Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D4B6F0F9DBE33FDC0D10F2623436C98BD3DD339E174F3934048DC08CDE6EA646/0/3138372e3136312e3135382e302f32342d3234203d3e20323635353934.roa
File:                     3138372e3136312e3135382e302f32342d3234203d3e20323635353934.roa (raw, json)
Hash identifier:          wNt0cRFaBth1/eAE97mVjxFsb3LzEFnmbuMyk8dZcz8=
Subject key identifier:   55:F0:EF:3C:9E:7F:F9:77:6D:33:73:4A:5E:BD:D8:A0:5D:8F:7C:02
Certificate issuer:       /CN=9F078022C5EAA80D6F3FB43FCDC73FADC9791878
Certificate serial:       2445904C8CFFD4A515806FA30052357B0AAFAC02
Authority key identifier: 9F:07:80:22:C5:EA:A8:0D:6F:3F:B4:3F:CD:C7:3F:AD:C9:79:18:78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F078022C5EAA80D6F3FB43FCDC73FADC9791878.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D4B6F0F9DBE33FDC0D10F2623436C98BD3DD339E174F3934048DC08CDE6EA646/0/3138372e3136312e3135382e302f32342d3234203d3e20323635353934.roa
Signing time:             Tue 05 May 2026 21:45:00 +0000
ROA not before:           Tue 05 May 2026 21:40:00 +0000
ROA not after:            Tue 04 May 2027 21:45:00 +0000
asID:                     265594
IP address blocks:        187.161.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D4B6F0F9DBE33FDC0D10F2623436C98BD3DD339E174F3934048DC08CDE6EA646/0/9F078022C5EAA80D6F3FB43FCDC73FADC9791878.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D4B6F0F9DBE33FDC0D10F2623436C98BD3DD339E174F3934048DC08CDE6EA646/0/9F078022C5EAA80D6F3FB43FCDC73FADC9791878.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F078022C5EAA80D6F3FB43FCDC73FADC9791878.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 08:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:45:90:4c:8c:ff:d4:a5:15:80:6f:a3:00:52:35:7b:0a:af:ac:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F078022C5EAA80D6F3FB43FCDC73FADC9791878
        Validity
            Not Before: May  5 21:40:00 2026 GMT
            Not After : May  4 21:45:00 2027 GMT
        Subject: CN=55F0EF3C9E7FF9776D33734A5EBDD8A05D8F7C02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:bf:c7:3b:eb:11:12:3d:99:47:c7:cf:fb:09:
                    a7:10:9b:97:dc:70:bb:95:86:68:19:70:c7:42:86:
                    e8:b1:c4:93:06:b7:43:c2:66:e7:b0:f8:81:18:24:
                    b1:e9:17:8b:3c:6d:f8:a5:6e:6f:28:61:ed:1b:ca:
                    1e:08:39:7b:6e:65:2b:c1:63:eb:98:7a:76:61:b6:
                    7a:2b:ba:1e:58:70:a5:e4:58:ff:2c:85:7a:e2:ed:
                    86:40:81:96:c3:76:95:08:e8:14:26:2c:48:3d:41:
                    76:a7:0c:28:f9:16:3c:75:39:01:b5:84:2c:f7:a5:
                    67:46:df:be:e7:74:ac:ef:5e:8f:9b:49:9d:73:e0:
                    3a:29:f1:6a:37:9d:e2:6b:10:6c:3a:77:df:40:a6:
                    db:10:40:5c:a2:0f:f3:86:02:05:4d:90:a5:80:84:
                    88:b9:71:9f:e5:c4:5d:4f:f9:61:5f:3d:00:32:8e:
                    07:7b:1a:d3:c1:9e:a4:97:f1:0f:c3:87:5b:b6:4f:
                    1c:e3:a4:90:29:92:e7:ad:0e:0c:45:8f:04:a4:50:
                    86:01:5f:51:cc:2a:cd:99:80:71:8c:12:d4:ba:86:
                    69:09:71:b7:69:e4:0b:a0:e7:6f:5b:6d:fe:2b:47:
                    26:4f:24:e0:a4:69:16:c6:01:8f:3b:f8:b7:0b:7d:
                    5a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:F0:EF:3C:9E:7F:F9:77:6D:33:73:4A:5E:BD:D8:A0:5D:8F:7C:02
            X509v3 Authority Key Identifier:
                keyid:9F:07:80:22:C5:EA:A8:0D:6F:3F:B4:3F:CD:C7:3F:AD:C9:79:18:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D4B6F0F9DBE33FDC0D10F2623436C98BD3DD339E174F3934048DC08CDE6EA646/0/9F078022C5EAA80D6F3FB43FCDC73FADC9791878.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F078022C5EAA80D6F3FB43FCDC73FADC9791878.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D4B6F0F9DBE33FDC0D10F2623436C98BD3DD339E174F3934048DC08CDE6EA646/0/3138372e3136312e3135382e302f32342d3234203d3e20323635353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.161.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:83:02:65:42:14:eb:84:4c:5f:e5:4d:20:a4:be:62:2b:eb:
         2c:32:a1:74:03:3a:e8:39:db:1f:27:de:7f:8a:8a:27:d6:8d:
         10:98:24:29:2e:dd:58:3f:4b:ea:e6:cc:36:01:15:e6:23:9d:
         f3:8a:a6:96:14:30:03:01:46:d6:96:92:5b:de:e9:77:9b:3d:
         1a:62:41:cf:cd:db:8d:24:2f:2a:a2:58:75:3a:46:a8:c5:6e:
         bc:38:d7:d6:53:a4:6b:81:e4:32:bd:27:87:bd:c7:56:d6:48:
         89:9f:db:2f:1f:6e:1c:ed:a4:3b:45:f9:f4:3e:99:0f:1a:d4:
         15:f3:5c:70:03:7a:6e:5a:e5:3f:67:c6:55:7e:48:3b:2d:f6:
         b2:37:1b:5f:87:73:34:49:f6:68:51:ff:5f:2d:4c:a9:b4:16:
         f6:36:6d:c7:ec:88:ee:d2:84:bf:31:49:6c:84:00:ac:a0:6c:
         22:ec:0c:e2:c7:fb:6b:8f:60:46:05:35:23:a0:6f:6c:0d:bc:
         e5:9a:49:33:f7:87:2d:43:a6:b1:1c:20:03:fd:38:32:f9:1b:
         b9:e9:14:55:9c:56:44:1b:c3:41:5d:df:fc:7c:c6:2f:40:d4:
         ab:f6:32:2d:df:8d:87:3a:f0:34:ff:dd:e3:c7:74:6f:d4:d7:
         f6:42:43:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:43:57 2026 by rpki-client