Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS262187.roa
File:                     AS262187.roa (raw, json)
Hash identifier:          NPmAcb6j9NGzTZrSixCMCKG6sPGy+QPqxEMqwwpRLS8=
Subject key identifier:   BF:D9:65:01:7D:6A:94:04:E4:C8:69:14:48:92:C3:C5:F2:B9:4B:6E
Certificate issuer:       /CN=274D68F06BB1F2ED094F03B52FED7565F7825D99
Certificate serial:       72033CEA6A6AE4AF089D4C3695512D30BC39B417
Authority key identifier: 27:4D:68:F0:6B:B1:F2:ED:09:4F:03:B5:2F:ED:75:65:F7:82:5D:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS262187.roa
Signing time:             Tue 12 Aug 2025 13:35:29 +0000
ROA not before:           Tue 12 Aug 2025 13:30:29 +0000
ROA not after:            Tue 11 Aug 2026 13:35:29 +0000
asID:                     262187
IP address blocks:        190.136.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:03:3c:ea:6a:6a:e4:af:08:9d:4c:36:95:51:2d:30:bc:39:b4:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=274D68F06BB1F2ED094F03B52FED7565F7825D99
        Validity
            Not Before: Aug 12 13:30:29 2025 GMT
            Not After : Aug 11 13:35:29 2026 GMT
        Subject: CN=BFD965017D6A9404E4C869144892C3C5F2B94B6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:df:7e:e2:cb:b8:72:6c:9d:c5:f8:57:93:43:
                    d4:1b:1e:81:e0:04:4f:29:2c:63:94:85:8b:81:04:
                    be:78:8c:17:5c:13:84:4d:aa:85:d3:a4:c7:14:68:
                    cf:e2:7c:c9:ca:de:9e:89:d1:63:3e:97:ae:ce:9c:
                    86:bf:10:d6:ef:e3:00:4c:30:a9:b2:8d:42:9f:4f:
                    3a:3e:3f:4a:50:1e:de:e8:8f:e6:d5:c9:4d:8c:3f:
                    02:78:55:0a:6a:78:63:6f:9d:0a:10:de:29:5a:93:
                    5d:f7:0d:3c:d0:57:4c:63:68:d1:68:7b:ee:cd:81:
                    83:6a:2e:4e:b9:33:18:f7:b9:db:c7:bd:d9:d2:a0:
                    3f:94:82:cb:97:c8:20:d6:ff:09:e4:ad:e0:c3:69:
                    83:b3:9b:8c:90:30:55:c0:dd:35:50:27:64:9d:d0:
                    2c:ff:e2:6f:55:47:91:d8:70:33:c6:a8:fe:05:24:
                    93:22:b4:8d:4b:da:22:08:a3:eb:25:b6:f1:52:1c:
                    09:d4:29:71:8e:72:8d:28:b2:3a:4c:6a:5b:8d:67:
                    1a:f5:60:af:71:45:2c:56:93:7a:4b:5c:66:75:34:
                    91:7a:66:86:aa:7c:5e:91:15:42:22:c4:ea:8c:61:
                    ee:dd:83:01:9a:20:d3:b3:35:35:89:df:5c:b3:80:
                    a5:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:D9:65:01:7D:6A:94:04:E4:C8:69:14:48:92:C3:C5:F2:B9:4B:6E
            X509v3 Authority Key Identifier:
                keyid:27:4D:68:F0:6B:B1:F2:ED:09:4F:03:B5:2F:ED:75:65:F7:82:5D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS262187.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.136.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7d:f4:90:c7:0c:3d:4a:1d:ac:fe:f6:93:50:5d:2a:d5:8d:ce:
         ff:3c:a9:80:ff:3a:e4:0a:1d:cc:fd:cc:04:aa:5f:60:ff:d5:
         6c:14:cb:9f:be:27:8a:5e:61:a3:a4:b6:75:a6:6b:92:6b:f4:
         3c:e2:b7:2f:f8:0d:b9:54:d9:f8:f1:25:32:97:dd:7b:fd:fa:
         07:f4:71:8b:a2:ff:a0:4a:cb:6f:c7:ca:71:40:14:68:46:30:
         d5:7a:cb:7b:84:55:9a:7c:9a:85:3b:5f:80:d1:6d:4d:bb:28:
         34:70:40:d9:8f:3c:ae:e5:6f:45:11:02:03:94:d8:51:ac:4e:
         01:c5:7f:75:ab:f8:60:40:c0:92:4d:7f:3c:9d:1c:1e:f6:40:
         a7:30:6e:76:34:8c:4b:9b:42:bc:e5:22:e0:6c:5f:70:21:12:
         73:25:25:c8:2f:16:b0:79:5e:f4:69:3e:c7:fb:9e:f9:00:51:
         95:33:b6:47:9b:4c:5b:38:7f:09:16:df:11:2e:0b:2f:ed:1f:
         80:57:5a:af:80:26:3d:35:52:a3:40:ab:66:78:66:56:d8:0a:
         76:31:66:c4:1d:fc:f0:59:9b:05:7c:07:99:65:86:a1:11:45:
         10:50:b9:db:71:65:5a:52:53:f4:6e:49:e9:e8:37:d2:f7:77:
         2b:4e:8f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:40:51 2025 by rpki-client