Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/3134382e3232322e3233382e302f32342d3234203d3e20323733393933.roa
File:                     3134382e3232322e3233382e302f32342d3234203d3e20323733393933.roa (raw, json)
Hash identifier:          oM/FpHFsoojq7ExLr6s356oDYRrOqIVEGLBqS7WBgmI=
Subject key identifier:   D5:8E:98:DD:10:A8:01:DA:97:E8:D4:7C:A2:AA:05:8D:9F:A3:D5:5A
Certificate issuer:       /CN=92BE853516A6D3590F2C9ED4B6B94696C415F88F
Certificate serial:       349F4A1C2DBD9D5ECA497D86BF0735DA875F3F9C
Authority key identifier: 92:BE:85:35:16:A6:D3:59:0F:2C:9E:D4:B6:B9:46:96:C4:15:F8:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/3134382e3232322e3233382e302f32342d3234203d3e20323733393933.roa
Signing time:             Fri 02 Oct 2026 14:37:46 +0000
ROA not before:           Fri 02 Oct 2026 14:32:46 +0000
ROA not after:            Fri 01 Oct 2027 14:37:46 +0000
asID:                     273993
IP address blocks:        148.222.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 21:34:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:9f:4a:1c:2d:bd:9d:5e:ca:49:7d:86:bf:07:35:da:87:5f:3f:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92BE853516A6D3590F2C9ED4B6B94696C415F88F
        Validity
            Not Before: Oct  2 14:32:46 2026 GMT
            Not After : Oct  1 14:37:46 2027 GMT
        Subject: CN=D58E98DD10A801DA97E8D47CA2AA058D9FA3D55A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:78:41:a3:9a:c2:a0:ed:c6:71:5d:bd:97:97:
                    b1:98:c2:84:f1:fe:ad:a8:65:19:74:bc:11:3a:6c:
                    a2:25:d6:08:da:df:b2:7b:d2:35:bd:40:d0:33:8e:
                    99:f4:05:5f:45:13:38:c7:af:bd:e4:2c:6f:69:d3:
                    e2:41:9c:4c:ab:ba:81:eb:10:cf:dd:28:41:14:a1:
                    d7:bf:08:ab:a4:51:80:bb:6e:f5:a9:28:c7:71:42:
                    bb:99:48:13:74:5a:28:54:d7:af:fb:a2:0e:75:b1:
                    36:46:6b:6d:b1:de:7e:24:d1:f8:8c:5e:a7:35:17:
                    38:e7:89:94:03:5d:c8:bd:40:1f:1a:9e:a9:94:bc:
                    92:6e:c2:f3:4c:3d:2d:6b:74:09:14:1b:63:7e:8f:
                    c3:af:7a:a5:e3:f3:93:c1:e9:98:aa:89:1a:2b:4c:
                    d4:b4:ac:02:2c:4a:1e:0e:98:fd:4c:69:9d:f6:21:
                    fe:21:ec:1c:52:b7:d6:c2:e0:eb:0f:bb:62:79:28:
                    73:ca:5c:46:73:d9:97:fc:26:7b:bc:9e:db:3d:86:
                    66:7b:31:c3:a0:92:bd:d1:58:f1:24:e2:49:d6:9e:
                    5f:76:b0:7e:ec:d0:f4:6d:3b:60:86:f6:65:61:f9:
                    b8:75:4f:ea:20:65:d7:f6:f2:76:37:6e:cf:85:74:
                    fe:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:8E:98:DD:10:A8:01:DA:97:E8:D4:7C:A2:AA:05:8D:9F:A3:D5:5A
            X509v3 Authority Key Identifier:
                keyid:92:BE:85:35:16:A6:D3:59:0F:2C:9E:D4:B6:B9:46:96:C4:15:F8:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/3134382e3232322e3233382e302f32342d3234203d3e20323733393933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.222.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:39:78:25:53:32:f2:b5:89:8a:0b:68:8b:05:d9:6a:c6:23:
         b6:12:d6:1c:95:f9:b1:34:34:a6:dd:02:de:dc:7a:d3:57:2e:
         68:36:cc:46:2a:8a:12:9c:04:f6:54:fe:53:d8:92:fa:d8:97:
         31:f9:39:c4:52:48:f1:6f:fa:93:bb:6a:9f:ed:e3:b6:37:e8:
         05:c6:f3:1e:de:4f:08:89:ae:46:97:de:83:2f:f2:11:c7:ad:
         bc:ca:5f:a4:b9:81:7d:11:95:f6:0d:fc:ef:1d:65:5a:f7:e7:
         9c:b6:ab:47:eb:1f:69:40:a7:a7:d4:b6:25:b0:65:78:4b:2c:
         c5:47:25:e7:49:21:26:79:ba:f3:c4:f4:33:a3:dd:8f:a2:80:
         14:f6:87:58:a4:b3:de:cd:e7:34:df:b6:f7:65:b6:b0:36:15:
         03:7e:c2:5a:1d:d7:76:82:4c:92:ba:e2:bd:e3:2f:4a:a8:ea:
         1a:47:06:27:4b:6f:c0:65:05:e4:3b:b5:84:09:3c:7e:ae:a8:
         87:f2:fc:b6:e2:ca:9f:50:9e:e6:b0:ce:02:f4:3b:9b:cd:a9:
         6c:23:58:21:7a:67:5d:43:5f:72:32:a5:8a:e8:3c:c6:2f:e2:
         b0:9a:ea:af:80:ce:5f:38:46:12:7a:58:0f:e7:7a:9f:a3:ed:
         73:1d:14:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 12:15:27 2026 by rpki-client