Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3136372e3234392e3131382e302f32342d3234203d3e203332303938.roa
File:                     3136372e3234392e3131382e302f32342d3234203d3e203332303938.roa (raw, json)
Hash identifier:          SrrmdvlCy3wJWfJGhAs0mq6ls9HZjk1K8h1PXDHkgPQ=
Subject key identifier:   CC:FB:10:76:34:59:F1:97:7D:B1:87:AF:B6:74:1D:BB:8B:86:B5:35
Certificate issuer:       /CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
Certificate serial:       64A0580F034CF3CAEB0985C1B9ABEFD413E7B6B5
Authority key identifier: 0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3136372e3234392e3131382e302f32342d3234203d3e203332303938.roa
Signing time:             Thu 11 Jun 2026 06:47:22 +0000
ROA not before:           Thu 11 Jun 2026 06:42:22 +0000
ROA not after:            Thu 10 Jun 2027 06:47:22 +0000
asID:                     32098
IP address blocks:        167.249.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl
                          rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:a0:58:0f:03:4c:f3:ca:eb:09:85:c1:b9:ab:ef:d4:13:e7:b6:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
        Validity
            Not Before: Jun 11 06:42:22 2026 GMT
            Not After : Jun 10 06:47:22 2027 GMT
        Subject: CN=CCFB10763459F1977DB187AFB6741DBB8B86B535
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:81:3f:3b:a5:fc:31:5f:d8:21:f5:4c:43:27:
                    d0:a2:4d:06:10:4c:ec:f5:63:fd:c4:f8:1f:27:80:
                    5b:88:9c:5c:42:05:6e:4e:c5:92:a3:98:b5:75:7b:
                    06:3a:61:48:e4:9d:34:f5:99:2b:93:ad:e5:d8:94:
                    ff:2d:13:74:09:98:0d:72:45:0d:b0:ee:08:db:9c:
                    1d:20:8e:8d:8a:e3:0a:31:57:63:d2:3f:dd:0d:2e:
                    52:4a:99:54:e1:63:35:5e:a5:d3:65:2c:81:60:b5:
                    cb:45:f5:8f:2d:4e:88:96:54:29:30:63:2d:e4:49:
                    32:6f:d3:95:e5:e1:ac:4e:f1:d7:89:1c:6c:bd:33:
                    61:3d:da:9b:7f:7d:5b:6a:b4:c6:d5:85:18:68:e0:
                    6c:eb:79:7f:77:87:31:0c:28:3e:a0:f8:59:b4:d7:
                    dd:9b:03:ce:63:1e:37:0f:65:a3:24:ef:c8:a7:cc:
                    d6:63:b1:5b:e2:26:10:75:d3:cb:73:b4:7b:4d:e3:
                    09:da:f1:d8:96:87:1f:31:6b:0b:98:b1:6a:60:6f:
                    6e:24:d7:c3:89:a5:c3:5e:31:f5:55:24:d1:cb:1e:
                    82:9f:f7:02:bf:2e:16:0b:ec:41:8b:62:10:2a:54:
                    c6:fb:f5:89:0b:61:fa:eb:62:12:fe:54:19:21:97:
                    9a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:FB:10:76:34:59:F1:97:7D:B1:87:AF:B6:74:1D:BB:8B:86:B5:35
            X509v3 Authority Key Identifier:
                keyid:0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3136372e3234392e3131382e302f32342d3234203d3e203332303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:a8:87:58:60:55:74:e0:05:ad:c1:58:2a:4e:00:76:f9:e4:
         a8:db:50:64:73:a6:f1:26:f2:eb:b6:a6:4b:89:8f:1f:91:19:
         a6:e5:43:c1:c3:95:af:4d:27:ec:e6:5e:ba:31:ed:fd:47:29:
         a6:0b:80:24:36:54:62:5c:78:d2:cd:a9:15:f8:43:ab:8f:24:
         41:02:d2:5e:7c:cd:d7:4b:c5:cb:43:6b:e7:13:81:8d:c3:e9:
         59:89:e8:f3:38:fc:90:8c:a3:af:db:c6:37:48:84:af:61:01:
         21:61:53:a9:1a:09:f9:42:6e:c1:9b:10:42:68:55:bf:aa:9b:
         ef:7b:b3:ef:a7:e3:85:b9:33:5a:e1:b6:ca:ed:f9:a7:e8:cd:
         da:f9:be:f4:8b:01:c7:74:55:bd:49:04:fc:d4:b0:ac:8c:7e:
         d1:18:d2:c0:2b:c3:21:78:cb:b7:af:1e:3e:cb:73:8a:d3:15:
         8b:03:a5:ee:23:40:8d:5f:f8:e1:bf:33:de:5d:01:5b:6b:e3:
         4c:a0:88:82:6b:de:c1:08:87:4e:a7:02:41:9d:e7:46:c4:bf:
         69:f2:ad:7f:e8:ac:90:ac:6e:d6:47:0e:af:19:9a:bc:8b:54:
         4d:89:42:2c:6b:3d:da:9c:59:42:7d:6c:34:c9:70:af:fe:86:
         4c:c2:62:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:34:15 2026 by rpki-client