Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/90DB373C7530F4AA92BFF5CC1F173784FC4CBAAC69C1014370EA52FDB7D55BE0/0/3134382e3232372e3136322e302f32342d3234203d3e20323734323339.roa
File:                     3134382e3232372e3136322e302f32342d3234203d3e20323734323339.roa (raw, json)
Hash identifier:          FnBS3gT0YlQXNNJWXvTJBQ7+PO699QSprpNnFGpgm0c=
Subject key identifier:   D0:E0:31:E6:C4:97:17:58:A6:BC:C2:CE:7D:C8:23:AE:A3:28:96:44
Certificate issuer:       /CN=3C090BDF425802CD5FF49ED123D80CC37753F75B
Certificate serial:       305C288D37C0AEE44B015B6E6B3C4F38A9643E57
Authority key identifier: 3C:09:0B:DF:42:58:02:CD:5F:F4:9E:D1:23:D8:0C:C3:77:53:F7:5B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C090BDF425802CD5FF49ED123D80CC37753F75B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/90DB373C7530F4AA92BFF5CC1F173784FC4CBAAC69C1014370EA52FDB7D55BE0/0/3134382e3232372e3136322e302f32342d3234203d3e20323734323339.roa
Signing time:             Wed 07 Oct 2026 15:38:59 +0000
ROA not before:           Wed 07 Oct 2026 15:33:59 +0000
ROA not after:            Wed 06 Oct 2027 15:38:59 +0000
asID:                     274239
IP address blocks:        148.227.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/90DB373C7530F4AA92BFF5CC1F173784FC4CBAAC69C1014370EA52FDB7D55BE0/0/3C090BDF425802CD5FF49ED123D80CC37753F75B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/90DB373C7530F4AA92BFF5CC1F173784FC4CBAAC69C1014370EA52FDB7D55BE0/0/3C090BDF425802CD5FF49ED123D80CC37753F75B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C090BDF425802CD5FF49ED123D80CC37753F75B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 22:49:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:5c:28:8d:37:c0:ae:e4:4b:01:5b:6e:6b:3c:4f:38:a9:64:3e:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C090BDF425802CD5FF49ED123D80CC37753F75B
        Validity
            Not Before: Oct  7 15:33:59 2026 GMT
            Not After : Oct  6 15:38:59 2027 GMT
        Subject: CN=D0E031E6C4971758A6BCC2CE7DC823AEA3289644
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:19:79:c7:37:4c:c0:60:20:a3:d6:78:ff:24:
                    49:8c:49:15:08:0e:ec:8b:22:9c:7b:79:56:bc:1c:
                    e8:a6:47:df:35:15:08:b0:bf:3c:9a:b9:7d:91:4f:
                    32:46:c6:33:3d:26:a4:80:77:70:a1:70:3c:a2:da:
                    50:35:8c:05:a8:4c:e1:e8:9b:a3:f4:1e:85:6c:b4:
                    39:09:b1:f8:73:0f:cc:b5:0d:2a:70:4d:82:af:4d:
                    cd:91:02:bf:ae:19:46:d4:7c:bf:30:f4:19:81:d4:
                    b0:6a:18:78:7e:c4:d6:d0:1e:52:46:1c:88:02:33:
                    63:03:23:22:e4:3a:c1:5f:cc:62:6e:bc:e4:c8:2d:
                    11:07:41:b1:61:a8:a8:6e:13:a5:22:2c:68:b1:4e:
                    47:bb:2c:eb:61:9e:15:29:a8:16:1a:02:83:a0:35:
                    57:f1:0a:f0:59:30:32:fd:59:19:be:56:27:f4:b8:
                    2a:b7:a0:b6:8a:fc:da:05:0f:13:fe:1a:25:75:ab:
                    80:e8:37:35:e4:7f:86:ab:a3:b0:56:6c:91:e2:4d:
                    bb:db:9e:c5:41:70:2a:41:f8:c4:cd:71:5c:ac:9e:
                    7d:6e:ad:4b:73:de:77:02:f6:24:f5:02:8f:fb:45:
                    82:2b:53:1a:7d:a2:42:c6:b1:dd:8d:5a:ae:99:42:
                    2b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:E0:31:E6:C4:97:17:58:A6:BC:C2:CE:7D:C8:23:AE:A3:28:96:44
            X509v3 Authority Key Identifier:
                keyid:3C:09:0B:DF:42:58:02:CD:5F:F4:9E:D1:23:D8:0C:C3:77:53:F7:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/90DB373C7530F4AA92BFF5CC1F173784FC4CBAAC69C1014370EA52FDB7D55BE0/0/3C090BDF425802CD5FF49ED123D80CC37753F75B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C090BDF425802CD5FF49ED123D80CC37753F75B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/90DB373C7530F4AA92BFF5CC1F173784FC4CBAAC69C1014370EA52FDB7D55BE0/0/3134382e3232372e3136322e302f32342d3234203d3e20323734323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.227.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:79:98:9e:c6:4a:d4:54:c1:e8:cc:bc:3c:fc:de:b7:9d:dd:
         8f:9c:c9:22:34:64:1a:ef:69:ca:0a:4a:b7:d0:19:1d:eb:d6:
         ca:64:3c:81:6d:4b:d2:b3:e0:bf:5e:2f:f7:5f:c3:80:00:29:
         8d:e5:00:0b:f7:e7:6e:fd:95:ba:9a:c9:8e:47:65:74:54:db:
         98:6e:ae:ca:b9:11:28:17:44:0e:a9:1d:0a:8a:7f:9a:17:5c:
         1d:a6:6e:e0:79:3e:65:6b:2a:c5:67:e5:ac:99:f9:0a:f7:81:
         3b:2e:f7:52:b7:ef:82:ba:45:75:5a:06:76:3f:c7:21:b6:83:
         c3:9f:8c:92:da:c0:42:00:9e:76:70:94:92:28:46:1f:25:b9:
         b2:3c:b3:2e:3d:fa:08:8c:99:94:6c:ff:bb:e2:16:47:bb:52:
         3c:6c:31:1d:d6:f7:4c:46:89:83:e2:4d:0d:49:50:e7:34:91:
         aa:d7:77:e5:9e:15:b9:f0:9a:fc:c8:5b:34:72:d0:d4:0a:79:
         88:df:5e:34:60:62:01:3b:6c:86:b4:02:a1:ce:0d:22:08:67:
         ed:d6:32:b2:f5:f3:24:a9:20:d2:f1:f9:09:b4:bb:47:5a:a3:
         43:e1:60:6b:32:62:ac:75:42:01:9d:c6:46:16:9d:69:c3:f1:
         af:64:d6:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 22:36:55 2026 by rpki-client