Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3136372e3235302e3133342e302f32342d3234203d3e20323632313931.roa
File:                     3136372e3235302e3133342e302f32342d3234203d3e20323632313931.roa (raw, json)
Hash identifier:          1sAbYTnlqkws+kzqiweibBrReG09a3Pg7743Iv49HBg=
Subject key identifier:   F8:1B:BB:AF:55:0D:C8:D2:81:93:20:13:96:2E:B2:BC:8E:73:17:FC
Certificate issuer:       /CN=F8384152DEE38D62B98700A59634A5B9FAF406B3
Certificate serial:       233DBBBCE7A68F24A3032496EECA793CE615593A
Authority key identifier: F8:38:41:52:DE:E3:8D:62:B9:87:00:A5:96:34:A5:B9:FA:F4:06:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3136372e3235302e3133342e302f32342d3234203d3e20323632313931.roa
Signing time:             Fri 30 Jan 2026 06:41:10 +0000
ROA not before:           Fri 30 Jan 2026 06:36:10 +0000
ROA not after:            Fri 29 Jan 2027 06:41:10 +0000
asID:                     262191
IP address blocks:        167.250.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:3d:bb:bc:e7:a6:8f:24:a3:03:24:96:ee:ca:79:3c:e6:15:59:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8384152DEE38D62B98700A59634A5B9FAF406B3
        Validity
            Not Before: Jan 30 06:36:10 2026 GMT
            Not After : Jan 29 06:41:10 2027 GMT
        Subject: CN=F81BBBAF550DC8D281932013962EB2BC8E7317FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:9a:a6:08:3f:b5:b2:93:ff:cb:aa:dd:82:6b:
                    0d:32:68:15:55:b6:e3:42:07:54:26:6b:f5:39:76:
                    59:b3:db:21:76:ff:4d:64:9a:1a:1d:7a:f1:e5:f0:
                    04:59:3b:b2:53:8f:21:6a:a4:e5:a0:89:4e:2d:e7:
                    84:f6:d7:b3:89:45:02:ce:68:40:de:2e:2d:98:69:
                    0d:cb:d8:bd:29:e3:9a:aa:60:50:e6:c2:b4:c1:71:
                    f0:3b:bc:03:0c:0a:bf:d3:2a:36:c8:f3:44:4a:4e:
                    0a:97:b5:44:e0:2c:1b:4f:01:1f:57:02:b0:96:aa:
                    fa:b1:8c:1e:d5:ff:d8:9b:90:48:9c:8e:54:fc:9d:
                    09:cb:00:6b:96:4e:18:58:b2:95:2f:8d:47:88:39:
                    23:c8:c8:41:f8:ad:aa:f1:2d:4c:42:cf:c3:64:fe:
                    a5:8f:f0:a7:4b:ae:6c:56:9c:c0:0e:e5:f1:3c:8e:
                    22:ad:ad:eb:74:fa:85:a3:32:61:eb:2b:5b:5e:5a:
                    ad:bf:d1:f4:ce:1f:f4:17:a6:30:3f:db:cb:f3:6a:
                    50:da:cd:4d:42:94:9b:79:c6:4b:24:02:1d:f8:1a:
                    18:1b:c3:c8:87:38:e6:e6:5e:c4:d0:af:d4:98:50:
                    72:7f:91:81:7a:32:7b:1f:0f:76:f8:54:40:40:b9:
                    c0:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:1B:BB:AF:55:0D:C8:D2:81:93:20:13:96:2E:B2:BC:8E:73:17:FC
            X509v3 Authority Key Identifier:
                keyid:F8:38:41:52:DE:E3:8D:62:B9:87:00:A5:96:34:A5:B9:FA:F4:06:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3136372e3235302e3133342e302f32342d3234203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:e3:e1:88:7f:48:7b:bc:07:60:8b:e8:33:b9:83:a6:1a:70:
         6f:7b:1c:d6:12:62:e1:ce:37:f2:5d:8d:d3:e4:5a:a1:1b:28:
         3b:83:7d:5a:19:cb:db:7f:6c:f4:3d:cd:7c:b0:e9:e6:3c:91:
         c7:a5:c5:92:ba:f1:59:d1:21:6b:40:f9:d1:87:67:96:c8:38:
         2b:df:60:d8:95:2a:bb:67:3b:6b:0f:26:68:73:b1:cf:85:59:
         97:ec:88:dd:e7:15:25:19:09:82:ef:ce:0c:08:26:47:43:e2:
         67:e5:80:2c:34:e4:54:75:49:3b:b4:1a:7e:29:3d:34:a1:84:
         1a:43:24:68:c0:62:fa:dd:76:d7:9d:71:18:03:cf:6c:d3:3e:
         1f:f4:02:e7:74:74:55:b6:a7:57:db:fc:7f:35:a9:b6:c4:36:
         e3:64:08:e3:a5:eb:eb:85:14:34:3d:ab:33:e9:00:5c:cb:6b:
         c0:f0:a0:64:32:8b:20:35:c4:6b:63:ce:9f:d5:e1:bc:49:86:
         db:9c:75:3b:5c:62:cd:e4:f4:86:83:20:0d:0e:8e:a6:c2:9e:
         a7:db:33:d1:91:f5:83:c4:69:0e:49:4b:1e:96:3f:ca:f0:eb:
         f5:db:54:84:a8:0b:4f:ce:40:a0:f4:28:a6:d6:79:5c:12:b7:
         5b:e3:6b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:35:49 2026 by rpki-client