Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/F8D0FA491CC2A20C494EF7C547C586BC5A101F0E95C0B68513D058084B6A1308/0/3136342e3136332e3231382e302f32342d3234203d3e20323635373734.roa
File:                     3136342e3136332e3231382e302f32342d3234203d3e20323635373734.roa (raw, json)
Hash identifier:          toRGjOycRBPRZEh2iTnEgl8z/CblYcovr/n82cpUBus=
Subject key identifier:   BE:4B:E0:81:AA:57:E3:19:52:2C:C4:C4:AD:22:C0:01:EB:9B:C3:69
Certificate issuer:       /CN=D5A898170FB3A0741FC2D324965B61B368DB0A4E
Certificate serial:       0E4631BDCE3F6B436B9DDC6A539BD2192557A5ED
Authority key identifier: D5:A8:98:17:0F:B3:A0:74:1F:C2:D3:24:96:5B:61:B3:68:DB:0A:4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5A898170FB3A0741FC2D324965B61B368DB0A4E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F8D0FA491CC2A20C494EF7C547C586BC5A101F0E95C0B68513D058084B6A1308/0/3136342e3136332e3231382e302f32342d3234203d3e20323635373734.roa
Signing time:             Thu 22 Oct 2026 16:42:18 +0000
ROA not before:           Thu 22 Oct 2026 16:37:18 +0000
ROA not after:            Thu 21 Oct 2027 16:42:18 +0000
asID:                     265774
IP address blocks:        164.163.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F8D0FA491CC2A20C494EF7C547C586BC5A101F0E95C0B68513D058084B6A1308/0/D5A898170FB3A0741FC2D324965B61B368DB0A4E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F8D0FA491CC2A20C494EF7C547C586BC5A101F0E95C0B68513D058084B6A1308/0/D5A898170FB3A0741FC2D324965B61B368DB0A4E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5A898170FB3A0741FC2D324965B61B368DB0A4E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Nov 2026 20:35:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:46:31:bd:ce:3f:6b:43:6b:9d:dc:6a:53:9b:d2:19:25:57:a5:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5A898170FB3A0741FC2D324965B61B368DB0A4E
        Validity
            Not Before: Oct 22 16:37:18 2026 GMT
            Not After : Oct 21 16:42:18 2027 GMT
        Subject: CN=BE4BE081AA57E319522CC4C4AD22C001EB9BC369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e3:35:3a:90:90:8d:99:64:0c:ef:7d:63:4e:
                    de:af:5c:02:03:53:a7:ca:fe:10:19:c7:96:8b:09:
                    c7:59:c3:db:dc:7b:e6:4d:96:e0:60:00:db:08:32:
                    0b:ba:b7:97:6d:a0:ab:55:e1:97:56:71:37:86:6d:
                    01:fe:7a:14:5e:cc:7b:88:d1:22:c5:f6:4b:7e:0e:
                    a7:65:99:cd:62:c5:53:d6:dc:95:f5:f8:40:45:a2:
                    1e:8c:48:e4:90:01:d4:2e:d3:97:8f:50:40:66:34:
                    31:d7:b3:5e:bd:63:1c:2e:28:49:bb:b2:8d:e1:ea:
                    4b:d8:92:f3:04:b5:08:25:2a:1f:63:83:7e:35:0b:
                    40:2f:55:8b:89:23:04:df:8b:9f:d8:1b:76:37:f0:
                    84:a8:37:62:e4:a6:b2:2d:4f:60:74:94:78:56:4f:
                    b6:16:c4:5b:6e:fe:1d:07:4d:81:32:92:cc:a3:df:
                    8a:bf:c1:33:ae:7d:de:63:27:3f:94:94:c8:f8:51:
                    b7:60:8d:22:65:81:1d:cc:79:1d:a7:e2:37:8b:df:
                    24:1d:b1:80:86:e5:b5:2e:52:19:f3:37:d2:33:5a:
                    b4:87:63:a9:36:65:dd:5d:e2:be:64:57:b0:50:32:
                    e5:f1:6f:fc:6f:b1:24:24:0f:50:1f:85:68:d9:96:
                    bd:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:4B:E0:81:AA:57:E3:19:52:2C:C4:C4:AD:22:C0:01:EB:9B:C3:69
            X509v3 Authority Key Identifier:
                keyid:D5:A8:98:17:0F:B3:A0:74:1F:C2:D3:24:96:5B:61:B3:68:DB:0A:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F8D0FA491CC2A20C494EF7C547C586BC5A101F0E95C0B68513D058084B6A1308/0/D5A898170FB3A0741FC2D324965B61B368DB0A4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5A898170FB3A0741FC2D324965B61B368DB0A4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F8D0FA491CC2A20C494EF7C547C586BC5A101F0E95C0B68513D058084B6A1308/0/3136342e3136332e3231382e302f32342d3234203d3e20323635373734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:6d:84:d2:98:0d:a9:02:c0:7a:40:74:39:4a:3f:c3:3f:30:
         37:0a:84:dc:51:ab:7e:51:7d:1d:21:9b:02:98:07:50:08:fa:
         51:64:f1:21:72:47:14:32:ed:04:85:86:4e:85:c4:30:1c:68:
         8d:4e:36:5a:31:3c:cd:93:e3:bf:6e:51:17:d2:ad:c5:64:4b:
         b3:6a:1a:60:40:50:e1:24:08:93:88:85:e0:bd:d8:bc:f3:0d:
         b6:a3:00:87:3c:de:45:ef:b6:60:36:cc:2c:c8:ee:c1:bd:57:
         ec:1a:5d:3b:4b:fe:d7:26:3c:82:65:fc:9f:c2:0c:e4:c0:c4:
         68:2b:af:5e:9a:68:50:34:42:df:04:20:b6:9a:b5:40:77:10:
         1e:a3:f6:f2:b0:d8:77:90:2e:5e:eb:6a:81:07:0c:b9:c0:a1:
         81:5f:b9:1b:33:23:10:35:92:13:3b:89:d7:76:8a:93:c5:34:
         10:79:01:d1:d5:e1:3a:90:c0:ce:4e:05:bc:ec:d0:20:9a:82:
         66:22:6c:51:bd:1b:75:84:20:27:c9:61:f3:34:a0:03:61:6e:
         3b:77:52:9b:cb:87:b5:7a:3f:1b:61:ab:16:7a:c7:7a:ac:d8:
         c3:1c:dc:27:b0:71:f8:ad:1b:f4:df:3b:35:df:05:ea:1d:11:
         cd:73:3b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 21:31:04 2026 by rpki-client