Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2EE790DDFBC2DE527E0C89CB7068152E4E64C0C96B2E60844316BAAE0AF3682C/0/3134382e3230332e3136302e302f31392d3234203d3e2033383130.roa
File:                     3134382e3230332e3136302e302f31392d3234203d3e2033383130.roa (raw, json)
Hash identifier:          4LgSsxVvfrQomJpsTOA85/VGiEQmPfV7UJiygarGmpc=
Subject key identifier:   61:C6:0D:C8:75:02:91:81:0B:44:F1:17:65:5A:4B:42:32:0E:52:58
Certificate issuer:       /CN=82CBD163FC51F02FDFBD3D8D69A5E4DC6C51F0E8
Certificate serial:       47AD410131BFE3F1F51DF0950C4EE6AC59BA6771
Authority key identifier: 82:CB:D1:63:FC:51:F0:2F:DF:BD:3D:8D:69:A5:E4:DC:6C:51:F0:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82CBD163FC51F02FDFBD3D8D69A5E4DC6C51F0E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2EE790DDFBC2DE527E0C89CB7068152E4E64C0C96B2E60844316BAAE0AF3682C/0/3134382e3230332e3136302e302f31392d3234203d3e2033383130.roa
Signing time:             Tue 19 May 2026 00:35:00 +0000
ROA not before:           Tue 19 May 2026 00:30:00 +0000
ROA not after:            Tue 18 May 2027 00:35:00 +0000
asID:                     3810
IP address blocks:        148.203.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2EE790DDFBC2DE527E0C89CB7068152E4E64C0C96B2E60844316BAAE0AF3682C/0/82CBD163FC51F02FDFBD3D8D69A5E4DC6C51F0E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2EE790DDFBC2DE527E0C89CB7068152E4E64C0C96B2E60844316BAAE0AF3682C/0/82CBD163FC51F02FDFBD3D8D69A5E4DC6C51F0E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82CBD163FC51F02FDFBD3D8D69A5E4DC6C51F0E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:ad:41:01:31:bf:e3:f1:f5:1d:f0:95:0c:4e:e6:ac:59:ba:67:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82CBD163FC51F02FDFBD3D8D69A5E4DC6C51F0E8
        Validity
            Not Before: May 19 00:30:00 2026 GMT
            Not After : May 18 00:35:00 2027 GMT
        Subject: CN=61C60DC8750291810B44F117655A4B42320E5258
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:08:d5:c6:29:ff:cc:4b:2a:4c:74:cc:fb:7a:
                    e6:41:3b:3b:06:5d:92:94:bb:27:67:80:09:b0:33:
                    31:ce:1b:6f:62:58:f0:cf:7e:a6:5e:ee:cd:d1:be:
                    a1:fc:62:93:46:e7:d5:44:cd:2a:a6:61:9d:b6:6e:
                    ce:0d:b7:5c:ef:71:d2:f5:f5:93:ee:ba:59:84:55:
                    ea:09:b8:80:12:2d:ec:f2:7c:a8:77:ee:e8:3c:eb:
                    f6:05:62:1d:9d:f6:b3:f3:ef:4f:ff:f4:11:dc:87:
                    2a:aa:d9:ab:af:d4:76:92:a8:78:03:55:bf:fc:a0:
                    35:f8:8c:87:54:f0:59:42:d1:87:2a:76:07:76:d9:
                    8a:40:1d:20:2f:35:40:9d:87:0e:79:7a:32:d3:12:
                    7a:9b:9a:f9:b6:c9:50:f7:26:67:fd:e3:29:e0:df:
                    f2:aa:d9:dc:3f:5e:a3:d1:da:17:dd:74:4d:ab:a5:
                    e0:53:d9:f7:d4:e9:fb:65:bf:8b:f4:24:37:54:08:
                    9f:ff:0c:eb:28:b2:e1:66:d6:46:ae:4a:ed:5a:c9:
                    03:90:d9:31:47:a2:92:92:29:6b:b9:c2:df:11:bb:
                    bb:5d:5e:4e:75:f8:01:7a:4e:ad:88:64:94:5c:5f:
                    77:ef:16:9d:28:7a:fe:41:d2:59:14:c4:1a:18:28:
                    42:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:C6:0D:C8:75:02:91:81:0B:44:F1:17:65:5A:4B:42:32:0E:52:58
            X509v3 Authority Key Identifier:
                keyid:82:CB:D1:63:FC:51:F0:2F:DF:BD:3D:8D:69:A5:E4:DC:6C:51:F0:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2EE790DDFBC2DE527E0C89CB7068152E4E64C0C96B2E60844316BAAE0AF3682C/0/82CBD163FC51F02FDFBD3D8D69A5E4DC6C51F0E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82CBD163FC51F02FDFBD3D8D69A5E4DC6C51F0E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2EE790DDFBC2DE527E0C89CB7068152E4E64C0C96B2E60844316BAAE0AF3682C/0/3134382e3230332e3136302e302f31392d3234203d3e2033383130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.203.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         2f:c4:f9:f5:20:c6:31:42:ab:27:6b:35:a8:11:79:ae:a7:2d:
         6c:c1:35:a1:a9:71:41:07:f8:56:90:f8:e1:f7:3e:8c:60:39:
         41:8e:6a:3c:d4:63:10:15:dc:e6:ac:fc:0a:75:d4:c7:7e:9c:
         f7:24:66:d4:95:a5:c0:22:23:4f:b9:87:a1:66:92:44:49:7f:
         7f:b6:18:28:f4:b2:a3:c7:a9:e8:94:ca:57:e8:cb:96:10:f8:
         cd:ed:8c:c6:25:3d:d3:2b:07:8d:47:04:59:5b:68:cb:4a:1e:
         9c:4a:e1:06:55:08:f8:8e:f4:f7:7e:2b:70:f6:b9:16:93:b3:
         40:7b:67:9f:35:01:34:f5:46:d3:63:11:af:20:cc:6e:a9:6f:
         a6:3d:3d:5d:d3:a5:68:d4:e1:0b:d9:ac:8d:7f:34:7b:75:94:
         fa:66:2b:cc:56:5c:ac:32:d1:66:5b:a7:58:87:59:7f:f2:5e:
         32:40:cd:e2:e9:79:c6:ca:fe:3e:5a:47:e4:ba:ec:9c:18:ce:
         6a:e8:9d:69:9d:da:9f:f3:65:ee:c8:7d:bd:27:9c:4b:e5:4f:
         a9:3c:88:3c:4b:e7:56:71:4e:97:51:6f:74:85:d2:02:ee:f2:
         87:93:aa:f8:53:94:a5:90:83:91:14:b2:d4:1d:f3:3c:c2:33:
         0a:07:8b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:48:18 2026 by rpki-client