Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/AS26611.roa
File:                     AS26611.roa (raw, json)
Hash identifier:          A6Ikmupyv+aPPqi5XGdwSaFOEjtQ9gfvxAU3G/mYEeA=
Subject key identifier:   2D:A2:F3:A6:96:EF:3F:8E:FC:BE:B1:7A:62:B1:03:11:24:73:91:F2
Certificate issuer:       /CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
Certificate serial:       04EDFA592D23FBE48326AEF484CEDF53A111F0E1
Authority key identifier: 76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/AS26611.roa
Signing time:             Tue 01 Jul 2025 17:24:20 +0000
ROA not before:           Tue 01 Jul 2025 17:19:20 +0000
ROA not after:            Tue 30 Jun 2026 17:24:20 +0000
asID:                     26611
IP address blocks:        190.242.72.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl
                          rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Jul 2025 07:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:ed:fa:59:2d:23:fb:e4:83:26:ae:f4:84:ce:df:53:a1:11:f0:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
        Validity
            Not Before: Jul  1 17:19:20 2025 GMT
            Not After : Jun 30 17:24:20 2026 GMT
        Subject: CN=2DA2F3A696EF3F8EFCBEB17A62B10311247391F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:1c:fd:13:6c:19:be:cc:4a:89:07:7b:8d:cd:
                    95:6f:1f:c3:9c:52:d9:05:13:a0:a2:c1:b3:3f:12:
                    a2:71:2b:10:c6:0f:28:9e:e1:29:bd:3e:64:1f:50:
                    3b:9b:67:7e:bc:00:35:af:f6:eb:19:71:8e:a1:ec:
                    6a:58:d4:09:fe:a4:50:ef:4b:d3:24:8a:01:1d:2b:
                    20:b9:44:26:1b:6c:e1:85:83:65:4d:ec:b4:6b:4d:
                    8d:dc:05:97:2e:7c:64:6a:23:a1:7c:64:13:bf:5d:
                    42:fe:ea:0f:94:18:44:ca:1e:0c:b6:22:e7:d0:8c:
                    8a:41:74:a5:33:da:04:79:65:5f:b4:dc:3a:1f:05:
                    f4:e0:aa:6d:d2:59:0e:84:21:f7:17:27:bc:23:79:
                    d5:d1:70:1f:10:86:c5:e4:22:c3:d1:ad:db:03:19:
                    c7:af:d4:d0:5a:08:a7:7b:7b:6a:31:16:eb:d0:b8:
                    52:93:54:48:c6:29:08:5e:ea:78:10:50:80:90:52:
                    8a:98:f9:49:dd:43:45:97:0f:63:a0:d7:26:9e:75:
                    87:a7:71:3a:4f:36:19:61:10:4f:17:ad:1a:05:af:
                    18:59:66:92:96:1e:d8:ea:97:cb:68:f6:a5:60:a1:
                    ac:17:a3:0b:aa:48:39:8e:a2:81:49:15:9a:5d:1e:
                    5c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:A2:F3:A6:96:EF:3F:8E:FC:BE:B1:7A:62:B1:03:11:24:73:91:F2
            X509v3 Authority Key Identifier:
                keyid:76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/AS26611.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.242.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9a:64:41:14:e4:92:cf:86:16:79:43:a0:8c:98:c5:87:14:a5:
         4c:c5:ad:e7:02:20:5d:1c:f3:de:a6:e8:b4:77:5e:13:24:b7:
         44:41:dc:18:f8:fc:df:72:61:b2:bc:f5:39:ff:f4:a7:71:ee:
         8c:59:d9:68:13:d3:21:b3:70:e9:4e:2f:cc:fe:b1:09:31:3d:
         52:d9:78:96:7b:22:f1:d5:99:d1:7a:00:79:b5:61:b4:e4:67:
         20:6a:2a:f5:a0:3c:2c:47:dc:9e:67:74:4b:a8:02:6f:42:8d:
         81:93:e6:b3:35:53:b5:2f:8b:00:14:48:a0:cf:f2:18:30:6b:
         28:23:30:1b:da:dc:52:52:26:98:38:82:80:f5:b0:a1:1b:bb:
         2d:ed:f1:3d:65:9e:72:58:6f:8c:e7:b4:4e:65:56:14:f7:91:
         3e:48:b6:1f:12:1b:4e:41:35:2c:ec:95:dc:33:f5:b7:96:c9:
         fc:76:f3:a0:90:8b:e9:82:54:12:f9:af:41:a4:96:2e:69:b4:
         aa:6a:9a:e7:3d:32:43:19:5c:85:ee:20:a8:9f:f2:a9:86:e1:
         8b:9d:95:18:7c:8b:10:f2:8c:b0:5e:ab:91:fd:18:57:27:f4:
         0c:a3:49:c4:56:4d:5d:58:0b:64:80:a9:56:3c:f0:80:c5:cc:
         9f:27:3e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 09:15:59 2025 by rpki-client