:34:3e:5d:f5:
         04:86:7c:6c:4d:1b:58:dd:5f:00:5e:b8:b1:4e:e9:68:b4:70:
         c2:f2:b8:7d:c2:00:17:67:87:78:25:f4:c4:1c:cd:ea:35:15:
         d7:73:3a:d3:74:15:a0:74:9e:5a:35:18:c5:73:7a:3f:6c:18:
         b2:b2:64:2d:9d:21:65:d4:bb:9f:c9:69:60:77:60:ce:57:87:
         6f:fe:0d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:43:41 2026 by rpki-client