Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4E365927978791AB82E4FFF201D20EC7771D89AA0F0834DAE16EDC4110921C6D/0/3136372e3235302e34382e302f32322d3234203d3e20323633373637.roa
File:                     3136372e3235302e34382e302f32322d3234203d3e20323633373637.roa (raw, json)
Hash identifier:          lAa4rMI/vNkaEKVqnQCmPW3ILuZfLNP+rGaIy/uFYJg=
Subject key identifier:   3A:3E:EB:F2:02:F8:5D:CE:C4:70:82:7C:6D:11:BC:BE:C0:1C:1A:D6
Certificate issuer:       /CN=866D14BD6DA5743F22A65FD4E6C0003D7610C986
Certificate serial:       1D3D4638FD8E9DA69DA84EECED7119CD4D9D09AA
Authority key identifier: 86:6D:14:BD:6D:A5:74:3F:22:A6:5F:D4:E6:C0:00:3D:76:10:C9:86
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/866D14BD6DA5743F22A65FD4E6C0003D7610C986.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4E365927978791AB82E4FFF201D20EC7771D89AA0F0834DAE16EDC4110921C6D/0/3136372e3235302e34382e302f32322d3234203d3e20323633373637.roa
Signing time:             Mon 01 Jun 2026 21:10:00 +0000
ROA not before:           Mon 01 Jun 2026 21:05:00 +0000
ROA not after:            Mon 31 May 2027 21:10:00 +0000
asID:                     263767
IP address blocks:        167.250.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4E365927978791AB82E4FFF201D20EC7771D89AA0F0834DAE16EDC4110921C6D/0/866D14BD6DA5743F22A65FD4E6C0003D7610C986.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4E365927978791AB82E4FFF201D20EC7771D89AA0F0834DAE16EDC4110921C6D/0/866D14BD6DA5743F22A65FD4E6C0003D7610C986.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/866D14BD6DA5743F22A65FD4E6C0003D7610C986.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 11:20:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:3d:46:38:fd:8e:9d:a6:9d:a8:4e:ec:ed:71:19:cd:4d:9d:09:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=866D14BD6DA5743F22A65FD4E6C0003D7610C986
        Validity
            Not Before: Jun  1 21:05:00 2026 GMT
            Not After : May 31 21:10:00 2027 GMT
        Subject: CN=3A3EEBF202F85DCEC470827C6D11BCBEC01C1AD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:01:ef:27:70:fd:8e:00:61:e4:09:98:ae:2d:
                    8e:e6:6b:a0:84:21:45:ea:a6:87:0d:69:f9:a3:ed:
                    b8:5a:1b:f8:59:73:f3:ce:fe:4a:ea:ad:ed:07:a3:
                    cf:2c:74:39:b9:fe:1f:82:13:68:84:13:27:4a:29:
                    78:d8:5a:3b:e9:7a:7f:32:bf:19:a8:28:d4:14:97:
                    ab:e5:c8:1b:5a:2d:80:11:f3:09:fa:75:95:a9:c2:
                    98:e3:db:be:b9:2a:e5:d9:c4:4a:e7:10:fb:c7:8a:
                    28:00:e7:ce:5d:ce:14:82:76:69:b7:bd:d4:5f:1e:
                    a8:df:b0:18:db:e3:6e:4a:d3:5d:aa:e0:d1:69:4c:
                    d1:f5:b6:df:71:64:01:76:e8:f4:75:a3:08:95:72:
                    65:bd:9a:58:96:33:a3:9a:38:d7:d8:61:7f:04:51:
                    62:7e:18:55:b2:b4:3d:dd:29:91:e7:15:08:d1:4b:
                    44:4f:51:71:e8:52:93:14:ef:85:f7:8b:af:5a:94:
                    d9:2c:0c:cf:e9:c8:40:92:8a:7e:c4:aa:c9:b3:c7:
                    bd:f8:e7:29:72:1b:ae:06:70:94:ca:ca:26:3b:fb:
                    6a:d0:d3:c3:ef:c6:78:b2:6f:2c:cb:c0:18:bc:cb:
                    12:9f:ec:48:8d:ff:98:2a:92:74:39:5b:b1:f5:07:
                    42:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:3E:EB:F2:02:F8:5D:CE:C4:70:82:7C:6D:11:BC:BE:C0:1C:1A:D6
            X509v3 Authority Key Identifier:
                keyid:86:6D:14:BD:6D:A5:74:3F:22:A6:5F:D4:E6:C0:00:3D:76:10:C9:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4E365927978791AB82E4FFF201D20EC7771D89AA0F0834DAE16EDC4110921C6D/0/866D14BD6DA5743F22A65FD4E6C0003D7610C986.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/866D14BD6DA5743F22A65FD4E6C0003D7610C986.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4E365927978791AB82E4FFF201D20EC7771D89AA0F0834DAE16EDC4110921C6D/0/3136372e3235302e34382e302f32322d3234203d3e20323633373637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:0a:b5:31:59:b3:1c:52:bc:71:cf:59:8a:e4:f6:48:6d:ad:
         e8:2f:aa:92:a5:aa:bd:a9:5a:2f:62:fe:98:61:cb:aa:23:e2:
         d6:e7:15:cb:25:1b:46:fa:cc:1e:7c:90:61:2c:57:ac:3b:f9:
         1c:04:a7:e2:1e:6f:ad:58:e0:d2:18:f1:8f:3d:97:28:bd:e7:
         91:f9:0d:bc:83:0f:47:aa:6a:39:b2:32:2b:95:26:20:ec:72:
         8e:a3:cd:40:27:8d:9a:77:d3:9e:81:50:60:5a:8c:92:66:85:
         a8:87:53:24:9f:8b:0f:58:18:da:ad:2c:38:00:c0:0f:ef:75:
         fc:b6:09:c5:e6:08:eb:eb:d7:e1:b6:af:28:e2:4a:ba:6a:f1:
         71:52:88:16:c2:85:f5:b4:ed:ed:05:43:d4:80:b6:fb:19:7b:
         45:f9:13:a9:cd:1f:9f:53:3a:f4:99:89:ba:37:b4:3c:a6:4a:
         62:78:8a:85:79:30:f9:45:a3:30:db:16:e0:07:ec:74:9b:e2:
         ea:aa:ef:b4:91:fc:b3:b1:47:71:c2:e1:a7:3f:30:30:70:78:
         83:b1:a7:83:16:ae:4a:79:d1:57:c9:e4:14:57:63:0f:65:be:
         90:3c:24:06:69:d8:d8:89:00:0c:12:84:d5:2c:6b:40:1f:99:
         95:7b:0f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:28:17 2026 by rpki-client