Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4A942466B5EFEA9820FDF93CDFDA56842A5F966BB2337C67215389A3F7CA96FA/0/3230392e33352e3138342e302f32322d3232203d3e20323635353437.roa
File:                     3230392e33352e3138342e302f32322d3232203d3e20323635353437.roa (raw, json)
Hash identifier:          D7LXita/LzI8O+qqB5RYIju6lxLBtUrnBizlPRk6QHQ=
Subject key identifier:   E1:9F:98:D7:DC:F3:89:16:5F:8B:4E:E5:D7:2B:B4:05:2F:27:EE:F5
Certificate issuer:       /CN=069B69CFC3EF8B59480A7C79604E073AD70E7DD2
Certificate serial:       7B23465317144C87BE83BB504E648ED516FDB6E5
Authority key identifier: 06:9B:69:CF:C3:EF:8B:59:48:0A:7C:79:60:4E:07:3A:D7:0E:7D:D2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/069B69CFC3EF8B59480A7C79604E073AD70E7DD2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4A942466B5EFEA9820FDF93CDFDA56842A5F966BB2337C67215389A3F7CA96FA/0/3230392e33352e3138342e302f32322d3232203d3e20323635353437.roa
Signing time:             Thu 19 Feb 2026 14:35:00 +0000
ROA not before:           Thu 19 Feb 2026 14:30:00 +0000
ROA not after:            Thu 18 Feb 2027 14:35:00 +0000
asID:                     265547
IP address blocks:        209.35.184.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4A942466B5EFEA9820FDF93CDFDA56842A5F966BB2337C67215389A3F7CA96FA/0/069B69CFC3EF8B59480A7C79604E073AD70E7DD2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4A942466B5EFEA9820FDF93CDFDA56842A5F966BB2337C67215389A3F7CA96FA/0/069B69CFC3EF8B59480A7C79604E073AD70E7DD2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/069B69CFC3EF8B59480A7C79604E073AD70E7DD2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Mar 2026 00:09:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:23:46:53:17:14:4c:87:be:83:bb:50:4e:64:8e:d5:16:fd:b6:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=069B69CFC3EF8B59480A7C79604E073AD70E7DD2
        Validity
            Not Before: Feb 19 14:30:00 2026 GMT
            Not After : Feb 18 14:35:00 2027 GMT
        Subject: CN=E19F98D7DCF389165F8B4EE5D72BB4052F27EEF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:5e:fa:31:ce:bb:69:ff:cd:bf:1f:8d:e1:81:
                    65:14:0e:5a:e4:ea:fd:a9:66:df:c2:3e:90:c2:44:
                    c6:56:3a:7f:93:3a:a9:e8:b3:60:e6:fb:bb:ba:6f:
                    4c:c0:e9:85:d4:1f:04:7a:bb:ae:ee:46:7b:d7:64:
                    63:3d:61:b0:a6:e1:01:f7:24:72:54:52:d1:42:a9:
                    19:22:4a:48:ad:65:e0:38:04:22:5e:70:94:f9:3e:
                    0b:e7:f5:2f:df:a9:f1:50:52:af:0b:4d:db:c6:e3:
                    28:3c:c9:35:1c:61:08:dc:5f:0c:7a:13:28:77:6b:
                    c7:1e:ca:58:37:d4:ed:69:50:b3:ee:01:35:8a:17:
                    52:02:d6:74:46:29:8c:be:95:63:39:3c:64:06:3b:
                    7b:dc:ab:84:58:ba:2f:ba:64:b6:84:e8:11:4a:fd:
                    6c:ba:28:52:95:d8:d3:1b:f5:c9:99:52:09:f9:fe:
                    35:38:48:1a:7f:f4:28:71:d4:22:95:d2:e9:9d:8f:
                    b4:95:62:e2:df:4a:ce:4d:36:1e:7b:f8:45:2b:99:
                    a8:09:58:52:92:53:2e:97:dc:6f:dd:44:85:c5:58:
                    7a:9e:b4:d3:f6:fc:81:83:9a:99:51:42:75:a2:86:
                    51:da:d8:1d:c7:08:10:4a:bc:ca:e6:61:25:6f:7a:
                    69:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:9F:98:D7:DC:F3:89:16:5F:8B:4E:E5:D7:2B:B4:05:2F:27:EE:F5
            X509v3 Authority Key Identifier:
                keyid:06:9B:69:CF:C3:EF:8B:59:48:0A:7C:79:60:4E:07:3A:D7:0E:7D:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4A942466B5EFEA9820FDF93CDFDA56842A5F966BB2337C67215389A3F7CA96FA/0/069B69CFC3EF8B59480A7C79604E073AD70E7DD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/069B69CFC3EF8B59480A7C79604E073AD70E7DD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4A942466B5EFEA9820FDF93CDFDA56842A5F966BB2337C67215389A3F7CA96FA/0/3230392e33352e3138342e302f32322d3232203d3e20323635353437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.35.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a7:a4:68:ee:8a:1a:c4:cb:97:5f:09:e9:1d:45:8f:1a:a1:ed:
         5a:ad:0f:dd:5f:37:ef:aa:93:07:72:8e:25:1b:6b:b4:c1:54:
         bd:c3:05:68:bb:ee:5a:e4:98:bb:79:f1:82:76:40:a8:3b:13:
         cc:63:a5:94:46:17:3f:8b:e7:bf:32:05:bd:33:49:83:06:f1:
         4b:6f:3f:62:cd:ad:02:9f:49:28:f0:b1:53:b4:02:2c:76:af:
         86:ce:ae:17:c6:95:b8:e8:66:bb:fb:df:a6:88:e0:0a:6a:24:
         9b:52:b0:10:43:a4:63:0f:47:4c:eb:38:82:5e:0d:13:37:08:
         86:08:d4:6e:b5:64:42:d7:8d:26:a9:d8:6d:dc:df:dc:4c:49:
         08:4b:0a:be:18:5f:8b:32:71:63:7f:02:ea:8f:60:3a:be:2b:
         bc:83:d8:cd:6c:e7:fa:6b:60:4e:7f:06:5b:dc:74:7b:dd:22:
         c4:ab:70:d3:a6:15:f8:38:42:2a:5b:f0:ca:4d:83:e5:ec:99:
         0a:a9:67:ea:06:5b:75:91:dc:ef:be:8c:93:b8:14:7b:a3:cd:
         07:d9:0c:4c:e4:9e:c9:72:bc:36:7f:d1:de:62:5f:30:45:72:
         db:22:d2:2f:17:76:de:6f:f6:0a:c9:3d:43:83:bd:2f:40:b1:
         4b:44:11:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:42:54 2026 by rpki-client