Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/3130332e3231392e3233352e302f32342d3234203d3e20323632353839.roa
File:                     3130332e3231392e3233352e302f32342d3234203d3e20323632353839.roa (raw, json)
Hash identifier:          jwx7sMAMkmA1YY8pFjTSsUYpHJStPGZTLly4icGM8Go=
Subject key identifier:   02:B6:15:ED:CE:38:73:D2:47:09:5E:73:B0:AE:57:FC:49:DE:CF:F6
Certificate issuer:       /CN=0F225EF900A741ED0067293A5D9297AE3DA8CE60
Certificate serial:       618A7CA4BAF141DC6B29E8975D6FFD27BF112479
Authority key identifier: 0F:22:5E:F9:00:A7:41:ED:00:67:29:3A:5D:92:97:AE:3D:A8:CE:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/3130332e3231392e3233352e302f32342d3234203d3e20323632353839.roa
Signing time:             Sat 29 Aug 2026 02:40:00 +0000
ROA not before:           Sat 29 Aug 2026 02:35:00 +0000
ROA not after:            Sat 28 Aug 2027 02:40:00 +0000
asID:                     262589
IP address blocks:        103.219.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 02:02:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:8a:7c:a4:ba:f1:41:dc:6b:29:e8:97:5d:6f:fd:27:bf:11:24:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F225EF900A741ED0067293A5D9297AE3DA8CE60
        Validity
            Not Before: Aug 29 02:35:00 2026 GMT
            Not After : Aug 28 02:40:00 2027 GMT
        Subject: CN=02B615EDCE3873D247095E73B0AE57FC49DECFF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:cd:fc:ff:4e:79:3b:c4:7f:0f:c7:87:12:4d:
                    eb:8f:13:78:eb:41:50:a9:a5:03:db:2c:73:60:26:
                    52:0b:5b:81:3e:68:85:0c:94:16:8e:70:b2:97:89:
                    50:11:0e:ac:7a:87:3e:ee:df:ab:e8:00:ed:54:96:
                    b2:18:25:61:29:96:96:3d:09:55:ea:1a:84:4e:57:
                    6a:ba:7f:2a:52:48:10:66:b1:b1:c0:58:60:4a:01:
                    53:ff:f2:3f:c6:97:7d:3d:fb:03:88:57:2c:b6:69:
                    52:b9:3a:9f:54:8e:3b:fa:6b:9e:f6:79:0c:49:b0:
                    76:d5:20:49:2b:d7:4a:0b:9f:2b:82:b7:c9:f1:ae:
                    d4:b3:e1:b2:ec:c1:d0:f5:b3:71:7b:3e:9d:07:0e:
                    0d:2a:c6:32:d9:70:8d:e0:26:59:71:04:90:e7:ac:
                    d5:ec:45:90:fc:3e:c0:48:dc:77:16:64:de:26:a3:
                    e6:9b:1d:9f:2e:b9:2f:89:17:fc:4a:4b:73:ee:68:
                    ac:6b:f6:0d:ad:3e:42:b6:ec:a5:c0:bc:07:9a:f9:
                    5d:d9:69:ce:bf:5e:6c:d3:ba:de:d5:87:14:93:af:
                    7c:cb:5c:f1:4d:76:3c:5e:5f:34:1e:5b:6d:ab:fb:
                    8d:8f:24:8c:87:18:52:b6:1b:bc:98:62:f1:a0:35:
                    ef:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:B6:15:ED:CE:38:73:D2:47:09:5E:73:B0:AE:57:FC:49:DE:CF:F6
            X509v3 Authority Key Identifier:
                keyid:0F:22:5E:F9:00:A7:41:ED:00:67:29:3A:5D:92:97:AE:3D:A8:CE:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/3130332e3231392e3233352e302f32342d3234203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.219.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:b3:f0:ad:54:6c:5e:48:f5:df:62:17:81:6c:ce:cb:11:0b:
         19:55:a6:ab:54:ef:86:08:e1:58:49:15:d5:d9:90:e8:1f:1e:
         6a:07:d5:b1:ec:a9:32:1a:9c:4e:0d:8b:62:28:be:78:7c:ec:
         34:8f:e3:9b:22:00:80:01:91:48:b7:51:62:ad:6c:cd:35:08:
         3f:7e:ae:99:86:dd:6b:67:b8:cf:e5:52:01:dc:7c:9b:a4:06:
         a0:76:9d:d8:f4:87:a3:43:ca:ec:e0:a6:66:57:38:59:98:32:
         cb:2a:c1:81:6e:07:85:a3:5e:09:80:c2:a4:13:3d:eb:e3:c0:
         8c:94:6d:54:3f:51:4c:14:d3:91:04:dc:42:f4:3a:3e:88:3b:
         8b:a4:eb:cd:62:cf:33:bc:ce:52:ed:fe:c0:b8:13:ef:a4:c3:
         a9:6b:62:15:e5:54:c8:14:f3:5a:3c:29:13:09:cb:4d:6f:b4:
         0c:94:4a:86:46:66:75:33:c5:71:53:ac:a7:29:65:91:22:48:
         0f:0e:b0:0f:a3:f9:a9:3d:bc:ed:3d:4b:1f:76:55:5a:f8:52:
         a3:a2:09:8c:42:2a:28:75:75:95:ef:32:85:07:e3:c9:fd:7c:
         fd:03:a9:38:8e:0e:12:6b:c5:7c:40:1b:63:09:8a:51:b1:ee:
         5b:77:8a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 19:55:19 2026 by rpki-client