Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/84B6D054C66C929684279113BA9042194C396582A11C12043259A139B9F326B6/0/3136362e37352e302e302f31362d3234203d3e20313332383339.roa
File:                     3136362e37352e302e302f31362d3234203d3e20313332383339.roa (raw, json)
Hash identifier:          lMKlKmkw0c42KqEyFt1Qy1CXsJj3BkAbofNsgu4xFUo=
Subject key identifier:   47:40:75:1F:71:29:57:EE:41:47:BD:6B:0C:1A:64:07:F3:DE:55:A3
Certificate issuer:       /CN=029270B38E78672B8CF04C4D2A63B0815A91D724
Certificate serial:       14A75615BE2FABFD0B9F59623AD84871C3E25380
Authority key identifier: 02:92:70:B3:8E:78:67:2B:8C:F0:4C:4D:2A:63:B0:81:5A:91:D7:24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/029270B38E78672B8CF04C4D2A63B0815A91D724.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/84B6D054C66C929684279113BA9042194C396582A11C12043259A139B9F326B6/0/3136362e37352e302e302f31362d3234203d3e20313332383339.roa
Signing time:             Mon 20 Jul 2026 18:55:00 +0000
ROA not before:           Mon 20 Jul 2026 18:50:00 +0000
ROA not after:            Mon 19 Jul 2027 18:55:00 +0000
asID:                     132839
IP address blocks:        166.75.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/84B6D054C66C929684279113BA9042194C396582A11C12043259A139B9F326B6/0/029270B38E78672B8CF04C4D2A63B0815A91D724.crl
                          rsync://repository.lacnic.net/rpki/lacnic/84B6D054C66C929684279113BA9042194C396582A11C12043259A139B9F326B6/0/029270B38E78672B8CF04C4D2A63B0815A91D724.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/029270B38E78672B8CF04C4D2A63B0815A91D724.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:a7:56:15:be:2f:ab:fd:0b:9f:59:62:3a:d8:48:71:c3:e2:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=029270B38E78672B8CF04C4D2A63B0815A91D724
        Validity
            Not Before: Jul 20 18:50:00 2026 GMT
            Not After : Jul 19 18:55:00 2027 GMT
        Subject: CN=4740751F712957EE4147BD6B0C1A6407F3DE55A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:59:92:84:89:66:7a:1f:a4:48:6a:2e:8f:02:
                    e8:f1:60:76:8a:d9:1b:f2:27:62:fe:ba:f8:e2:75:
                    b9:12:f0:6e:56:7f:27:80:03:29:d3:39:7a:3a:93:
                    12:1b:d1:c1:51:41:8b:ec:e1:26:01:a9:e6:38:2a:
                    a3:d5:11:72:87:25:69:80:e6:ec:84:8b:88:38:a2:
                    2a:ec:6a:e8:4e:84:43:cb:c2:5d:87:57:b1:e1:0e:
                    38:3c:09:46:72:a3:ca:12:db:b8:77:aa:1a:10:fa:
                    f0:93:d5:cd:cf:20:5d:0c:62:d1:65:46:03:60:f2:
                    2b:f6:ed:60:3f:31:15:94:30:f7:2f:e2:2f:0c:f9:
                    59:98:fe:46:bb:52:ee:f2:04:93:91:7c:10:21:de:
                    00:40:5d:64:e2:93:4a:01:25:31:66:0c:e2:c5:77:
                    a0:fc:f4:47:ec:82:c8:ea:ee:4c:be:48:e5:7a:8a:
                    40:7e:73:b0:62:c1:52:f4:f8:0e:0a:45:cf:cc:c6:
                    2e:62:3c:f5:fa:6e:59:fb:bb:b1:9e:e3:50:0c:a3:
                    b4:64:23:d1:0f:36:88:5e:dd:4a:3f:44:52:55:a8:
                    38:8f:ec:d0:16:a0:81:cd:08:7b:61:94:9c:65:12:
                    ee:2c:35:88:39:77:74:05:16:dc:7e:c4:90:aa:6f:
                    c2:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:40:75:1F:71:29:57:EE:41:47:BD:6B:0C:1A:64:07:F3:DE:55:A3
            X509v3 Authority Key Identifier:
                keyid:02:92:70:B3:8E:78:67:2B:8C:F0:4C:4D:2A:63:B0:81:5A:91:D7:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/84B6D054C66C929684279113BA9042194C396582A11C12043259A139B9F326B6/0/029270B38E78672B8CF04C4D2A63B0815A91D724.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/029270B38E78672B8CF04C4D2A63B0815A91D724.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/84B6D054C66C929684279113BA9042194C396582A11C12043259A139B9F326B6/0/3136362e37352e302e302f31362d3234203d3e20313332383339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.75.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         44:22:a9:a0:75:cd:b4:89:6a:41:a7:2d:23:cc:ea:56:60:15:
         06:fa:3a:22:9c:33:e0:79:d3:0f:9a:70:f0:04:7c:8f:15:72:
         ba:0c:f3:6e:a4:40:9e:e7:e4:e0:e7:96:bd:1b:45:31:30:88:
         57:21:8f:c4:4b:2a:bc:05:8a:0d:7e:d0:19:7f:fe:74:f6:eb:
         4c:f9:89:08:e0:dd:41:7b:33:e2:43:29:80:db:24:6c:86:a7:
         f8:07:f0:cb:8d:2e:a3:00:6f:53:3f:2c:84:62:7c:1d:f0:48:
         aa:76:fe:47:e2:a8:d2:bc:ba:32:b8:5b:b3:c2:d2:13:ea:91:
         f2:cc:cf:29:8f:8e:ac:69:b8:35:89:e9:5e:a8:45:fe:cb:9a:
         e8:c4:cb:0b:05:8a:47:43:74:9a:73:d5:2c:c2:0e:1c:d1:f1:
         3e:00:7e:36:6e:02:ad:46:10:ac:9d:bb:47:ef:cc:33:b7:5a:
         78:e9:9a:15:1b:c8:e8:1b:d3:75:1d:ca:5c:bd:24:5a:bf:a1:
         7f:a2:44:a7:cf:24:55:91:36:3e:85:e0:99:56:5b:24:ee:4d:
         f3:9a:1d:77:c2:58:80:3f:39:6b:27:9e:84:fb:cb:3d:c1:1d:
         9e:cc:1e:b3:c8:b5:59:8c:da:74:63:ff:1c:b7:14:6b:5c:6a:
         00:5f:d3:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:39:54 2026 by rpki-client