Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS267786.roa
File:                     AS267786.roa (raw, json)
Hash identifier:          fH7OfNYJmi/KidQLpt71iC+lUbYfddcMiwvGa/AOWAU=
Subject key identifier:   84:9D:A6:0F:05:30:D2:3F:53:62:3B:3D:F2:AC:21:0E:92:1B:C9:41
Certificate issuer:       /CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
Certificate serial:       057BAF49A83CCE52DFAB6708913640D99525B0E0
Authority key identifier: 41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS267786.roa
Signing time:             Wed 29 Oct 2025 17:05:01 +0000
ROA not before:           Wed 29 Oct 2025 17:00:01 +0000
ROA not after:            Wed 28 Oct 2026 17:05:01 +0000
asID:                     267786
IP address blocks:        186.38.99.0/24 maxlen: 24
                          201.251.136.128/25 maxlen: 25
                          201.251.146.0/24 maxlen: 24
                          201.251.160.128/25 maxlen: 25
                          201.251.206.0/24 maxlen: 24
                          201.251.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 08 Nov 2025 08:04:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:7b:af:49:a8:3c:ce:52:df:ab:67:08:91:36:40:d9:95:25:b0:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
        Validity
            Not Before: Oct 29 17:00:01 2025 GMT
            Not After : Oct 28 17:05:01 2026 GMT
        Subject: CN=849DA60F0530D23F53623B3DF2AC210E921BC941
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1e:01:e0:50:74:09:5d:d3:6c:8a:24:7c:a1:
                    5e:22:07:94:47:eb:ec:f8:bc:d5:c9:f9:d7:e1:f9:
                    30:fb:ec:8c:37:56:87:3c:0f:5f:1b:ea:64:11:7d:
                    3c:0d:96:ef:26:ae:97:53:04:f7:ae:31:b1:83:ad:
                    52:b2:c4:43:19:c9:c6:75:bf:51:55:67:b9:6e:a1:
                    d9:14:ac:cc:9b:ab:d6:df:53:f7:0e:c4:99:37:31:
                    69:c1:c2:9d:61:8e:7b:7a:e1:00:25:c9:5a:70:4b:
                    23:44:64:c4:d4:29:fd:6f:09:13:6c:36:30:97:c1:
                    cb:d7:d6:8f:7f:82:79:3b:67:db:05:7e:ad:d9:57:
                    47:b2:04:15:f5:59:c6:b2:b6:a3:02:56:c7:2e:51:
                    3e:32:9e:a9:2e:e5:70:a8:64:e8:07:48:f3:a2:26:
                    29:9e:42:18:a2:83:78:f9:54:c4:3c:95:c8:aa:03:
                    60:0b:ce:83:93:9f:77:06:96:04:4f:4f:95:18:dc:
                    c9:3b:a4:5d:24:b5:9c:02:27:ec:54:d2:47:95:98:
                    c7:53:7c:80:e9:f2:a2:2c:83:27:96:53:80:cb:25:
                    90:50:68:0b:5c:ec:97:9e:f0:2c:ed:a2:79:25:f5:
                    28:15:c6:20:34:9c:1e:23:0a:91:14:85:84:9b:43:
                    ec:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:9D:A6:0F:05:30:D2:3F:53:62:3B:3D:F2:AC:21:0E:92:1B:C9:41
            X509v3 Authority Key Identifier:
                keyid:41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS267786.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.38.99.0/24
                  201.251.136.128/25
                  201.251.146.0/24
                  201.251.160.128/25
                  201.251.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         95:d8:b0:c5:e3:cf:44:5b:5d:70:8b:6d:97:1c:62:44:53:3b:
         49:c4:98:b4:27:e7:a6:14:f6:f9:3e:c9:a9:5a:1b:95:a8:98:
         a3:5a:5e:3d:d6:2c:7f:4d:e1:53:f2:a0:8b:48:86:d4:ab:02:
         2a:ba:55:a5:9c:1c:48:fe:1f:db:ae:7b:66:f9:77:77:46:82:
         49:51:1e:b4:d7:28:91:5d:54:2a:fa:c1:d8:0f:e3:37:c0:07:
         60:de:c1:93:e3:2c:9a:d6:88:f6:6f:78:f5:5e:ac:cd:0d:15:
         11:63:26:f7:59:14:ee:5f:b7:b9:e3:f4:cf:47:5e:e3:51:89:
         e1:c4:65:6a:01:5a:b5:ac:e0:04:81:a2:24:28:c4:a1:10:2d:
         67:51:a0:02:a6:4d:6a:8e:a0:47:17:fd:db:fb:8c:7b:6a:b1:
         55:d3:39:b5:00:1c:fa:e6:b2:f6:b5:b9:bc:73:16:f0:b4:4c:
         54:e2:bd:7d:01:36:96:41:3a:38:4f:29:de:5d:e6:e6:0a:db:
         c6:32:de:fe:8e:96:f5:c0:d5:55:9c:18:36:e1:2c:a1:3f:bc:
         8d:22:30:7e:60:69:34:1e:ae:80:48:82:73:13:c9:34:23:6c:
         08:09:41:fb:67:88:8f:8a:d5:06:45:dd:64:05:bb:12:fc:13:
         f2:b8:20:da
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgIUBXuvSag8zlLfq2cIkTZA2ZUlsOAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDEwODE5QzdDOUI0Qzg1Q0UwQjFEMjI3NDFCRTVFNDBB
MUYwRTdCMTAeFw0yNTEwMjkxNzAwMDFaFw0yNjEwMjgxNzA1MDFaMDMxMTAvBgNV
BAMTKDg0OURBNjBGMDUzMEQyM0Y1MzYyM0IzREYyQUMyMTBFOTIxQkM5NDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKHgHgUHQJXdNsiiR8oV4iB5RH
6+z4vNXJ+dfh+TD77Iw3Voc8D18b6mQRfTwNlu8mrpdTBPeuMbGDrVKyxEMZycZ1
v1FVZ7luodkUrMybq9bfU/cOxJk3MWnBwp1hjnt64QAlyVpwSyNEZMTUKf1vCRNs
NjCXwcvX1o9/gnk7Z9sFfq3ZV0eyBBX1WcaytqMCVscuUT4ynqku5XCoZOgHSPOi
JimeQhiig3j5VMQ8lciqA2ALzoOTn3cGlgRPT5UY3Mk7pF0ktZwCJ+xU0keVmMdT
fIDp8qIsgyeWU4DLJZBQaAtc7Jee8Cztonkl9SgVxiA0nB4jCpEUhYSbQ+zVAgMB
AAGjggKzMIICrzAdBgNVHQ4EFgQUhJ2mDwUw0j9TYjs98qwhDpIbyUEwHwYDVR0j
BBgwFoAUQQgZx8m0yFzgsdInQb5eQKHw57EwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81RDFBNUU2NUFDQjQxNzMzOTg1NUFEQTVBNkM1NDE2REMw
NDFDQ0YwNjQwODAzODQzODk4QkU1NkM0REY2QzMyLzAvNDEwODE5QzdDOUI0Qzg1
Q0UwQjFEMjI3NDFCRTVFNDBBMUYwRTdCMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80MTA4MTlDN0M5QjRDODVDRTBC
MUQyMjc0MUJFNUU0MEExRjBFN0IxLmNlcjCBmAYIKwYBBQUHAQsEgYswgYgwgYUG
CCsGAQUFBzALhnlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy81RDFBNUU2NUFDQjQxNzMzOTg1NUFEQTVBNkM1NDE2REMwNDFDQ0YwNjQw
ODAzODQzODk4QkU1NkM0REY2QzMyLzAvQVMyNjc3ODYucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwOQYIKwYBBQUHAQcBAf8EKjAoMCYEAgABMCADBAC6JmMD
BQfJ+4iAAwQAyfuSAwUHyfuggAMEAcn7zjANBgkqhkiG9w0BAQsFAAOCAQEAldiw
xePPRFtdcIttlxxiRFM7ScSYtCfnphT2+T7JqVoblaiYo1pePdYsf03hU/Kgi0iG
1KsCKrpVpZwcSP4f2657Zvl3d0aCSVEetNcokV1UKvrB2A/jN8AHYN7Bk+MsmtaI
9m949V6szQ0VEWMm91kU7l+3ueP0z0de41GJ4cRlagFatazgBIGiJCjEoRAtZ1Gg
AqZNao6gRxf92/uMe2qxVdM5tQAc+uay9rW5vHMW8LRMVOK9fQE2lkE6OE8p3l3m
5grbxjLe/o6W9cDVVZwYNuEsoT+8jSIwfmBpNB6ugEiCcxPJNCNsCAlB+2eIj4rV
BkXdZAW7EvwT8rgg2g==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:27:50 2025 by rpki-client