Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/AS26426.roa
File:                     AS26426.roa (raw, json)
Hash identifier:          kM/Ke0SlC8gCXrRe+uIZ3IYAhyspHVKxzFExBtVyZhw=
Subject key identifier:   4E:5A:12:EA:E4:AD:21:E3:24:9A:90:07:EF:44:63:90:5A:3B:40:8F
Certificate issuer:       /CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
Certificate serial:       18E55D039409E5061BB3D3931656DAF054C2F277
Authority key identifier: 76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/AS26426.roa
Signing time:             Tue 01 Jul 2025 17:24:19 +0000
ROA not before:           Tue 01 Jul 2025 17:19:19 +0000
ROA not after:            Tue 30 Jun 2026 17:24:19 +0000
asID:                     26426
IP address blocks:        190.242.8.0/24 maxlen: 24
                          190.242.13.0/24 maxlen: 24
                          190.242.21.0/24 maxlen: 24
                          190.242.68.0/23 maxlen: 24
                          190.242.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl
                          rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:e5:5d:03:94:09:e5:06:1b:b3:d3:93:16:56:da:f0:54:c2:f2:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
        Validity
            Not Before: Jul  1 17:19:19 2025 GMT
            Not After : Jun 30 17:24:19 2026 GMT
        Subject: CN=4E5A12EAE4AD21E3249A9007EF4463905A3B408F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:3b:8c:e2:d2:aa:a2:94:31:8a:d3:d2:de:47:
                    32:cc:af:1b:1e:f2:cf:0f:4a:94:89:84:50:d7:c3:
                    19:53:e7:1e:7e:0f:8c:04:df:71:76:d8:b1:5e:65:
                    4b:b8:8e:79:12:3a:ba:f2:ed:9b:8a:40:0e:cc:f2:
                    dd:19:0d:3f:d4:b8:c9:d8:c2:11:6b:c5:a9:b4:0b:
                    bf:26:67:3c:d8:11:ee:31:f4:e3:83:55:2d:4e:61:
                    a7:54:07:d5:5d:69:bf:7d:ed:3d:7c:5e:2b:15:c2:
                    eb:59:13:8a:c0:8a:20:61:63:4a:ad:7d:4d:6c:3a:
                    b2:47:95:5e:89:41:6e:dd:5a:c2:d9:f4:51:3f:19:
                    19:f1:2f:49:dd:5a:c7:9e:27:ef:c0:d8:57:c7:66:
                    f2:51:e5:14:39:c7:ea:64:4b:6f:32:3c:53:23:6d:
                    5f:48:94:44:b4:14:bc:01:47:18:54:f1:7a:13:e2:
                    6a:93:fd:4e:bd:41:7b:49:a7:63:d6:54:d6:a5:e2:
                    e9:b2:51:a9:30:3b:98:c6:5d:7a:09:3d:33:99:65:
                    82:df:a3:c3:a6:bd:1b:38:91:b9:ef:58:a9:7d:97:
                    87:f9:3f:e5:82:07:e8:07:31:f5:18:fb:4a:72:2a:
                    c8:08:26:bc:bc:bf:88:91:e1:09:77:ac:4a:a6:50:
                    24:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:5A:12:EA:E4:AD:21:E3:24:9A:90:07:EF:44:63:90:5A:3B:40:8F
            X509v3 Authority Key Identifier:
                keyid:76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/AS26426.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.242.8.0/24
                  190.242.13.0/24
                  190.242.21.0/24
                  190.242.68.0-190.242.70.255

    Signature Algorithm: sha256WithRSAEncryption
         52:bc:61:65:17:5b:3a:34:17:05:5b:98:c0:12:06:fb:3a:18:
         62:30:83:70:24:f3:cd:d0:3c:ce:c8:f7:2d:c5:6c:b0:f9:2d:
         46:0e:c3:d6:b1:85:a5:fc:3e:99:8a:b8:f1:fb:f7:7d:04:ae:
         5d:c1:a0:f0:96:89:fd:5a:3b:4b:bc:dd:0f:97:68:a4:6d:c6:
         e7:9b:19:9a:bc:18:ff:18:34:e2:2a:9a:26:dc:8a:ca:9b:99:
         8c:2e:13:fe:6f:a7:7f:8e:2e:6e:24:75:f6:20:c7:8a:6d:d7:
         1f:bb:e0:38:56:8f:27:97:d1:ff:f8:d2:16:1c:e7:94:c1:f4:
         f4:77:fe:2a:84:82:bf:8a:d8:75:5b:b8:1a:8d:ff:46:fd:73:
         e2:b5:20:89:47:80:51:77:fd:72:34:28:3b:54:79:a7:91:a0:
         c8:ab:33:07:f9:d1:ab:83:a7:01:6f:0b:20:01:d4:bf:45:bf:
         8f:48:93:01:c2:aa:c6:7f:5a:26:17:e2:8f:5f:7b:6b:fc:42:
         16:d5:21:97:f4:3c:f1:55:c1:d1:d6:eb:17:72:76:28:e9:b9:
         35:84:c0:4b:46:4e:f9:2e:88:bd:55:b8:cf:74:65:39:11:4a:
         a0:b5:2c:7a:25:e6:91:1c:57:f8:2d:20:ad:17:8f:27:a0:17:
         72:54:cc:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 20:15:26 2025 by rpki-client