Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6859016A81F03FD26F0F02CE2B6880C6C78280117A792052F151F8B52E58E4D0/0/3136342e3136332e3234342e302f32322d3234203d3e203532343638.roa
File:                     3136342e3136332e3234342e302f32322d3234203d3e203532343638.roa (raw, json)
Hash identifier:          YENoYdN9/JYKqcFOlYWfMpM42jBBCXOf5SlzaQJkvmw=
Subject key identifier:   1E:35:D4:A1:59:7C:9E:64:2E:2F:D9:96:B0:F9:A8:34:BE:A2:6B:D9
Certificate issuer:       /CN=B2CAA3C9247091BFF5CFB41F9D26BAE7457E0285
Certificate serial:       4780C736F8065E08B0E16E1736175433B68C6168
Authority key identifier: B2:CA:A3:C9:24:70:91:BF:F5:CF:B4:1F:9D:26:BA:E7:45:7E:02:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B2CAA3C9247091BFF5CFB41F9D26BAE7457E0285.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6859016A81F03FD26F0F02CE2B6880C6C78280117A792052F151F8B52E58E4D0/0/3136342e3136332e3234342e302f32322d3234203d3e203532343638.roa
Signing time:             Mon 11 May 2026 20:42:08 +0000
ROA not before:           Mon 11 May 2026 20:37:08 +0000
ROA not after:            Mon 10 May 2027 20:42:08 +0000
asID:                     52468
IP address blocks:        164.163.244.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6859016A81F03FD26F0F02CE2B6880C6C78280117A792052F151F8B52E58E4D0/0/B2CAA3C9247091BFF5CFB41F9D26BAE7457E0285.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6859016A81F03FD26F0F02CE2B6880C6C78280117A792052F151F8B52E58E4D0/0/B2CAA3C9247091BFF5CFB41F9D26BAE7457E0285.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B2CAA3C9247091BFF5CFB41F9D26BAE7457E0285.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:80:c7:36:f8:06:5e:08:b0:e1:6e:17:36:17:54:33:b6:8c:61:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2CAA3C9247091BFF5CFB41F9D26BAE7457E0285
        Validity
            Not Before: May 11 20:37:08 2026 GMT
            Not After : May 10 20:42:08 2027 GMT
        Subject: CN=1E35D4A1597C9E642E2FD996B0F9A834BEA26BD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:09:3f:6d:b9:39:1c:0b:22:45:1b:da:56:22:
                    f9:8e:9c:82:bb:66:68:ca:d6:a5:3a:f0:fb:3f:0f:
                    53:53:7c:d1:40:01:cf:0c:1f:78:67:29:1b:c1:5e:
                    55:b8:ce:c7:f9:07:a3:3f:41:22:ab:f1:ed:2b:51:
                    7b:01:68:79:d2:29:8d:d6:c1:c0:97:3d:ae:f7:f6:
                    f4:5f:59:eb:24:b9:23:8f:47:b4:73:d9:64:32:62:
                    44:3a:d7:ed:c6:88:f4:65:8c:3d:7f:7b:aa:46:6b:
                    1f:f0:60:bf:74:ae:59:a0:d6:1a:7a:56:d1:9e:84:
                    84:22:23:b6:7b:a9:46:f8:7e:da:5a:66:40:32:ff:
                    97:a7:ff:81:a0:42:59:6d:19:89:11:41:2f:4f:dd:
                    00:8a:7b:6a:45:ba:7f:b6:3f:4f:52:22:86:db:f6:
                    4a:38:17:91:0f:78:2c:f1:78:ad:98:d1:1e:0a:16:
                    77:0c:2b:59:b3:52:ba:69:18:52:d3:a1:4d:f6:72:
                    57:d2:f8:b4:af:5b:08:7d:88:07:45:6a:e7:99:58:
                    c5:a3:5b:c3:e0:52:41:fc:ca:af:45:d0:94:3c:db:
                    0d:80:04:12:d5:b5:47:26:54:e7:4b:c5:be:43:87:
                    b5:17:17:3d:02:26:4f:fb:87:fa:c0:7e:0d:e2:3f:
                    3b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:35:D4:A1:59:7C:9E:64:2E:2F:D9:96:B0:F9:A8:34:BE:A2:6B:D9
            X509v3 Authority Key Identifier:
                keyid:B2:CA:A3:C9:24:70:91:BF:F5:CF:B4:1F:9D:26:BA:E7:45:7E:02:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6859016A81F03FD26F0F02CE2B6880C6C78280117A792052F151F8B52E58E4D0/0/B2CAA3C9247091BFF5CFB41F9D26BAE7457E0285.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B2CAA3C9247091BFF5CFB41F9D26BAE7457E0285.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6859016A81F03FD26F0F02CE2B6880C6C78280117A792052F151F8B52E58E4D0/0/3136342e3136332e3234342e302f32322d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         54:be:31:43:ad:71:6f:94:46:ed:b9:c4:8a:8d:7b:ed:dd:f5:
         68:51:7c:d5:30:8e:a2:67:7c:6a:3e:2f:82:c4:27:cc:5e:aa:
         c0:88:5f:d4:75:de:31:3a:f0:4d:46:3c:10:58:d1:4b:c7:29:
         2b:a1:c7:5c:ca:09:2a:f9:c0:a6:5a:75:76:91:e5:d4:69:3d:
         bf:37:90:7b:c7:07:e6:3c:d4:b4:f4:ee:aa:64:6e:0f:de:14:
         31:d6:48:f2:8d:ea:8e:3d:79:78:8b:fc:38:75:b2:85:76:9f:
         08:ef:f5:bb:ee:dd:df:cc:95:a3:6b:e7:70:d8:09:d3:b2:f4:
         fe:da:7c:e0:25:1e:ba:86:1c:97:de:63:e8:71:c1:b8:31:27:
         3e:2b:2f:12:91:25:1e:a4:7e:fc:52:50:62:f9:4b:0d:ca:80:
         75:0d:c1:a6:a0:2b:79:58:0a:fd:b2:04:35:de:dd:a2:09:4b:
         4d:39:cf:09:83:70:8b:42:3b:d2:d6:e7:ba:95:be:99:28:33:
         4d:c3:c4:6e:a8:7a:1b:1e:22:73:88:62:17:cd:04:6f:a5:14:
         b9:8f:15:33:20:54:09:0a:3c:e0:2c:dc:70:14:6d:94:71:46:
         e8:4a:4a:43:b8:08:28:fc:43:2c:02:f3:51:1e:64:a7:e7:36:
         bc:f6:e0:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:55:36 2026 by rpki-client