Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/3136382e3139352e35362e302f32322d3232203d3e203132393536.roa
File:                     3136382e3139352e35362e302f32322d3232203d3e203132393536.roa (raw, json)
Hash identifier:          nWxTlnLAPnhv1xS/DxTSvgXoAMqmB973i/1ual4UD9I=
Subject key identifier:   38:7F:17:9F:15:B0:57:65:46:E3:FB:B8:79:1B:CC:55:B6:1B:EF:16
Certificate issuer:       /CN=B61ABF237277FEAF24117EBBE28D9D57E442433A
Certificate serial:       6D8183790826193BD566C51ABA42ED73CD3B26CF
Authority key identifier: B6:1A:BF:23:72:77:FE:AF:24:11:7E:BB:E2:8D:9D:57:E4:42:43:3A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/3136382e3139352e35362e302f32322d3232203d3e203132393536.roa
Signing time:             Wed 08 Oct 2025 10:49:47 +0000
ROA not before:           Wed 08 Oct 2025 10:44:47 +0000
ROA not after:            Wed 07 Oct 2026 10:49:47 +0000
asID:                     12956
IP address blocks:        168.195.56.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Oct 2025 23:53:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:81:83:79:08:26:19:3b:d5:66:c5:1a:ba:42:ed:73:cd:3b:26:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B61ABF237277FEAF24117EBBE28D9D57E442433A
        Validity
            Not Before: Oct  8 10:44:47 2025 GMT
            Not After : Oct  7 10:49:47 2026 GMT
        Subject: CN=387F179F15B0576546E3FBB8791BCC55B61BEF16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c7:70:1e:d4:95:b2:d1:92:68:43:1a:34:f5:
                    80:91:63:e5:4c:bb:41:a6:15:77:e3:8f:a0:8a:5e:
                    7b:ad:57:b5:23:d2:f9:85:7e:68:2e:1f:06:16:f8:
                    4e:1a:a1:20:d1:f5:c3:74:59:d8:e9:93:6b:44:2b:
                    5c:09:6b:3b:a3:d5:05:77:b9:8f:ee:72:d9:c2:88:
                    e2:76:44:d6:42:b8:33:ff:34:8b:0a:83:9f:2a:ad:
                    a2:0a:8c:be:b0:83:fa:c0:64:a1:00:c4:2a:eb:c7:
                    5a:31:0f:43:33:39:7b:67:02:96:90:d9:41:04:c1:
                    2b:b5:4b:e1:c6:63:e6:76:f2:0c:31:85:fa:6a:0f:
                    78:5d:8d:34:90:da:f3:96:0e:b1:22:9f:04:e7:79:
                    e1:c1:b7:d8:91:c3:e5:20:6c:51:a5:7e:a6:7b:67:
                    9a:18:2f:21:b0:5e:3c:70:94:0e:0d:77:e1:07:90:
                    d2:6f:00:36:0c:41:cd:e9:47:c2:df:73:b6:03:ad:
                    7e:91:18:9f:f0:15:8c:ea:4e:00:f7:ea:7d:3b:31:
                    06:21:fc:fc:f0:10:8d:4c:c1:1d:14:c4:d9:6d:cc:
                    c6:02:bf:26:be:dc:0e:2a:07:73:bb:f3:d5:44:d5:
                    a2:01:4b:e5:b3:3a:44:54:0b:51:cd:d7:df:22:5d:
                    3c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:7F:17:9F:15:B0:57:65:46:E3:FB:B8:79:1B:CC:55:B6:1B:EF:16
            X509v3 Authority Key Identifier:
                keyid:B6:1A:BF:23:72:77:FE:AF:24:11:7E:BB:E2:8D:9D:57:E4:42:43:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/3136382e3139352e35362e302f32322d3232203d3e203132393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a2:3d:25:cd:75:fc:3d:b5:20:96:eb:1b:77:29:ea:98:f6:a7:
         4c:f8:5d:0b:70:ec:d1:e1:47:4b:0b:80:1c:74:2c:21:9c:c7:
         1f:cc:aa:29:c5:15:6d:0c:fe:64:f8:77:25:df:95:8b:ff:79:
         9d:27:09:00:a5:a3:b1:b8:c4:8b:ff:8f:bf:39:91:72:69:be:
         5a:aa:7a:31:9b:c1:00:24:0c:5f:44:bc:98:b3:66:fd:4f:ce:
         97:b9:ee:7a:84:36:00:d8:f7:64:4d:55:54:bc:f4:89:14:1e:
         08:a3:bd:5d:2a:07:12:04:74:af:85:c4:6c:f5:4d:e8:77:28:
         d0:c3:6a:77:db:bf:02:db:36:b3:61:50:8d:15:95:80:b2:ef:
         1a:f6:de:e5:fc:41:6f:32:b9:ae:82:26:52:c1:bf:a2:91:cd:
         24:96:99:d0:88:49:39:89:a3:b4:66:6a:f9:7c:27:f3:a5:6b:
         d7:7d:35:9a:85:e4:a4:8f:be:93:3f:10:06:9d:1a:23:c3:73:
         f6:e5:dc:f9:10:d1:ea:ce:9c:37:15:c4:4c:46:5f:54:97:f7:
         65:0e:7d:99:3f:2b:4b:33:e0:ea:16:ee:69:cb:ac:b4:43:41:
         2a:2f:0d:61:f7:68:de:d1:97:c9:32:ab:4f:aa:f8:b3:4f:04:
         40:1c:74:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:20:54 2025 by rpki-client