Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3CDDF7F99C266195FF39C955BC7E0F61CCDCFB1C960EC295BAF0252FCC65A7CC/0/3138312e3232342e36362e302f32342d3234203d3e20323732303235.roa
File:                     3138312e3232342e36362e302f32342d3234203d3e20323732303235.roa (raw, json)
Hash identifier:          0SjgLCvYPZTt9IZXqYWzTDozsaDAmm44xux/nPm0Bjo=
Subject key identifier:   7C:2D:F3:E6:A0:30:B4:EA:7D:01:9C:FD:9B:35:E8:EF:2D:F0:7C:FE
Certificate issuer:       /CN=FC61E7B856A2858B331CE4EC48A27D8162FA5E57
Certificate serial:       76C1C6207FC6145D2DDD4E2181FB160CD012B5E2
Authority key identifier: FC:61:E7:B8:56:A2:85:8B:33:1C:E4:EC:48:A2:7D:81:62:FA:5E:57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC61E7B856A2858B331CE4EC48A27D8162FA5E57.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3CDDF7F99C266195FF39C955BC7E0F61CCDCFB1C960EC295BAF0252FCC65A7CC/0/3138312e3232342e36362e302f32342d3234203d3e20323732303235.roa
Signing time:             Fri 17 Jul 2026 17:00:40 +0000
ROA not before:           Fri 17 Jul 2026 16:55:40 +0000
ROA not after:            Fri 16 Jul 2027 17:00:40 +0000
asID:                     272025
IP address blocks:        181.224.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3CDDF7F99C266195FF39C955BC7E0F61CCDCFB1C960EC295BAF0252FCC65A7CC/0/FC61E7B856A2858B331CE4EC48A27D8162FA5E57.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3CDDF7F99C266195FF39C955BC7E0F61CCDCFB1C960EC295BAF0252FCC65A7CC/0/FC61E7B856A2858B331CE4EC48A27D8162FA5E57.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC61E7B856A2858B331CE4EC48A27D8162FA5E57.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:c1:c6:20:7f:c6:14:5d:2d:dd:4e:21:81:fb:16:0c:d0:12:b5:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC61E7B856A2858B331CE4EC48A27D8162FA5E57
        Validity
            Not Before: Jul 17 16:55:40 2026 GMT
            Not After : Jul 16 17:00:40 2027 GMT
        Subject: CN=7C2DF3E6A030B4EA7D019CFD9B35E8EF2DF07CFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b5:05:a9:d7:b3:f6:5a:6e:bf:23:90:88:06:
                    f5:5f:a0:0a:ae:46:3d:c0:6d:11:7a:52:db:ad:60:
                    6c:01:c9:15:d1:d9:f8:78:db:ea:11:4a:e1:ea:f0:
                    d4:00:54:db:8b:2f:0b:d5:be:ac:0e:98:50:d5:2e:
                    ce:c9:43:5d:d4:a1:79:b1:b5:2f:66:30:17:80:7c:
                    89:4a:69:95:f5:02:05:4a:c5:5a:86:22:43:09:7c:
                    44:56:88:8b:48:18:a5:e7:95:68:bd:0a:c6:ad:20:
                    2d:f7:19:c7:91:5e:8d:c4:49:06:4f:26:c1:54:e9:
                    c7:65:35:ae:9f:b8:fd:ef:c5:67:2a:c8:fb:fc:36:
                    a8:76:38:f7:c2:5f:23:b8:1f:59:f6:71:62:d7:f9:
                    01:2d:5b:8f:0f:cf:1d:22:1a:77:ee:29:09:03:26:
                    0a:7d:00:40:8e:52:00:0d:35:97:c7:54:27:1e:f1:
                    c0:51:e4:80:b8:81:e0:77:9e:57:54:cd:5e:d5:d9:
                    4a:3f:9b:8c:c3:91:ca:d6:df:9d:c6:9b:6a:40:34:
                    4d:4d:fb:55:eb:38:82:a8:bd:3e:06:9b:85:82:a5:
                    f5:58:e3:6f:f5:0a:77:e3:65:f0:d8:f2:1b:c5:06:
                    3d:68:71:90:20:fc:36:d9:a6:5c:79:ff:74:ad:69:
                    36:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:2D:F3:E6:A0:30:B4:EA:7D:01:9C:FD:9B:35:E8:EF:2D:F0:7C:FE
            X509v3 Authority Key Identifier:
                keyid:FC:61:E7:B8:56:A2:85:8B:33:1C:E4:EC:48:A2:7D:81:62:FA:5E:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3CDDF7F99C266195FF39C955BC7E0F61CCDCFB1C960EC295BAF0252FCC65A7CC/0/FC61E7B856A2858B331CE4EC48A27D8162FA5E57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC61E7B856A2858B331CE4EC48A27D8162FA5E57.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3CDDF7F99C266195FF39C955BC7E0F61CCDCFB1C960EC295BAF0252FCC65A7CC/0/3138312e3232342e36362e302f32342d3234203d3e20323732303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:15:29:be:8c:c1:48:0e:57:33:45:e4:4e:04:37:df:38:dd:
         85:88:4b:ca:6c:17:e3:bf:94:b3:92:a8:c2:a1:c8:25:50:01:
         2b:2a:7a:4e:6a:24:6b:b5:45:72:4f:1a:ee:2c:b9:a9:cc:e5:
         9d:13:4e:c1:e1:75:19:b5:c4:2b:dd:88:3b:ab:af:65:d8:b8:
         33:3d:73:f9:d2:53:34:0e:b6:72:b2:ce:9d:72:09:92:e0:b3:
         d7:79:ff:11:f3:5c:56:34:f1:9e:c7:0c:1e:83:78:d6:75:e2:
         4d:0e:ee:75:5d:40:15:f5:5f:7f:31:d7:75:b1:29:87:32:25:
         77:a5:01:9b:56:f3:f9:c8:50:8e:1f:97:9e:ff:35:af:0c:e6:
         b4:8e:b4:84:0e:8e:ed:d4:ab:6b:d8:52:b2:2c:cc:22:c6:d8:
         e5:99:52:8f:cd:70:a4:1f:1a:10:b4:88:c6:bc:a4:05:91:5a:
         43:77:7e:65:5f:97:73:2e:91:e5:c6:c7:15:0c:57:8c:a0:29:
         9c:ee:3f:da:35:de:f4:9d:a5:b7:a3:ea:5d:35:fc:46:0c:cb:
         d9:7a:b4:48:8b:85:75:8f:72:d7:53:b0:7c:0f:22:a7:88:f8:
         e3:46:71:14:b6:a1:bd:12:84:8b:85:fc:38:ef:c5:9e:55:72:
         d2:20:92:59
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUdsHGIH/GFF0t3U4hgfsWDNASteIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkM2MUU3Qjg1NkEyODU4QjMzMUNFNEVDNDhBMjdEODE2
MkZBNUU1NzAeFw0yNjA3MTcxNjU1NDBaFw0yNzA3MTYxNzAwNDBaMDMxMTAvBgNV
BAMTKDdDMkRGM0U2QTAzMEI0RUE3RDAxOUNGRDlCMzVFOEVGMkRGMDdDRkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPtQWp17P2Wm6/I5CIBvVfoAqu
Rj3AbRF6UtutYGwByRXR2fh42+oRSuHq8NQAVNuLLwvVvqwOmFDVLs7JQ13UoXmx
tS9mMBeAfIlKaZX1AgVKxVqGIkMJfERWiItIGKXnlWi9CsatIC33GceRXo3ESQZP
JsFU6cdlNa6fuP3vxWcqyPv8Nqh2OPfCXyO4H1n2cWLX+QEtW48Pzx0iGnfuKQkD
Jgp9AECOUgANNZfHVCce8cBR5IC4geB3nldUzV7V2Uo/m4zDkcrW353Gm2pANE1N
+1XrOIKovT4Gm4WCpfVY42/1CnfjZfDY8hvFBj1ocZAg/DbZplx5/3StaTbrAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUfC3z5qAwtOp9AZz9mzXo7y3wfP4wHwYDVR0j
BBgwFoAU/GHnuFaihYszHOTsSKJ9gWL6XlcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zQ0RERjdGOTlDMjY2MTk1RkYzOUM5NTVCQzdFMEY2MUND
RENGQjFDOTYwRUMyOTVCQUYwMjUyRkNDNjVBN0NDLzAvRkM2MUU3Qjg1NkEyODU4
QjMzMUNFNEVDNDhBMjdEODE2MkZBNUU1Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GQzYxRTdCODU2QTI4NThCMzMx
Q0U0RUM0OEEyN0Q4MTYyRkE1RTU3LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0NEREY3Rjk5QzI2NjE5NUZGMzlDOTU1QkM3RTBGNjFDQ0RDRkIxQzk2
MEVDMjk1QkFGMDI1MkZDQzY1QTdDQy8wLzMxMzgzMTJlMzIzMjM0MmUzNjM2MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMyMzAzMjM1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAteBC
MA0GCSqGSIb3DQEBCwUAA4IBAQCGFSm+jMFIDlczReROBDffON2FiEvKbBfjv5Sz
kqjCocglUAErKnpOaiRrtUVyTxruLLmpzOWdE07B4XUZtcQr3Yg7q69l2LgzPXP5
0lM0DrZyss6dcgmS4LPXef8R81xWNPGexwweg3jWdeJNDu51XUAV9V9/Mdd1sSmH
MiV3pQGbVvP5yFCOH5ee/zWvDOa0jrSEDo7t1Ktr2FKyLMwixtjlmVKPzXCkHxoQ
tIjGvKQFkVpDd35lX5dzLpHlxscVDFeMoCmc7j/aNd70naW3o+pdNfxGDMvZerRI
i4V1j3LXU7B8DyKniPjjRnEUtqG9EoSLhfw478WeVXLSIJJZ
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:42:52 2026 by rpki-client