Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9304D5CA07D3CC675C76036A94D76DECE534B211210B0CB9EAA2E904CD2F7E1E/0/3138392e3230312e3232362e302f32332d3234203d3e2037343338.roa
File:                     3138392e3230312e3232362e302f32332d3234203d3e2037343338.roa (raw, json)
Hash identifier:          bzSv04vv1Tx1gkyUPBkxSTpQAtgg8D3sqLxanquz7XM=
Subject key identifier:   48:B9:F6:57:DC:72:A7:30:F2:51:17:E9:5A:2E:80:A0:B9:C8:32:DC
Certificate issuer:       /CN=C2B40785E3A240A257500C1EAC949A26103A8210
Certificate serial:       2DFF8A10366CC8D00D6EFF866B1FBDCC649D7B22
Authority key identifier: C2:B4:07:85:E3:A2:40:A2:57:50:0C:1E:AC:94:9A:26:10:3A:82:10
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2B40785E3A240A257500C1EAC949A26103A8210.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9304D5CA07D3CC675C76036A94D76DECE534B211210B0CB9EAA2E904CD2F7E1E/0/3138392e3230312e3232362e302f32332d3234203d3e2037343338.roa
Signing time:             Tue 07 Oct 2025 17:49:47 +0000
ROA not before:           Tue 07 Oct 2025 17:44:47 +0000
ROA not after:            Tue 06 Oct 2026 17:49:47 +0000
asID:                     7438
IP address blocks:        189.201.226.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9304D5CA07D3CC675C76036A94D76DECE534B211210B0CB9EAA2E904CD2F7E1E/0/C2B40785E3A240A257500C1EAC949A26103A8210.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9304D5CA07D3CC675C76036A94D76DECE534B211210B0CB9EAA2E904CD2F7E1E/0/C2B40785E3A240A257500C1EAC949A26103A8210.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2B40785E3A240A257500C1EAC949A26103A8210.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Oct 2025 04:21:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:ff:8a:10:36:6c:c8:d0:0d:6e:ff:86:6b:1f:bd:cc:64:9d:7b:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2B40785E3A240A257500C1EAC949A26103A8210
        Validity
            Not Before: Oct  7 17:44:47 2025 GMT
            Not After : Oct  6 17:49:47 2026 GMT
        Subject: CN=48B9F657DC72A730F25117E95A2E80A0B9C832DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:88:5d:79:51:ff:c9:3e:b8:48:bd:23:77:24:
                    69:bf:39:e1:aa:1f:c4:db:bd:fb:2a:db:4e:9b:2e:
                    c6:72:b3:76:3c:3d:64:d7:2b:72:b1:52:d2:3f:4f:
                    20:a5:c4:12:02:5c:a4:30:b6:1e:4b:c7:d7:0e:d8:
                    86:0d:67:68:24:84:e5:70:f1:a6:53:9f:f3:a3:c0:
                    d3:06:d3:c1:ee:4c:2e:95:0c:0e:73:cb:2a:67:40:
                    16:d7:a0:be:6b:79:d8:a2:eb:e4:19:50:1c:15:71:
                    dd:53:75:33:58:9a:cf:b5:f5:fe:89:51:f2:dd:6d:
                    45:bd:8b:72:1d:de:8e:86:3e:8a:3f:0d:25:05:7d:
                    9c:7b:cf:7e:5d:2c:e6:12:1e:39:c6:1e:bd:5f:89:
                    a2:a6:b2:20:e2:54:9a:ef:93:46:c4:3d:c8:19:59:
                    bf:6f:b0:d5:d5:a1:2d:7e:cd:e7:ef:9c:8b:2f:b3:
                    8c:44:f1:4b:86:bb:24:cc:f3:69:b7:bb:59:31:72:
                    5d:78:3c:11:a2:65:7d:5a:a3:3e:bb:41:39:f3:ec:
                    83:ac:06:31:6d:c6:26:10:bd:1a:3a:46:b8:c7:9d:
                    e2:4c:7a:9c:2f:9e:52:86:1a:9d:8d:82:5d:8b:b2:
                    6f:c5:f5:73:b1:e0:b2:d1:99:47:84:3d:21:fd:94:
                    a4:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:B9:F6:57:DC:72:A7:30:F2:51:17:E9:5A:2E:80:A0:B9:C8:32:DC
            X509v3 Authority Key Identifier:
                keyid:C2:B4:07:85:E3:A2:40:A2:57:50:0C:1E:AC:94:9A:26:10:3A:82:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9304D5CA07D3CC675C76036A94D76DECE534B211210B0CB9EAA2E904CD2F7E1E/0/C2B40785E3A240A257500C1EAC949A26103A8210.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2B40785E3A240A257500C1EAC949A26103A8210.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9304D5CA07D3CC675C76036A94D76DECE534B211210B0CB9EAA2E904CD2F7E1E/0/3138392e3230312e3232362e302f32332d3234203d3e2037343338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.201.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         49:60:01:cc:d3:ef:79:34:61:26:f6:2c:14:be:47:e3:be:f2:
         d0:00:ed:83:b2:25:e1:fc:eb:0a:2f:37:c8:6d:bc:70:8f:e4:
         34:bd:ef:2a:e1:85:f4:05:45:fe:ea:e1:09:58:81:16:34:de:
         e5:70:15:70:91:23:5a:d1:90:25:de:af:c0:4d:9f:4a:a9:e5:
         9a:4e:ff:3b:a6:fc:db:59:96:40:d4:89:bf:4b:15:40:cd:0d:
         76:07:ae:48:1c:fb:b4:19:36:42:54:a7:0d:3d:79:0c:55:03:
         9e:3e:72:fd:4d:d5:2b:98:03:99:53:73:fc:7d:35:ed:80:df:
         2e:69:d9:85:b5:ea:ed:a7:f3:60:be:33:55:ed:2a:d8:de:f4:
         cc:37:96:0c:67:ef:61:68:6d:24:18:15:d3:b9:01:57:de:fd:
         71:a8:85:06:8e:8c:4e:78:e1:f2:dc:d5:cb:d1:d5:30:45:e5:
         21:48:cf:17:25:a7:19:80:ea:df:2c:d9:c2:f6:40:54:cd:f6:
         b5:11:28:96:a0:23:83:49:9e:a3:68:d1:cb:22:26:03:c6:4a:
         b9:d6:2d:2c:f5:8b:6b:ca:d8:73:bc:e1:95:e4:6f:44:52:96:
         9d:8e:b5:1d:e1:44:0f:ba:d5:79:64:b2:cb:7f:be:7e:bf:db:
         6b:a5:c0:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 12:27:03 2025 by rpki-client