Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/3135322e3233312e32372e302f32342d3234203d3e20323632313836.roa
File:                     3135322e3233312e32372e302f32342d3234203d3e20323632313836.roa (raw, json)
Hash identifier:          d2Ulx/mCDr+KmxX02nNVrZW3D7v32CC+7Ad0Fr0PM70=
Subject key identifier:   97:EE:3B:EF:7F:55:61:1A:75:F5:49:C7:36:43:0D:8A:E0:CB:28:E6
Certificate issuer:       /CN=631ADD36A3A071B54A98E2664662D6CDCD1464FA
Certificate serial:       7BDFDE393A22A7EAED216ABF88A947B3A7FB2743
Authority key identifier: 63:1A:DD:36:A3:A0:71:B5:4A:98:E2:66:46:62:D6:CD:CD:14:64:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/3135322e3233312e32372e302f32342d3234203d3e20323632313836.roa
Signing time:             Fri 24 Apr 2026 01:39:51 +0000
ROA not before:           Fri 24 Apr 2026 01:34:51 +0000
ROA not after:            Fri 23 Apr 2027 01:39:51 +0000
asID:                     262186
IP address blocks:        152.231.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 16 May 2026 19:05:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:df:de:39:3a:22:a7:ea:ed:21:6a:bf:88:a9:47:b3:a7:fb:27:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=631ADD36A3A071B54A98E2664662D6CDCD1464FA
        Validity
            Not Before: Apr 24 01:34:51 2026 GMT
            Not After : Apr 23 01:39:51 2027 GMT
        Subject: CN=97EE3BEF7F55611A75F549C736430D8AE0CB28E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d5:08:d0:89:c9:ca:9d:99:ba:d2:34:4e:df:
                    f9:92:af:70:94:b2:d7:45:6a:a0:34:66:b1:75:b8:
                    60:13:17:7b:0a:b3:ed:23:51:a0:c9:7d:9e:7b:f2:
                    ae:d7:ea:97:b5:8e:1c:a8:98:f5:a7:55:18:1c:57:
                    9b:cc:a8:a9:da:b3:89:78:a9:3d:16:15:83:a0:3d:
                    3f:6e:82:0d:ae:e3:8f:dd:2d:a7:3d:6d:4f:eb:48:
                    1e:a4:a6:18:a6:94:1c:7e:c9:95:f9:04:4b:14:8f:
                    e0:da:bc:75:26:34:2f:a5:27:18:64:ac:b3:d1:62:
                    4f:a2:26:02:67:a0:1a:5a:4f:62:0b:13:7e:4c:cd:
                    b7:0e:a8:8d:7c:9a:ff:28:50:fb:29:85:41:58:56:
                    3a:f4:e5:86:70:bb:20:e0:85:bf:ab:63:2d:a1:85:
                    7c:d9:fe:77:ff:b1:73:37:ce:10:4f:78:02:6b:7d:
                    e8:56:b7:5d:dc:53:89:30:81:0a:b2:b7:39:be:85:
                    9e:f4:d9:f3:6f:0d:ca:34:62:53:c1:e7:e7:77:ac:
                    58:3b:31:31:9b:e8:50:4a:64:f4:d2:15:12:b1:90:
                    11:9e:c4:15:64:de:15:c7:03:bd:ab:bf:d0:dc:22:
                    8d:84:d1:48:a2:7a:6c:1c:1e:44:99:d4:a5:2d:66:
                    35:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:EE:3B:EF:7F:55:61:1A:75:F5:49:C7:36:43:0D:8A:E0:CB:28:E6
            X509v3 Authority Key Identifier:
                keyid:63:1A:DD:36:A3:A0:71:B5:4A:98:E2:66:46:62:D6:CD:CD:14:64:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/3135322e3233312e32372e302f32342d3234203d3e20323632313836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.231.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:c6:5d:b3:ce:1e:e7:89:b8:4b:15:98:5f:8b:11:81:7e:42:
         3a:31:de:fb:99:97:39:76:2b:8f:9c:a1:a1:6a:04:b5:fc:fe:
         1f:e3:f0:34:87:91:8a:73:58:18:10:a7:41:37:8f:e7:b5:f3:
         0f:b7:e5:4e:d8:28:63:09:8b:bf:1e:86:b5:60:f3:b8:80:f7:
         4b:20:52:48:ba:ee:e6:72:3c:d6:a8:7e:e0:45:ec:55:67:ba:
         17:02:ed:2c:6e:88:32:b3:59:6e:f2:f8:2f:73:b9:43:eb:ec:
         43:e0:26:63:0f:5f:a3:5a:2d:b5:c3:09:f0:d0:fa:07:94:8a:
         40:39:79:64:97:c9:f9:93:e2:9a:ee:55:8a:e7:f1:d1:0f:2b:
         c8:24:2a:33:ff:0c:d2:bf:64:44:55:8a:59:b9:7f:be:5b:a2:
         7c:2a:b0:b8:3e:f3:79:89:c2:c1:91:b7:94:d9:65:cf:70:93:
         6d:f0:6b:4f:3e:39:92:47:2b:51:c0:bb:2a:c5:08:ec:96:5e:
         89:67:51:92:b9:3d:d4:47:f9:24:be:ca:51:d8:23:b1:49:2d:
         aa:f3:23:1a:68:8c:51:7a:c6:87:9d:7e:3d:27:eb:ff:12:95:
         46:67:fb:6c:7c:3e:8c:09:ab:56:c5:cf:37:83:b6:c2:fe:14:
         b4:6c:0c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:47:30 2026 by rpki-client