Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/07D39DCDD6D9E96335C50A32743BFE126267F5A35B10588C2C72A2414EFE881F/0/3134382e3232372e3136372e302f32342d3234203d3e203133333335.roa
File:                     3134382e3232372e3136372e302f32342d3234203d3e203133333335.roa (raw, json)
Hash identifier:          KcLODfpcE4BgiZN0RFrvlhztddOGIavfSG9Q1/Ibsh8=
Subject key identifier:   F2:EF:2D:8B:0B:52:CA:32:12:33:36:C9:0F:B9:CB:09:7D:2F:B0:37
Certificate issuer:       /CN=B7A6CEE70D63D95CB10C03D66656FE5FBC42F8B2
Certificate serial:       4842443803BD0CBB257314351E63B33937572291
Authority key identifier: B7:A6:CE:E7:0D:63:D9:5C:B1:0C:03:D6:66:56:FE:5F:BC:42:F8:B2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B7A6CEE70D63D95CB10C03D66656FE5FBC42F8B2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/07D39DCDD6D9E96335C50A32743BFE126267F5A35B10588C2C72A2414EFE881F/0/3134382e3232372e3136372e302f32342d3234203d3e203133333335.roa
Signing time:             Fri 11 Sep 2026 16:35:38 +0000
ROA not before:           Fri 11 Sep 2026 16:30:38 +0000
ROA not after:            Fri 10 Sep 2027 16:35:38 +0000
asID:                     13335
IP address blocks:        148.227.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/07D39DCDD6D9E96335C50A32743BFE126267F5A35B10588C2C72A2414EFE881F/0/B7A6CEE70D63D95CB10C03D66656FE5FBC42F8B2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/07D39DCDD6D9E96335C50A32743BFE126267F5A35B10588C2C72A2414EFE881F/0/B7A6CEE70D63D95CB10C03D66656FE5FBC42F8B2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B7A6CEE70D63D95CB10C03D66656FE5FBC42F8B2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 01:25:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:42:44:38:03:bd:0c:bb:25:73:14:35:1e:63:b3:39:37:57:22:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7A6CEE70D63D95CB10C03D66656FE5FBC42F8B2
        Validity
            Not Before: Sep 11 16:30:38 2026 GMT
            Not After : Sep 10 16:35:38 2027 GMT
        Subject: CN=F2EF2D8B0B52CA32123336C90FB9CB097D2FB037
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:9b:f0:db:13:3f:2f:50:6a:0d:86:af:89:ee:
                    91:7e:06:0c:8b:53:8f:45:8a:ff:b3:90:cf:df:72:
                    78:79:37:70:3d:b1:93:18:99:1b:d7:0d:5f:e7:dc:
                    f9:b6:ce:01:df:06:b2:e5:00:f0:38:1d:10:f2:7e:
                    e8:43:c2:48:6e:13:aa:24:ef:71:13:49:f4:73:6e:
                    8d:da:a2:36:80:69:82:a9:7b:6c:9e:5f:5c:31:91:
                    f4:fa:d0:2c:65:8e:dc:4f:c8:23:6e:4e:19:c6:cb:
                    b9:c7:88:e2:15:97:ce:10:1f:41:0d:9b:c4:66:de:
                    bc:36:37:3a:c8:2d:e6:04:82:9f:ba:b9:53:59:40:
                    b2:3f:7d:14:2f:0e:e3:1c:02:77:47:aa:ef:23:81:
                    d4:ce:81:61:d2:e1:a0:a6:7a:8b:44:31:8e:bd:10:
                    d9:f9:2f:d1:d7:44:a9:91:7a:51:a4:87:69:b3:5f:
                    c2:82:14:15:20:f7:75:20:ea:09:39:02:d3:3d:1d:
                    5d:9c:f6:fe:e4:5a:a6:0c:24:36:07:e2:ef:0c:97:
                    a1:98:a6:7c:1f:40:5b:84:a4:60:f8:7a:71:93:37:
                    f1:cb:5d:35:7a:aa:32:9b:50:e4:39:4e:6c:e3:a4:
                    b4:be:cc:1d:ac:97:86:6f:83:68:84:64:bf:8d:dd:
                    c4:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:EF:2D:8B:0B:52:CA:32:12:33:36:C9:0F:B9:CB:09:7D:2F:B0:37
            X509v3 Authority Key Identifier:
                keyid:B7:A6:CE:E7:0D:63:D9:5C:B1:0C:03:D6:66:56:FE:5F:BC:42:F8:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/07D39DCDD6D9E96335C50A32743BFE126267F5A35B10588C2C72A2414EFE881F/0/B7A6CEE70D63D95CB10C03D66656FE5FBC42F8B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B7A6CEE70D63D95CB10C03D66656FE5FBC42F8B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/07D39DCDD6D9E96335C50A32743BFE126267F5A35B10588C2C72A2414EFE881F/0/3134382e3232372e3136372e302f32342d3234203d3e203133333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.227.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:38:c9:f0:30:1e:05:d7:a0:a3:36:d0:fb:98:41:bc:8e:61:
         a6:d9:06:48:85:a4:bd:1a:f2:4b:66:07:0b:25:9e:c0:45:0d:
         db:fc:fd:bf:19:25:f5:93:86:69:40:60:ea:08:3e:33:b9:70:
         1c:b9:68:30:ee:a6:65:08:08:5f:3e:32:09:24:46:df:a9:23:
         17:e6:d0:62:26:bc:62:93:71:a7:e1:fe:8e:99:dc:c8:8e:6d:
         52:c3:45:cf:ab:37:f1:a2:7c:4a:72:e1:94:23:59:25:45:f8:
         c6:c7:a3:fd:53:4e:ab:a5:8f:91:81:6c:bf:30:e2:fb:d9:7c:
         ec:11:1c:9d:24:d7:78:8b:df:fd:d6:ac:72:bb:27:8f:10:58:
         72:ae:2d:68:2a:62:47:77:54:0c:5d:9d:6b:b1:8a:09:17:d7:
         3f:1f:b3:e9:c7:6d:1e:42:35:fd:7e:13:6e:43:bf:8f:3a:62:
         23:81:ed:21:3f:d6:13:a3:6e:9a:17:12:d6:6a:1a:d3:97:3b:
         d9:a8:55:9b:ab:09:e0:b4:1d:a0:07:a4:7e:22:00:1a:78:e8:
         47:fb:2d:43:d9:07:73:3a:79:64:08:1b:cc:b0:2f:7f:0f:3e:
         44:7b:7b:b7:59:ea:0d:25:69:39:6d:64:0f:fe:1f:33:3c:4e:
         59:8a:c1:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 03:24:02 2026 by rpki-client