Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/799DB12D73062B2D48227BEA3C53AC4060B0EF9A32E18BAA7BC8071B27988F40/0/3136372e3234392e3139322e302f32322d3234203d3e20323633383135.roa
File:                     3136372e3234392e3139322e302f32322d3234203d3e20323633383135.roa (raw, json)
Hash identifier:          MEgT6a9hvpnvI87Xi/Oq1Ddgr7QGpskotF/BklVkZpM=
Subject key identifier:   F3:84:C2:4A:FA:7B:D2:58:37:EB:73:58:70:60:99:61:57:38:B8:A5
Certificate issuer:       /CN=8511BF5F476710251836E1F3F5006C888AE1B68A
Certificate serial:       3A6FDF939BFA4C6E1E9DCB6A6A569B28D79BAA89
Authority key identifier: 85:11:BF:5F:47:67:10:25:18:36:E1:F3:F5:00:6C:88:8A:E1:B6:8A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8511BF5F476710251836E1F3F5006C888AE1B68A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/799DB12D73062B2D48227BEA3C53AC4060B0EF9A32E18BAA7BC8071B27988F40/0/3136372e3234392e3139322e302f32322d3234203d3e20323633383135.roa
Signing time:             Tue 08 Sep 2026 23:10:00 +0000
ROA not before:           Tue 08 Sep 2026 23:05:00 +0000
ROA not after:            Tue 07 Sep 2027 23:10:00 +0000
asID:                     263815
IP address blocks:        167.249.192.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/799DB12D73062B2D48227BEA3C53AC4060B0EF9A32E18BAA7BC8071B27988F40/0/8511BF5F476710251836E1F3F5006C888AE1B68A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/799DB12D73062B2D48227BEA3C53AC4060B0EF9A32E18BAA7BC8071B27988F40/0/8511BF5F476710251836E1F3F5006C888AE1B68A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8511BF5F476710251836E1F3F5006C888AE1B68A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 18:47:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:6f:df:93:9b:fa:4c:6e:1e:9d:cb:6a:6a:56:9b:28:d7:9b:aa:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8511BF5F476710251836E1F3F5006C888AE1B68A
        Validity
            Not Before: Sep  8 23:05:00 2026 GMT
            Not After : Sep  7 23:10:00 2027 GMT
        Subject: CN=F384C24AFA7BD25837EB7358706099615738B8A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:45:16:a0:9a:b4:4f:7b:07:ed:a1:f8:ca:31:
                    f7:02:c5:57:78:25:6d:2e:64:09:63:b8:d6:0a:a8:
                    62:d7:0b:05:b5:30:88:1b:21:64:a4:82:cd:41:33:
                    e9:87:46:58:21:87:e3:8f:ca:66:b4:8c:6c:a0:e6:
                    08:b1:a7:09:bf:db:56:74:57:15:0b:3f:60:ae:49:
                    dd:f3:5e:3a:0b:71:55:48:f6:8a:8b:d0:1b:93:87:
                    cf:7e:75:15:85:64:86:ca:5b:64:58:7f:27:f7:98:
                    43:c1:9a:33:7e:49:4d:18:95:c4:e5:78:0d:a0:74:
                    4b:73:bb:2d:a4:23:15:77:4a:aa:ef:12:e1:7c:ed:
                    ab:17:cf:d7:eb:78:8a:39:e0:76:64:b4:d8:61:73:
                    55:24:63:7e:9f:8c:6c:7e:6d:e6:f3:17:dc:6e:54:
                    6a:1d:0b:6e:71:32:9b:d0:8b:ec:b7:f4:9f:d6:00:
                    3d:c2:51:d9:6f:0b:fe:af:88:b5:13:d8:85:d2:73:
                    63:49:53:3d:25:39:bf:94:e8:f1:dd:fd:62:bc:de:
                    88:ac:09:01:38:60:87:ee:11:19:83:fa:f5:d6:cb:
                    8b:9b:24:68:ee:94:48:71:81:5b:0e:c3:01:e6:3a:
                    33:27:bc:f1:90:52:82:b7:32:9e:93:b4:99:a9:cd:
                    d8:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:84:C2:4A:FA:7B:D2:58:37:EB:73:58:70:60:99:61:57:38:B8:A5
            X509v3 Authority Key Identifier:
                keyid:85:11:BF:5F:47:67:10:25:18:36:E1:F3:F5:00:6C:88:8A:E1:B6:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/799DB12D73062B2D48227BEA3C53AC4060B0EF9A32E18BAA7BC8071B27988F40/0/8511BF5F476710251836E1F3F5006C888AE1B68A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8511BF5F476710251836E1F3F5006C888AE1B68A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/799DB12D73062B2D48227BEA3C53AC4060B0EF9A32E18BAA7BC8071B27988F40/0/3136372e3234392e3139322e302f32322d3234203d3e20323633383135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:ad:64:a1:e5:ee:02:e7:31:fe:61:93:64:38:04:1f:06:20:
         49:b6:51:9a:d5:79:0d:7d:0e:e2:56:37:98:b0:2a:c1:24:fc:
         a0:9b:58:04:79:13:a5:4f:5b:b0:1b:e9:6f:46:3b:2f:d9:89:
         05:a4:3a:66:ce:71:e2:20:f7:b2:d6:0a:33:04:f2:56:15:f3:
         7b:f1:86:7e:71:eb:cc:62:ce:3e:77:34:3a:2d:db:11:0f:70:
         bb:5f:cd:88:77:b8:6e:8f:51:92:59:22:44:f3:36:1b:eb:12:
         ca:a8:fc:1a:91:b5:38:7a:82:5a:27:14:f7:00:88:cf:89:a5:
         ac:1b:28:71:84:cc:0e:d4:bf:e6:5e:f7:db:d9:d5:8e:51:b0:
         08:97:27:fb:f9:03:a7:9b:88:1c:0b:26:84:62:98:09:dd:90:
         c3:57:d4:ef:4c:5d:7d:f4:ed:91:eb:64:eb:b6:c3:3d:b5:c8:
         33:13:e6:96:48:59:d5:6c:3d:73:28:32:cd:54:5a:71:ce:1d:
         ed:f1:6b:d1:be:96:97:6b:9f:ee:52:94:3a:73:8b:76:64:f9:
         e5:4f:57:5a:d5:3d:c9:70:17:17:79:c4:94:9f:22:6f:2c:7d:
         8d:4c:3e:eb:79:01:f2:b7:ff:97:df:c0:84:7e:66:d2:e9:c3:
         4a:e3:67:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 01:15:57 2026 by rpki-client