Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/3136372e3235302e3133322e302f32332d3234203d3e20323733383833.roa
File:                     3136372e3235302e3133322e302f32332d3234203d3e20323733383833.roa (raw, json)
Hash identifier:          HTw9RlLJbIuU1ZeIMxGOEIMtmPDxZWFDSO2xPbSxEJ0=
Subject key identifier:   E4:E9:6A:C5:F9:23:44:FB:7C:F1:D2:F0:B1:B4:FF:96:8F:2A:EE:47
Certificate issuer:       /CN=FC6165EDE0618587777D4D1F276F1CAFA98A645B
Certificate serial:       69A8A1B5EFF6428FB5C9CC396A5034E990E62160
Authority key identifier: FC:61:65:ED:E0:61:85:87:77:7D:4D:1F:27:6F:1C:AF:A9:8A:64:5B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/3136372e3235302e3133322e302f32332d3234203d3e20323733383833.roa
Signing time:             Fri 22 May 2026 15:10:00 +0000
ROA not before:           Fri 22 May 2026 15:05:00 +0000
ROA not after:            Fri 21 May 2027 15:10:00 +0000
asID:                     273883
IP address blocks:        167.250.132.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 12:02:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:a8:a1:b5:ef:f6:42:8f:b5:c9:cc:39:6a:50:34:e9:90:e6:21:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC6165EDE0618587777D4D1F276F1CAFA98A645B
        Validity
            Not Before: May 22 15:05:00 2026 GMT
            Not After : May 21 15:10:00 2027 GMT
        Subject: CN=E4E96AC5F92344FB7CF1D2F0B1B4FF968F2AEE47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:8d:2c:9c:8a:c5:f5:ec:9c:59:fc:e6:d4:53:
                    3e:79:49:a4:dc:17:c7:1a:95:1e:9e:71:e3:dc:34:
                    b1:10:5e:7a:4d:d1:1f:19:89:fd:03:1c:0a:3e:0c:
                    48:ed:0b:ae:ab:b1:00:31:c4:84:72:61:39:76:26:
                    47:91:f7:7a:7b:4e:c7:38:f9:9b:41:e3:72:07:85:
                    ff:f6:4c:5e:12:59:5a:60:74:d3:93:4f:a8:ab:a9:
                    9b:dd:9c:1b:b2:9e:c0:f2:cf:05:34:c9:44:fa:29:
                    f7:85:bc:3a:13:c8:5c:6b:39:95:0a:83:c7:f1:a8:
                    0d:de:3d:e0:df:68:74:10:0d:d0:01:ba:4b:4c:49:
                    65:16:25:68:cc:28:ff:bf:2a:81:aa:5d:a1:2a:cd:
                    9c:09:b6:a3:2e:93:6e:7e:cc:d6:68:e3:85:ee:93:
                    68:62:3d:2f:80:72:fc:bf:88:dc:f7:c2:33:c7:2e:
                    97:e0:d4:12:2c:16:dc:82:43:e5:6b:89:e0:48:a7:
                    ac:e6:bc:e4:fe:b0:d4:98:da:84:c0:71:6f:3d:90:
                    6e:b5:92:a7:d9:5c:fd:1e:ea:e3:10:bf:ed:0f:61:
                    89:47:c0:61:42:a6:f1:f9:1c:b3:53:88:5c:f8:3d:
                    5b:fc:d4:f1:11:b9:ce:18:7d:10:5a:0b:b9:82:22:
                    bd:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:E9:6A:C5:F9:23:44:FB:7C:F1:D2:F0:B1:B4:FF:96:8F:2A:EE:47
            X509v3 Authority Key Identifier:
                keyid:FC:61:65:ED:E0:61:85:87:77:7D:4D:1F:27:6F:1C:AF:A9:8A:64:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/3136372e3235302e3133322e302f32332d3234203d3e20323733383833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         89:6b:fc:4e:c6:9c:e5:7f:ea:91:20:b0:3c:de:ea:c6:cb:f7:
         3f:1f:89:1a:36:4c:6a:93:ef:b4:85:a1:a1:49:f1:4d:bd:0c:
         f7:f7:4d:76:6e:86:9a:c0:d6:29:b1:7d:79:a0:c5:40:d9:ef:
         c1:c3:91:23:0b:d0:9e:8f:f6:63:34:cf:3e:1a:24:3d:43:2d:
         9b:a7:44:8a:ca:9d:f4:5a:65:2a:83:08:b1:1f:a3:53:2d:75:
         f3:49:b2:8f:b1:33:f2:6b:65:fa:dd:69:f7:98:f5:1f:98:d1:
         0d:15:76:04:80:83:1a:93:bf:98:bf:2d:6d:2d:a3:77:d1:8b:
         be:cc:60:31:b9:72:9b:98:21:68:ba:e9:ec:f4:2e:d9:e9:0f:
         9e:90:b7:c7:83:c4:d2:e8:5c:81:3b:e9:24:ca:d9:55:0e:30:
         a3:1b:7c:61:75:5d:72:28:93:6b:0b:f4:d3:ff:a9:13:ef:d8:
         0f:e6:b7:69:cb:95:9a:43:85:36:5e:43:43:af:a4:c0:55:ea:
         2d:8b:68:71:eb:08:be:01:50:b9:91:d8:93:34:01:36:65:14:
         4c:a6:69:ff:4c:d1:a7:29:f2:91:86:a7:40:d2:2e:0d:1c:15:
         c4:46:79:16:22:33:19:25:07:a6:6d:40:18:53:29:bc:d2:d7:
         26:c4:f6:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:57:04 2026 by rpki-client