Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2EE790DDFBC2DE527E0C89CB7068152E4E64C0C96B2E60844316BAAE0AF3682C/0/3134382e3230332e3135322e302f32322d3234203d3e2033383130.roa
File:                     3134382e3230332e3135322e302f32322d3234203d3e2033383130.roa (raw, json)
Hash identifier:          6j5QDlE/UPNeTWzTSzUuloDd6LzrCNpBZ06OZs7Mym8=
Subject key identifier:   0D:DF:DC:CA:37:13:E5:43:7A:1E:F1:26:63:18:53:97:C0:D1:48:13
Certificate issuer:       /CN=82CBD163FC51F02FDFBD3D8D69A5E4DC6C51F0E8
Certificate serial:       12EB4F1DEFDDABE43211B847A5595DB773ED669F
Authority key identifier: 82:CB:D1:63:FC:51:F0:2F:DF:BD:3D:8D:69:A5:E4:DC:6C:51:F0:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82CBD163FC51F02FDFBD3D8D69A5E4DC6C51F0E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2EE790DDFBC2DE527E0C89CB7068152E4E64C0C96B2E60844316BAAE0AF3682C/0/3134382e3230332e3135322e302f32322d3234203d3e2033383130.roa
Signing time:             Tue 19 May 2026 00:30:02 +0000
ROA not before:           Tue 19 May 2026 00:25:02 +0000
ROA not after:            Tue 18 May 2027 00:30:02 +0000
asID:                     3810
IP address blocks:        148.203.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2EE790DDFBC2DE527E0C89CB7068152E4E64C0C96B2E60844316BAAE0AF3682C/0/82CBD163FC51F02FDFBD3D8D69A5E4DC6C51F0E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2EE790DDFBC2DE527E0C89CB7068152E4E64C0C96B2E60844316BAAE0AF3682C/0/82CBD163FC51F02FDFBD3D8D69A5E4DC6C51F0E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82CBD163FC51F02FDFBD3D8D69A5E4DC6C51F0E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:eb:4f:1d:ef:dd:ab:e4:32:11:b8:47:a5:59:5d:b7:73:ed:66:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82CBD163FC51F02FDFBD3D8D69A5E4DC6C51F0E8
        Validity
            Not Before: May 19 00:25:02 2026 GMT
            Not After : May 18 00:30:02 2027 GMT
        Subject: CN=0DDFDCCA3713E5437A1EF12663185397C0D14813
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:1c:a2:d6:39:97:a5:39:ed:c3:29:68:72:b2:
                    7a:1b:81:da:e6:0c:d6:3b:6f:49:e2:a0:c1:9b:ff:
                    0c:02:ec:2a:cf:6d:ab:79:c9:af:dd:dd:e8:07:7d:
                    a6:b3:76:83:89:d6:4a:c1:fb:58:f4:5b:8e:b9:b0:
                    cf:18:37:de:f9:be:b9:34:31:2f:42:63:bf:4b:43:
                    2a:91:1e:91:fe:f2:c0:b3:24:77:4e:06:1f:4b:66:
                    5c:7d:55:a3:5c:26:6a:07:2d:60:bd:cb:e0:3d:0b:
                    07:3a:22:37:9b:6d:b3:2d:0b:49:2b:db:d9:ae:63:
                    81:14:a3:5f:4c:4f:94:c1:5e:8b:db:f6:a0:39:b2:
                    6d:e8:63:44:21:19:64:a7:87:72:b8:1e:cf:58:66:
                    93:2e:20:2c:75:6e:0b:cb:f0:40:6e:4a:90:1e:55:
                    5f:14:d8:e9:03:63:0d:d7:ec:4d:24:5c:1f:fc:25:
                    e1:a8:ef:fa:6c:c0:e3:b7:03:bd:6d:24:75:3f:72:
                    3d:35:11:10:9b:e6:72:46:b4:d6:02:48:9e:cf:23:
                    d1:d0:6b:3a:2d:20:41:2d:7f:85:13:09:16:72:82:
                    bc:42:9e:31:0a:c4:ba:42:88:bb:eb:d6:40:0a:a2:
                    9d:fe:9a:6f:4b:51:18:40:9a:63:06:a4:e1:96:34:
                    8e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:DF:DC:CA:37:13:E5:43:7A:1E:F1:26:63:18:53:97:C0:D1:48:13
            X509v3 Authority Key Identifier:
                keyid:82:CB:D1:63:FC:51:F0:2F:DF:BD:3D:8D:69:A5:E4:DC:6C:51:F0:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2EE790DDFBC2DE527E0C89CB7068152E4E64C0C96B2E60844316BAAE0AF3682C/0/82CBD163FC51F02FDFBD3D8D69A5E4DC6C51F0E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82CBD163FC51F02FDFBD3D8D69A5E4DC6C51F0E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2EE790DDFBC2DE527E0C89CB7068152E4E64C0C96B2E60844316BAAE0AF3682C/0/3134382e3230332e3135322e302f32322d3234203d3e2033383130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.203.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:b4:8d:a2:69:9e:09:fc:f2:c3:2d:08:b7:20:a4:b8:f9:f5:
         3b:b4:a6:ba:93:71:c5:d1:71:d7:09:c7:be:41:40:57:34:3c:
         cd:03:12:ac:4a:af:8f:7e:cd:95:a5:47:ac:a4:8d:46:fc:5f:
         bc:a9:54:8a:97:12:8f:37:c9:10:d7:34:ed:ac:66:c6:a7:c1:
         d7:68:bd:a1:c0:39:d8:c8:e9:6b:c6:95:50:49:e9:ba:c2:eb:
         a2:47:44:44:00:e1:66:19:27:fa:dc:d3:af:75:a2:44:16:7c:
         e6:99:ea:77:82:3f:1b:68:8e:76:0e:9e:55:4f:51:70:17:94:
         50:62:a5:32:0c:46:a5:fe:87:e1:ac:5a:5d:c8:92:4a:52:59:
         9c:14:9b:20:5b:66:d6:46:de:dd:9e:1f:e1:4a:dc:3f:7a:5a:
         aa:8b:cb:cc:c7:a0:1d:6b:ec:f9:67:43:21:e3:f9:85:fa:90:
         5a:1e:29:41:83:ac:31:a9:1b:89:ce:3c:42:08:6c:4d:db:6d:
         f7:94:99:0d:c0:11:69:80:70:c0:90:ee:fd:9e:f8:d5:f2:4b:
         d3:46:47:e1:04:86:78:89:ea:58:af:39:38:7a:57:d4:24:fd:
         7c:67:20:e9:95:37:ae:19:2c:31:46:50:6d:4d:35:7b:0d:2e:
         ee:5d:af:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:48:16 2026 by rpki-client