Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/56ABAAC7374B15A972E8A3B17AF87DF9D2426EFE72D073CA779E0E95601D5FB0/0/3136382e3132312e3234312e302f32342d3234203d3e20323635353036.roa
File:                     3136382e3132312e3234312e302f32342d3234203d3e20323635353036.roa (raw, json)
Hash identifier:          xkPViKOpHsIAe3oyz0j07+aeP+ghDp0DtzIB7nycUYk=
Subject key identifier:   C9:00:56:2F:F0:1B:22:14:31:E6:B4:3A:39:5A:31:25:9F:6D:92:85
Certificate issuer:       /CN=377703DABE7DD60453DE406A737FFAC0BC41D4C4
Certificate serial:       739C6DFEAC546CBAC6537F1BB8FFD5CA05D74A68
Authority key identifier: 37:77:03:DA:BE:7D:D6:04:53:DE:40:6A:73:7F:FA:C0:BC:41:D4:C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/377703DABE7DD60453DE406A737FFAC0BC41D4C4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/56ABAAC7374B15A972E8A3B17AF87DF9D2426EFE72D073CA779E0E95601D5FB0/0/3136382e3132312e3234312e302f32342d3234203d3e20323635353036.roa
Signing time:             Mon 12 Oct 2026 22:40:08 +0000
ROA not before:           Mon 12 Oct 2026 22:35:08 +0000
ROA not after:            Mon 11 Oct 2027 22:40:08 +0000
asID:                     265506
IP address blocks:        168.121.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/56ABAAC7374B15A972E8A3B17AF87DF9D2426EFE72D073CA779E0E95601D5FB0/0/377703DABE7DD60453DE406A737FFAC0BC41D4C4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/56ABAAC7374B15A972E8A3B17AF87DF9D2426EFE72D073CA779E0E95601D5FB0/0/377703DABE7DD60453DE406A737FFAC0BC41D4C4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/377703DABE7DD60453DE406A737FFAC0BC41D4C4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 22 Oct 2026 08:15:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:9c:6d:fe:ac:54:6c:ba:c6:53:7f:1b:b8:ff:d5:ca:05:d7:4a:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=377703DABE7DD60453DE406A737FFAC0BC41D4C4
        Validity
            Not Before: Oct 12 22:35:08 2026 GMT
            Not After : Oct 11 22:40:08 2027 GMT
        Subject: CN=C900562FF01B221431E6B43A395A31259F6D9285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:7f:9c:10:6b:ab:34:8b:26:51:54:87:14:e4:
                    f4:98:f0:9b:ee:05:0e:ad:4a:77:a6:36:09:bf:fe:
                    b9:5a:ae:70:f9:69:8f:c5:81:ac:59:6f:2d:e7:67:
                    ad:8d:5d:0c:64:16:6e:77:aa:22:55:73:f8:22:70:
                    c1:b4:34:60:4e:8c:1f:21:9d:fd:3b:84:05:d0:c0:
                    dc:0b:58:60:e8:c3:12:99:b3:bc:79:f4:d7:b0:a1:
                    ce:39:9a:94:11:37:21:98:e2:62:1d:72:b1:f8:4f:
                    25:d2:2c:a0:db:55:7e:37:01:d0:90:74:d4:9d:fa:
                    51:fb:37:bf:eb:db:f5:24:69:02:d2:1f:ee:a4:1d:
                    09:d3:3f:dd:c3:53:2a:79:ef:29:78:68:c4:15:43:
                    ea:df:b4:70:59:f3:1e:a6:69:f5:0e:fd:d9:55:79:
                    dc:ca:2e:86:c9:eb:b5:05:19:b4:82:62:92:45:a8:
                    e0:0a:99:63:48:a4:a7:93:2b:7b:f6:67:59:a3:da:
                    7f:99:3b:55:d1:05:5d:4a:24:cf:8a:0e:ae:7c:38:
                    d6:b0:7c:69:a2:7b:62:43:81:82:a3:80:e7:57:eb:
                    df:a7:0d:d5:11:5b:4b:00:dc:b0:a9:0b:5f:60:ee:
                    4f:59:27:92:6d:a0:00:64:c3:ed:3c:03:d8:2b:8b:
                    62:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:00:56:2F:F0:1B:22:14:31:E6:B4:3A:39:5A:31:25:9F:6D:92:85
            X509v3 Authority Key Identifier:
                keyid:37:77:03:DA:BE:7D:D6:04:53:DE:40:6A:73:7F:FA:C0:BC:41:D4:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/56ABAAC7374B15A972E8A3B17AF87DF9D2426EFE72D073CA779E0E95601D5FB0/0/377703DABE7DD60453DE406A737FFAC0BC41D4C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/377703DABE7DD60453DE406A737FFAC0BC41D4C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/56ABAAC7374B15A972E8A3B17AF87DF9D2426EFE72D073CA779E0E95601D5FB0/0/3136382e3132312e3234312e302f32342d3234203d3e20323635353036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:3b:61:2c:6e:40:b3:c5:e5:1f:1e:84:50:92:47:50:75:4b:
         77:15:b0:74:84:f2:7c:b7:2c:9b:49:94:28:00:0e:d5:b8:95:
         b8:e0:d5:79:d3:e9:82:bb:cd:dc:6a:48:4b:cd:77:18:b4:b4:
         41:31:4f:31:35:48:a9:ce:c5:cc:56:5b:50:d0:b2:a5:be:cd:
         5c:5f:86:cd:5a:f2:46:d0:10:da:9b:92:55:c3:33:ae:4a:bf:
         16:18:ae:02:85:6e:fe:f9:19:6f:2a:a4:e5:ea:cf:4a:21:72:
         ed:45:62:65:73:38:f9:a0:d5:a3:31:db:da:a3:64:f2:6f:25:
         e8:a7:d7:00:ff:60:fb:12:54:8f:8f:51:8b:e9:3a:ae:b2:ff:
         68:dc:be:46:2e:3f:84:72:7b:89:0c:69:0b:d0:a4:82:6a:93:
         2c:88:07:5d:4c:d6:04:9a:3e:e5:bc:31:41:18:d3:7b:d8:6e:
         8b:c6:e0:a6:2c:1c:2b:a7:a5:29:ff:46:46:bc:0c:ac:04:c7:
         1d:7a:b9:58:20:32:46:20:40:7e:35:1e:d8:2b:4a:26:64:02:
         5e:67:ce:0f:76:d1:c9:dc:cb:a5:f2:b2:d5:40:83:96:32:89:
         16:83:48:a0:44:1a:c4:f4:05:07:33:7f:67:49:98:f5:f7:8c:
         05:c5:92:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 03:31:48 2026 by rpki-client