Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2EE790DDFBC2DE527E0C89CB7068152E4E64C0C96B2E60844316BAAE0AF3682C/0/3134382e3230332e3234302e302f32322d3234203d3e2033383130.roa
File:                     3134382e3230332e3234302e302f32322d3234203d3e2033383130.roa (raw, json)
Hash identifier:          W8P5FMxK4ztIfRcLBfnvS8sSUOCbTj0BO9TXZviBClQ=
Subject key identifier:   06:46:9A:C5:E0:DB:A6:FC:2A:9A:30:86:29:69:3C:B2:D4:D6:01:90
Certificate issuer:       /CN=82CBD163FC51F02FDFBD3D8D69A5E4DC6C51F0E8
Certificate serial:       13C9A214AD0E5A54A14FC0FC719136A40B2972D5
Authority key identifier: 82:CB:D1:63:FC:51:F0:2F:DF:BD:3D:8D:69:A5:E4:DC:6C:51:F0:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82CBD163FC51F02FDFBD3D8D69A5E4DC6C51F0E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2EE790DDFBC2DE527E0C89CB7068152E4E64C0C96B2E60844316BAAE0AF3682C/0/3134382e3230332e3234302e302f32322d3234203d3e2033383130.roa
Signing time:             Tue 19 May 2026 00:30:02 +0000
ROA not before:           Tue 19 May 2026 00:25:02 +0000
ROA not after:            Tue 18 May 2027 00:30:02 +0000
asID:                     3810
IP address blocks:        148.203.240.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2EE790DDFBC2DE527E0C89CB7068152E4E64C0C96B2E60844316BAAE0AF3682C/0/82CBD163FC51F02FDFBD3D8D69A5E4DC6C51F0E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2EE790DDFBC2DE527E0C89CB7068152E4E64C0C96B2E60844316BAAE0AF3682C/0/82CBD163FC51F02FDFBD3D8D69A5E4DC6C51F0E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82CBD163FC51F02FDFBD3D8D69A5E4DC6C51F0E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:c9:a2:14:ad:0e:5a:54:a1:4f:c0:fc:71:91:36:a4:0b:29:72:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82CBD163FC51F02FDFBD3D8D69A5E4DC6C51F0E8
        Validity
            Not Before: May 19 00:25:02 2026 GMT
            Not After : May 18 00:30:02 2027 GMT
        Subject: CN=06469AC5E0DBA6FC2A9A308629693CB2D4D60190
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:82:21:e9:6d:e9:a1:91:cb:7b:4f:58:b6:9b:
                    5b:d9:e0:de:cd:5a:cb:0f:79:ae:a7:ca:40:b4:80:
                    da:bf:4b:5b:26:dd:01:61:d2:b0:04:08:76:7d:99:
                    0e:d4:39:2f:b5:a3:e5:25:af:d3:a8:96:42:59:54:
                    00:49:f2:3c:0c:15:66:38:39:9e:68:48:80:dd:9a:
                    c7:ad:53:ec:f4:39:14:c6:9a:af:f4:de:49:40:6f:
                    b3:df:33:60:48:5d:30:32:8d:3f:d8:11:2f:04:47:
                    d2:b9:e5:87:8b:9b:14:5a:d1:99:94:ad:cb:c0:c5:
                    a3:db:6d:6f:2e:3e:68:14:0e:e6:f7:af:d1:d9:de:
                    6f:44:ef:ce:ba:e0:22:db:cb:40:0c:53:94:0f:0b:
                    0b:90:70:04:f4:9c:6d:b3:e0:b2:b2:be:3d:69:6a:
                    82:d4:e6:fd:30:3e:5f:bf:4c:60:78:82:58:39:05:
                    a4:5a:94:7b:de:74:f2:9b:4e:56:f3:88:fb:54:68:
                    75:5c:a9:cc:d7:b1:4f:1c:14:ef:47:11:38:b7:95:
                    7c:87:f8:09:20:fc:27:b4:95:9d:55:d0:ce:59:dd:
                    36:b6:06:cd:af:36:81:cd:4e:06:80:e4:21:2b:b8:
                    fe:75:b0:ad:2f:f8:53:31:bb:d9:81:3d:c0:88:a2:
                    2d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:46:9A:C5:E0:DB:A6:FC:2A:9A:30:86:29:69:3C:B2:D4:D6:01:90
            X509v3 Authority Key Identifier:
                keyid:82:CB:D1:63:FC:51:F0:2F:DF:BD:3D:8D:69:A5:E4:DC:6C:51:F0:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2EE790DDFBC2DE527E0C89CB7068152E4E64C0C96B2E60844316BAAE0AF3682C/0/82CBD163FC51F02FDFBD3D8D69A5E4DC6C51F0E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82CBD163FC51F02FDFBD3D8D69A5E4DC6C51F0E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2EE790DDFBC2DE527E0C89CB7068152E4E64C0C96B2E60844316BAAE0AF3682C/0/3134382e3230332e3234302e302f32322d3234203d3e2033383130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.203.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:72:fc:8a:25:12:65:89:5f:74:67:d6:0e:f6:f7:f1:18:3a:
         dd:56:51:c9:d0:ec:cd:fd:ee:54:50:a2:51:ba:c3:84:93:ce:
         98:f1:9a:12:69:48:81:b6:5e:5b:4d:8c:8a:c6:b6:6d:d6:7b:
         3a:40:f2:84:c1:d9:59:e8:c4:19:12:ab:51:31:06:27:9a:ee:
         03:94:58:e2:36:03:6f:7e:96:75:5b:5c:4b:8f:d9:36:92:6f:
         4b:54:f1:a5:90:d5:9b:81:ba:05:1b:46:f3:b4:b5:5a:1b:39:
         08:0e:8c:34:24:c2:3b:77:c0:74:7b:96:8f:ee:a3:bc:0b:26:
         00:25:e9:55:46:53:35:c0:97:f1:8b:78:ce:bd:df:b4:a8:1f:
         69:2d:15:71:c6:e8:1f:bc:3d:75:d7:62:18:df:1f:cf:3a:3e:
         55:3a:1d:9a:75:b9:27:57:56:1f:d5:28:c0:92:9b:98:85:00:
         ae:b9:66:6e:5f:6f:14:ad:8d:67:66:7b:a7:d4:2e:d8:68:c2:
         72:fa:c4:2e:a7:8d:19:f4:49:91:ac:94:42:46:eb:7f:07:7c:
         6f:0b:a4:10:2d:59:00:b8:3c:a0:4a:81:e1:4e:c4:5b:b5:0d:
         e5:22:d2:fb:12:90:23:2b:b3:2d:26:81:43:db:bd:3a:54:7a:
         8d:32:86:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:48:12 2026 by rpki-client