Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/AS26426.roa
File:                     AS26426.roa (raw, json)
Hash identifier:          n7z1IPlSS7Ndz0dZrflv2DsBsMU1yUuI71CnnUvCqcQ=
Subject key identifier:   20:19:F8:C3:5D:97:68:7E:C3:1B:FA:17:9F:A6:0F:7E:0C:A0:12:50
Certificate issuer:       /CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
Certificate serial:       0B4A1B91A65A2F9DB1A2965BF1ACCC1C38B1D3D3
Authority key identifier: 76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/AS26426.roa
Signing time:             Tue 02 Jun 2026 17:45:43 +0000
ROA not before:           Tue 02 Jun 2026 17:40:43 +0000
ROA not after:            Tue 01 Jun 2027 17:45:43 +0000
asID:                     26426
IP address blocks:        190.242.8.0/24 maxlen: 24
                          190.242.13.0/24 maxlen: 24
                          190.242.21.0/24 maxlen: 24
                          190.242.68.0/23 maxlen: 24
                          190.242.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl
                          rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:4a:1b:91:a6:5a:2f:9d:b1:a2:96:5b:f1:ac:cc:1c:38:b1:d3:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
        Validity
            Not Before: Jun  2 17:40:43 2026 GMT
            Not After : Jun  1 17:45:43 2027 GMT
        Subject: CN=2019F8C35D97687EC31BFA179FA60F7E0CA01250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:37:6c:80:36:1d:ed:ab:93:14:1a:8c:74:e3:
                    ed:9d:fa:a4:7c:a5:27:b9:53:3f:f5:ed:89:57:f1:
                    1f:2e:82:0e:cd:d6:40:96:4a:d5:f7:35:d1:3f:8e:
                    14:ba:87:be:d0:e9:ca:13:78:5f:46:12:33:f5:62:
                    a8:c8:a0:69:20:99:9d:07:51:d8:bd:7d:c6:e0:6f:
                    92:dd:77:ca:66:2c:76:74:44:62:c2:cb:c2:9b:32:
                    47:d5:93:68:44:97:cb:c3:fa:78:ac:7a:a7:e4:9c:
                    f7:5d:91:29:a1:38:fc:e6:64:78:d8:4b:6b:d6:80:
                    92:78:3d:d6:29:92:71:5a:ad:ae:80:ec:a8:1f:f7:
                    4a:e2:6e:d8:c7:ad:73:b8:d6:17:69:0c:db:5d:fd:
                    cd:b6:92:21:ff:0b:3b:79:b3:58:cd:f5:5f:82:ed:
                    ba:89:89:d9:9f:4a:89:5f:ec:4a:df:7f:6c:d7:3e:
                    cd:bc:27:6b:ac:bd:52:be:52:ce:f8:8b:82:f4:0b:
                    a3:b6:07:dd:ec:e7:c5:25:30:c7:d1:97:c2:73:34:
                    a1:a7:63:9c:4c:54:fc:f6:f6:d6:02:67:91:f4:f2:
                    3b:64:54:cd:21:8e:ea:29:ec:e3:44:7c:5d:a2:86:
                    a2:fc:d6:62:ae:93:ea:09:48:d2:f5:a0:3d:64:d5:
                    cc:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:19:F8:C3:5D:97:68:7E:C3:1B:FA:17:9F:A6:0F:7E:0C:A0:12:50
            X509v3 Authority Key Identifier:
                keyid:76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/AS26426.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.242.8.0/24
                  190.242.13.0/24
                  190.242.21.0/24
                  190.242.68.0-190.242.70.255

    Signature Algorithm: sha256WithRSAEncryption
         4e:bb:ed:94:ab:27:2b:4a:13:e5:72:80:5b:e2:56:eb:aa:ea:
         0b:99:2b:2f:6a:f5:c4:55:8e:fa:03:ee:a6:5e:05:92:4a:a0:
         d2:ef:c2:5f:bb:b8:29:fe:96:92:e5:c4:70:33:d7:4c:04:b5:
         3b:14:37:9b:8d:d4:91:55:f8:8a:26:37:79:59:38:e3:73:7a:
         c6:19:51:1c:d2:ab:5c:e8:d2:03:8f:a2:55:35:0b:d8:ec:03:
         ed:0d:07:c0:aa:a8:76:b1:ba:19:91:ed:dc:2b:ad:26:1d:41:
         84:bd:18:f7:90:5f:a1:f2:9d:9c:82:42:c8:69:ab:f2:cc:ae:
         e3:39:17:69:d6:cc:e6:a7:42:a8:4e:a4:dc:fd:c0:2c:b8:bc:
         82:89:24:aa:d6:24:bb:4f:64:b1:5d:e9:13:1d:96:a6:f9:c8:
         c1:23:bf:ac:0b:7d:ec:12:e1:86:e6:0b:69:d2:09:f1:95:37:
         37:e6:cd:d9:79:02:02:90:b3:04:7a:4a:87:c7:04:ae:32:ee:
         98:d8:80:61:56:e8:cd:11:32:64:df:be:f8:df:d3:19:ba:83:
         e5:b1:ca:3b:b1:8a:46:0b:e2:fd:82:14:51:26:a1:58:a8:17:
         34:71:fb:9f:97:b0:1f:53:af:af:50:3a:4b:97:a1:f6:e9:dc:
         2b:7a:39:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:10:09 2026 by rpki-client