Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FB5EA391B8AE50AF4812345DA4458529BC172D13AC9D0EAF8425DCA73D4793E1/0/32342e3135322e35372e302f32342d3234203d3e20323639393730.roa
File:                     32342e3135322e35372e302f32342d3234203d3e20323639393730.roa (raw, json)
Hash identifier:          vOPJ9Sv2lCl55kY8pffP03XRHnsgNqSdi948L/bCCp8=
Subject key identifier:   EA:8F:5E:C6:E2:AD:3C:2B:40:03:24:95:B7:63:C8:2E:64:20:72:88
Certificate issuer:       /CN=F82E0DF2AA6857B34A994C7A30E543ABF22FDA42
Certificate serial:       4C95EC3B681CDD956CA3DCD3F8D1CA38F707A65B
Authority key identifier: F8:2E:0D:F2:AA:68:57:B3:4A:99:4C:7A:30:E5:43:AB:F2:2F:DA:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F82E0DF2AA6857B34A994C7A30E543ABF22FDA42.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FB5EA391B8AE50AF4812345DA4458529BC172D13AC9D0EAF8425DCA73D4793E1/0/32342e3135322e35372e302f32342d3234203d3e20323639393730.roa
Signing time:             Fri 27 Feb 2026 11:40:00 +0000
ROA not before:           Fri 27 Feb 2026 11:35:00 +0000
ROA not after:            Fri 26 Feb 2027 11:40:00 +0000
asID:                     269970
IP address blocks:        24.152.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FB5EA391B8AE50AF4812345DA4458529BC172D13AC9D0EAF8425DCA73D4793E1/0/F82E0DF2AA6857B34A994C7A30E543ABF22FDA42.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FB5EA391B8AE50AF4812345DA4458529BC172D13AC9D0EAF8425DCA73D4793E1/0/F82E0DF2AA6857B34A994C7A30E543ABF22FDA42.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F82E0DF2AA6857B34A994C7A30E543ABF22FDA42.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:95:ec:3b:68:1c:dd:95:6c:a3:dc:d3:f8:d1:ca:38:f7:07:a6:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F82E0DF2AA6857B34A994C7A30E543ABF22FDA42
        Validity
            Not Before: Feb 27 11:35:00 2026 GMT
            Not After : Feb 26 11:40:00 2027 GMT
        Subject: CN=EA8F5EC6E2AD3C2B40032495B763C82E64207288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:90:87:a4:21:87:45:dc:b7:fd:02:06:6a:87:
                    75:fd:c4:28:23:46:b4:a8:4a:df:e3:fc:ee:55:60:
                    d0:cc:53:a0:35:98:63:b0:02:13:f8:c3:0d:53:0d:
                    a4:5d:9a:86:58:70:dc:78:b8:22:47:47:74:db:43:
                    47:bf:de:e3:f6:df:10:e1:58:95:05:d5:cb:f4:30:
                    9d:ce:6f:d8:89:92:0b:98:30:05:19:b3:b7:92:f6:
                    77:3b:77:ca:70:e1:26:42:95:8d:1b:fe:d5:61:d8:
                    74:26:f6:ca:20:06:04:33:db:e9:09:12:0c:be:cf:
                    b7:3d:ed:d8:c7:a3:49:2f:34:76:87:60:01:1f:8a:
                    62:15:e2:62:42:95:de:87:1f:20:c7:43:85:f1:62:
                    c7:75:7e:18:3d:d2:73:38:66:2b:fc:7e:e7:52:a1:
                    cb:12:76:ab:25:a9:a7:c5:61:66:a2:28:b1:cd:2b:
                    34:2e:20:08:05:68:af:f7:60:58:ac:23:50:84:0d:
                    e9:83:13:ab:ca:36:53:10:b2:c9:54:da:67:13:2f:
                    ba:54:ff:ad:f5:57:49:f7:21:0b:a5:f8:3c:5c:86:
                    47:7c:79:3e:ae:0c:1f:bf:a2:ce:e4:81:07:7d:78:
                    56:24:8b:76:ca:cd:29:0b:89:ed:cf:6a:bc:df:ee:
                    3f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:8F:5E:C6:E2:AD:3C:2B:40:03:24:95:B7:63:C8:2E:64:20:72:88
            X509v3 Authority Key Identifier:
                keyid:F8:2E:0D:F2:AA:68:57:B3:4A:99:4C:7A:30:E5:43:AB:F2:2F:DA:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FB5EA391B8AE50AF4812345DA4458529BC172D13AC9D0EAF8425DCA73D4793E1/0/F82E0DF2AA6857B34A994C7A30E543ABF22FDA42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F82E0DF2AA6857B34A994C7A30E543ABF22FDA42.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FB5EA391B8AE50AF4812345DA4458529BC172D13AC9D0EAF8425DCA73D4793E1/0/32342e3135322e35372e302f32342d3234203d3e20323639393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.152.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:07:3e:65:ea:ac:01:15:ec:81:7f:86:4c:f6:7a:9b:ac:3d:
         04:0a:77:e4:e7:5c:fa:b1:8b:b1:39:3f:c7:73:08:93:8d:42:
         24:da:5e:55:25:03:4c:57:53:d1:3f:21:44:df:b5:64:e5:1b:
         13:c2:2f:34:69:ec:d4:f3:c9:0a:5c:89:e2:eb:ad:24:12:d2:
         4c:82:0f:0f:ab:94:ee:53:2e:b3:ea:5f:4b:07:2a:25:82:9b:
         c0:31:ab:51:d9:ae:83:33:7e:a5:cb:88:55:c0:dc:37:ef:e4:
         d2:9f:f3:2d:bd:4a:b3:f1:da:1c:5a:2d:5f:f0:6e:19:6e:3c:
         84:2e:a7:3b:4a:46:e0:aa:6e:0b:14:69:6c:76:60:79:94:e8:
         50:74:6d:54:6e:30:eb:b1:3c:f8:6a:78:32:7b:12:d2:bd:c1:
         a4:44:61:96:56:46:c3:9d:17:03:75:86:2c:ba:82:f8:fb:5a:
         6c:d7:2e:c0:ba:ab:54:62:a7:5d:0c:e8:83:63:f1:dd:e5:98:
         10:0e:30:83:e4:72:26:21:28:1d:3e:90:3b:ad:b3:d7:b5:f5:
         54:85:21:78:1d:e0:d2:5e:24:0d:eb:6d:f9:97:d6:8e:a8:01:
         20:cc:1e:58:74:8d:03:41:d9:c8:3a:54:69:b2:c1:22:0d:64:
         58:41:65:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:46:14 2026 by rpki-client