Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3139322e3232332e3130302e302f32342d3234203d3e20323638333037.roa
File:                     3139322e3232332e3130302e302f32342d3234203d3e20323638333037.roa (raw, json)
Hash identifier:          NQZY+d9ZRt3F+vDwLXXtTbC04JBlGihqlqCwTGKgs/s=
Subject key identifier:   F2:C5:51:62:9B:ED:B2:6F:FB:4A:84:F7:1A:D2:9F:A9:65:FA:3E:3B
Certificate issuer:       /CN=3A46654D6F02CEC41EAA4339498486C609BF34EC
Certificate serial:       7AD1128288D9B8E90D223CC66D134F5BBBA7A718
Authority key identifier: 3A:46:65:4D:6F:02:CE:C4:1E:AA:43:39:49:84:86:C6:09:BF:34:EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3139322e3232332e3130302e302f32342d3234203d3e20323638333037.roa
Signing time:             Fri 09 Oct 2026 13:39:30 +0000
ROA not before:           Fri 09 Oct 2026 13:34:30 +0000
ROA not after:            Fri 08 Oct 2027 13:39:30 +0000
asID:                     268307
IP address blocks:        192.223.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 18:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:d1:12:82:88:d9:b8:e9:0d:22:3c:c6:6d:13:4f:5b:bb:a7:a7:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A46654D6F02CEC41EAA4339498486C609BF34EC
        Validity
            Not Before: Oct  9 13:34:30 2026 GMT
            Not After : Oct  8 13:39:30 2027 GMT
        Subject: CN=F2C551629BEDB26FFB4A84F71AD29FA965FA3E3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:01:02:c9:ba:b7:bd:3c:64:b2:14:8b:41:6f:
                    a3:f3:8c:80:5e:ea:9c:a6:ad:21:46:15:6a:e8:97:
                    e1:cf:d9:db:b9:33:ea:c9:f8:d1:3c:5e:33:e2:85:
                    50:7b:3c:a5:c1:81:18:c7:db:dd:d5:c8:b5:7d:e0:
                    f3:df:ea:20:d8:5c:3d:bf:da:ad:08:f9:b5:2a:e7:
                    75:86:07:58:fb:4d:0d:ce:77:88:ff:64:08:e0:78:
                    89:51:24:43:03:11:2b:61:c3:25:df:b9:d8:04:f1:
                    c5:f1:4f:4f:60:12:1b:18:0b:2e:8e:83:e6:6a:11:
                    a3:54:ee:a8:89:58:68:f2:32:92:58:d0:d8:76:0c:
                    cd:13:57:97:36:47:f6:d3:f2:5d:37:83:05:64:c2:
                    46:c8:72:ec:0e:7a:da:a7:62:cc:a4:58:b0:94:f5:
                    b5:8d:fa:8d:7c:69:04:a4:15:9e:27:1e:82:2a:23:
                    4f:ce:31:b0:b7:15:a0:fd:1c:f9:6b:81:5a:92:e0:
                    03:0f:0b:68:3b:9a:cb:77:d1:94:a8:3e:c1:7d:75:
                    58:d8:3c:9e:90:5f:cb:82:3d:b6:f4:8b:62:d3:6e:
                    7d:6d:b2:ec:02:0f:df:0d:51:e9:ed:4a:db:f2:75:
                    af:ce:ed:e1:c3:98:8f:85:d5:2a:21:e9:f6:00:ac:
                    e4:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:C5:51:62:9B:ED:B2:6F:FB:4A:84:F7:1A:D2:9F:A9:65:FA:3E:3B
            X509v3 Authority Key Identifier:
                keyid:3A:46:65:4D:6F:02:CE:C4:1E:AA:43:39:49:84:86:C6:09:BF:34:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3139322e3232332e3130302e302f32342d3234203d3e20323638333037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.223.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:3c:69:2a:80:11:fd:26:4c:0f:38:6e:6f:51:70:52:51:f6:
         07:b0:43:09:56:fe:d8:fd:12:2c:cb:b9:e1:71:e6:38:65:e4:
         22:17:bd:1c:b4:ea:1c:48:6f:fd:8a:0c:0a:1e:02:4c:95:60:
         18:29:eb:5a:b0:b2:d9:64:38:c3:b5:61:25:ae:15:6a:00:5a:
         85:37:ee:51:47:b4:1f:fc:8b:df:73:14:78:14:d7:9c:34:83:
         69:70:2b:f9:29:6e:f7:0c:95:e0:98:c8:81:b8:ca:6f:e1:4b:
         35:8d:98:13:5d:f5:f7:b1:9c:a3:21:d9:46:be:e9:a5:c4:89:
         b4:f5:bb:08:3f:c2:e8:e6:de:20:69:df:3f:d7:de:37:d6:c7:
         68:1b:a1:c2:e9:3a:fc:a5:0d:ee:43:2a:3b:53:90:d3:43:ad:
         54:d4:6e:4a:55:25:48:aa:a9:69:55:b1:5d:47:91:3c:2b:bb:
         ed:2c:4b:9e:e7:94:58:84:04:d1:cb:e2:1e:3c:00:97:49:10:
         58:9c:80:8e:55:48:60:b6:4e:3d:23:45:e8:db:14:53:87:17:
         f4:53:52:b2:04:6a:fe:a0:a8:bd:f4:8a:88:0d:e8:6d:9e:bd:
         2b:85:e8:ee:f0:89:45:61:19:ba:3b:03:d1:a0:12:7c:db:f3:
         ad:fc:64:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 14:53:56 2026 by rpki-client