Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/56ABAAC7374B15A972E8A3B17AF87DF9D2426EFE72D073CA779E0E95601D5FB0/0/3136382e3132312e3234322e302f32342d3234203d3e20323730313736.roa
File:                     3136382e3132312e3234322e302f32342d3234203d3e20323730313736.roa (raw, json)
Hash identifier:          X/URfg93NnJ3nZRVA9QHmAc//fWPKqMWsXxyyvkrVZs=
Subject key identifier:   D4:C1:87:78:51:9D:F2:3D:F0:0F:BE:09:AE:48:D1:2E:36:C8:51:71
Certificate issuer:       /CN=377703DABE7DD60453DE406A737FFAC0BC41D4C4
Certificate serial:       3AE877A67305DF96021A2ABC5A161BA44AA2BCC9
Authority key identifier: 37:77:03:DA:BE:7D:D6:04:53:DE:40:6A:73:7F:FA:C0:BC:41:D4:C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/377703DABE7DD60453DE406A737FFAC0BC41D4C4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/56ABAAC7374B15A972E8A3B17AF87DF9D2426EFE72D073CA779E0E95601D5FB0/0/3136382e3132312e3234322e302f32342d3234203d3e20323730313736.roa
Signing time:             Mon 12 Oct 2026 22:40:08 +0000
ROA not before:           Mon 12 Oct 2026 22:35:08 +0000
ROA not after:            Mon 11 Oct 2027 22:40:08 +0000
asID:                     270176
IP address blocks:        168.121.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/56ABAAC7374B15A972E8A3B17AF87DF9D2426EFE72D073CA779E0E95601D5FB0/0/377703DABE7DD60453DE406A737FFAC0BC41D4C4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/56ABAAC7374B15A972E8A3B17AF87DF9D2426EFE72D073CA779E0E95601D5FB0/0/377703DABE7DD60453DE406A737FFAC0BC41D4C4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/377703DABE7DD60453DE406A737FFAC0BC41D4C4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 01:25:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:e8:77:a6:73:05:df:96:02:1a:2a:bc:5a:16:1b:a4:4a:a2:bc:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=377703DABE7DD60453DE406A737FFAC0BC41D4C4
        Validity
            Not Before: Oct 12 22:35:08 2026 GMT
            Not After : Oct 11 22:40:08 2027 GMT
        Subject: CN=D4C18778519DF23DF00FBE09AE48D12E36C85171
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:79:f9:ac:9c:bf:e7:90:41:a8:a7:5b:5a:51:
                    b8:e9:1b:ab:c5:c1:9c:06:d8:0c:60:3d:2c:eb:50:
                    c6:9b:40:8f:37:35:e4:a8:c8:ec:5f:0e:19:25:ca:
                    e5:a9:d2:dd:b6:48:b3:45:f7:94:c8:c5:4b:11:87:
                    da:d8:69:38:7a:35:00:4f:27:20:68:d3:20:80:a5:
                    eb:b4:4a:3e:bf:da:57:85:65:79:e7:21:4e:e7:98:
                    9c:85:07:1e:07:6f:eb:3d:a9:8d:35:04:b7:95:f9:
                    80:a5:27:ab:30:f9:d8:d0:5c:f1:b3:89:26:18:2d:
                    3f:b4:31:22:30:36:e9:be:ca:65:33:0b:3b:1b:d7:
                    c3:96:47:e2:cb:31:0d:8a:1e:52:c8:87:51:1a:7e:
                    23:33:49:9a:7b:5b:15:74:bd:50:5b:1b:66:35:cf:
                    10:e5:92:c9:98:41:99:5a:db:26:bd:67:52:85:aa:
                    97:06:a9:92:68:cf:a2:1c:0f:b3:3f:fc:b1:4d:bc:
                    23:9b:43:18:e3:0f:41:b1:12:30:fb:49:8d:dc:a4:
                    1b:9e:fe:f9:3e:06:66:ed:90:3e:50:8c:21:a0:f8:
                    f8:cd:ba:96:15:49:76:7c:98:0a:e8:5f:69:7f:cd:
                    62:d7:c1:a9:68:6d:42:62:a6:fd:42:07:27:11:3a:
                    64:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:C1:87:78:51:9D:F2:3D:F0:0F:BE:09:AE:48:D1:2E:36:C8:51:71
            X509v3 Authority Key Identifier:
                keyid:37:77:03:DA:BE:7D:D6:04:53:DE:40:6A:73:7F:FA:C0:BC:41:D4:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/56ABAAC7374B15A972E8A3B17AF87DF9D2426EFE72D073CA779E0E95601D5FB0/0/377703DABE7DD60453DE406A737FFAC0BC41D4C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/377703DABE7DD60453DE406A737FFAC0BC41D4C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/56ABAAC7374B15A972E8A3B17AF87DF9D2426EFE72D073CA779E0E95601D5FB0/0/3136382e3132312e3234322e302f32342d3234203d3e20323730313736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:4e:18:e6:55:2c:3f:ae:56:48:3e:d4:24:79:f6:d6:4d:e8:
         b2:83:23:3a:24:65:2b:50:3d:b4:f4:31:35:5e:8c:7f:4c:03:
         6a:08:93:42:fe:13:97:4d:41:ca:aa:62:83:5a:2d:a7:92:e7:
         2c:90:0a:1a:13:72:e9:d1:45:0c:72:1b:59:86:f3:f0:c9:39:
         f4:4e:4c:af:eb:ca:ac:05:65:dd:37:ba:57:11:65:60:f8:c9:
         54:f6:f8:2c:65:62:3b:03:e1:5e:96:b2:ed:a7:08:cd:c6:fd:
         46:f8:4b:43:e8:6e:59:04:03:95:fd:44:3f:0d:91:ba:6d:06:
         12:56:7f:ad:5b:8b:5e:00:ce:75:c8:ca:1f:7b:96:92:e4:5d:
         b9:e5:a3:36:b2:e6:50:76:54:00:7d:c2:52:db:41:60:ae:f9:
         45:07:b7:46:29:d5:bb:65:89:94:45:99:dc:c2:ab:52:bb:09:
         2b:c2:4c:c5:eb:1c:cd:9e:38:b8:25:d7:81:e7:46:2b:33:eb:
         c5:4f:9b:fc:13:66:af:2a:8b:c9:11:59:88:04:c4:9f:f1:e3:
         7e:bf:60:0b:36:bb:dd:9d:f3:e7:e6:82:18:d3:8f:75:5b:09:
         b8:aa:00:b1:54:5a:4c:5b:83:22:63:dd:3e:c5:22:7f:32:fb:
         78:66:1c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 03:28:18 2026 by rpki-client