Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/3135322e3233312e32352e302f32342d3234203d3e20323636383737.roa
File:                     3135322e3233312e32352e302f32342d3234203d3e20323636383737.roa (raw, json)
Hash identifier:          1fa40vxtOGQJZUnu/zyYZCIkRUtGHO1G0B/lkYv1cL4=
Subject key identifier:   3F:7F:1D:98:41:9C:8A:2C:1B:34:79:44:B9:01:72:E8:95:C4:2F:43
Certificate issuer:       /CN=631ADD36A3A071B54A98E2664662D6CDCD1464FA
Certificate serial:       0E5D7267F29C6130ECBBC12DE1800F10749542C0
Authority key identifier: 63:1A:DD:36:A3:A0:71:B5:4A:98:E2:66:46:62:D6:CD:CD:14:64:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/3135322e3233312e32352e302f32342d3234203d3e20323636383737.roa
Signing time:             Fri 12 Jun 2026 21:47:34 +0000
ROA not before:           Fri 12 Jun 2026 21:42:34 +0000
ROA not after:            Fri 11 Jun 2027 21:47:34 +0000
asID:                     266877
IP address blocks:        152.231.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 09:13:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:5d:72:67:f2:9c:61:30:ec:bb:c1:2d:e1:80:0f:10:74:95:42:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=631ADD36A3A071B54A98E2664662D6CDCD1464FA
        Validity
            Not Before: Jun 12 21:42:34 2026 GMT
            Not After : Jun 11 21:47:34 2027 GMT
        Subject: CN=3F7F1D98419C8A2C1B347944B90172E895C42F43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:9e:2c:f1:c9:63:0d:bb:32:77:db:72:51:23:
                    23:4f:a8:c3:f3:3e:bf:81:de:cf:80:09:9d:f0:8b:
                    ae:fd:a7:97:95:aa:8a:54:86:4b:7e:66:7d:30:ab:
                    59:a3:7f:7a:24:9e:62:b6:d0:98:03:aa:2e:45:3f:
                    eb:27:60:4c:a9:ec:e9:91:76:20:26:fc:75:dd:20:
                    e3:f7:07:06:8c:60:48:b8:5c:c8:36:a8:47:67:0f:
                    f1:f4:aa:15:2e:e7:23:df:4e:50:7a:87:01:2d:a9:
                    1d:3c:f0:9c:37:24:e6:84:0f:b1:23:cf:13:20:9d:
                    4e:21:ad:fb:55:e9:7a:7c:37:c9:a6:98:f1:72:65:
                    90:57:92:4a:c0:84:1a:7d:ee:1d:20:b5:ca:2d:ab:
                    d0:a4:2f:f9:fd:f0:b6:24:03:9c:da:be:14:8e:35:
                    d5:65:8b:6e:32:41:f1:67:bf:40:3a:08:ad:de:7e:
                    6e:79:13:28:19:2d:62:b1:aa:09:b8:c9:31:7e:4d:
                    45:f6:1d:f6:f2:ce:59:bc:be:66:f7:5e:38:fa:52:
                    42:38:45:5d:42:5b:e3:a1:ef:b8:b8:96:24:45:37:
                    27:d8:be:54:3c:4e:0f:43:8a:9d:a4:5f:af:09:a3:
                    5c:ea:5a:6d:6e:cf:d9:03:82:ab:98:b0:c2:93:a4:
                    af:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:7F:1D:98:41:9C:8A:2C:1B:34:79:44:B9:01:72:E8:95:C4:2F:43
            X509v3 Authority Key Identifier:
                keyid:63:1A:DD:36:A3:A0:71:B5:4A:98:E2:66:46:62:D6:CD:CD:14:64:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/3135322e3233312e32352e302f32342d3234203d3e20323636383737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.231.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:12:7d:5b:88:96:99:c6:02:23:f5:4f:07:be:bf:13:53:eb:
         29:bf:66:c3:ea:ba:64:a1:74:1a:49:d3:89:69:4e:35:46:12:
         fa:87:7a:6c:f1:51:f6:3f:01:12:3f:e9:ab:a1:6c:25:0e:47:
         c1:d8:b2:a5:07:5d:93:54:8d:45:c2:53:1d:d0:0a:94:06:78:
         66:5c:d5:4d:c5:d9:6e:d4:26:96:1f:75:8a:b3:95:6d:54:7e:
         4c:c1:8f:c5:3d:5e:84:64:83:f9:79:c3:76:9d:8b:84:8a:0e:
         2f:2c:34:e1:4f:12:d0:d7:db:f8:7b:1d:12:29:a3:1c:04:18:
         a7:2c:87:e7:ec:fb:bb:f1:50:e9:b0:af:27:30:1c:ad:bf:ce:
         00:00:ee:bc:9c:2f:67:cc:66:72:08:18:a9:97:19:f0:48:cb:
         1f:c1:6c:51:63:e8:08:01:bb:ea:eb:c2:ff:65:dd:86:4a:07:
         6f:f1:b3:1f:33:d7:c1:7c:36:38:8a:5c:10:7b:df:b3:82:80:
         49:a8:76:7d:67:df:00:68:37:59:20:61:fa:7c:bb:d4:3a:7a:
         47:41:95:ae:cc:60:9c:19:08:00:4c:8b:68:c6:a3:95:d6:f7:
         63:a2:7b:d7:3a:8a:b2:87:30:24:47:7c:e0:4f:49:4e:d2:b8:
         85:ce:e5:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:54:03 2026 by rpki-client