Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/8DB8F65B180EB280A6CF86D1CBA388A96308840BE26735199AC3D2D24A4ED4C3/0/3230372e3234382e38312e302f32342d3234203d3e20323634373832.roa
File:                     3230372e3234382e38312e302f32342d3234203d3e20323634373832.roa (raw, json)
Hash identifier:          zSx8SlWHKrOEqm42WZppu7rmM5Bl+CXgbYFVdpMG6n8=
Subject key identifier:   7E:6D:A7:AA:84:8E:D5:69:46:E4:D2:CB:D8:8C:21:AD:99:7E:00:77
Certificate issuer:       /CN=A336D3A6848D9FCFC33C29FA222E93389C236D0B
Certificate serial:       1C4E89E796F1D6DF15F8FEFD07E97BB49AEBC021
Authority key identifier: A3:36:D3:A6:84:8D:9F:CF:C3:3C:29:FA:22:2E:93:38:9C:23:6D:0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A336D3A6848D9FCFC33C29FA222E93389C236D0B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8DB8F65B180EB280A6CF86D1CBA388A96308840BE26735199AC3D2D24A4ED4C3/0/3230372e3234382e38312e302f32342d3234203d3e20323634373832.roa
Signing time:             Sun 04 Oct 2026 16:38:46 +0000
ROA not before:           Sun 04 Oct 2026 16:33:46 +0000
ROA not after:            Sun 03 Oct 2027 16:38:46 +0000
asID:                     264782
IP address blocks:        207.248.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8DB8F65B180EB280A6CF86D1CBA388A96308840BE26735199AC3D2D24A4ED4C3/0/A336D3A6848D9FCFC33C29FA222E93389C236D0B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8DB8F65B180EB280A6CF86D1CBA388A96308840BE26735199AC3D2D24A4ED4C3/0/A336D3A6848D9FCFC33C29FA222E93389C236D0B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A336D3A6848D9FCFC33C29FA222E93389C236D0B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 Oct 2026 05:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:4e:89:e7:96:f1:d6:df:15:f8:fe:fd:07:e9:7b:b4:9a:eb:c0:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A336D3A6848D9FCFC33C29FA222E93389C236D0B
        Validity
            Not Before: Oct  4 16:33:46 2026 GMT
            Not After : Oct  3 16:38:46 2027 GMT
        Subject: CN=7E6DA7AA848ED56946E4D2CBD88C21AD997E0077
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a9:97:39:54:76:36:b4:40:88:b6:e1:e4:53:
                    f8:78:8d:04:f1:2e:1b:54:49:bb:85:8e:ec:d4:fe:
                    cf:c3:d1:3a:97:51:56:cb:49:52:a6:00:95:e4:9c:
                    83:b4:1b:7a:a1:95:66:59:ab:db:be:29:53:2a:83:
                    8d:0e:ad:7f:d4:70:a0:da:2d:7a:f5:f4:14:69:ea:
                    dd:d0:4f:17:58:ab:9b:3c:71:4e:81:2c:c6:33:54:
                    56:5c:70:12:6f:9d:56:ad:77:0c:f4:6b:4b:5b:0d:
                    09:31:03:c0:de:fb:5c:7f:81:a5:d8:39:5d:06:03:
                    f6:7e:ed:92:95:c4:48:49:4d:64:1c:b8:8b:4c:41:
                    13:00:91:10:60:7c:31:bc:40:0c:19:5b:02:ec:74:
                    7d:2f:26:58:e8:f3:07:d3:76:59:ab:02:5a:59:de:
                    ac:c1:4c:49:69:f9:f2:ea:cc:39:31:bd:60:52:c7:
                    42:5a:12:ae:5e:39:80:0d:5a:0d:34:77:1b:e0:24:
                    3e:b2:99:bc:00:49:11:b4:63:4f:b4:cd:e3:f1:8e:
                    04:eb:ef:fe:75:3a:47:0b:98:06:9a:48:32:d6:a1:
                    ab:5f:10:a9:30:7d:e4:78:9f:80:09:f1:e0:6e:a8:
                    fc:fe:5f:e3:84:a1:53:53:1d:3f:82:0b:ff:30:41:
                    cb:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:6D:A7:AA:84:8E:D5:69:46:E4:D2:CB:D8:8C:21:AD:99:7E:00:77
            X509v3 Authority Key Identifier:
                keyid:A3:36:D3:A6:84:8D:9F:CF:C3:3C:29:FA:22:2E:93:38:9C:23:6D:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8DB8F65B180EB280A6CF86D1CBA388A96308840BE26735199AC3D2D24A4ED4C3/0/A336D3A6848D9FCFC33C29FA222E93389C236D0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A336D3A6848D9FCFC33C29FA222E93389C236D0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8DB8F65B180EB280A6CF86D1CBA388A96308840BE26735199AC3D2D24A4ED4C3/0/3230372e3234382e38312e302f32342d3234203d3e20323634373832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.248.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:94:fa:87:60:62:ad:08:66:58:1d:94:70:8b:b9:f5:30:b9:
         96:0c:d4:ed:d7:e8:39:03:50:9c:5f:1c:18:7b:2b:ba:6e:0c:
         e0:02:2e:ac:76:48:e9:98:c0:d5:67:25:b9:aa:88:df:6c:e6:
         71:eb:71:12:32:a6:8e:8d:a3:40:f3:33:0d:9f:d6:f8:cb:fe:
         6e:94:51:35:a1:b7:e0:50:d6:ef:3d:3d:c0:98:fa:2d:0d:9c:
         e8:1a:6c:71:1a:20:3f:83:15:83:eb:0d:05:df:d3:17:51:06:
         de:f6:f1:9b:a3:6f:18:74:ab:22:d4:03:de:16:2a:0e:a0:e5:
         f3:5f:07:65:d8:01:97:c8:70:ab:2b:dc:74:71:f5:60:10:e9:
         44:6b:6a:53:5e:e5:39:ee:65:f5:58:1a:4e:74:88:7a:6d:2d:
         51:77:8d:e3:1a:14:8d:8e:00:ba:c7:ad:53:72:a7:19:53:b5:
         82:1e:c5:4f:6c:5d:ba:d0:4e:e8:ff:fe:bc:0b:9e:f3:b1:72:
         c8:a0:5c:30:9b:00:61:5c:cc:73:9b:db:86:b9:f2:91:fd:8d:
         68:ad:7c:7a:c8:b7:ef:cd:b6:be:b1:44:91:d0:52:0e:58:d1:
         09:4d:4c:07:71:b0:ae:10:b1:51:2d:54:11:84:fa:76:53:6a:
         87:06:2b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 06:19:55 2026 by rpki-client