Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CFCFD7625B49F7425D8ECF19F720BDB1F1A7228A81B472507D2397D4A6F99AA9/0/3136362e3131342e322e302f32342d3234203d3e203532323530.roa
File:                     3136362e3131342e322e302f32342d3234203d3e203532323530.roa (raw, json)
Hash identifier:          3XJw9g8lXNe2oLqOkcvLkPl94kiZnTR4faxSqqRzkeQ=
Subject key identifier:   B2:33:FB:A5:F0:F7:C8:FA:60:7D:4C:73:BE:EF:C5:09:71:C2:E1:6A
Certificate issuer:       /CN=E840769E201D72D7EA098EEE7538061FBEA58116
Certificate serial:       3ABA58A3699315B9C7A0D8276B88ADEFE0467ADE
Authority key identifier: E8:40:76:9E:20:1D:72:D7:EA:09:8E:EE:75:38:06:1F:BE:A5:81:16
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E840769E201D72D7EA098EEE7538061FBEA58116.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CFCFD7625B49F7425D8ECF19F720BDB1F1A7228A81B472507D2397D4A6F99AA9/0/3136362e3131342e322e302f32342d3234203d3e203532323530.roa
Signing time:             Fri 10 Apr 2026 21:38:27 +0000
ROA not before:           Fri 10 Apr 2026 21:33:27 +0000
ROA not after:            Fri 09 Apr 2027 21:38:27 +0000
asID:                     52250
IP address blocks:        166.114.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CFCFD7625B49F7425D8ECF19F720BDB1F1A7228A81B472507D2397D4A6F99AA9/0/E840769E201D72D7EA098EEE7538061FBEA58116.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CFCFD7625B49F7425D8ECF19F720BDB1F1A7228A81B472507D2397D4A6F99AA9/0/E840769E201D72D7EA098EEE7538061FBEA58116.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E840769E201D72D7EA098EEE7538061FBEA58116.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 04:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:ba:58:a3:69:93:15:b9:c7:a0:d8:27:6b:88:ad:ef:e0:46:7a:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E840769E201D72D7EA098EEE7538061FBEA58116
        Validity
            Not Before: Apr 10 21:33:27 2026 GMT
            Not After : Apr  9 21:38:27 2027 GMT
        Subject: CN=B233FBA5F0F7C8FA607D4C73BEEFC50971C2E16A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:49:e0:e2:25:d6:f6:78:ab:80:17:cd:f3:31:
                    f3:a9:b0:4c:7b:69:01:a3:07:5f:64:87:40:ce:dd:
                    f7:e0:cb:7a:d6:68:5b:f0:20:ca:e3:c1:57:c7:07:
                    ba:4c:e4:58:ff:6e:d3:af:af:06:b5:15:9d:0e:7e:
                    73:87:80:c8:f6:d7:bc:d8:a7:9a:c6:a8:63:ca:69:
                    83:6f:ae:f0:fd:47:67:66:9a:56:7b:ed:18:21:a0:
                    f6:1f:1a:c2:23:9a:b2:1c:5d:97:05:75:30:06:2c:
                    eb:d1:10:d5:44:6d:26:e1:bf:77:a3:8e:10:ad:80:
                    7d:3c:59:65:61:d4:3b:77:14:6c:9a:9a:c7:68:a1:
                    4d:c1:0b:8b:de:d7:c5:f5:0b:75:0a:8a:fd:ad:6a:
                    00:61:13:bc:44:d9:44:9b:68:f4:96:70:51:34:97:
                    a8:14:f2:7c:37:2b:d8:58:fd:bf:3a:41:b7:5f:ef:
                    30:24:63:b8:3a:9c:05:c0:1b:af:28:dc:f0:9a:15:
                    62:ac:9c:23:dc:bf:67:39:d8:dc:cb:d1:88:00:66:
                    52:b7:8f:49:0b:07:df:b9:35:3b:68:16:1d:81:99:
                    52:c0:87:2c:69:a6:13:1f:90:9c:e7:62:12:a6:5e:
                    52:58:ee:7e:5a:bf:7c:03:82:50:25:77:e7:aa:06:
                    af:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:33:FB:A5:F0:F7:C8:FA:60:7D:4C:73:BE:EF:C5:09:71:C2:E1:6A
            X509v3 Authority Key Identifier:
                keyid:E8:40:76:9E:20:1D:72:D7:EA:09:8E:EE:75:38:06:1F:BE:A5:81:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CFCFD7625B49F7425D8ECF19F720BDB1F1A7228A81B472507D2397D4A6F99AA9/0/E840769E201D72D7EA098EEE7538061FBEA58116.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E840769E201D72D7EA098EEE7538061FBEA58116.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CFCFD7625B49F7425D8ECF19F720BDB1F1A7228A81B472507D2397D4A6F99AA9/0/3136362e3131342e322e302f32342d3234203d3e203532323530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.114.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:63:0f:3d:6d:1c:b9:b6:e7:68:3b:79:0e:10:cd:ad:8a:0b:
         6b:64:35:2d:8b:17:fb:4a:d9:4c:aa:ec:5c:95:23:49:69:00:
         fc:02:f4:91:49:c5:8f:4b:0f:f2:91:e4:25:3e:53:f3:60:21:
         a1:99:be:d8:79:9e:c7:d1:3c:10:ea:76:7d:46:e2:53:1b:eb:
         60:a0:0d:7d:0b:f9:ea:60:54:b3:ba:4b:9f:46:e2:83:07:67:
         d9:59:76:62:e8:76:12:47:df:bd:66:1b:bd:f8:24:6f:4d:b6:
         fe:76:10:21:85:d8:82:97:d2:00:2c:4b:61:8a:34:51:3d:a6:
         a2:4e:f4:0a:6b:56:37:62:25:f2:22:3f:c9:2e:8c:1f:5f:48:
         ec:a9:25:cb:45:34:da:ce:7d:c3:09:93:da:e8:9e:2b:38:5b:
         95:8b:94:f3:14:9a:62:a3:81:f1:7d:49:9a:eb:73:ce:ae:b5:
         c4:98:0a:b9:63:ec:13:60:38:ba:00:d1:a5:e7:79:4f:97:d5:
         b9:26:d7:ea:90:95:ce:63:9d:a0:e4:cf:f1:f5:c9:b3:d0:80:
         5f:94:98:5a:5a:45:88:9a:9a:1a:03:f2:a3:5d:14:b7:4b:3d:
         9a:10:30:68:dc:12:d0:53:2d:d2:3d:24:b0:4a:82:f6:18:20:
         95:20:ee:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:32:27 2026 by rpki-client