Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6859016A81F03FD26F0F02CE2B6880C6C78280117A792052F151F8B52E58E4D0/0/3136342e3136332e3234362e302f32342d3234203d3e203238303631.roa
File:                     3136342e3136332e3234362e302f32342d3234203d3e203238303631.roa (raw, json)
Hash identifier:          e1AH2HNsirzB+9obf/dH/dojWHSUvXfMtCRda3WLH6s=
Subject key identifier:   F1:67:CD:F6:44:50:E4:81:CE:79:42:A8:E1:98:91:DA:16:35:85:1E
Certificate issuer:       /CN=B2CAA3C9247091BFF5CFB41F9D26BAE7457E0285
Certificate serial:       6747AB8996C70738DC822C28238267BEEF99A5F6
Authority key identifier: B2:CA:A3:C9:24:70:91:BF:F5:CF:B4:1F:9D:26:BA:E7:45:7E:02:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B2CAA3C9247091BFF5CFB41F9D26BAE7457E0285.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6859016A81F03FD26F0F02CE2B6880C6C78280117A792052F151F8B52E58E4D0/0/3136342e3136332e3234362e302f32342d3234203d3e203238303631.roa
Signing time:             Tue 19 May 2026 20:43:13 +0000
ROA not before:           Tue 19 May 2026 20:38:13 +0000
ROA not after:            Tue 18 May 2027 20:43:13 +0000
asID:                     28061
IP address blocks:        164.163.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6859016A81F03FD26F0F02CE2B6880C6C78280117A792052F151F8B52E58E4D0/0/B2CAA3C9247091BFF5CFB41F9D26BAE7457E0285.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6859016A81F03FD26F0F02CE2B6880C6C78280117A792052F151F8B52E58E4D0/0/B2CAA3C9247091BFF5CFB41F9D26BAE7457E0285.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B2CAA3C9247091BFF5CFB41F9D26BAE7457E0285.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:47:ab:89:96:c7:07:38:dc:82:2c:28:23:82:67:be:ef:99:a5:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2CAA3C9247091BFF5CFB41F9D26BAE7457E0285
        Validity
            Not Before: May 19 20:38:13 2026 GMT
            Not After : May 18 20:43:13 2027 GMT
        Subject: CN=F167CDF64450E481CE7942A8E19891DA1635851E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e3:8c:3a:10:16:ed:74:ba:66:a8:e9:06:c5:
                    45:fa:bd:c9:e3:d5:20:16:49:c7:29:4e:90:46:51:
                    cc:f3:0c:5c:4d:32:07:74:30:8e:fe:8c:83:53:4a:
                    e6:8f:59:cc:31:01:20:7d:0e:84:fe:d4:3f:c8:5c:
                    80:f2:cf:f8:dd:0b:23:9d:c4:3f:a3:41:96:7e:9c:
                    ea:61:b4:c7:0e:74:d1:d0:a4:3b:d3:86:ee:f9:09:
                    5a:4d:9f:09:22:c2:43:26:2b:bc:0c:71:72:df:d8:
                    14:65:a3:5c:02:50:e6:be:3c:53:64:47:9a:0d:8f:
                    45:5d:d7:50:dc:78:49:55:e2:e0:9c:55:c7:ee:81:
                    e9:94:76:f2:e2:56:68:74:b1:9d:28:3d:9b:15:33:
                    91:c8:18:b9:9d:ea:e0:43:c2:40:40:6d:c7:60:74:
                    7d:ee:0e:a5:55:a1:ba:64:31:f7:80:60:bd:73:42:
                    a0:12:57:35:3f:22:79:6b:f9:ac:47:a7:c3:a0:6e:
                    2c:1b:d2:42:d9:a4:77:b6:96:1d:7d:c4:85:1a:50:
                    b5:86:5d:09:31:22:f1:b8:a0:36:54:d9:7c:87:72:
                    5e:44:cd:2c:fa:58:7f:e5:9a:88:c4:2c:12:12:d8:
                    7e:40:6e:73:06:d5:ef:8a:f6:b5:e3:5f:95:af:37:
                    98:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:67:CD:F6:44:50:E4:81:CE:79:42:A8:E1:98:91:DA:16:35:85:1E
            X509v3 Authority Key Identifier:
                keyid:B2:CA:A3:C9:24:70:91:BF:F5:CF:B4:1F:9D:26:BA:E7:45:7E:02:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6859016A81F03FD26F0F02CE2B6880C6C78280117A792052F151F8B52E58E4D0/0/B2CAA3C9247091BFF5CFB41F9D26BAE7457E0285.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B2CAA3C9247091BFF5CFB41F9D26BAE7457E0285.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6859016A81F03FD26F0F02CE2B6880C6C78280117A792052F151F8B52E58E4D0/0/3136342e3136332e3234362e302f32342d3234203d3e203238303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:26:2b:82:21:58:18:8c:d3:7a:a0:04:ee:c1:f9:0f:ae:0e:
         c0:a9:50:c3:8c:70:0a:83:7d:3d:bb:fe:36:04:14:31:64:36:
         e4:6a:e8:91:79:7e:ac:e7:6c:90:c9:6d:c3:15:c5:e0:33:ca:
         b2:07:e2:e6:e9:e5:3a:61:1f:bb:91:c3:45:28:a1:44:48:ee:
         f1:58:f7:ae:c4:79:87:29:a0:5c:56:27:3e:74:65:91:ec:f5:
         96:b3:b1:d4:21:7b:b3:cf:86:0c:81:a6:9d:66:04:ea:18:92:
         cc:20:d0:39:e7:1a:cc:be:18:cc:3d:76:c5:b2:f5:d1:01:7b:
         7a:44:a9:d9:fa:fe:4c:ba:8c:18:ce:69:18:9b:02:36:f2:9f:
         0e:8c:7d:9b:11:07:3d:0d:83:ac:cb:83:e1:69:bb:14:52:37:
         48:2d:f3:9e:82:86:bf:8d:65:71:1a:c5:53:6f:32:ed:33:34:
         26:df:cd:35:6c:60:2c:17:f0:70:1c:04:01:45:3c:01:99:ba:
         56:77:b9:b2:b5:98:1b:04:33:9e:0d:8b:a1:a0:86:0f:10:12:
         14:e9:f8:94:e1:ab:b2:d6:cc:8f:d6:d0:76:8c:cc:8a:17:7d:
         e0:13:00:3d:9c:9f:b9:1a:b4:de:94:11:33:87:9f:45:ad:d3:
         5c:7a:38:f1
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUZ0eriZbHBzjcgiwoI4Jnvu+ZpfYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjJDQUEzQzkyNDcwOTFCRkY1Q0ZCNDFGOUQyNkJBRTc0
NTdFMDI4NTAeFw0yNjA1MTkyMDM4MTNaFw0yNzA1MTgyMDQzMTNaMDMxMTAvBgNV
BAMTKEYxNjdDREY2NDQ1MEU0ODFDRTc5NDJBOEUxOTg5MURBMTYzNTg1MUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC244w6EBbtdLpmqOkGxUX6vcnj
1SAWSccpTpBGUczzDFxNMgd0MI7+jINTSuaPWcwxASB9DoT+1D/IXIDyz/jdCyOd
xD+jQZZ+nOphtMcOdNHQpDvThu75CVpNnwkiwkMmK7wMcXLf2BRlo1wCUOa+PFNk
R5oNj0Vd11DceElV4uCcVcfugemUdvLiVmh0sZ0oPZsVM5HIGLmd6uBDwkBAbcdg
dH3uDqVVobpkMfeAYL1zQqASVzU/Inlr+axHp8Ogbiwb0kLZpHe2lh19xIUaULWG
XQkxIvG4oDZU2XyHcl5EzSz6WH/lmojELBIS2H5AbnMG1e+K9rXjX5WvN5ifAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU8WfN9kRQ5IHOeUKo4ZiR2hY1hR4wHwYDVR0j
BBgwFoAUssqjySRwkb/1z7QfnSa650V+AoUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82ODU5MDE2QTgxRjAzRkQyNkYwRjAyQ0UyQjY4ODBDNkM3
ODI4MDExN0E3OTIwNTJGMTUxRjhCNTJFNThFNEQwLzAvQjJDQUEzQzkyNDcwOTFC
RkY1Q0ZCNDFGOUQyNkJBRTc0NTdFMDI4NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CMkNBQTNDOTI0NzA5MUJGRjVD
RkI0MUY5RDI2QkFFNzQ1N0UwMjg1LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjg1OTAxNkE4MUYwM0ZEMjZGMEYwMkNFMkI2ODgwQzZDNzgyODAxMTdB
NzkyMDUyRjE1MUY4QjUyRTU4RTREMC8wLzMxMzYzNDJlMzEzNjMzMmUzMjM0MzYy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4MzAzNjMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApKP2
MA0GCSqGSIb3DQEBCwUAA4IBAQC3JiuCIVgYjNN6oATuwfkPrg7AqVDDjHAKg309
u/42BBQxZDbkauiReX6s52yQyW3DFcXgM8qyB+Lm6eU6YR+7kcNFKKFESO7xWPeu
xHmHKaBcVic+dGWR7PWWs7HUIXuzz4YMgaadZgTqGJLMINA55xrMvhjMPXbFsvXR
AXt6RKnZ+v5MuowYzmkYmwI28p8OjH2bEQc9DYOsy4PhabsUUjdILfOegoa/jWVx
GsVTbzLtMzQm3801bGAsF/BwHAQBRTwBmbpWd7mytZgbBDOeDYuhoIYPEBIU6fiU
4auy1syP1tB2jMyKF33gEwA9nJ+5GrTelBEzh59FrdNcejjx
-----END CERTIFICATE-----
Generated at Sun Jun 14 05:48:58 2026 by rpki-client