Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/0821F006A6682534ECFF0F10A34841518316DADC0DC25018049001208666F4E7/0/3230342e3135332e3230362e302f32332d3234203d3e20323635363036.roa
File:                     3230342e3135332e3230362e302f32332d3234203d3e20323635363036.roa (raw, json)
Hash identifier:          qhV+AM33zyFktiqQum0gopaDxFWBB7PBH1k1ZVQ0dt0=
Subject key identifier:   9E:D3:5C:9A:0B:BF:F3:F8:C0:F6:43:7F:41:4D:27:A4:41:65:7B:9D
Certificate issuer:       /CN=C5224A5C17DD521C4B7F494B6AD71E9971D34ABE
Certificate serial:       40C9C8D5F27A89A697518526745CC5987B960538
Authority key identifier: C5:22:4A:5C:17:DD:52:1C:4B:7F:49:4B:6A:D7:1E:99:71:D3:4A:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5224A5C17DD521C4B7F494B6AD71E9971D34ABE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0821F006A6682534ECFF0F10A34841518316DADC0DC25018049001208666F4E7/0/3230342e3135332e3230362e302f32332d3234203d3e20323635363036.roa
Signing time:             Tue 13 Oct 2026 00:40:00 +0000
ROA not before:           Tue 13 Oct 2026 00:35:00 +0000
ROA not after:            Tue 12 Oct 2027 00:40:00 +0000
asID:                     265606
IP address blocks:        204.153.206.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0821F006A6682534ECFF0F10A34841518316DADC0DC25018049001208666F4E7/0/C5224A5C17DD521C4B7F494B6AD71E9971D34ABE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0821F006A6682534ECFF0F10A34841518316DADC0DC25018049001208666F4E7/0/C5224A5C17DD521C4B7F494B6AD71E9971D34ABE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5224A5C17DD521C4B7F494B6AD71E9971D34ABE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Oct 2026 07:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:c9:c8:d5:f2:7a:89:a6:97:51:85:26:74:5c:c5:98:7b:96:05:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5224A5C17DD521C4B7F494B6AD71E9971D34ABE
        Validity
            Not Before: Oct 13 00:35:00 2026 GMT
            Not After : Oct 12 00:40:00 2027 GMT
        Subject: CN=9ED35C9A0BBFF3F8C0F6437F414D27A441657B9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:37:f6:db:b8:3b:b2:d3:54:4c:42:06:3b:14:
                    59:c4:de:1b:11:80:1e:a1:b3:e9:78:0f:5b:43:6e:
                    3f:44:02:d9:15:5d:df:db:25:cc:e9:6d:b3:ee:2a:
                    f3:6e:2a:fe:c9:93:ff:3d:88:db:a5:92:ab:c9:60:
                    0a:a8:b4:cb:80:87:90:62:d3:8c:f9:67:aa:4a:50:
                    8f:af:68:86:df:5d:c7:10:9a:c7:d6:2f:dc:72:ee:
                    70:00:1a:35:b1:fc:9f:4a:30:bd:d5:63:97:53:95:
                    a3:8b:fe:47:bc:4c:c6:b9:d7:ea:a0:75:cd:0d:ce:
                    0f:da:27:60:77:d7:e9:8a:f2:d8:46:62:95:7e:c3:
                    7b:3e:eb:3e:fb:90:8e:52:e2:49:22:bf:63:07:43:
                    1e:88:b9:7b:e0:1c:8b:37:03:27:58:da:5f:7c:c7:
                    bc:0a:42:0d:3b:0d:4a:f8:20:d1:40:a0:af:fd:62:
                    26:89:4a:43:22:4a:31:27:91:b9:da:63:94:6c:82:
                    4b:8a:3d:ff:8c:a8:db:fd:e3:5f:4c:ce:74:db:f0:
                    29:25:60:6b:97:a2:67:4e:3e:5a:e3:bc:9b:c2:1a:
                    26:11:cb:7e:eb:77:f1:10:a7:bb:5c:78:e7:cc:ac:
                    7d:71:d7:39:40:4d:19:b0:35:98:7d:e4:95:a4:05:
                    66:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:D3:5C:9A:0B:BF:F3:F8:C0:F6:43:7F:41:4D:27:A4:41:65:7B:9D
            X509v3 Authority Key Identifier:
                keyid:C5:22:4A:5C:17:DD:52:1C:4B:7F:49:4B:6A:D7:1E:99:71:D3:4A:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0821F006A6682534ECFF0F10A34841518316DADC0DC25018049001208666F4E7/0/C5224A5C17DD521C4B7F494B6AD71E9971D34ABE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5224A5C17DD521C4B7F494B6AD71E9971D34ABE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0821F006A6682534ECFF0F10A34841518316DADC0DC25018049001208666F4E7/0/3230342e3135332e3230362e302f32332d3234203d3e20323635363036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.153.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         77:c6:43:0c:fb:9b:9b:b6:cf:96:f1:62:fd:7d:47:d1:c8:8d:
         4c:3d:2b:3f:7c:3c:76:ea:e3:e2:e6:57:4b:ed:04:83:7a:f2:
         48:b8:45:e6:70:18:a0:58:bf:e6:d4:fc:0c:a8:47:fd:82:c2:
         cc:e1:90:7e:c5:15:92:e9:6f:e8:ab:2a:73:f4:80:77:3d:87:
         57:bd:c3:53:d3:f4:09:48:db:a9:39:76:c4:8a:1d:10:4f:b2:
         c4:90:3c:7d:25:e0:6d:4e:fb:fa:00:ff:6e:33:3d:ec:06:8f:
         59:97:c4:31:d7:67:93:35:11:a5:42:30:27:ef:6f:b0:0a:a0:
         c6:e9:e1:42:9b:88:9a:e2:6a:2a:19:71:1e:f7:e6:da:b9:87:
         cb:93:1f:24:e0:f7:3e:88:b8:a3:63:98:24:c4:22:0b:5c:ae:
         d6:41:1d:94:29:5c:b7:d9:b6:6a:3a:8c:c8:9f:2c:3f:53:ca:
         e6:26:81:ac:f2:99:e4:5f:40:77:7b:f5:ea:9f:17:68:ba:ff:
         13:c8:ac:ca:5c:c2:71:e7:14:03:47:9c:d4:40:e0:92:d9:92:
         6c:53:e5:b1:0c:79:a6:56:e1:47:67:49:48:18:b5:af:0f:4c:
         c0:ee:e3:ed:bf:31:05:b0:50:6e:32:77:5c:4b:f3:9c:e7:62:
         22:a4:e4:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 17:52:32 2026 by rpki-client