Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2EE790DDFBC2DE527E0C89CB7068152E4E64C0C96B2E60844316BAAE0AF3682C/0/3134382e3230332e3230382e302f32302d3234203d3e2033383130.roa
File:                     3134382e3230332e3230382e302f32302d3234203d3e2033383130.roa (raw, json)
Hash identifier:          F9uHbooFMbwkNNKREmMBRZCvpDv+Ksm4QZkWEvy8Eqw=
Subject key identifier:   4A:45:6F:4F:6F:D5:69:B2:0C:4D:74:18:19:50:14:CB:BB:47:F3:E2
Certificate issuer:       /CN=82CBD163FC51F02FDFBD3D8D69A5E4DC6C51F0E8
Certificate serial:       321018A764A6ABA9BF08F260D79A0B6B45D42647
Authority key identifier: 82:CB:D1:63:FC:51:F0:2F:DF:BD:3D:8D:69:A5:E4:DC:6C:51:F0:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82CBD163FC51F02FDFBD3D8D69A5E4DC6C51F0E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2EE790DDFBC2DE527E0C89CB7068152E4E64C0C96B2E60844316BAAE0AF3682C/0/3134382e3230332e3230382e302f32302d3234203d3e2033383130.roa
Signing time:             Tue 19 May 2026 00:30:01 +0000
ROA not before:           Tue 19 May 2026 00:25:01 +0000
ROA not after:            Tue 18 May 2027 00:30:01 +0000
asID:                     3810
IP address blocks:        148.203.208.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2EE790DDFBC2DE527E0C89CB7068152E4E64C0C96B2E60844316BAAE0AF3682C/0/82CBD163FC51F02FDFBD3D8D69A5E4DC6C51F0E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2EE790DDFBC2DE527E0C89CB7068152E4E64C0C96B2E60844316BAAE0AF3682C/0/82CBD163FC51F02FDFBD3D8D69A5E4DC6C51F0E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82CBD163FC51F02FDFBD3D8D69A5E4DC6C51F0E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:10:18:a7:64:a6:ab:a9:bf:08:f2:60:d7:9a:0b:6b:45:d4:26:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82CBD163FC51F02FDFBD3D8D69A5E4DC6C51F0E8
        Validity
            Not Before: May 19 00:25:01 2026 GMT
            Not After : May 18 00:30:01 2027 GMT
        Subject: CN=4A456F4F6FD569B20C4D7418195014CBBB47F3E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:53:80:bd:4a:fd:63:7d:44:4a:9c:a0:85:70:
                    31:a6:d5:ec:f3:80:50:83:12:bb:cf:2c:76:b6:f5:
                    b1:06:55:4c:62:90:61:28:1c:a8:9d:d7:78:37:14:
                    54:92:89:28:36:4e:f4:e1:70:ea:4a:1e:b8:7e:44:
                    af:dd:ca:fc:fd:33:cf:93:8f:e5:da:02:2b:83:d0:
                    11:b4:85:26:e9:d2:68:bc:f6:2f:4e:09:d6:0b:db:
                    ef:53:ba:ef:58:e3:d7:59:73:03:2d:b9:3c:9c:b9:
                    b9:ad:ad:e2:ed:af:17:23:e9:c9:5b:59:c1:8b:c1:
                    16:da:a5:6d:81:60:c8:2c:92:74:e8:db:91:37:73:
                    be:cb:ca:80:60:c7:a6:ff:f2:2d:d5:ee:f1:af:11:
                    c6:80:24:b4:81:b9:d2:01:3b:9a:7d:d0:3f:41:d9:
                    cb:3b:66:45:a7:25:ca:15:49:92:11:82:08:53:f7:
                    7a:1d:e4:53:c1:c6:e4:af:aa:cb:8f:df:9d:a6:aa:
                    61:93:fa:53:9d:46:61:f1:db:0a:c5:b5:63:1a:2b:
                    48:2e:c0:d2:78:17:04:78:14:c1:25:4a:4b:6e:42:
                    3b:64:29:1b:ff:91:12:a8:1b:f8:75:f4:aa:1b:69:
                    86:4a:4a:90:69:8f:97:cf:b1:a2:a2:9b:79:08:40:
                    e3:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:45:6F:4F:6F:D5:69:B2:0C:4D:74:18:19:50:14:CB:BB:47:F3:E2
            X509v3 Authority Key Identifier:
                keyid:82:CB:D1:63:FC:51:F0:2F:DF:BD:3D:8D:69:A5:E4:DC:6C:51:F0:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2EE790DDFBC2DE527E0C89CB7068152E4E64C0C96B2E60844316BAAE0AF3682C/0/82CBD163FC51F02FDFBD3D8D69A5E4DC6C51F0E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82CBD163FC51F02FDFBD3D8D69A5E4DC6C51F0E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2EE790DDFBC2DE527E0C89CB7068152E4E64C0C96B2E60844316BAAE0AF3682C/0/3134382e3230332e3230382e302f32302d3234203d3e2033383130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.203.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a5:6a:d6:41:30:52:87:2f:8c:8e:12:7a:2d:d0:70:64:74:be:
         96:74:19:66:14:47:87:a3:3b:44:f6:3c:48:8c:2d:3e:e8:bb:
         c2:2c:12:30:42:b3:18:dc:98:f8:10:fe:2b:9e:b0:45:1f:c8:
         b3:bf:66:6c:d1:3d:a8:32:85:8d:b0:84:88:f1:8a:2e:68:c3:
         b0:48:1b:2f:19:49:c4:6a:ab:ae:0f:60:cd:eb:34:6c:d4:13:
         9d:e8:de:33:00:da:f9:43:4e:34:3c:ab:60:50:cc:dd:15:9d:
         18:bc:af:37:af:69:3b:6d:7b:b2:f6:bf:e6:f8:de:ea:b1:b1:
         d2:8e:a3:8f:bc:52:33:2e:10:95:d0:1f:eb:e6:55:af:19:21:
         6b:05:fa:3c:af:cf:e7:f7:75:d5:9c:b0:b7:6b:22:fd:80:14:
         98:49:6d:13:82:88:47:4e:f7:bc:d5:27:57:b9:b0:fa:19:14:
         0a:84:63:70:f2:3e:b6:22:7f:4a:4e:1f:e8:b0:db:71:c9:34:
         1f:75:3d:65:ee:5c:4f:03:2d:c6:82:55:11:91:c4:d0:ba:ee:
         2f:3b:db:5b:1f:08:90:16:48:92:62:ff:61:37:3c:e2:eb:61:
         41:01:1e:a3:8a:71:e9:79:38:a2:87:86:57:30:22:43:8d:99:
         1f:27:86:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:48:23 2026 by rpki-client