Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7974DF2B4FA6EB74EEC85173F0BA46BD3C1FFD6F1C6F593B41350EA7A5565E78/0/3136302e3233382e3230342e302f32322d3234203d3e203130363137.roa
File:                     3136302e3233382e3230342e302f32322d3234203d3e203130363137.roa (raw, json)
Hash identifier:          4TYBRiHq69y7J/o9F3RMjrNpbaHXJTI6AfpeXSiVCRI=
Subject key identifier:   C8:73:C2:E6:0C:91:20:76:EA:E2:03:F9:CD:56:77:0F:59:F2:97:E7
Certificate issuer:       /CN=66D7CB6044C192E36153B39F7AF75BC83FF1DCB6
Certificate serial:       72C784F7D9CA68BD5EAF482200D84527C0E6626B
Authority key identifier: 66:D7:CB:60:44:C1:92:E3:61:53:B3:9F:7A:F7:5B:C8:3F:F1:DC:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/66D7CB6044C192E36153B39F7AF75BC83FF1DCB6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7974DF2B4FA6EB74EEC85173F0BA46BD3C1FFD6F1C6F593B41350EA7A5565E78/0/3136302e3233382e3230342e302f32322d3234203d3e203130363137.roa
Signing time:             Tue 23 Jun 2026 01:48:56 +0000
ROA not before:           Tue 23 Jun 2026 01:43:56 +0000
ROA not after:            Tue 22 Jun 2027 01:48:56 +0000
asID:                     10617
IP address blocks:        160.238.204.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7974DF2B4FA6EB74EEC85173F0BA46BD3C1FFD6F1C6F593B41350EA7A5565E78/0/66D7CB6044C192E36153B39F7AF75BC83FF1DCB6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7974DF2B4FA6EB74EEC85173F0BA46BD3C1FFD6F1C6F593B41350EA7A5565E78/0/66D7CB6044C192E36153B39F7AF75BC83FF1DCB6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/66D7CB6044C192E36153B39F7AF75BC83FF1DCB6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:c7:84:f7:d9:ca:68:bd:5e:af:48:22:00:d8:45:27:c0:e6:62:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66D7CB6044C192E36153B39F7AF75BC83FF1DCB6
        Validity
            Not Before: Jun 23 01:43:56 2026 GMT
            Not After : Jun 22 01:48:56 2027 GMT
        Subject: CN=C873C2E60C912076EAE203F9CD56770F59F297E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:02:fa:b3:c1:d5:8b:53:4e:99:46:1a:a3:5c:
                    dd:f5:f9:1d:5d:c6:ed:07:f3:f7:b2:52:ae:05:49:
                    f2:33:4c:c9:af:85:64:84:42:30:4d:57:1a:84:bf:
                    7a:77:00:0e:7a:bb:a9:a1:e1:64:b7:b1:c5:f6:2d:
                    cd:8b:03:9c:39:79:d0:3d:13:b2:75:6b:c4:57:aa:
                    cf:2e:fa:92:06:0a:b4:37:43:45:e5:eb:0a:9b:5d:
                    0e:4e:3e:d4:9c:03:45:61:46:52:f9:5f:e9:40:83:
                    55:9c:da:87:ac:3e:f6:d5:c6:13:32:c3:90:c8:91:
                    c7:be:44:88:6e:26:25:33:7c:f2:a4:20:81:da:b9:
                    12:ec:f9:3e:c5:d4:4c:35:c5:87:1b:8f:3f:be:cf:
                    09:e1:60:a6:45:7f:b9:cb:33:ea:3f:95:b7:10:ef:
                    5d:5f:5a:9a:20:80:31:a9:df:d2:9e:46:d8:c6:10:
                    87:8a:1d:ef:a3:d4:6f:77:d4:54:3d:2b:25:b9:4a:
                    b4:c6:2f:41:65:85:c8:2b:5d:cc:4e:05:e9:e0:29:
                    93:7d:d2:90:0e:0e:d7:db:d9:d1:f5:e4:ac:78:8c:
                    d6:6f:44:56:23:59:0c:77:32:1e:b6:08:f1:85:ba:
                    cf:9e:fe:8e:c1:3c:10:17:8b:d1:25:73:80:12:df:
                    1d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:73:C2:E6:0C:91:20:76:EA:E2:03:F9:CD:56:77:0F:59:F2:97:E7
            X509v3 Authority Key Identifier:
                keyid:66:D7:CB:60:44:C1:92:E3:61:53:B3:9F:7A:F7:5B:C8:3F:F1:DC:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7974DF2B4FA6EB74EEC85173F0BA46BD3C1FFD6F1C6F593B41350EA7A5565E78/0/66D7CB6044C192E36153B39F7AF75BC83FF1DCB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/66D7CB6044C192E36153B39F7AF75BC83FF1DCB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7974DF2B4FA6EB74EEC85173F0BA46BD3C1FFD6F1C6F593B41350EA7A5565E78/0/3136302e3233382e3230342e302f32322d3234203d3e203130363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:ae:09:9c:21:e9:e0:37:31:bd:70:04:71:40:8a:cc:03:f1:
         83:9e:27:77:0e:a3:e5:1a:92:4f:ef:51:0f:ad:1e:77:ae:0d:
         ed:f5:29:74:27:34:96:3f:08:f5:25:0e:83:67:a1:7a:3b:99:
         f9:4c:eb:c3:d1:e6:51:87:94:15:60:a1:f9:fb:55:f1:64:49:
         55:a5:7f:01:0a:9d:f8:f2:c0:f8:5b:ab:39:0c:6a:e3:22:bd:
         6a:3b:ea:68:ca:3f:ca:14:7d:a4:79:22:58:8e:d3:a7:2b:6b:
         ae:7c:d5:0f:4f:81:a2:b5:4e:27:57:18:75:cb:f8:fd:ce:e8:
         68:d3:a4:f7:63:9e:b8:a5:7e:12:50:fb:09:ee:3e:20:d2:ac:
         20:71:cd:31:3a:19:a4:5d:60:4a:b0:fe:78:b0:78:a5:ec:06:
         4e:70:6d:95:05:51:43:01:03:18:03:ba:5c:b2:10:99:c1:4b:
         16:f8:20:d7:1e:d1:e5:21:21:90:c7:5e:ba:0f:95:51:44:bc:
         bd:5b:ec:85:6e:64:8e:c3:0c:cd:b5:27:f9:9f:a8:02:0a:70:
         c0:1f:65:ee:f7:7a:80:a3:c8:53:07:fa:91:e3:5a:b8:c8:1c:
         a1:96:40:45:02:c2:b7:41:0d:da:30:3d:79:a6:fd:a8:d7:88:
         92:99:85:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:14:14 2026 by rpki-client