Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7AB08EC2AC446E304D62380D91F9D5B414A646884B8FFF9A130271BC923D1529/0/3139322e3134312e33362e302f32322d3234203d3e20323635373837.roa
File:                     3139322e3134312e33362e302f32322d3234203d3e20323635373837.roa (raw, json)
Hash identifier:          gshljUf6c3iuLX+8z/DS4qIaTQ5vb8kbE47AF3x6vnM=
Subject key identifier:   61:2C:BB:03:05:5F:F5:62:60:03:A4:21:1E:10:66:60:E6:6D:0D:8D
Certificate issuer:       /CN=7CE45D98F41C9AB7061F84A19C190414D5CB4FCA
Certificate serial:       780EE4CD83F487B2AF947C514267F789935EAD
Authority key identifier: 7C:E4:5D:98:F4:1C:9A:B7:06:1F:84:A1:9C:19:04:14:D5:CB:4F:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7CE45D98F41C9AB7061F84A19C190414D5CB4FCA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7AB08EC2AC446E304D62380D91F9D5B414A646884B8FFF9A130271BC923D1529/0/3139322e3134312e33362e302f32322d3234203d3e20323635373837.roa
Signing time:             Mon 09 Mar 2026 16:33:20 +0000
ROA not before:           Mon 09 Mar 2026 16:28:20 +0000
ROA not after:            Mon 08 Mar 2027 16:33:20 +0000
asID:                     265787
IP address blocks:        192.141.36.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7AB08EC2AC446E304D62380D91F9D5B414A646884B8FFF9A130271BC923D1529/0/7CE45D98F41C9AB7061F84A19C190414D5CB4FCA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7AB08EC2AC446E304D62380D91F9D5B414A646884B8FFF9A130271BC923D1529/0/7CE45D98F41C9AB7061F84A19C190414D5CB4FCA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7CE45D98F41C9AB7061F84A19C190414D5CB4FCA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 02:11:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:0e:e4:cd:83:f4:87:b2:af:94:7c:51:42:67:f7:89:93:5e:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CE45D98F41C9AB7061F84A19C190414D5CB4FCA
        Validity
            Not Before: Mar  9 16:28:20 2026 GMT
            Not After : Mar  8 16:33:20 2027 GMT
        Subject: CN=612CBB03055FF5626003A4211E106660E66D0D8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a4:79:4d:cf:71:e0:f0:8b:7a:3e:fe:78:7f:
                    74:da:a1:7b:95:89:c5:51:6f:20:45:9d:f6:2a:8f:
                    98:88:ae:ec:89:16:8b:ff:6f:93:dd:2d:2c:99:cb:
                    e1:b5:d7:91:2e:5c:e6:6d:0a:8d:f4:20:14:d1:56:
                    52:4a:1d:bd:46:f0:3b:12:7c:8c:68:06:c0:42:36:
                    93:0b:bd:e8:73:7f:cf:37:89:c6:a8:1a:c9:87:41:
                    8a:5b:79:7f:e7:49:d1:a5:ce:aa:22:7b:fd:c8:75:
                    ad:e3:22:92:95:bf:cb:40:f7:bd:22:55:60:a6:c9:
                    8a:48:ae:9e:58:61:72:b4:a4:56:43:48:e2:7f:10:
                    22:45:38:e3:6a:6f:c2:af:8f:9f:79:45:b1:43:e4:
                    2b:fa:82:f4:1e:f3:56:37:19:5c:34:1b:23:73:46:
                    f4:ec:3f:6f:ef:d3:86:30:54:2f:37:0d:56:37:ae:
                    c3:95:a8:34:cd:9f:c5:8c:22:02:7a:a4:a8:e3:08:
                    65:ca:42:9f:4b:51:3d:0b:be:e8:0d:31:7f:ea:03:
                    1e:11:c9:23:1c:93:71:62:a2:98:94:ec:f4:f6:66:
                    9e:ff:b7:8d:54:18:05:14:b4:ef:ed:8e:16:b8:3c:
                    d4:19:af:b1:13:88:4a:54:4b:02:a1:d6:f5:e4:fd:
                    b7:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:2C:BB:03:05:5F:F5:62:60:03:A4:21:1E:10:66:60:E6:6D:0D:8D
            X509v3 Authority Key Identifier:
                keyid:7C:E4:5D:98:F4:1C:9A:B7:06:1F:84:A1:9C:19:04:14:D5:CB:4F:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7AB08EC2AC446E304D62380D91F9D5B414A646884B8FFF9A130271BC923D1529/0/7CE45D98F41C9AB7061F84A19C190414D5CB4FCA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7CE45D98F41C9AB7061F84A19C190414D5CB4FCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7AB08EC2AC446E304D62380D91F9D5B414A646884B8FFF9A130271BC923D1529/0/3139322e3134312e33362e302f32322d3234203d3e20323635373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:5d:32:a8:ea:bb:9d:0a:0d:0a:11:c4:54:3d:12:d0:0e:31:
         cf:3f:00:08:68:7e:c0:89:e2:6e:2e:cc:9a:45:d0:9d:06:a7:
         42:ab:f1:0a:9a:43:0c:eb:08:c0:b6:4c:61:96:af:c1:bb:1f:
         7d:a4:57:be:55:18:df:5c:28:3f:bf:57:31:7c:dd:64:ff:e1:
         80:05:aa:0c:af:eb:a2:2d:5e:f5:34:1b:f5:68:95:5f:d6:ae:
         b4:97:63:03:b4:6c:d5:48:80:04:d2:9d:58:18:64:d4:60:c3:
         13:70:5b:73:9c:5c:14:77:e9:b6:5b:d0:03:c5:1a:19:14:1f:
         e0:1a:a2:01:18:86:7b:83:02:f8:3c:56:b9:f8:ee:45:4b:9d:
         28:76:0c:74:c9:a3:45:8b:28:3a:d2:88:48:25:50:9d:f3:8b:
         f1:4c:9d:86:cb:17:92:77:bf:22:e9:63:1c:92:8e:4c:b7:0b:
         a6:ad:fa:9d:d8:4a:ee:d8:6b:71:9e:e6:99:88:c0:73:87:33:
         8b:84:1f:10:e4:11:19:68:88:be:ad:79:26:1c:af:07:57:20:
         56:da:61:ef:ad:cc:76:67:c4:b3:c5:be:9c:5a:1e:2d:80:ac:
         00:cb:a9:a0:6d:dd:10:a0:44:32:da:91:a4:28:ee:97:a6:d1:
         ac:fa:a8:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:15:14 2026 by rpki-client