Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C291AEB17BDEFACD0867A60AEAD307AD6A1C0E1628F3EF8D1EDBE2DF84DFC5AD/0/3133322e3235352e3232362e302f32332d3234203d3e20323633373136.roa
File:                     3133322e3235352e3232362e302f32332d3234203d3e20323633373136.roa (raw, json)
Hash identifier:          swgXGivYoewrIvgEDVzkhUQw0l8ZAybb71tojcEG5ag=
Subject key identifier:   F3:7D:3B:ED:5B:85:F0:14:78:41:6D:19:B5:83:19:92:93:AD:56:FC
Certificate issuer:       /CN=48A2AE510C2812263732FA2A9F0AF189D1B73B04
Certificate serial:       1B0329355EC2E014C1AC478E0CBFA11838609A7F
Authority key identifier: 48:A2:AE:51:0C:28:12:26:37:32:FA:2A:9F:0A:F1:89:D1:B7:3B:04
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/48A2AE510C2812263732FA2A9F0AF189D1B73B04.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C291AEB17BDEFACD0867A60AEAD307AD6A1C0E1628F3EF8D1EDBE2DF84DFC5AD/0/3133322e3235352e3232362e302f32332d3234203d3e20323633373136.roa
Signing time:             Thu 26 Feb 2026 17:50:00 +0000
ROA not before:           Thu 26 Feb 2026 17:45:00 +0000
ROA not after:            Thu 25 Feb 2027 17:50:00 +0000
asID:                     263716
IP address blocks:        132.255.226.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C291AEB17BDEFACD0867A60AEAD307AD6A1C0E1628F3EF8D1EDBE2DF84DFC5AD/0/48A2AE510C2812263732FA2A9F0AF189D1B73B04.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C291AEB17BDEFACD0867A60AEAD307AD6A1C0E1628F3EF8D1EDBE2DF84DFC5AD/0/48A2AE510C2812263732FA2A9F0AF189D1B73B04.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/48A2AE510C2812263732FA2A9F0AF189D1B73B04.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 01:52:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:03:29:35:5e:c2:e0:14:c1:ac:47:8e:0c:bf:a1:18:38:60:9a:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48A2AE510C2812263732FA2A9F0AF189D1B73B04
        Validity
            Not Before: Feb 26 17:45:00 2026 GMT
            Not After : Feb 25 17:50:00 2027 GMT
        Subject: CN=F37D3BED5B85F01478416D19B583199293AD56FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e5:8a:ff:f2:a5:b6:49:48:52:53:bd:51:d6:
                    9e:3c:19:8f:74:91:2c:5c:2b:80:e1:b4:f9:ad:6a:
                    04:8d:1e:e0:f1:a8:f7:ef:e6:f5:72:3c:8e:3a:50:
                    dd:34:cb:bb:76:92:d4:94:dd:f2:99:4a:42:6f:9a:
                    ea:9d:c7:21:63:d6:b7:83:f2:ab:83:ef:2e:39:53:
                    02:87:4d:6e:08:1a:54:70:d1:b7:38:96:72:1b:af:
                    3c:2d:65:74:d1:03:bb:9d:4a:e3:88:15:05:1f:8f:
                    9a:7b:47:2f:ad:2f:00:1b:05:7f:f2:79:e3:ad:4e:
                    61:b8:72:ec:75:bc:13:60:71:1e:fe:1f:b1:91:e4:
                    2c:a7:2a:a9:a9:42:83:c1:80:91:d5:1a:e4:c3:db:
                    a8:7b:9f:63:f8:dc:d0:fb:88:04:05:1c:eb:0a:1c:
                    69:89:63:37:92:bc:d1:81:95:ee:40:18:2e:2c:84:
                    69:95:6c:c3:38:c0:7f:0a:3d:8f:5a:fe:ac:82:48:
                    44:36:b8:75:36:21:bd:7f:14:94:3a:6b:06:f9:cb:
                    32:eb:fa:dd:49:d8:af:79:ad:9c:0c:23:a7:e7:de:
                    07:74:ba:47:b3:2e:48:4d:46:75:e8:b9:20:1b:5e:
                    31:87:72:66:3a:88:05:6f:9c:6f:bc:07:ab:c3:1a:
                    a0:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:7D:3B:ED:5B:85:F0:14:78:41:6D:19:B5:83:19:92:93:AD:56:FC
            X509v3 Authority Key Identifier:
                keyid:48:A2:AE:51:0C:28:12:26:37:32:FA:2A:9F:0A:F1:89:D1:B7:3B:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C291AEB17BDEFACD0867A60AEAD307AD6A1C0E1628F3EF8D1EDBE2DF84DFC5AD/0/48A2AE510C2812263732FA2A9F0AF189D1B73B04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/48A2AE510C2812263732FA2A9F0AF189D1B73B04.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C291AEB17BDEFACD0867A60AEAD307AD6A1C0E1628F3EF8D1EDBE2DF84DFC5AD/0/3133322e3235352e3232362e302f32332d3234203d3e20323633373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0b:e5:dc:e2:1d:ad:b6:cb:6a:d4:f6:23:b7:1b:db:aa:b4:32:
         bd:7c:e0:73:52:1a:f6:68:b1:49:3d:94:00:bc:76:d1:bf:18:
         fb:20:93:3a:6e:84:96:0c:b4:7c:b8:fc:28:dd:21:ad:b5:b1:
         7c:5d:61:aa:55:4f:81:53:78:b7:d3:9c:c6:66:84:d0:de:15:
         f0:3b:a6:34:d2:b9:21:2c:bf:ac:4b:36:77:1a:07:e5:44:a9:
         96:a0:a0:bf:f4:b4:a0:72:d5:94:0f:00:a7:4c:15:d2:25:3a:
         de:9f:6f:99:02:7e:89:3b:00:1f:36:08:69:bf:3f:fa:62:74:
         bb:e2:ad:fc:be:df:7d:d1:7e:15:b2:9a:26:c1:66:a4:13:71:
         6f:e7:63:32:d9:f7:d1:98:7e:2f:1e:ab:61:88:3e:24:3b:50:
         c3:f4:9e:aa:17:03:6d:71:f1:00:c9:af:15:f8:2f:d6:de:6f:
         b3:57:18:57:50:92:3e:60:98:c9:91:60:29:2f:20:fa:51:44:
         b4:9b:ec:ce:82:af:66:3c:3e:30:b2:79:27:7f:ab:09:b2:fb:
         5d:21:0d:6c:94:26:d0:c6:b3:24:34:d7:49:bf:5e:52:f4:60:
         6d:e0:a6:69:99:f1:0d:99:78:f4:fe:e7:f8:97:a2:5a:40:38:
         f4:87:5e:a8
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUGwMpNV7C4BTBrEeODL+hGDhgmn8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDhBMkFFNTEwQzI4MTIyNjM3MzJGQTJBOUYwQUYxODlE
MUI3M0IwNDAeFw0yNjAyMjYxNzQ1MDBaFw0yNzAyMjUxNzUwMDBaMDMxMTAvBgNV
BAMTKEYzN0QzQkVENUI4NUYwMTQ3ODQxNkQxOUI1ODMxOTkyOTNBRDU2RkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCR5Yr/8qW2SUhSU71R1p48GY90
kSxcK4DhtPmtagSNHuDxqPfv5vVyPI46UN00y7t2ktSU3fKZSkJvmuqdxyFj1reD
8quD7y45UwKHTW4IGlRw0bc4lnIbrzwtZXTRA7udSuOIFQUfj5p7Ry+tLwAbBX/y
eeOtTmG4cux1vBNgcR7+H7GR5CynKqmpQoPBgJHVGuTD26h7n2P43ND7iAQFHOsK
HGmJYzeSvNGBle5AGC4shGmVbMM4wH8KPY9a/qyCSEQ2uHU2Ib1/FJQ6awb5yzLr
+t1J2K95rZwMI6fn3gd0ukezLkhNRnXouSAbXjGHcmY6iAVvnG+8B6vDGqDvAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQU83077VuF8BR4QW0ZtYMZkpOtVvwwHwYDVR0j
BBgwFoAUSKKuUQwoEiY3MvoqnwrxidG3OwQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DMjkxQUVCMTdCREVGQUNEMDg2N0E2MEFFQUQzMDdBRDZB
MUMwRTE2MjhGM0VGOEQxRURCRTJERjg0REZDNUFELzAvNDhBMkFFNTEwQzI4MTIy
NjM3MzJGQTJBOUYwQUYxODlEMUI3M0IwNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80OEEyQUU1MTBDMjgxMjI2Mzcz
MkZBMkE5RjBBRjE4OUQxQjczQjA0LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzI5MUFFQjE3QkRFRkFDRDA4NjdBNjBBRUFEMzA3QUQ2QTFDMEUxNjI4
RjNFRjhEMUVEQkUyREY4NERGQzVBRC8wLzMxMzMzMjJlMzIzNTM1MmUzMjMyMzYy
ZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMjM2MzMzNzMxMzYucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGE
/+IwDQYJKoZIhvcNAQELBQADggEBAAvl3OIdrbbLatT2I7cb26q0Mr184HNSGvZo
sUk9lAC8dtG/GPsgkzpuhJYMtHy4/CjdIa21sXxdYapVT4FTeLfTnMZmhNDeFfA7
pjTSuSEsv6xLNncaB+VEqZagoL/0tKBy1ZQPAKdMFdIlOt6fb5kCfok7AB82CGm/
P/pidLvirfy+333RfhWymibBZqQTcW/nYzLZ99GYfi8eq2GIPiQ7UMP0nqoXA21x
8QDJrxX4L9beb7NXGFdQkj5gmMmRYCkvIPpRRLSb7M6Cr2Y8PjCyeSd/qwmy+10h
DWyUJtDGsyQ010m/XlL0YG3gpmmZ8Q2ZePT+5/iXolpAOPSHXqg=
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:06:27 2026 by rpki-client