Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4C8637342C36E875CF6231D4E56AA6D8F2A9DA6FDF1119B41BF35AD3D5C2F597/0/3139362e332e3133362e302f32312d3234203d3e2035363339.roa
File:                     3139362e332e3133362e302f32312d3234203d3e2035363339.roa (raw, json)
Hash identifier:          K6Tm8YzXJAYB4kcr2TBP0hCpzCMn+vvv5hJcpcFJzgw=
Subject key identifier:   B6:E4:1B:5E:15:E1:EF:48:F0:62:81:41:06:CA:D8:8A:6E:F5:82:F0
Certificate issuer:       /CN=9C65791642D7761AA97BA0FF1A29DB316A279B37
Certificate serial:       2CFBF0DCE940D28522C0062518171F0E51D519A6
Authority key identifier: 9C:65:79:16:42:D7:76:1A:A9:7B:A0:FF:1A:29:DB:31:6A:27:9B:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C65791642D7761AA97BA0FF1A29DB316A279B37.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4C8637342C36E875CF6231D4E56AA6D8F2A9DA6FDF1119B41BF35AD3D5C2F597/0/3139362e332e3133362e302f32312d3234203d3e2035363339.roa
Signing time:             Fri 10 Jul 2026 02:30:01 +0000
ROA not before:           Fri 10 Jul 2026 02:25:01 +0000
ROA not after:            Fri 09 Jul 2027 02:30:01 +0000
asID:                     5639
IP address blocks:        196.3.136.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4C8637342C36E875CF6231D4E56AA6D8F2A9DA6FDF1119B41BF35AD3D5C2F597/0/9C65791642D7761AA97BA0FF1A29DB316A279B37.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4C8637342C36E875CF6231D4E56AA6D8F2A9DA6FDF1119B41BF35AD3D5C2F597/0/9C65791642D7761AA97BA0FF1A29DB316A279B37.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C65791642D7761AA97BA0FF1A29DB316A279B37.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:fb:f0:dc:e9:40:d2:85:22:c0:06:25:18:17:1f:0e:51:d5:19:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C65791642D7761AA97BA0FF1A29DB316A279B37
        Validity
            Not Before: Jul 10 02:25:01 2026 GMT
            Not After : Jul  9 02:30:01 2027 GMT
        Subject: CN=B6E41B5E15E1EF48F062814106CAD88A6EF582F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:42:dc:9c:9c:b6:ce:bf:fb:c5:2a:e8:f7:b0:
                    3d:65:fd:a9:85:3b:d0:32:78:fa:a8:ed:0d:ce:94:
                    a3:dd:da:f7:f3:8e:6e:4c:4d:15:21:8b:be:02:8d:
                    a6:d6:c4:c1:9a:5f:e2:83:4f:51:2a:27:b5:25:27:
                    2a:e8:16:92:5b:7f:9b:d5:ca:7e:ff:5e:3e:d2:3b:
                    31:b4:f5:94:6a:40:f9:21:e7:dc:ea:26:4d:17:06:
                    76:3f:ba:3e:45:26:98:f9:37:ed:3d:b4:29:d2:c4:
                    81:f4:31:d3:c0:1f:34:ef:5a:f1:96:71:e7:b7:7c:
                    9a:17:d3:28:3c:91:10:14:2f:47:b1:dd:c9:72:b1:
                    1c:d4:c0:74:bc:39:81:8e:74:eb:a4:9d:8d:91:1a:
                    3e:be:07:d4:2b:1b:20:cd:32:0d:6d:c7:d7:7a:4f:
                    af:f0:b0:71:da:8c:08:d8:f9:35:ab:fa:10:5a:2c:
                    59:c9:a5:31:e3:df:b1:40:28:74:97:84:85:54:a9:
                    f3:ec:b0:c5:b9:8e:18:bb:1b:c5:b7:cf:19:48:1c:
                    3a:e2:38:a2:d3:71:4a:cf:96:47:75:32:c8:54:c3:
                    6a:62:ad:c8:57:05:d1:be:d1:cf:eb:33:d5:a7:2f:
                    0a:73:6e:da:e8:34:d7:d7:29:fd:c3:be:c4:13:23:
                    04:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:E4:1B:5E:15:E1:EF:48:F0:62:81:41:06:CA:D8:8A:6E:F5:82:F0
            X509v3 Authority Key Identifier:
                keyid:9C:65:79:16:42:D7:76:1A:A9:7B:A0:FF:1A:29:DB:31:6A:27:9B:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4C8637342C36E875CF6231D4E56AA6D8F2A9DA6FDF1119B41BF35AD3D5C2F597/0/9C65791642D7761AA97BA0FF1A29DB316A279B37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C65791642D7761AA97BA0FF1A29DB316A279B37.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4C8637342C36E875CF6231D4E56AA6D8F2A9DA6FDF1119B41BF35AD3D5C2F597/0/3139362e332e3133362e302f32312d3234203d3e2035363339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.3.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         24:f3:2b:9a:37:74:4a:d7:e4:15:cf:b5:ef:99:17:7c:30:61:
         f6:8c:cc:2e:7b:2f:4e:3d:01:e9:3c:fa:36:0a:20:20:e7:66:
         42:2a:6e:83:aa:22:73:02:f9:20:ac:96:51:86:e0:93:ef:83:
         25:14:45:d2:2a:4a:18:02:ec:0a:d6:56:4d:c6:89:5a:1b:b3:
         0e:8c:3f:9c:78:b8:62:1c:77:37:64:48:03:9b:61:bd:40:ee:
         3e:9c:bd:72:40:77:3a:ae:20:4b:86:1c:ca:71:b4:e1:1c:9d:
         28:49:69:10:d8:bd:40:9f:a3:a2:cc:b6:f1:70:38:1e:81:ed:
         ad:a4:e0:66:01:6b:85:90:93:36:31:2e:3b:49:62:fd:55:d8:
         99:1c:06:7e:50:d5:8e:04:68:d4:fb:70:0a:20:fe:e8:44:25:
         42:3b:6c:23:ef:25:b4:6d:b3:9a:54:b1:b2:f0:bb:a8:0a:03:
         7a:15:f3:62:e0:d4:13:12:b1:41:1a:14:0c:c3:6d:86:ca:87:
         88:79:93:b0:37:db:15:6d:9a:84:da:01:87:c1:c1:f7:0f:6a:
         13:c6:d8:96:36:be:e0:e1:6f:cf:6f:2a:f2:f4:08:03:66:21:
         f8:88:ce:67:30:1c:e8:36:0d:75:19:6c:b4:c2:6f:53:de:ab:
         f1:8c:76:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:50:39 2026 by rpki-client