Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/286A91BA89AF978CCE2BB0FA7581486B216EA959BDF3E8E24B7EDCFF177D5193/0/3230312e3134392e34302e302f32322d3232203d3e203339383535.roa
File:                     3230312e3134392e34302e302f32322d3232203d3e203339383535.roa (raw, json)
Hash identifier:          QsdeMsRzPMMA3lF3L5Nt/rjG5RTO0SQjWGfbTLuNUFI=
Subject key identifier:   6F:76:FC:A0:34:4F:2F:59:7D:FA:51:46:E3:47:FD:0B:7C:33:00:D7
Certificate issuer:       /CN=7B516BC52FDBEAD0CF80516E1794A01BEFD23DDD
Certificate serial:       5D3DDC63A018CA7422B8BB8395E6F1113B92EEDD
Authority key identifier: 7B:51:6B:C5:2F:DB:EA:D0:CF:80:51:6E:17:94:A0:1B:EF:D2:3D:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B516BC52FDBEAD0CF80516E1794A01BEFD23DDD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/286A91BA89AF978CCE2BB0FA7581486B216EA959BDF3E8E24B7EDCFF177D5193/0/3230312e3134392e34302e302f32322d3232203d3e203339383535.roa
Signing time:             Thu 24 Sep 2026 07:20:01 +0000
ROA not before:           Thu 24 Sep 2026 07:15:01 +0000
ROA not after:            Thu 23 Sep 2027 07:20:01 +0000
asID:                     39855
IP address blocks:        201.149.40.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/286A91BA89AF978CCE2BB0FA7581486B216EA959BDF3E8E24B7EDCFF177D5193/0/7B516BC52FDBEAD0CF80516E1794A01BEFD23DDD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/286A91BA89AF978CCE2BB0FA7581486B216EA959BDF3E8E24B7EDCFF177D5193/0/7B516BC52FDBEAD0CF80516E1794A01BEFD23DDD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B516BC52FDBEAD0CF80516E1794A01BEFD23DDD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 09:25:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:3d:dc:63:a0:18:ca:74:22:b8:bb:83:95:e6:f1:11:3b:92:ee:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B516BC52FDBEAD0CF80516E1794A01BEFD23DDD
        Validity
            Not Before: Sep 24 07:15:01 2026 GMT
            Not After : Sep 23 07:20:01 2027 GMT
        Subject: CN=6F76FCA0344F2F597DFA5146E347FD0B7C3300D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:76:1e:18:42:c7:f4:4b:c4:46:2e:95:d6:4b:
                    33:9e:10:85:08:6e:46:e6:e9:e4:5f:e2:fa:cc:bd:
                    47:91:9f:0d:66:5d:5b:0c:e6:e8:c4:ab:00:1f:77:
                    02:0a:f5:0a:3b:34:0b:95:4a:4e:5d:87:51:d2:c4:
                    a3:7e:b1:63:5e:73:02:41:ed:f6:6a:a1:36:a7:02:
                    5d:0a:33:49:5a:03:a1:7a:c1:11:50:39:d1:98:87:
                    0e:d9:2c:55:26:bf:74:17:c2:5b:31:f1:ad:15:4c:
                    5a:e3:bb:ab:31:9c:69:c2:fc:46:46:c3:d9:08:be:
                    3b:5c:e3:e3:e6:db:d3:9e:93:23:1b:84:74:fb:63:
                    25:15:b7:b7:bc:65:6d:39:74:e6:d5:11:2e:8a:76:
                    4c:81:8a:d1:dc:0c:d4:cb:5c:0f:a6:22:89:50:85:
                    17:6e:89:e4:f9:ce:38:2e:c6:ba:e6:64:7a:58:8a:
                    20:22:6a:b0:32:57:28:d0:c9:47:09:f6:ba:04:2c:
                    bd:8b:03:a1:92:ad:3b:c6:f9:c9:8a:75:5d:d1:b4:
                    47:55:de:35:71:51:14:16:50:b2:b7:c6:2d:e2:90:
                    26:df:38:aa:93:bf:65:23:c8:29:9e:27:09:dd:af:
                    4b:7f:30:b5:0a:a7:87:a1:32:cc:9e:5a:27:42:e5:
                    76:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:76:FC:A0:34:4F:2F:59:7D:FA:51:46:E3:47:FD:0B:7C:33:00:D7
            X509v3 Authority Key Identifier:
                keyid:7B:51:6B:C5:2F:DB:EA:D0:CF:80:51:6E:17:94:A0:1B:EF:D2:3D:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/286A91BA89AF978CCE2BB0FA7581486B216EA959BDF3E8E24B7EDCFF177D5193/0/7B516BC52FDBEAD0CF80516E1794A01BEFD23DDD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B516BC52FDBEAD0CF80516E1794A01BEFD23DDD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/286A91BA89AF978CCE2BB0FA7581486B216EA959BDF3E8E24B7EDCFF177D5193/0/3230312e3134392e34302e302f32322d3232203d3e203339383535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.149.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9c:35:f8:80:08:4d:2a:c5:87:b5:91:87:98:bf:2b:0b:94:1b:
         2f:7f:33:5e:fd:3c:a0:90:55:40:fa:7d:21:67:61:e4:70:7b:
         07:0e:4b:88:53:d0:5f:61:76:73:94:d4:0e:95:77:09:58:bc:
         a1:ed:e2:ba:b5:c3:d3:fd:9b:7e:56:89:8a:12:7a:80:c5:7d:
         3c:0d:d3:c6:2b:b1:ea:0b:35:fb:68:d8:73:3b:44:42:16:50:
         29:0f:74:a3:c0:a3:e7:1f:ac:ea:f1:c7:00:9d:8a:63:24:ee:
         3e:af:d7:ad:19:3f:c6:df:fb:08:81:a2:8c:c4:b7:7a:5d:0b:
         cb:c2:98:4a:48:dd:c0:0a:27:72:45:15:13:cc:95:30:9c:68:
         da:ef:d6:28:b4:b8:ae:97:dd:34:4d:6a:36:73:46:17:3f:f7:
         ec:1e:ff:30:53:43:96:3d:30:4a:59:3a:dc:e1:74:c0:1c:c9:
         12:b1:fb:f4:5e:ad:c6:02:91:c3:9d:39:69:f8:d5:fb:07:ae:
         b9:6f:df:b4:4d:d3:f1:17:e0:b8:fb:81:c2:f0:7a:97:5b:bf:
         56:02:7a:3d:3c:3b:0b:ce:cf:09:1d:cc:62:f9:31:e9:e3:9d:
         d0:0a:d3:e9:ef:96:7e:f2:3d:66:c2:f5:4a:ec:34:95:28:44:
         20:11:fa:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 23:44:03 2026 by rpki-client