Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DAAF7FD78307B7257548536C216AD24C82EB25F5DBFBD292E83568E608B06078/0/3136382e3232382e3232342e302f32322d3234203d3e20323634363931.roa
File:                     3136382e3232382e3232342e302f32322d3234203d3e20323634363931.roa (raw, json)
Hash identifier:          reeXE+x7xrT5B46cCzmcMepON5uvWVtPu32l6OKR7nc=
Subject key identifier:   15:E2:2C:A1:34:2D:FE:9E:56:2F:F8:E5:88:65:04:5F:41:84:22:C8
Certificate issuer:       /CN=EDA4DBFFF93706F43ACBCCA397D516467FA2B7C0
Certificate serial:       095A8DB0D8560FE89BBFDF5F98376D9ABFDD29C1
Authority key identifier: ED:A4:DB:FF:F9:37:06:F4:3A:CB:CC:A3:97:D5:16:46:7F:A2:B7:C0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EDA4DBFFF93706F43ACBCCA397D516467FA2B7C0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DAAF7FD78307B7257548536C216AD24C82EB25F5DBFBD292E83568E608B06078/0/3136382e3232382e3232342e302f32322d3234203d3e20323634363931.roa
Signing time:             Fri 10 Apr 2026 14:38:24 +0000
ROA not before:           Fri 10 Apr 2026 14:33:24 +0000
ROA not after:            Fri 09 Apr 2027 14:38:24 +0000
asID:                     264691
IP address blocks:        168.228.224.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DAAF7FD78307B7257548536C216AD24C82EB25F5DBFBD292E83568E608B06078/0/EDA4DBFFF93706F43ACBCCA397D516467FA2B7C0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DAAF7FD78307B7257548536C216AD24C82EB25F5DBFBD292E83568E608B06078/0/EDA4DBFFF93706F43ACBCCA397D516467FA2B7C0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EDA4DBFFF93706F43ACBCCA397D516467FA2B7C0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Apr 2026 12:27:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:5a:8d:b0:d8:56:0f:e8:9b:bf:df:5f:98:37:6d:9a:bf:dd:29:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDA4DBFFF93706F43ACBCCA397D516467FA2B7C0
        Validity
            Not Before: Apr 10 14:33:24 2026 GMT
            Not After : Apr  9 14:38:24 2027 GMT
        Subject: CN=15E22CA1342DFE9E562FF8E58865045F418422C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:b1:6c:6c:bd:63:ec:9e:21:ee:ad:f6:b6:a0:
                    8f:ad:d1:93:e9:52:58:8b:d5:73:44:5a:cb:1a:2f:
                    f1:1f:7f:76:97:14:f6:3a:f2:54:64:1d:7b:73:15:
                    3e:88:52:8c:6c:63:8f:69:00:08:69:38:75:59:7e:
                    33:6a:6d:81:1e:46:b5:fa:91:78:d3:82:47:22:c6:
                    b0:0d:b2:48:66:4e:f2:ab:41:76:9c:11:3e:af:a7:
                    7e:bf:22:1e:ad:e4:c4:04:81:17:f1:dd:67:d3:c8:
                    23:56:bf:b8:c2:76:65:c2:e6:83:7c:69:9c:06:2e:
                    34:fd:ec:34:49:ea:8e:c7:a4:44:30:8f:f0:66:39:
                    64:79:5b:b8:fb:e8:38:eb:6a:27:92:72:17:5e:bd:
                    23:9f:78:c3:e8:5d:7d:02:55:ea:9a:02:03:50:df:
                    ec:ca:d3:85:c7:3b:55:d6:16:8b:03:92:05:57:38:
                    5c:8a:05:f6:c2:52:5c:89:89:6e:f0:29:12:6c:d8:
                    b5:27:8b:11:78:e8:80:de:b1:5e:a6:cd:f3:44:ff:
                    f2:b7:53:43:a1:eb:99:1f:66:ff:b3:7e:44:05:0b:
                    d7:cb:4c:0b:d5:55:f0:f1:24:e9:c2:d3:9c:91:af:
                    a0:91:6e:42:46:61:52:4e:5f:d0:0a:3b:dc:ae:fc:
                    fa:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:E2:2C:A1:34:2D:FE:9E:56:2F:F8:E5:88:65:04:5F:41:84:22:C8
            X509v3 Authority Key Identifier:
                keyid:ED:A4:DB:FF:F9:37:06:F4:3A:CB:CC:A3:97:D5:16:46:7F:A2:B7:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DAAF7FD78307B7257548536C216AD24C82EB25F5DBFBD292E83568E608B06078/0/EDA4DBFFF93706F43ACBCCA397D516467FA2B7C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EDA4DBFFF93706F43ACBCCA397D516467FA2B7C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DAAF7FD78307B7257548536C216AD24C82EB25F5DBFBD292E83568E608B06078/0/3136382e3232382e3232342e302f32322d3234203d3e20323634363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:87:87:01:93:11:e8:0f:9e:f7:e3:6d:28:d6:e5:35:ee:5f:
         bb:8c:92:5c:48:10:90:da:9c:00:ae:cd:cf:06:2b:17:68:dd:
         9c:88:f9:a3:b0:fa:51:4c:81:d3:7f:5a:87:e5:9c:a8:83:ec:
         3c:76:41:30:9a:19:63:4e:fe:b6:08:57:47:4d:a2:f1:c8:ce:
         e2:5f:85:e2:f3:b7:d5:f8:83:a9:49:18:dc:85:2f:4f:07:be:
         3f:97:2e:cb:21:28:fb:b9:85:1f:a0:02:61:df:8b:24:2d:05:
         6e:68:9b:d3:78:30:7e:19:fa:11:8d:00:a5:9e:a4:bd:45:74:
         96:23:20:d0:2c:09:41:c9:d4:9e:96:7e:01:9b:e4:64:0e:3e:
         c6:f0:e3:4e:ec:86:27:fd:f0:74:ab:12:00:e0:e9:e7:1c:29:
         9f:6a:89:a3:a2:cc:2b:9b:0c:ee:91:4c:0c:f8:38:a5:a4:fe:
         fd:6d:a9:0c:aa:93:29:f4:6a:d4:2d:76:3d:63:f8:78:15:9a:
         ed:0f:ef:f5:c7:e1:a2:c1:7a:9f:5b:6c:1c:01:82:6e:8e:fb:
         4f:09:d1:cc:6d:ee:59:a7:58:3b:ff:19:07:f9:05:1c:7c:ab:
         28:0b:fe:60:6f:02:ac:05:b8:1e:c7:c4:83:74:6a:4f:b4:db:
         90:ae:0e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 05:38:44 2026 by rpki-client