Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/3134382e3232322e3233312e302f32342d3234203d3e20323730303037.roa
File:                     3134382e3232322e3233312e302f32342d3234203d3e20323730303037.roa (raw, json)
Hash identifier:          761tlbWulVsr8fTUyVmNo+Z7sNToJ9tuwJBPpXIJvls=
Subject key identifier:   44:17:FF:2B:7E:08:A2:CD:1A:23:B4:FF:26:55:B0:27:92:1F:D9:90
Certificate issuer:       /CN=92BE853516A6D3590F2C9ED4B6B94696C415F88F
Certificate serial:       4C40AE7DA1A32AC53BAC9040E85F9AFD658C3B71
Authority key identifier: 92:BE:85:35:16:A6:D3:59:0F:2C:9E:D4:B6:B9:46:96:C4:15:F8:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/3134382e3232322e3233312e302f32342d3234203d3e20323730303037.roa
Signing time:             Mon 11 May 2026 18:42:06 +0000
ROA not before:           Mon 11 May 2026 18:37:06 +0000
ROA not after:            Mon 10 May 2027 18:42:06 +0000
asID:                     270007
IP address blocks:        148.222.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:40:ae:7d:a1:a3:2a:c5:3b:ac:90:40:e8:5f:9a:fd:65:8c:3b:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92BE853516A6D3590F2C9ED4B6B94696C415F88F
        Validity
            Not Before: May 11 18:37:06 2026 GMT
            Not After : May 10 18:42:06 2027 GMT
        Subject: CN=4417FF2B7E08A2CD1A23B4FF2655B027921FD990
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6f:b8:cf:3b:d4:6e:b4:ae:b7:e4:5b:0d:89:
                    af:07:68:54:7a:b1:58:a6:61:88:c9:fa:83:3f:49:
                    f9:72:1e:b4:6b:d9:9f:5e:6f:13:13:0f:1c:6f:99:
                    a7:ee:83:38:7a:34:6a:b1:51:79:d2:c3:43:43:b1:
                    7a:cd:b7:6f:17:4f:ad:cc:af:d7:b5:78:db:7a:64:
                    1d:2e:3a:37:48:a4:7c:62:41:3c:37:dd:ea:13:d4:
                    df:2d:23:9e:f1:62:46:17:f4:0f:15:ea:10:40:ad:
                    2e:dd:c9:2d:ef:b6:9c:eb:73:74:5a:ab:43:5e:c9:
                    98:e4:9f:13:26:e9:1d:2e:50:d0:b6:60:b2:cd:8a:
                    ce:79:2f:70:94:e4:f6:08:68:a5:e1:c7:51:77:56:
                    36:33:67:12:40:13:7b:d2:da:4b:95:0e:68:41:a5:
                    6d:8c:16:60:7e:50:ae:4d:66:04:c4:46:e7:d5:25:
                    a7:e2:e1:9c:f1:a3:80:5b:89:7c:df:3b:df:84:60:
                    c3:d9:50:7a:54:d7:66:e4:54:c0:cb:68:0c:26:71:
                    ad:aa:86:9a:a3:5c:ac:05:ce:01:1f:59:f8:00:7f:
                    fe:cf:0d:f1:15:41:75:44:40:8a:ca:f9:e3:36:af:
                    2d:8f:12:d2:d8:d9:61:97:1c:47:c1:fd:fd:d0:1f:
                    99:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:17:FF:2B:7E:08:A2:CD:1A:23:B4:FF:26:55:B0:27:92:1F:D9:90
            X509v3 Authority Key Identifier:
                keyid:92:BE:85:35:16:A6:D3:59:0F:2C:9E:D4:B6:B9:46:96:C4:15:F8:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/3134382e3232322e3233312e302f32342d3234203d3e20323730303037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.222.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:15:13:47:ae:02:c6:49:f2:63:e8:a6:4c:6a:28:8c:11:10:
         fe:c6:ff:97:bc:3e:b1:a1:43:ea:65:38:d2:d4:7a:76:fd:cb:
         0f:f1:c1:43:2e:08:19:b8:b9:2e:75:c5:e1:fe:8c:92:64:b2:
         ef:9d:52:de:11:c2:c3:1b:fb:85:cf:4f:40:b8:d4:5c:d2:85:
         f3:3b:8d:21:b5:a8:2a:90:d1:bd:d3:aa:e3:d4:97:8e:f1:f9:
         5e:fa:85:88:23:1c:08:70:90:00:f2:92:6d:42:d4:81:34:dc:
         93:63:82:eb:8e:90:60:e9:8a:a7:1e:77:bb:90:91:0f:0e:ec:
         7c:26:b8:ca:f5:e6:ef:b8:49:06:de:59:3f:d5:4c:c4:c1:4a:
         50:9c:bc:71:c6:23:82:ce:61:d8:2c:d8:3f:aa:50:94:2e:06:
         77:cf:ca:40:75:23:31:0a:83:79:81:13:5b:2f:a4:71:77:fd:
         02:b1:62:13:31:fc:38:e4:76:57:1d:2a:f3:e6:a6:af:44:be:
         fa:c7:43:57:93:7c:51:2a:1f:fa:b6:ff:7a:d7:e9:f0:a7:3c:
         87:43:60:5a:61:84:c7:00:93:20:89:6f:f0:66:1a:71:f4:5d:
         e0:17:64:19:6c:ae:5a:dc:22:af:2b:4b:eb:1b:08:79:7a:3a:
         cd:ce:72:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:03:38 2026 by rpki-client