Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/286A91BA89AF978CCE2BB0FA7581486B216EA959BDF3E8E24B7EDCFF177D5193/0/3230312e3134392e36342e302f31392d3234203d3e203134313738.roa
File:                     3230312e3134392e36342e302f31392d3234203d3e203134313738.roa (raw, json)
Hash identifier:          fzaan30qWG9HOrjuDXL/fcQ6Y+R++3xvpbKluPqENGM=
Subject key identifier:   33:F1:59:EA:A5:32:A0:E7:E5:6E:90:2D:19:59:93:D6:D1:AF:22:E6
Certificate issuer:       /CN=7B516BC52FDBEAD0CF80516E1794A01BEFD23DDD
Certificate serial:       26C7CB9ED3A1460D956C11911621525FF05F33C9
Authority key identifier: 7B:51:6B:C5:2F:DB:EA:D0:CF:80:51:6E:17:94:A0:1B:EF:D2:3D:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B516BC52FDBEAD0CF80516E1794A01BEFD23DDD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/286A91BA89AF978CCE2BB0FA7581486B216EA959BDF3E8E24B7EDCFF177D5193/0/3230312e3134392e36342e302f31392d3234203d3e203134313738.roa
Signing time:             Thu 24 Sep 2026 07:20:00 +0000
ROA not before:           Thu 24 Sep 2026 07:15:00 +0000
ROA not after:            Thu 23 Sep 2027 07:20:00 +0000
asID:                     14178
IP address blocks:        201.149.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/286A91BA89AF978CCE2BB0FA7581486B216EA959BDF3E8E24B7EDCFF177D5193/0/7B516BC52FDBEAD0CF80516E1794A01BEFD23DDD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/286A91BA89AF978CCE2BB0FA7581486B216EA959BDF3E8E24B7EDCFF177D5193/0/7B516BC52FDBEAD0CF80516E1794A01BEFD23DDD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B516BC52FDBEAD0CF80516E1794A01BEFD23DDD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 01:25:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:c7:cb:9e:d3:a1:46:0d:95:6c:11:91:16:21:52:5f:f0:5f:33:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B516BC52FDBEAD0CF80516E1794A01BEFD23DDD
        Validity
            Not Before: Sep 24 07:15:00 2026 GMT
            Not After : Sep 23 07:20:00 2027 GMT
        Subject: CN=33F159EAA532A0E7E56E902D195993D6D1AF22E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:85:56:81:27:60:66:47:01:ae:77:dc:11:5d:
                    96:aa:c7:e0:33:eb:aa:6e:94:ef:9a:65:0c:2e:bd:
                    02:55:83:9a:d3:74:b0:4c:e2:49:43:4b:76:01:1c:
                    fe:d8:01:0b:08:a5:c5:36:17:f7:7c:68:8c:c4:df:
                    5f:c5:7a:64:e9:ce:eb:c8:a4:93:be:e6:c3:25:9e:
                    31:a9:88:82:ee:cf:04:ce:64:ff:b3:68:8f:92:17:
                    3b:de:75:85:1d:29:d0:f5:e7:c7:46:5d:3d:b6:b6:
                    ee:7f:a8:e0:52:95:31:9d:91:0b:47:82:38:9a:0a:
                    44:51:9b:84:81:44:a1:1a:91:76:55:45:03:68:bb:
                    86:b1:2e:31:55:dc:a3:f7:f2:d7:ea:85:73:d5:1e:
                    9e:54:65:ef:0a:52:d9:4f:b4:1f:36:39:ca:fe:cd:
                    47:70:ec:0c:9c:54:d4:32:b9:6b:d0:cf:33:9b:e8:
                    e8:7f:82:ad:76:f1:c2:40:a7:1f:73:6e:58:c6:c2:
                    5a:f1:8d:33:c0:8b:95:46:d3:20:be:bf:8e:65:39:
                    1e:b8:b3:5d:cf:87:c1:77:86:8c:03:1c:99:9f:ac:
                    bd:df:4c:4e:e8:19:d4:ba:1a:2e:14:a2:79:9c:63:
                    d7:f4:a5:68:2d:2a:a6:bd:2d:e7:41:6f:e7:18:b6:
                    78:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:F1:59:EA:A5:32:A0:E7:E5:6E:90:2D:19:59:93:D6:D1:AF:22:E6
            X509v3 Authority Key Identifier:
                keyid:7B:51:6B:C5:2F:DB:EA:D0:CF:80:51:6E:17:94:A0:1B:EF:D2:3D:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/286A91BA89AF978CCE2BB0FA7581486B216EA959BDF3E8E24B7EDCFF177D5193/0/7B516BC52FDBEAD0CF80516E1794A01BEFD23DDD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B516BC52FDBEAD0CF80516E1794A01BEFD23DDD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/286A91BA89AF978CCE2BB0FA7581486B216EA959BDF3E8E24B7EDCFF177D5193/0/3230312e3134392e36342e302f31392d3234203d3e203134313738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.149.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         78:c4:7a:fa:ea:85:c0:d8:e6:fd:32:f4:18:94:03:f5:61:40:
         18:aa:07:32:70:a7:63:58:6e:76:64:1c:43:e0:d3:64:0a:3c:
         d9:6f:0d:ca:00:0e:77:39:d5:c3:17:50:4b:c6:52:5b:26:93:
         25:c1:fe:d7:b9:79:57:a4:d6:39:38:91:56:36:bb:4d:19:0f:
         d8:a6:ae:ca:26:42:c8:67:aa:26:79:48:5a:9e:96:84:83:60:
         a8:7c:41:be:05:0d:99:d7:81:d9:97:ca:2a:0c:1e:3a:71:8b:
         9b:47:f7:96:b3:84:c0:fb:f9:28:66:27:e3:e1:d0:fa:45:51:
         c0:f1:ad:82:ee:dd:cc:b3:87:17:7b:57:bf:4a:5e:a3:92:52:
         77:57:f4:62:81:86:50:21:e4:4e:98:f1:aa:26:dd:3f:0c:a7:
         db:29:ac:c8:b7:85:88:60:16:5b:56:9e:52:e3:f9:32:33:d6:
         55:41:63:ad:72:7f:af:67:f1:32:31:f7:49:1c:e9:2c:7c:4e:
         be:87:6f:08:0a:af:a7:12:49:e8:c7:22:a4:ad:33:40:d6:59:
         93:07:80:32:5d:b1:ac:03:bd:0a:08:4a:15:19:f6:c8:97:c0:
         a2:aa:6a:68:9b:d5:50:57:a6:2a:62:fb:4a:6c:54:3c:e5:c6:
         b2:05:95:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 22:16:50 2026 by rpki-client