Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/56ABAAC7374B15A972E8A3B17AF87DF9D2426EFE72D073CA779E0E95601D5FB0/0/3136382e3132312e3234302e302f32342d3234203d3e20323635353036.roa
File:                     3136382e3132312e3234302e302f32342d3234203d3e20323635353036.roa (raw, json)
Hash identifier:          2hbtlRc622rhKO2aqyORnX39dCRbQA8NkzkXr27Ys5Q=
Subject key identifier:   DC:6B:A6:FA:07:32:A5:6C:58:B9:AD:C9:CA:7C:7D:F2:15:C7:41:7F
Certificate issuer:       /CN=377703DABE7DD60453DE406A737FFAC0BC41D4C4
Certificate serial:       4B5A50E5CF5319C59B1824069AEA67DC78035F3E
Authority key identifier: 37:77:03:DA:BE:7D:D6:04:53:DE:40:6A:73:7F:FA:C0:BC:41:D4:C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/377703DABE7DD60453DE406A737FFAC0BC41D4C4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/56ABAAC7374B15A972E8A3B17AF87DF9D2426EFE72D073CA779E0E95601D5FB0/0/3136382e3132312e3234302e302f32342d3234203d3e20323635353036.roa
Signing time:             Mon 12 Oct 2026 22:40:09 +0000
ROA not before:           Mon 12 Oct 2026 22:35:09 +0000
ROA not after:            Mon 11 Oct 2027 22:40:09 +0000
asID:                     265506
IP address blocks:        168.121.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/56ABAAC7374B15A972E8A3B17AF87DF9D2426EFE72D073CA779E0E95601D5FB0/0/377703DABE7DD60453DE406A737FFAC0BC41D4C4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/56ABAAC7374B15A972E8A3B17AF87DF9D2426EFE72D073CA779E0E95601D5FB0/0/377703DABE7DD60453DE406A737FFAC0BC41D4C4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/377703DABE7DD60453DE406A737FFAC0BC41D4C4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Nov 2026 02:50:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:5a:50:e5:cf:53:19:c5:9b:18:24:06:9a:ea:67:dc:78:03:5f:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=377703DABE7DD60453DE406A737FFAC0BC41D4C4
        Validity
            Not Before: Oct 12 22:35:09 2026 GMT
            Not After : Oct 11 22:40:09 2027 GMT
        Subject: CN=DC6BA6FA0732A56C58B9ADC9CA7C7DF215C7417F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:58:63:36:be:28:2a:30:73:ae:56:e9:f6:33:
                    a6:34:e6:a4:1c:d5:af:3f:1d:da:44:e8:b6:9e:85:
                    78:fa:bb:e8:cf:d6:5e:b3:11:cf:2f:35:b2:3e:9e:
                    07:46:a0:ed:c1:de:76:65:72:f3:eb:3f:72:0e:0e:
                    0e:f4:16:86:b5:cb:09:76:8a:25:97:3c:14:1f:cb:
                    66:85:39:5d:ec:13:43:f2:3d:e9:84:e7:91:5f:a3:
                    bf:0a:6f:ad:2f:28:a3:33:cb:73:b3:b6:42:88:92:
                    10:a9:c7:15:0a:2a:ee:c3:4d:0f:e8:b6:40:fb:33:
                    a7:d5:7d:35:7b:6d:55:6b:b4:de:bd:ab:17:8f:f5:
                    00:c2:13:80:d7:2b:ac:23:45:f7:b1:7b:0f:09:89:
                    c1:7a:2d:8f:9a:7a:b9:66:db:2a:ed:29:05:1e:d9:
                    87:cc:bb:cf:f4:0d:d1:6e:20:25:e9:5c:a0:1b:2b:
                    3c:6c:37:3a:27:18:9c:7b:36:48:c8:04:be:23:5b:
                    28:16:bc:2b:3a:dd:32:d4:85:c6:5a:6c:fd:de:71:
                    40:b5:04:35:af:27:e1:96:ad:b5:af:3c:35:3b:0f:
                    82:ea:91:12:59:56:16:c4:95:04:dd:3e:f4:9e:86:
                    0b:36:cc:b4:5d:37:2a:67:d6:a5:0d:2d:d2:cb:81:
                    0c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:6B:A6:FA:07:32:A5:6C:58:B9:AD:C9:CA:7C:7D:F2:15:C7:41:7F
            X509v3 Authority Key Identifier:
                keyid:37:77:03:DA:BE:7D:D6:04:53:DE:40:6A:73:7F:FA:C0:BC:41:D4:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/56ABAAC7374B15A972E8A3B17AF87DF9D2426EFE72D073CA779E0E95601D5FB0/0/377703DABE7DD60453DE406A737FFAC0BC41D4C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/377703DABE7DD60453DE406A737FFAC0BC41D4C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/56ABAAC7374B15A972E8A3B17AF87DF9D2426EFE72D073CA779E0E95601D5FB0/0/3136382e3132312e3234302e302f32342d3234203d3e20323635353036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:9b:20:bb:b2:75:9e:d9:60:70:76:2b:35:ec:eb:93:6d:1f:
         a8:9c:6a:a3:f6:27:fc:18:66:4e:1a:44:f6:f1:63:01:65:be:
         6b:50:d7:f2:f1:77:57:73:e2:07:b2:23:e4:19:ce:0e:ba:e8:
         44:c5:1e:3f:71:29:d5:db:47:16:4b:2f:05:00:cf:e7:d4:b3:
         15:03:01:08:40:71:03:db:43:d9:1f:08:54:ef:e0:eb:ce:3b:
         37:42:16:33:64:ce:7c:b4:f2:23:d1:60:7e:c9:60:ad:77:37:
         56:fb:87:ba:0d:72:60:b1:de:aa:6f:ea:8e:f0:ad:56:75:7b:
         4c:aa:00:91:7e:fd:81:6c:d2:4c:43:aa:f8:2b:36:9d:61:43:
         ee:3f:a1:f8:ab:ad:f2:26:c5:b3:90:13:5f:08:a3:c1:40:53:
         6d:91:99:c7:6d:90:37:06:86:7b:4c:44:16:96:4f:94:cf:7f:
         0a:a9:d8:3c:97:78:7c:06:05:85:46:47:a8:ac:1c:f1:ee:ea:
         f9:3a:96:25:3b:bb:a9:81:22:74:45:e9:e2:9f:11:57:09:20:
         dc:d6:80:3d:8a:dc:77:3f:1f:a4:75:06:87:34:eb:9e:95:ca:
         7c:14:b0:21:ae:38:7f:cb:9b:98:b1:41:53:2c:88:13:09:5c:
         68:36:1e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 20:02:47 2026 by rpki-client