Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13830BDE7A7DC7CBE2750590E8135E376B1634AC5C0EE69464D117EA0615126E/0/3230312e3135392e3136382e302f32312d3234203d3e203539373936.roa
File:                     3230312e3135392e3136382e302f32312d3234203d3e203539373936.roa (raw, json)
Hash identifier:          YsAnNGo8Rxk44efr8iRdBuIn9n/2ubV1LcZSt8HL8ew=
Subject key identifier:   8F:95:05:F1:93:54:A6:76:B9:5A:D2:05:CF:35:F5:30:18:17:C5:DE
Certificate issuer:       /CN=B06551473984A7D021CE4C930068D4DD4CBA142A
Certificate serial:       0C1C181ECD1AA87E3BF380F74BD9C630E48384DB
Authority key identifier: B0:65:51:47:39:84:A7:D0:21:CE:4C:93:00:68:D4:DD:4C:BA:14:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B06551473984A7D021CE4C930068D4DD4CBA142A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13830BDE7A7DC7CBE2750590E8135E376B1634AC5C0EE69464D117EA0615126E/0/3230312e3135392e3136382e302f32312d3234203d3e203539373936.roa
Signing time:             Thu 23 Jul 2026 17:10:00 +0000
ROA not before:           Thu 23 Jul 2026 17:05:00 +0000
ROA not after:            Thu 22 Jul 2027 17:10:00 +0000
asID:                     59796
IP address blocks:        201.159.168.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/13830BDE7A7DC7CBE2750590E8135E376B1634AC5C0EE69464D117EA0615126E/0/B06551473984A7D021CE4C930068D4DD4CBA142A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/13830BDE7A7DC7CBE2750590E8135E376B1634AC5C0EE69464D117EA0615126E/0/B06551473984A7D021CE4C930068D4DD4CBA142A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B06551473984A7D021CE4C930068D4DD4CBA142A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:1c:18:1e:cd:1a:a8:7e:3b:f3:80:f7:4b:d9:c6:30:e4:83:84:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B06551473984A7D021CE4C930068D4DD4CBA142A
        Validity
            Not Before: Jul 23 17:05:00 2026 GMT
            Not After : Jul 22 17:10:00 2027 GMT
        Subject: CN=8F9505F19354A676B95AD205CF35F5301817C5DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6b:33:65:a8:0b:88:9c:f8:b5:de:3a:32:c9:
                    c2:54:f1:c2:cb:c1:41:33:67:b1:2b:b7:b9:ef:bc:
                    a5:25:3d:89:51:f9:97:ed:2e:99:03:cc:11:e2:e2:
                    7d:f2:18:44:5a:12:02:27:43:61:09:cd:c0:fb:7c:
                    02:a5:7c:ea:9e:a5:c8:f6:37:58:32:67:8c:70:c3:
                    2f:70:f0:57:6c:45:07:5a:a6:39:d6:ad:1a:b1:c1:
                    a6:58:d7:f6:ed:63:83:9a:6c:2b:c9:de:3a:4a:7b:
                    64:e5:31:b0:66:9d:90:33:3b:8b:3b:49:ae:20:aa:
                    e3:c0:82:ee:05:48:a2:df:ce:eb:6b:59:64:de:d0:
                    c9:57:8e:f7:21:4b:cd:59:4f:cd:d5:80:3e:04:df:
                    58:86:a6:e0:4b:5e:65:ef:8b:96:69:60:d9:6e:59:
                    64:ce:72:fe:b2:e0:df:3c:e9:e1:ca:cd:29:93:c5:
                    b7:0f:70:98:de:0d:48:f9:e8:a8:2f:1e:21:66:c3:
                    61:4e:25:05:a9:c3:1b:78:ce:64:ad:14:eb:d2:97:
                    4d:04:3a:4a:f7:3b:6a:cf:53:04:2c:ec:6c:30:db:
                    4c:bc:12:16:49:f0:d5:41:47:b2:7b:2e:ba:d7:97:
                    67:05:f6:dd:e7:96:cf:dc:11:0b:68:c6:ee:d7:41:
                    67:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:95:05:F1:93:54:A6:76:B9:5A:D2:05:CF:35:F5:30:18:17:C5:DE
            X509v3 Authority Key Identifier:
                keyid:B0:65:51:47:39:84:A7:D0:21:CE:4C:93:00:68:D4:DD:4C:BA:14:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13830BDE7A7DC7CBE2750590E8135E376B1634AC5C0EE69464D117EA0615126E/0/B06551473984A7D021CE4C930068D4DD4CBA142A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B06551473984A7D021CE4C930068D4DD4CBA142A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13830BDE7A7DC7CBE2750590E8135E376B1634AC5C0EE69464D117EA0615126E/0/3230312e3135392e3136382e302f32312d3234203d3e203539373936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.168.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4d:2b:24:e1:63:23:ef:aa:a8:25:bd:be:7b:d4:27:71:17:2e:
         90:bc:a4:59:b1:2f:41:b9:74:d3:e5:a7:ca:18:f9:67:43:a4:
         ee:d9:f1:77:90:f2:c9:4c:18:b5:2a:37:3a:90:1b:fd:82:60:
         a3:60:2b:70:68:6f:6d:dc:f2:77:bb:dd:0f:c8:9f:00:5c:88:
         13:a9:67:dd:64:0f:7f:ba:5a:d6:9c:f7:0f:a2:23:d9:1e:37:
         ab:48:02:ba:40:d7:d9:a7:6a:ac:2e:c4:ee:1d:a1:c8:89:31:
         3c:fa:cf:2d:c6:dc:93:80:7e:d8:64:6e:78:d9:da:6e:9d:72:
         ba:ae:90:25:7f:29:66:13:e5:36:2f:7a:bc:67:45:aa:eb:3a:
         8c:98:da:50:49:ea:98:28:74:23:f7:79:a6:7a:04:5e:64:35:
         56:bf:c1:87:c0:63:5f:da:c4:4f:26:7f:e4:5f:7f:b2:0a:c2:
         c7:79:44:60:00:5f:17:7b:7a:eb:93:2d:94:e6:6e:41:00:26:
         ee:bc:34:bd:6d:f0:0d:35:57:9d:41:2a:cf:3c:b5:2a:d3:ee:
         03:89:1c:86:f9:3b:da:47:4d:2f:63:74:9a:16:5e:84:36:10:
         af:81:d1:da:5f:47:a0:7b:12:0f:f8:86:6e:13:e5:af:3c:e1:
         6b:17:35:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:01:06 2026 by rpki-client