Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3136382e3232382e3132362e302f32342d3234203d3e20323632313931.roa
File:                     3136382e3232382e3132362e302f32342d3234203d3e20323632313931.roa (raw, json)
Hash identifier:          WdY6JHXyD87W/Ao31zKuVrDJHwLyUVhn7YJiPSmnaF0=
Subject key identifier:   AE:44:88:DA:EC:94:21:D9:26:4A:9D:4D:A3:B0:32:7A:27:2A:28:75
Certificate issuer:       /CN=F8384152DEE38D62B98700A59634A5B9FAF406B3
Certificate serial:       10D1D7551B05CD1AAA980D2D00AE2E7648980A71
Authority key identifier: F8:38:41:52:DE:E3:8D:62:B9:87:00:A5:96:34:A5:B9:FA:F4:06:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3136382e3232382e3132362e302f32342d3234203d3e20323632313931.roa
Signing time:             Fri 30 Jan 2026 06:41:18 +0000
ROA not before:           Fri 30 Jan 2026 06:36:18 +0000
ROA not after:            Fri 29 Jan 2027 06:41:18 +0000
asID:                     262191
IP address blocks:        168.228.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:d1:d7:55:1b:05:cd:1a:aa:98:0d:2d:00:ae:2e:76:48:98:0a:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8384152DEE38D62B98700A59634A5B9FAF406B3
        Validity
            Not Before: Jan 30 06:36:18 2026 GMT
            Not After : Jan 29 06:41:18 2027 GMT
        Subject: CN=AE4488DAEC9421D9264A9D4DA3B0327A272A2875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c4:20:3e:4c:7d:da:31:b5:1b:12:a9:5d:45:
                    52:e1:ff:97:39:c4:47:02:91:82:3a:01:bd:10:76:
                    30:3d:e1:c1:d5:61:9c:00:bd:d2:cf:62:06:dc:63:
                    c9:fd:e6:02:8d:b5:d5:db:3a:69:82:a3:36:ae:8c:
                    41:a8:73:5e:32:1f:57:0d:b0:4d:a9:3e:1a:fd:45:
                    c1:f2:0a:09:9b:de:ee:27:23:b7:15:20:f8:39:25:
                    5f:1d:f5:4e:95:e5:46:33:50:a7:90:9d:4b:0b:c7:
                    97:71:bd:16:a2:40:ca:33:e4:df:75:f9:f9:95:54:
                    bf:08:2f:cb:c9:8b:81:ab:41:7f:59:81:cd:a7:14:
                    bd:66:4b:0c:a6:39:c1:3c:50:95:0d:13:2d:fb:00:
                    ce:1a:00:2f:a4:3a:7a:4b:c0:bc:07:0e:cb:9a:ca:
                    a5:dc:9a:df:10:f8:0c:5b:11:b2:d3:6f:3b:5d:4a:
                    a5:11:3e:4c:8d:de:11:cf:84:ea:8c:7f:d7:c9:cb:
                    1a:b4:aa:b2:ed:38:71:a3:c2:eb:17:9c:e2:88:e1:
                    04:a8:5f:c2:28:c5:99:8a:52:66:dd:80:86:5d:a9:
                    13:f4:b1:55:25:72:06:0a:7d:3d:04:10:8e:72:4b:
                    83:36:9f:1a:c9:eb:08:c1:36:9e:40:b1:69:4f:b0:
                    b4:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:44:88:DA:EC:94:21:D9:26:4A:9D:4D:A3:B0:32:7A:27:2A:28:75
            X509v3 Authority Key Identifier:
                keyid:F8:38:41:52:DE:E3:8D:62:B9:87:00:A5:96:34:A5:B9:FA:F4:06:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3136382e3232382e3132362e302f32342d3234203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:5a:0d:d0:04:65:b1:6a:c6:88:3e:1f:4a:61:53:14:d3:dc:
         82:a9:76:11:e3:db:31:7b:94:f8:f5:79:d6:2a:a1:7c:d4:1e:
         bc:8a:41:80:19:8b:70:4e:db:3b:39:69:3c:16:8b:4d:79:0a:
         6d:9e:57:9c:64:0d:f1:0f:33:41:ba:44:46:23:0e:1b:64:d7:
         c7:55:d9:50:74:57:fd:3d:98:b5:f0:79:6d:5b:82:c6:68:13:
         8a:0e:87:a8:21:d0:fb:a0:c1:59:97:24:2a:e5:ae:28:e9:97:
         36:08:87:60:1e:e7:e7:f7:81:b0:3e:01:b4:b8:b5:6f:d4:62:
         a0:46:83:98:6f:91:48:72:37:1a:0f:19:79:43:85:0d:e6:b0:
         89:dd:62:d8:d9:63:cd:a3:8b:b9:a3:1e:8f:44:bb:cf:bd:3b:
         0c:d0:af:d3:e4:f3:f0:36:9a:c8:66:dd:33:11:4c:04:06:6a:
         e9:7a:9e:d4:57:b1:e6:b6:23:0f:9a:a2:ab:54:85:70:d8:a2:
         6b:a7:3b:c7:30:4b:23:b5:8a:0d:31:90:8c:59:13:b4:bc:cf:
         fd:88:cf:2d:1b:c9:19:5c:18:1b:6a:ed:8f:79:3e:b4:cc:cc:
         80:c4:6d:b0:ef:e8:8c:48:8c:d8:cf:13:03:83:df:bf:ae:3d:
         2a:b3:65:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:44:55 2026 by rpki-client