Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/84B6D054C66C929684279113BA9042194C396582A11C12043259A139B9F326B6/0/3136362e37352e302e302f31362d3234203d3e2037343138.roa
File:                     3136362e37352e302e302f31362d3234203d3e2037343138.roa (raw, json)
Hash identifier:          jh0XwHPGtT5weUgm3vm6BC4M86+KsjyBnonV8Eh6oNw=
Subject key identifier:   D5:B0:2E:71:87:50:68:15:3B:D5:1D:79:93:06:93:BA:76:E2:A0:78
Certificate issuer:       /CN=029270B38E78672B8CF04C4D2A63B0815A91D724
Certificate serial:       564F17501312728E93D0E7D09EFF5185584CF186
Authority key identifier: 02:92:70:B3:8E:78:67:2B:8C:F0:4C:4D:2A:63:B0:81:5A:91:D7:24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/029270B38E78672B8CF04C4D2A63B0815A91D724.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/84B6D054C66C929684279113BA9042194C396582A11C12043259A139B9F326B6/0/3136362e37352e302e302f31362d3234203d3e2037343138.roa
Signing time:             Mon 20 Jul 2026 18:55:00 +0000
ROA not before:           Mon 20 Jul 2026 18:50:00 +0000
ROA not after:            Mon 19 Jul 2027 18:55:00 +0000
asID:                     7418
IP address blocks:        166.75.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/84B6D054C66C929684279113BA9042194C396582A11C12043259A139B9F326B6/0/029270B38E78672B8CF04C4D2A63B0815A91D724.crl
                          rsync://repository.lacnic.net/rpki/lacnic/84B6D054C66C929684279113BA9042194C396582A11C12043259A139B9F326B6/0/029270B38E78672B8CF04C4D2A63B0815A91D724.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/029270B38E78672B8CF04C4D2A63B0815A91D724.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:4f:17:50:13:12:72:8e:93:d0:e7:d0:9e:ff:51:85:58:4c:f1:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=029270B38E78672B8CF04C4D2A63B0815A91D724
        Validity
            Not Before: Jul 20 18:50:00 2026 GMT
            Not After : Jul 19 18:55:00 2027 GMT
        Subject: CN=D5B02E71875068153BD51D79930693BA76E2A078
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0f:ee:55:32:28:d1:22:65:11:ec:ac:f0:b7:
                    3b:35:aa:0a:6d:42:34:c8:db:18:52:47:22:af:f0:
                    c6:46:c4:16:c8:de:86:d9:e8:44:82:af:4c:7a:f6:
                    94:81:ef:67:2d:2b:e8:a8:68:fb:76:8c:5e:04:e5:
                    6e:f5:b7:a6:be:37:92:c8:db:65:02:98:0c:cf:71:
                    3c:67:45:98:ea:17:2a:5b:e5:1c:ff:85:d2:c2:04:
                    3e:bd:db:ed:74:7c:1e:ec:c5:16:b6:b0:1e:17:5f:
                    28:01:68:48:e1:5c:c5:76:51:77:7a:30:24:8a:d1:
                    a0:b3:a5:79:53:2e:8e:38:f7:11:d9:ce:1f:1e:a0:
                    bf:e1:2c:2f:d7:b2:c9:67:6c:8a:46:00:e7:77:68:
                    64:58:c5:34:19:4a:ba:95:ac:76:ee:0a:84:62:69:
                    9b:e5:d0:5c:67:6e:2d:58:da:5d:bb:1e:6a:48:ce:
                    62:ed:76:78:f3:fa:af:7d:34:a4:73:11:e1:f3:21:
                    64:a9:1e:2d:53:d1:e2:0e:32:c3:0e:09:ed:9e:1b:
                    fd:66:eb:69:4f:c4:68:96:1e:bf:e4:fb:9f:d7:48:
                    a0:7b:94:bf:7a:d1:f4:c5:c6:b0:de:40:85:1f:05:
                    5a:84:b6:c3:b2:bc:53:b2:2b:90:9e:b9:39:4a:97:
                    52:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:B0:2E:71:87:50:68:15:3B:D5:1D:79:93:06:93:BA:76:E2:A0:78
            X509v3 Authority Key Identifier:
                keyid:02:92:70:B3:8E:78:67:2B:8C:F0:4C:4D:2A:63:B0:81:5A:91:D7:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/84B6D054C66C929684279113BA9042194C396582A11C12043259A139B9F326B6/0/029270B38E78672B8CF04C4D2A63B0815A91D724.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/029270B38E78672B8CF04C4D2A63B0815A91D724.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/84B6D054C66C929684279113BA9042194C396582A11C12043259A139B9F326B6/0/3136362e37352e302e302f31362d3234203d3e2037343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.75.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         49:b7:a3:90:4b:b5:28:75:56:d8:43:5b:5c:ef:b1:b1:7e:9c:
         4d:9e:ef:68:20:46:fc:b5:df:37:74:fb:82:a6:14:f6:60:79:
         3c:2d:14:30:48:87:56:22:64:c6:9b:10:7f:31:58:e5:04:47:
         64:5a:e7:7f:53:68:ba:e0:ad:8b:f1:ab:c2:16:1e:ab:b3:ea:
         9d:ee:32:17:49:2c:f5:7f:38:9a:d3:47:be:9c:66:57:0e:3c:
         11:03:c4:26:ec:09:57:62:2f:89:25:69:28:12:66:eb:e8:11:
         ee:9e:b2:d4:c2:86:d0:31:ae:4c:2a:a0:6d:0f:e7:94:a5:ce:
         94:90:5a:49:e9:04:3b:95:b0:d0:71:74:bb:07:69:3c:29:c0:
         80:6f:4a:8b:f6:ac:9b:59:c7:00:e4:1b:c4:b2:05:19:a2:c5:
         7e:9c:4b:39:a6:e9:5c:cf:1a:cb:90:a6:cd:12:f5:7f:02:59:
         77:f6:83:e1:d4:0e:ab:37:1b:e0:15:a4:0d:de:04:bb:5b:98:
         07:38:ae:64:0c:fb:30:3e:ff:0a:22:ec:a1:c0:5a:c7:72:83:
         67:3b:e1:72:52:b8:c1:0d:9b:5a:c9:5e:3e:fe:97:32:01:50:
         be:44:c3:24:f0:59:44:04:81:8b:a7:88:e9:ce:65:a7:a5:73:
         7f:1c:50:bc
-----BEGIN CERTIFICATE-----
MIIFtzCCBJ+gAwIBAgIUVk8XUBMSco6T0OfQnv9RhVhM8YYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDI5MjcwQjM4RTc4NjcyQjhDRjA0QzREMkE2M0IwODE1
QTkxRDcyNDAeFw0yNjA3MjAxODUwMDBaFw0yNzA3MTkxODU1MDBaMDMxMTAvBgNV
BAMTKEQ1QjAyRTcxODc1MDY4MTUzQkQ1MUQ3OTkzMDY5M0JBNzZFMkEwNzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiD+5VMijRImUR7Kzwtzs1qgpt
QjTI2xhSRyKv8MZGxBbI3obZ6ESCr0x69pSB72ctK+ioaPt2jF4E5W71t6a+N5LI
22UCmAzPcTxnRZjqFypb5Rz/hdLCBD692+10fB7sxRa2sB4XXygBaEjhXMV2UXd6
MCSK0aCzpXlTLo449xHZzh8eoL/hLC/XsslnbIpGAOd3aGRYxTQZSrqVrHbuCoRi
aZvl0Fxnbi1Y2l27HmpIzmLtdnjz+q99NKRzEeHzIWSpHi1T0eIOMsMOCe2eG/1m
62lPxGiWHr/k+5/XSKB7lL960fTFxrDeQIUfBVqEtsOyvFOyK5CeuTlKl1L9AgMB
AAGjggLBMIICvTAdBgNVHQ4EFgQU1bAucYdQaBU71R15kwaTunbioHgwHwYDVR0j
BBgwFoAUApJws454ZyuM8ExNKmOwgVqR1yQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84NEI2RDA1NEM2NkM5Mjk2ODQyNzkxMTNCQTkwNDIxOTRD
Mzk2NTgyQTExQzEyMDQzMjU5QTEzOUI5RjMyNkI2LzAvMDI5MjcwQjM4RTc4Njcy
QjhDRjA0QzREMkE2M0IwODE1QTkxRDcyNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wMjkyNzBCMzhFNzg2NzJCOENG
MDRDNEQyQTYzQjA4MTVBOTFENzI0LmNlcjCBwQYIKwYBBQUHAQsEgbQwgbEwga4G
CCsGAQUFBzALhoGhcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODRCNkQwNTRDNjZDOTI5Njg0Mjc5MTEzQkE5MDQyMTk0QzM5NjU4MkEx
MUMxMjA0MzI1OUExMzlCOUYzMjZCNi8wLzMxMzYzNjJlMzczNTJlMzAyZTMwMmYz
MTM2MmQzMjM0MjAzZDNlMjAzNzM0MzEzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAKZLMA0GCSqGSIb3
DQEBCwUAA4IBAQBJt6OQS7UodVbYQ1tc77GxfpxNnu9oIEb8td83dPuCphT2YHk8
LRQwSIdWImTGmxB/MVjlBEdkWud/U2i64K2L8avCFh6rs+qd7jIXSSz1fzia00e+
nGZXDjwRA8Qm7AlXYi+JJWkoEmbr6BHunrLUwobQMa5MKqBtD+eUpc6UkFpJ6QQ7
lbDQcXS7B2k8KcCAb0qL9qybWccA5BvEsgUZosV+nEs5pulczxrLkKbNEvV/All3
9oPh1A6rNxvgFaQN3gS7W5gHOK5kDPswPv8KIuyhwFrHcoNnO+FyUrjBDZtayV4+
/pcyAVC+RMMk8FlEBIGLp4jpzmWnpXN/HFC8
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:05:37 2026 by rpki-client