Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D4D647836B8E6046983C7C7DFF49F0F288D6BE2CC2EBEA5DBD736C3EE7B74B12/0/3138372e34392e3138392e302f32342d3234203d3e20323639393733.roa
File:                     3138372e34392e3138392e302f32342d3234203d3e20323639393733.roa (raw, json)
Hash identifier:          GQSix06ibswPkqCgycEVGSnmH1z4lPRTZez2cbvB8jc=
Subject key identifier:   5B:46:A0:39:1F:F8:66:86:40:21:5D:8D:1C:59:AC:1D:C5:81:B4:C5
Certificate issuer:       /CN=5995D747478C5DCDC0151DBD69361708C3663EEC
Certificate serial:       0E7F3064EACF3C84B8031BEED898A96A76E6B5F5
Authority key identifier: 59:95:D7:47:47:8C:5D:CD:C0:15:1D:BD:69:36:17:08:C3:66:3E:EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5995D747478C5DCDC0151DBD69361708C3663EEC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D4D647836B8E6046983C7C7DFF49F0F288D6BE2CC2EBEA5DBD736C3EE7B74B12/0/3138372e34392e3138392e302f32342d3234203d3e20323639393733.roa
Signing time:             Mon 23 Feb 2026 18:31:36 +0000
ROA not before:           Mon 23 Feb 2026 18:26:36 +0000
ROA not after:            Mon 22 Feb 2027 18:31:36 +0000
asID:                     269973
IP address blocks:        187.49.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D4D647836B8E6046983C7C7DFF49F0F288D6BE2CC2EBEA5DBD736C3EE7B74B12/0/5995D747478C5DCDC0151DBD69361708C3663EEC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D4D647836B8E6046983C7C7DFF49F0F288D6BE2CC2EBEA5DBD736C3EE7B74B12/0/5995D747478C5DCDC0151DBD69361708C3663EEC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5995D747478C5DCDC0151DBD69361708C3663EEC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Mar 2026 23:52:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:7f:30:64:ea:cf:3c:84:b8:03:1b:ee:d8:98:a9:6a:76:e6:b5:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5995D747478C5DCDC0151DBD69361708C3663EEC
        Validity
            Not Before: Feb 23 18:26:36 2026 GMT
            Not After : Feb 22 18:31:36 2027 GMT
        Subject: CN=5B46A0391FF8668640215D8D1C59AC1DC581B4C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:00:c6:3f:b5:dd:68:12:c0:16:b4:c4:06:bb:
                    f6:81:94:b4:e1:d0:81:7d:b1:ce:51:93:4f:59:fc:
                    4c:46:97:ef:77:8f:32:3f:17:e8:f4:87:bb:3c:7d:
                    09:cc:28:93:45:7c:81:8f:ad:1d:40:e7:df:4e:b2:
                    9d:30:18:50:ab:3b:b6:4c:23:49:b3:3e:9e:2b:90:
                    75:45:d4:6e:53:c3:37:1f:f1:16:e5:d6:49:b6:f7:
                    41:0c:9e:a9:a2:43:aa:4c:49:ab:f2:0c:90:58:ed:
                    7d:19:a0:c8:bc:2d:6b:85:a6:6a:dd:22:d2:53:55:
                    b6:19:0d:03:57:23:a2:de:15:1f:5c:63:ba:4e:27:
                    50:83:58:42:d4:5c:d0:bc:55:ac:47:e4:4f:33:6f:
                    53:0d:e8:f0:a8:aa:d8:67:da:97:1b:86:8d:e9:2a:
                    42:4a:14:55:d5:b6:41:d4:ad:6b:23:13:ac:be:b2:
                    8e:45:f9:16:b2:d2:1b:04:11:72:74:27:8a:43:4c:
                    4b:88:ee:0b:5e:83:71:d9:e7:09:66:36:85:59:dc:
                    07:84:32:b8:07:4b:29:5f:88:d6:3b:4a:58:f7:e4:
                    b7:93:48:aa:bc:4a:d7:e3:21:33:66:3c:95:8f:01:
                    38:65:f2:ad:49:72:e8:a5:3b:56:30:46:fd:2b:d7:
                    c6:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:46:A0:39:1F:F8:66:86:40:21:5D:8D:1C:59:AC:1D:C5:81:B4:C5
            X509v3 Authority Key Identifier:
                keyid:59:95:D7:47:47:8C:5D:CD:C0:15:1D:BD:69:36:17:08:C3:66:3E:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D4D647836B8E6046983C7C7DFF49F0F288D6BE2CC2EBEA5DBD736C3EE7B74B12/0/5995D747478C5DCDC0151DBD69361708C3663EEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5995D747478C5DCDC0151DBD69361708C3663EEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D4D647836B8E6046983C7C7DFF49F0F288D6BE2CC2EBEA5DBD736C3EE7B74B12/0/3138372e34392e3138392e302f32342d3234203d3e20323639393733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.49.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:18:b3:f4:a3:e4:8b:52:32:4e:dd:af:61:8e:82:35:73:64:
         52:3a:2e:2a:1c:38:ff:53:06:76:40:04:12:04:ed:1b:a0:98:
         3f:1f:c5:8c:f6:38:c0:6f:22:e4:54:a5:1c:0e:f1:6e:3f:f3:
         5e:4c:b2:ae:10:99:e9:a7:66:7e:aa:b7:94:7c:b3:4f:de:31:
         b1:35:0e:ac:6d:6e:57:f1:27:e7:05:2f:65:46:d2:79:03:6d:
         c7:7b:e5:7d:ba:41:9e:ad:7d:ef:66:5e:83:98:d2:2b:83:83:
         08:7d:91:ca:0f:26:ab:91:cb:ac:b6:04:7a:2c:3f:2b:bc:f9:
         f8:e8:bb:19:82:cc:fa:28:4f:f1:bf:a8:a1:29:fc:7e:ac:94:
         49:a0:eb:05:76:d6:52:e5:27:8e:33:fd:45:7c:f5:f5:74:25:
         11:09:75:4f:af:f9:00:24:8c:06:c8:ab:16:2d:33:91:8c:21:
         14:b6:27:d1:bb:9c:74:bf:e7:96:c9:8e:ce:90:81:50:e7:b3:
         26:ef:7a:e3:91:d3:5e:b4:06:5e:d5:29:f3:29:4a:cb:6c:51:
         b2:47:0e:70:57:98:53:eb:d9:e7:1e:74:a8:e8:f9:f8:0e:7e:
         09:f4:a9:e4:5f:2a:02:39:c1:1d:ec:05:ff:59:8e:dc:b6:61:
         44:66:3d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:51:26 2026 by rpki-client