Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/3135322e3233312e32362e302f32342d3234203d3e203138363738.roa
File:                     3135322e3233312e32362e302f32342d3234203d3e203138363738.roa (raw, json)
Hash identifier:          3162TVWt1Or2LikVwYtGtUQ8haaHVUwokK60r+o5xAI=
Subject key identifier:   62:F0:45:CA:E8:85:D6:FB:AF:7F:2A:E6:7A:84:DC:12:E2:B1:A0:4A
Certificate issuer:       /CN=631ADD36A3A071B54A98E2664662D6CDCD1464FA
Certificate serial:       65B5E41676900E1F8315ACE55D334B44AB12A650
Authority key identifier: 63:1A:DD:36:A3:A0:71:B5:4A:98:E2:66:46:62:D6:CD:CD:14:64:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/3135322e3233312e32362e302f32342d3234203d3e203138363738.roa
Signing time:             Tue 23 Sep 2025 15:50:00 +0000
ROA not before:           Tue 23 Sep 2025 15:45:00 +0000
ROA not after:            Tue 22 Sep 2026 15:50:00 +0000
asID:                     18678
IP address blocks:        152.231.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:b5:e4:16:76:90:0e:1f:83:15:ac:e5:5d:33:4b:44:ab:12:a6:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=631ADD36A3A071B54A98E2664662D6CDCD1464FA
        Validity
            Not Before: Sep 23 15:45:00 2025 GMT
            Not After : Sep 22 15:50:00 2026 GMT
        Subject: CN=62F045CAE885D6FBAF7F2AE67A84DC12E2B1A04A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:dd:05:5c:f5:c7:de:49:d7:d2:25:90:de:8b:
                    e0:f8:ed:3d:97:38:ae:84:18:49:ea:91:ae:22:42:
                    05:f2:71:7c:82:83:97:70:50:be:a6:c8:6c:c5:bf:
                    b7:9e:c4:b5:21:ab:2e:b0:8b:14:65:46:ab:b6:f5:
                    a1:00:ff:87:f3:23:4d:55:22:ea:55:26:ce:3e:af:
                    99:ae:cb:9c:b1:5f:6f:43:06:3f:99:8d:92:17:52:
                    4a:24:f6:17:c0:9b:db:c1:fd:87:1f:8d:1c:76:f3:
                    29:34:0a:68:0b:27:4a:76:b6:a4:29:6e:63:b1:04:
                    ab:80:cc:fe:db:ab:41:0d:2c:67:ec:db:16:bd:eb:
                    cf:ed:9f:ac:71:dd:1f:4a:83:06:df:55:cc:30:2d:
                    ae:ef:54:e2:01:41:10:f0:a9:fc:7b:1b:51:e8:4e:
                    22:9f:52:41:39:ec:93:a3:41:70:94:9d:b5:4e:71:
                    1f:4c:7c:ff:92:91:9a:a4:69:dd:38:2d:d5:b0:4e:
                    b4:7c:d4:ce:7b:8b:1c:6b:0c:93:09:03:4b:18:49:
                    f8:f1:fd:d3:f5:a1:cc:25:be:e8:56:3d:7d:7f:da:
                    06:a5:25:37:3d:86:a2:42:b8:4c:ca:5c:dc:6e:45:
                    d9:c1:46:4e:bf:a3:31:af:eb:fa:9b:23:e9:59:d0:
                    96:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:F0:45:CA:E8:85:D6:FB:AF:7F:2A:E6:7A:84:DC:12:E2:B1:A0:4A
            X509v3 Authority Key Identifier:
                keyid:63:1A:DD:36:A3:A0:71:B5:4A:98:E2:66:46:62:D6:CD:CD:14:64:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/3135322e3233312e32362e302f32342d3234203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.231.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:2f:67:e0:2a:0d:d5:d6:ce:3d:90:1c:b6:02:41:c3:5b:dd:
         13:1a:e8:72:ed:b6:5a:5c:8b:a2:9e:09:f3:7b:0d:ae:10:04:
         49:db:db:52:28:68:d2:24:05:8c:2b:c1:7d:cd:cc:bc:40:10:
         1b:fb:81:61:98:68:14:41:44:e4:8d:32:39:44:24:88:17:c7:
         0e:48:8d:bc:ea:d3:f3:ca:9f:7f:ea:17:7b:24:cc:23:45:0d:
         93:53:30:c5:e1:f2:0a:44:8f:e2:64:d8:39:63:04:94:eb:34:
         0b:98:ba:b2:42:82:af:c6:ab:ca:28:be:da:96:85:8e:09:d1:
         c4:92:47:ba:e4:7d:7c:83:13:b4:37:2b:c2:ab:bd:29:98:8b:
         06:42:0f:9b:d4:4f:37:5e:e3:d6:0e:d2:23:2e:a6:72:af:5c:
         cf:9e:05:88:e9:b0:95:21:8c:15:0b:3b:37:93:08:c2:89:37:
         80:dd:c6:e3:5c:ea:0c:b4:4e:1b:83:db:0a:21:9f:6a:33:52:
         bd:d4:b6:a7:cd:2a:eb:7b:65:27:c5:5d:a4:4a:80:ce:ad:0a:
         7a:c6:b6:4f:da:b0:48:e4:a8:28:4e:a9:b6:74:8c:e0:5d:cd:
         0e:0c:31:5c:b9:bd:bd:a0:6a:c3:23:4a:ef:80:1d:19:9a:9d:
         e4:30:c5:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:51:58 2025 by rpki-client