Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3925D2C5A7012116032AA4EA90BAE66AB5FCD500A9A2F16E2ABBC2831049A1E9/0/3138392e3230312e3235322e302f32322d3232203d3e203238343636.roa
File:                     3138392e3230312e3235322e302f32322d3232203d3e203238343636.roa (raw, json)
Hash identifier:          SZ9wg/8gwnZfMyf8uO4zmQYlYaYHQZUera44c38MHUc=
Subject key identifier:   24:48:41:76:6D:CB:22:F4:1B:A5:8A:E0:35:12:16:BD:C1:D2:22:66
Certificate issuer:       /CN=DF7BF8CF88926B1690350CA1477C3431E7A6CC7E
Certificate serial:       297533B8275F7F02B50D9E55753E23CE7093B30A
Authority key identifier: DF:7B:F8:CF:88:92:6B:16:90:35:0C:A1:47:7C:34:31:E7:A6:CC:7E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DF7BF8CF88926B1690350CA1477C3431E7A6CC7E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3925D2C5A7012116032AA4EA90BAE66AB5FCD500A9A2F16E2ABBC2831049A1E9/0/3138392e3230312e3235322e302f32322d3232203d3e203238343636.roa
Signing time:             Fri 10 Jul 2026 21:30:00 +0000
ROA not before:           Fri 10 Jul 2026 21:25:00 +0000
ROA not after:            Fri 09 Jul 2027 21:30:00 +0000
asID:                     28466
IP address blocks:        189.201.252.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3925D2C5A7012116032AA4EA90BAE66AB5FCD500A9A2F16E2ABBC2831049A1E9/0/DF7BF8CF88926B1690350CA1477C3431E7A6CC7E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3925D2C5A7012116032AA4EA90BAE66AB5FCD500A9A2F16E2ABBC2831049A1E9/0/DF7BF8CF88926B1690350CA1477C3431E7A6CC7E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DF7BF8CF88926B1690350CA1477C3431E7A6CC7E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:75:33:b8:27:5f:7f:02:b5:0d:9e:55:75:3e:23:ce:70:93:b3:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF7BF8CF88926B1690350CA1477C3431E7A6CC7E
        Validity
            Not Before: Jul 10 21:25:00 2026 GMT
            Not After : Jul  9 21:30:00 2027 GMT
        Subject: CN=244841766DCB22F41BA58AE0351216BDC1D22266
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:5d:37:2f:0e:96:6a:6f:95:ad:06:29:9f:88:
                    f8:59:58:16:f0:c3:65:b4:8c:76:55:5a:f6:51:83:
                    c7:6f:66:ec:44:a1:64:8c:1c:78:49:ec:50:19:c0:
                    db:15:09:c1:33:f9:ef:ad:18:d0:81:74:e7:f5:a9:
                    49:6c:9b:e4:5f:32:5c:87:a1:01:18:d1:67:56:3e:
                    bd:9b:ae:71:7c:5d:b5:66:a9:30:39:b9:42:67:f1:
                    73:5a:1c:98:69:95:71:7a:24:b0:97:8a:a0:77:c3:
                    bc:b4:06:51:83:19:20:fe:17:35:b4:8b:c6:c1:f1:
                    af:94:e7:1a:c0:8d:f2:c2:84:5b:4e:6e:06:f2:ef:
                    e1:c5:9c:f1:0e:b0:f7:0b:e7:c4:c0:bf:3f:78:5b:
                    8c:70:5b:d4:67:1d:ed:28:3b:a6:58:d9:57:28:c2:
                    a1:47:3e:5e:95:d8:b9:2b:82:e2:df:48:8d:b1:4c:
                    6a:31:86:91:3e:ae:34:4b:7f:10:64:e4:42:1b:8c:
                    f7:8d:a4:cb:c0:6a:4f:40:3b:6a:c0:fc:6c:c8:19:
                    27:45:57:7f:fe:e3:60:f2:aa:94:20:7c:0d:64:34:
                    bb:cd:80:9b:22:ef:0d:9c:33:66:41:cc:f6:c7:85:
                    e8:b5:e8:9f:b6:49:09:28:d6:c3:79:99:bd:c3:6f:
                    48:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:48:41:76:6D:CB:22:F4:1B:A5:8A:E0:35:12:16:BD:C1:D2:22:66
            X509v3 Authority Key Identifier:
                keyid:DF:7B:F8:CF:88:92:6B:16:90:35:0C:A1:47:7C:34:31:E7:A6:CC:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3925D2C5A7012116032AA4EA90BAE66AB5FCD500A9A2F16E2ABBC2831049A1E9/0/DF7BF8CF88926B1690350CA1477C3431E7A6CC7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DF7BF8CF88926B1690350CA1477C3431E7A6CC7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3925D2C5A7012116032AA4EA90BAE66AB5FCD500A9A2F16E2ABBC2831049A1E9/0/3138392e3230312e3235322e302f32322d3232203d3e203238343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.201.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a1:65:13:16:c3:9c:8a:9d:dd:d6:ff:9a:3c:26:96:5b:b7:c3:
         da:45:34:55:23:b4:9c:39:75:4f:83:72:b8:f3:4e:47:61:a4:
         d8:a6:ac:33:5e:46:1b:a5:94:e8:c5:a4:77:f3:f5:5d:c6:55:
         dd:23:14:c7:50:62:4d:db:c1:6f:7e:f3:2a:74:43:8b:f2:00:
         0e:4b:a7:08:11:d1:ee:20:d0:9d:db:6a:c1:7c:8b:49:91:ff:
         b6:d2:f5:e2:5d:14:1e:03:89:c5:5e:c1:13:18:13:d0:73:b8:
         1e:5a:86:49:bb:e1:41:a9:17:02:4f:6d:86:51:4d:1a:14:f5:
         9b:75:35:d7:e5:e4:c8:eb:2a:be:38:94:7d:6e:de:d5:60:8f:
         52:8f:bb:5c:e1:fe:ee:a5:78:c2:ba:f2:ee:c8:ce:e3:ed:94:
         38:90:d4:97:3b:55:45:25:51:15:c3:8d:fa:0b:a2:90:41:7d:
         c2:94:e6:30:c9:da:16:0a:97:8e:49:a7:4f:e8:1e:73:a1:b4:
         de:25:8d:16:8c:64:0b:29:58:0d:20:3a:7b:7d:3b:65:d1:40:
         b7:00:45:14:81:54:a6:3d:0b:9d:81:49:bc:a9:eb:d4:38:52:
         01:05:e6:62:fa:b7:f8:e8:1d:7c:f9:d1:be:9b:8b:a8:4c:c7:
         9e:83:b7:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:57:19 2026 by rpki-client