Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2EE790DDFBC2DE527E0C89CB7068152E4E64C0C96B2E60844316BAAE0AF3682C/0/3134382e3230332e3232342e302f32302d3234203d3e2033383130.roa
File:                     3134382e3230332e3232342e302f32302d3234203d3e2033383130.roa (raw, json)
Hash identifier:          nLqfhU7wCb+nx/Gpn6lNL5U9KREcnhCqH6WGnH5pmQE=
Subject key identifier:   B9:9A:09:0B:13:13:E1:F7:E3:AF:1E:75:84:22:5D:D4:6E:E9:7B:E1
Certificate issuer:       /CN=82CBD163FC51F02FDFBD3D8D69A5E4DC6C51F0E8
Certificate serial:       36AC7268E0F248050F6C9290A6B740CB29323C42
Authority key identifier: 82:CB:D1:63:FC:51:F0:2F:DF:BD:3D:8D:69:A5:E4:DC:6C:51:F0:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82CBD163FC51F02FDFBD3D8D69A5E4DC6C51F0E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2EE790DDFBC2DE527E0C89CB7068152E4E64C0C96B2E60844316BAAE0AF3682C/0/3134382e3230332e3232342e302f32302d3234203d3e2033383130.roa
Signing time:             Tue 19 May 2026 00:35:00 +0000
ROA not before:           Tue 19 May 2026 00:30:00 +0000
ROA not after:            Tue 18 May 2027 00:35:00 +0000
asID:                     3810
IP address blocks:        148.203.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2EE790DDFBC2DE527E0C89CB7068152E4E64C0C96B2E60844316BAAE0AF3682C/0/82CBD163FC51F02FDFBD3D8D69A5E4DC6C51F0E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2EE790DDFBC2DE527E0C89CB7068152E4E64C0C96B2E60844316BAAE0AF3682C/0/82CBD163FC51F02FDFBD3D8D69A5E4DC6C51F0E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82CBD163FC51F02FDFBD3D8D69A5E4DC6C51F0E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:ac:72:68:e0:f2:48:05:0f:6c:92:90:a6:b7:40:cb:29:32:3c:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82CBD163FC51F02FDFBD3D8D69A5E4DC6C51F0E8
        Validity
            Not Before: May 19 00:30:00 2026 GMT
            Not After : May 18 00:35:00 2027 GMT
        Subject: CN=B99A090B1313E1F7E3AF1E7584225DD46EE97BE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:2f:28:bd:90:ee:03:63:2f:f8:b5:14:0b:5f:
                    96:de:a1:cb:90:d4:70:54:8c:54:72:db:74:6b:23:
                    09:6d:9a:b4:d9:c4:74:50:cb:5f:5a:d7:e8:0d:5d:
                    d5:49:f4:08:d6:6e:c6:7a:87:23:54:0d:bc:a1:93:
                    66:db:e3:4b:61:4c:ae:68:b6:21:e1:8b:bd:93:ae:
                    7b:5b:10:ac:03:8a:2e:78:67:b0:ac:9f:90:03:0c:
                    4f:75:bc:eb:c7:fb:98:06:38:ff:a2:08:d0:2a:81:
                    ab:03:4b:8d:b2:a9:7b:d3:aa:00:ee:ef:d6:4b:99:
                    da:1c:72:f5:f1:9d:6e:cd:3d:4b:4d:22:7c:51:c6:
                    f7:e2:24:04:a7:ff:1f:8a:aa:80:f4:c7:95:75:ec:
                    91:bd:08:8a:db:e1:08:7f:01:45:d1:d9:a6:0c:98:
                    66:2e:3f:af:f1:de:75:86:86:36:b7:93:85:ad:8c:
                    cb:d8:49:d8:cf:1d:2b:c3:69:5d:88:b8:d0:19:d5:
                    c9:59:f0:8e:9a:d5:28:5d:2f:f5:87:8a:a5:0d:8c:
                    a4:7b:eb:b4:5d:5d:ec:66:9a:41:84:b9:cb:e9:77:
                    46:ae:d8:46:7c:09:01:f4:49:56:46:b4:13:d1:21:
                    5c:18:d6:56:9a:ed:55:bf:ea:c0:2e:96:27:c8:94:
                    c5:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:9A:09:0B:13:13:E1:F7:E3:AF:1E:75:84:22:5D:D4:6E:E9:7B:E1
            X509v3 Authority Key Identifier:
                keyid:82:CB:D1:63:FC:51:F0:2F:DF:BD:3D:8D:69:A5:E4:DC:6C:51:F0:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2EE790DDFBC2DE527E0C89CB7068152E4E64C0C96B2E60844316BAAE0AF3682C/0/82CBD163FC51F02FDFBD3D8D69A5E4DC6C51F0E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82CBD163FC51F02FDFBD3D8D69A5E4DC6C51F0E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2EE790DDFBC2DE527E0C89CB7068152E4E64C0C96B2E60844316BAAE0AF3682C/0/3134382e3230332e3232342e302f32302d3234203d3e2033383130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.203.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4c:cf:bf:51:19:a6:d0:5b:de:a6:de:e4:99:6a:86:bb:21:fd:
         f5:72:b8:d1:95:d8:d5:bd:2f:1a:cf:0f:f7:3c:33:d1:7e:b0:
         55:1d:3a:95:57:50:83:48:6f:88:31:4b:1f:b7:ed:5f:d1:89:
         58:69:b4:e3:03:82:f7:22:9f:d2:04:65:03:63:d7:31:1a:ff:
         73:6b:7f:67:20:ad:7e:d2:f2:74:ca:64:20:a7:78:ed:64:53:
         48:83:87:4e:f9:16:18:97:80:97:42:93:fe:26:6d:67:a7:55:
         73:16:46:94:bd:88:35:18:0b:6f:4e:bb:77:2f:c2:43:67:62:
         9d:fb:e8:02:4a:80:b7:b5:5e:60:45:69:c7:85:3e:09:65:5e:
         1f:cf:81:04:3e:ea:6d:08:ff:05:2b:6f:fc:54:b8:fa:94:52:
         b9:c7:54:c0:b6:4b:f9:9c:7e:e5:38:45:13:41:30:8e:fe:ee:
         60:f5:06:13:d0:91:88:0b:f8:dc:ff:18:5e:14:29:51:c3:9e:
         f9:2c:01:99:5f:5c:92:83:97:4d:07:d6:81:15:f6:d6:f5:cf:
         c6:aa:fe:5f:24:21:47:aa:20:c6:c5:45:b5:a2:1e:db:48:13:
         fc:0e:ed:22:56:a9:85:4b:9e:a8:07:13:2e:e3:6d:be:e1:17:
         5e:90:24:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:12:41 2026 by rpki-client