Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/308E26FF4B570E3B0CA88E840F57870C2A4658EC0CF835A3CF49B3B530A58374/0/3138362e3138392e3234342e302f32342d3234203d3e20323633373236.roa
File:                     3138362e3138392e3234342e302f32342d3234203d3e20323633373236.roa (raw, json)
Hash identifier:          ZP4mjHf5iFGeYeuEWUlkVMmjpKzCkuTutEo5bYwOOMk=
Subject key identifier:   50:9E:F5:0B:63:67:5B:50:C4:4C:8B:39:E8:82:6F:59:8C:C1:81:7D
Certificate issuer:       /CN=CF2E2C753A200707CD61AACD7110A7372C505538
Certificate serial:       6DB37E96A5DF286E5D102552357E4C729E0B16A1
Authority key identifier: CF:2E:2C:75:3A:20:07:07:CD:61:AA:CD:71:10:A7:37:2C:50:55:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF2E2C753A200707CD61AACD7110A7372C505538.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/308E26FF4B570E3B0CA88E840F57870C2A4658EC0CF835A3CF49B3B530A58374/0/3138362e3138392e3234342e302f32342d3234203d3e20323633373236.roa
Signing time:             Fri 13 Feb 2026 15:30:23 +0000
ROA not before:           Fri 13 Feb 2026 15:25:23 +0000
ROA not after:            Fri 12 Feb 2027 15:30:23 +0000
asID:                     263726
IP address blocks:        186.189.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/308E26FF4B570E3B0CA88E840F57870C2A4658EC0CF835A3CF49B3B530A58374/0/CF2E2C753A200707CD61AACD7110A7372C505538.crl
                          rsync://repository.lacnic.net/rpki/lacnic/308E26FF4B570E3B0CA88E840F57870C2A4658EC0CF835A3CF49B3B530A58374/0/CF2E2C753A200707CD61AACD7110A7372C505538.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF2E2C753A200707CD61AACD7110A7372C505538.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:b3:7e:96:a5:df:28:6e:5d:10:25:52:35:7e:4c:72:9e:0b:16:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF2E2C753A200707CD61AACD7110A7372C505538
        Validity
            Not Before: Feb 13 15:25:23 2026 GMT
            Not After : Feb 12 15:30:23 2027 GMT
        Subject: CN=509EF50B63675B50C44C8B39E8826F598CC1817D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:7d:93:43:a4:fd:4b:e1:87:11:c7:2f:77:05:
                    50:9b:73:50:1c:ba:f8:63:51:82:af:c8:66:db:2a:
                    13:60:b1:b2:0e:d5:dc:77:5d:c7:65:58:b2:60:1b:
                    e2:21:12:63:c4:1f:bd:95:c5:34:43:5b:61:a1:94:
                    e1:48:25:2e:be:38:ee:2e:45:51:f1:be:7f:8b:37:
                    e2:81:11:20:d2:41:5a:22:a5:04:0e:d1:11:75:02:
                    0d:fc:c3:7e:61:4b:32:13:84:19:77:3b:27:cc:a9:
                    f3:66:65:c3:f6:8f:00:a5:f0:af:68:81:cc:81:e1:
                    7c:69:c1:a6:16:70:3c:84:e8:89:77:91:26:63:33:
                    74:85:e9:97:c4:6f:ef:91:6a:bc:ac:c4:b1:02:b6:
                    13:3c:28:3d:a5:7d:47:38:46:4a:2e:ae:88:ea:60:
                    1f:a9:2e:77:a7:9b:dc:88:c8:b4:49:1f:b7:07:f8:
                    c1:17:40:b9:15:0e:4f:da:26:e6:97:be:0d:c8:c4:
                    f9:c1:04:85:38:4a:bd:72:e0:ad:6f:cb:c4:e3:08:
                    b8:fc:25:d5:7e:33:d7:cb:68:be:70:1d:88:50:7f:
                    5a:62:a8:1b:97:3d:4b:bf:4f:eb:ee:4d:e4:e0:33:
                    97:8b:0c:c1:3f:3b:72:b9:91:ba:57:89:6d:5b:3d:
                    dc:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:9E:F5:0B:63:67:5B:50:C4:4C:8B:39:E8:82:6F:59:8C:C1:81:7D
            X509v3 Authority Key Identifier:
                keyid:CF:2E:2C:75:3A:20:07:07:CD:61:AA:CD:71:10:A7:37:2C:50:55:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/308E26FF4B570E3B0CA88E840F57870C2A4658EC0CF835A3CF49B3B530A58374/0/CF2E2C753A200707CD61AACD7110A7372C505538.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF2E2C753A200707CD61AACD7110A7372C505538.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/308E26FF4B570E3B0CA88E840F57870C2A4658EC0CF835A3CF49B3B530A58374/0/3138362e3138392e3234342e302f32342d3234203d3e20323633373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.189.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:cb:5f:70:76:c1:cb:ed:4e:a2:38:f8:ba:3b:23:23:c0:58:
         60:35:57:ef:ab:dc:bc:3c:06:51:53:b5:70:bd:7a:45:69:b6:
         89:d3:ec:8d:f2:c4:7a:8d:50:03:dc:c2:9a:05:4e:e0:7f:d5:
         56:63:79:35:61:c7:10:a2:af:a6:40:d1:4a:37:f2:82:30:10:
         17:c5:82:14:b7:86:a2:2e:ce:ae:46:d4:c1:28:c4:ba:89:47:
         97:e6:30:6c:c8:7d:af:3a:dd:57:c7:cb:bf:7b:de:84:7c:d3:
         b9:5b:e6:0f:4d:b7:e9:f6:21:5d:6b:1a:e4:a2:51:b6:0d:05:
         b3:79:9d:98:b8:bd:de:a1:fb:95:1b:a1:7d:6f:bf:f3:93:9f:
         a9:db:ea:56:0a:ae:1b:1f:cf:b5:87:aa:81:f4:1a:fb:bf:f3:
         26:04:17:84:b4:48:f8:ce:bc:d2:d5:eb:10:5d:01:d5:0e:8f:
         b8:ff:d7:98:b7:6f:3f:fc:6f:50:e4:57:90:72:55:88:6c:b2:
         fe:05:08:da:45:45:79:d8:c0:6d:3a:e0:12:03:7b:5f:83:8f:
         1f:79:ee:f2:df:36:a8:45:22:3a:d2:1e:09:84:1e:38:07:a2:
         f0:dd:76:fb:16:b0:69:7d:f2:57:17:c1:a3:7b:e7:12:ca:c4:
         78:31:59:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 04:41:01 2026 by rpki-client