Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/35EA57EDCFB8D3C555B7B09D2E5D658E6D2412BC89F1BC7A54777FDC15C93873/0/3138362e3137392e36382e302f32342d3234203d3e20323634363638.roa
File:                     3138362e3137392e36382e302f32342d3234203d3e20323634363638.roa (raw, json)
Hash identifier:          1HDkN24Uq2AQ8atItxsm70PWdPO8XQCCp8Szjh/ehjI=
Subject key identifier:   B1:AD:F2:73:08:6F:27:27:05:C8:2C:A4:31:FE:6C:7F:50:EF:68:69
Certificate issuer:       /CN=CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC
Certificate serial:       33350078D5373F37C54F3FA8E1FB6B2A3951A9EA
Authority key identifier: CE:C9:A4:88:D0:79:AE:E7:FE:0B:21:66:4A:1A:4A:EE:1C:89:9F:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/35EA57EDCFB8D3C555B7B09D2E5D658E6D2412BC89F1BC7A54777FDC15C93873/0/3138362e3137392e36382e302f32342d3234203d3e20323634363638.roa
Signing time:             Fri 10 Apr 2026 03:35:00 +0000
ROA not before:           Fri 10 Apr 2026 03:30:00 +0000
ROA not after:            Fri 09 Apr 2027 03:35:00 +0000
asID:                     264668
IP address blocks:        186.179.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/35EA57EDCFB8D3C555B7B09D2E5D658E6D2412BC89F1BC7A54777FDC15C93873/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/35EA57EDCFB8D3C555B7B09D2E5D658E6D2412BC89F1BC7A54777FDC15C93873/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 01:26:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:35:00:78:d5:37:3f:37:c5:4f:3f:a8:e1:fb:6b:2a:39:51:a9:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC
        Validity
            Not Before: Apr 10 03:30:00 2026 GMT
            Not After : Apr  9 03:35:00 2027 GMT
        Subject: CN=B1ADF273086F272705C82CA431FE6C7F50EF6869
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f5:1d:57:dc:d4:e8:96:8b:93:93:3f:47:cc:
                    4d:ce:fe:8c:c5:17:e7:55:dc:31:bc:d5:c3:b0:ab:
                    ba:d5:a3:25:63:4a:28:ca:90:14:3c:ad:b4:32:0f:
                    66:de:58:1d:f0:c9:14:c5:5c:64:5d:f0:40:da:68:
                    d7:68:e0:74:8c:15:e6:60:a3:fb:24:46:2c:00:28:
                    98:f6:ce:21:84:18:7b:40:a5:6b:06:2a:fe:dc:02:
                    a7:ef:fa:66:12:36:e3:c4:a1:a9:51:9d:f6:e4:c5:
                    7d:96:d6:fd:7b:d8:b2:f1:9e:11:dc:6e:f4:2b:9a:
                    24:f7:00:f3:92:b2:c0:00:98:9a:4d:86:73:9c:cc:
                    83:94:69:71:4b:6c:7a:19:46:f1:b3:5f:5d:35:75:
                    6b:4d:f3:15:63:9f:1b:05:47:18:b8:fd:7c:61:19:
                    d8:3e:9d:d7:aa:ba:a6:86:56:cf:92:9e:0b:2f:2c:
                    49:d1:39:82:91:d0:35:34:33:97:d1:b5:a6:6a:0e:
                    52:0e:43:f1:e1:56:a1:b9:80:5c:ad:bb:36:1c:cd:
                    27:a8:0c:57:45:30:9b:1d:c7:33:27:f3:55:18:f5:
                    3c:e8:0b:d7:c5:da:2f:05:18:33:a1:ae:ce:64:01:
                    1b:a7:d8:a4:61:1d:31:a6:1f:26:e0:84:ee:55:49:
                    35:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:AD:F2:73:08:6F:27:27:05:C8:2C:A4:31:FE:6C:7F:50:EF:68:69
            X509v3 Authority Key Identifier:
                keyid:CE:C9:A4:88:D0:79:AE:E7:FE:0B:21:66:4A:1A:4A:EE:1C:89:9F:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/35EA57EDCFB8D3C555B7B09D2E5D658E6D2412BC89F1BC7A54777FDC15C93873/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/35EA57EDCFB8D3C555B7B09D2E5D658E6D2412BC89F1BC7A54777FDC15C93873/0/3138362e3137392e36382e302f32342d3234203d3e20323634363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.179.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:70:88:d8:d1:64:f9:84:03:0d:4a:15:d4:87:fd:40:e7:3d:
         99:72:25:ab:3a:c8:cb:9e:f5:6d:c6:4a:64:e2:b6:bb:c9:bf:
         c4:ff:b9:d1:a6:05:16:6d:19:9d:42:af:d1:47:92:38:94:03:
         9d:d9:2e:8a:41:bf:a2:3a:81:fb:da:36:56:c5:7e:3e:66:4e:
         39:45:43:8c:70:a0:d6:4e:a5:57:c9:64:55:23:9f:3d:d9:ee:
         88:c5:46:38:a5:aa:6a:26:4a:ba:d3:c4:93:3f:57:9f:dd:14:
         f0:2f:aa:2c:4a:bb:c5:5b:1e:a7:68:36:7d:6e:22:1b:ae:14:
         08:dd:f9:a5:55:d9:e7:85:3e:7b:72:ea:61:44:37:2a:e0:71:
         78:7b:54:07:1d:53:9c:08:c5:c0:f5:d6:4b:20:2b:ed:af:ae:
         05:fd:5a:71:e5:e0:dc:f6:15:99:3b:f0:76:8b:4f:18:85:69:
         07:a1:e4:78:b9:32:8d:ac:ad:0a:8f:50:4e:0b:fd:66:aa:00:
         3c:05:31:50:53:c3:20:1d:fc:4d:95:fd:b5:6f:f4:dc:0c:73:
         68:b4:e4:62:dd:62:0f:74:23:3d:03:6b:e4:7d:e5:00:d4:ae:
         4a:4a:d1:67:4b:28:cb:7a:67:a3:a8:18:8a:1c:0d:7e:f3:10:
         1b:03:7f:25
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUMzUAeNU3PzfFTz+o4ftrKjlRqeowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0VDOUE0ODhEMDc5QUVFN0ZFMEIyMTY2NEExQTRBRUUx
Qzg5OUZEQzAeFw0yNjA0MTAwMzMwMDBaFw0yNzA0MDkwMzM1MDBaMDMxMTAvBgNV
BAMTKEIxQURGMjczMDg2RjI3MjcwNUM4MkNBNDMxRkU2QzdGNTBFRjY4NjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl9R1X3NTolouTkz9HzE3O/ozF
F+dV3DG81cOwq7rVoyVjSijKkBQ8rbQyD2beWB3wyRTFXGRd8EDaaNdo4HSMFeZg
o/skRiwAKJj2ziGEGHtApWsGKv7cAqfv+mYSNuPEoalRnfbkxX2W1v172LLxnhHc
bvQrmiT3APOSssAAmJpNhnOczIOUaXFLbHoZRvGzX101dWtN8xVjnxsFRxi4/Xxh
Gdg+ndequqaGVs+SngsvLEnROYKR0DU0M5fRtaZqDlIOQ/HhVqG5gFytuzYczSeo
DFdFMJsdxzMn81UY9TzoC9fF2i8FGDOhrs5kARun2KRhHTGmHybghO5VSTUfAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUsa3ycwhvJycFyCykMf5sf1DvaGkwHwYDVR0j
BBgwFoAUzsmkiNB5ruf+CyFmShpK7hyJn9wwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zNUVBNTdFRENGQjhEM0M1NTVCN0IwOUQyRTVENjU4RTZE
MjQxMkJDODlGMUJDN0E1NDc3N0ZEQzE1QzkzODczLzAvQ0VDOUE0ODhEMDc5QUVF
N0ZFMEIyMTY2NEExQTRBRUUxQzg5OUZEQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DRUM5QTQ4OEQwNzlBRUU3RkUw
QjIxNjY0QTFBNEFFRTFDODk5RkRDLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzVFQTU3RURDRkI4RDNDNTU1QjdCMDlEMkU1RDY1OEU2RDI0MTJCQzg5
RjFCQzdBNTQ3NzdGREMxNUM5Mzg3My8wLzMxMzgzNjJlMzEzNzM5MmUzNjM4MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM0MzYzNjM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAurNE
MA0GCSqGSIb3DQEBCwUAA4IBAQBJcIjY0WT5hAMNShXUh/1A5z2ZciWrOsjLnvVt
xkpk4ra7yb/E/7nRpgUWbRmdQq/RR5I4lAOd2S6KQb+iOoH72jZWxX4+Zk45RUOM
cKDWTqVXyWRVI5892e6IxUY4papqJkq608STP1ef3RTwL6osSrvFWx6naDZ9biIb
rhQI3fmlVdnnhT57cuphRDcq4HF4e1QHHVOcCMXA9dZLICvtr64F/Vpx5eDc9hWZ
O/B2i08YhWkHoeR4uTKNrK0Kj1BOC/1mqgA8BTFQU8MgHfxNlf21b/TcDHNotORi
3WIPdCM9A2vkfeUA1K5KStFnSyjLemejqBiKHA1+8xAbA38l
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:31:22 2026 by rpki-client