Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C61F4D8E318209841A7C3F556C9B3ADA6D33B229018202AAB1CAFA46B60B8770/0/3136382e3138312e37362e302f32322d3234203d3e203232393038.roa
File:                     3136382e3138312e37362e302f32322d3234203d3e203232393038.roa (raw, json)
Hash identifier:          SBwyrbwxE0Ugr0aNHhSRABhphnjYBAWhcKhtOa81F1U=
Subject key identifier:   5A:CC:FC:29:28:9A:12:F1:CF:BD:53:4B:D9:B0:EA:F3:EF:10:3E:DF
Certificate issuer:       /CN=49F51DA6C4B18E80CACE58916331C212E02860C4
Certificate serial:       56BEBA4E2D3788EFB63CAEE94C2EF6A82170707D
Authority key identifier: 49:F5:1D:A6:C4:B1:8E:80:CA:CE:58:91:63:31:C2:12:E0:28:60:C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49F51DA6C4B18E80CACE58916331C212E02860C4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C61F4D8E318209841A7C3F556C9B3ADA6D33B229018202AAB1CAFA46B60B8770/0/3136382e3138312e37362e302f32322d3234203d3e203232393038.roa
Signing time:             Tue 07 Jul 2026 19:50:00 +0000
ROA not before:           Tue 07 Jul 2026 19:45:00 +0000
ROA not after:            Tue 06 Jul 2027 19:50:00 +0000
asID:                     22908
IP address blocks:        168.181.76.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C61F4D8E318209841A7C3F556C9B3ADA6D33B229018202AAB1CAFA46B60B8770/0/49F51DA6C4B18E80CACE58916331C212E02860C4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C61F4D8E318209841A7C3F556C9B3ADA6D33B229018202AAB1CAFA46B60B8770/0/49F51DA6C4B18E80CACE58916331C212E02860C4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49F51DA6C4B18E80CACE58916331C212E02860C4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:be:ba:4e:2d:37:88:ef:b6:3c:ae:e9:4c:2e:f6:a8:21:70:70:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49F51DA6C4B18E80CACE58916331C212E02860C4
        Validity
            Not Before: Jul  7 19:45:00 2026 GMT
            Not After : Jul  6 19:50:00 2027 GMT
        Subject: CN=5ACCFC29289A12F1CFBD534BD9B0EAF3EF103EDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:49:45:c4:3a:a0:36:ac:b2:6d:11:5c:31:17:
                    00:49:4d:eb:e3:15:f1:bf:8a:4b:f9:c2:b8:6c:2e:
                    9c:8e:24:e5:49:2c:d4:d8:67:ae:15:44:07:4c:b7:
                    95:6e:6f:9d:54:59:ef:80:8d:4f:bf:e1:07:f7:c2:
                    d9:56:10:96:c2:56:4f:48:31:cb:03:86:af:2b:e7:
                    b0:db:1a:b8:cc:66:ad:62:fc:d7:db:4c:4e:59:be:
                    f9:61:af:9d:ee:06:7b:c3:01:6e:5f:d1:67:a3:1e:
                    25:5e:6f:6e:dd:2f:48:ee:52:78:ff:93:4a:e6:8f:
                    0a:25:07:df:51:28:ee:d3:7d:1b:0a:c6:36:47:4f:
                    d5:cc:ec:c8:59:a0:6b:c3:3b:b5:70:28:e3:c1:d1:
                    7f:c8:53:c8:e7:26:14:05:10:ee:e1:8d:98:63:66:
                    1b:94:de:9d:78:c9:e0:32:96:59:a0:17:cc:00:a5:
                    63:8c:08:a6:8d:1d:1e:d8:cd:67:44:f2:8d:c7:30:
                    91:f9:3b:34:2e:3f:bb:b4:ad:2f:74:98:a9:74:e0:
                    c7:7a:1d:a2:8d:57:f8:29:be:65:00:45:bc:70:67:
                    4a:63:b2:f8:b9:80:b6:c3:08:f6:b5:5a:ed:bd:e9:
                    f4:6e:10:3f:83:df:b8:ca:9e:eb:86:59:88:26:f4:
                    89:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:CC:FC:29:28:9A:12:F1:CF:BD:53:4B:D9:B0:EA:F3:EF:10:3E:DF
            X509v3 Authority Key Identifier:
                keyid:49:F5:1D:A6:C4:B1:8E:80:CA:CE:58:91:63:31:C2:12:E0:28:60:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C61F4D8E318209841A7C3F556C9B3ADA6D33B229018202AAB1CAFA46B60B8770/0/49F51DA6C4B18E80CACE58916331C212E02860C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49F51DA6C4B18E80CACE58916331C212E02860C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C61F4D8E318209841A7C3F556C9B3ADA6D33B229018202AAB1CAFA46B60B8770/0/3136382e3138312e37362e302f32322d3234203d3e203232393038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:42:10:f3:32:ac:8d:ea:bf:67:c9:42:9c:c1:2f:27:5b:26:
         65:de:c2:8f:aa:9b:06:66:f2:91:41:7c:fe:6a:97:e2:73:1e:
         e6:21:af:59:4e:42:47:f5:0a:b6:70:d2:19:c8:c0:36:55:ce:
         8e:88:89:d0:26:75:25:c3:f0:20:59:af:f7:c8:69:9c:53:0b:
         f8:65:dd:de:2a:e6:23:1f:e2:52:88:53:45:95:57:9a:19:1d:
         ab:65:ae:56:5d:36:aa:05:41:3d:07:93:9c:2b:60:ad:02:f4:
         f3:da:75:5b:ff:4e:df:b9:dd:d7:35:df:51:55:4d:7d:30:db:
         da:4a:96:da:48:fc:5c:c4:a4:a5:c4:4b:b6:14:d8:29:0a:fc:
         04:36:c1:9d:1c:1a:19:5b:28:56:a9:b5:02:b1:5c:7b:9d:5d:
         db:bc:7c:0c:68:6a:6b:76:89:40:5f:cc:53:3d:4b:79:4f:aa:
         1e:93:96:70:5a:e6:1c:4c:7c:12:53:fb:c8:20:98:8e:a5:a9:
         16:98:87:e2:72:33:32:d2:71:eb:20:56:cb:c9:a9:5d:2c:43:
         19:0c:ac:0a:9f:3e:23:11:05:cb:6a:3d:79:77:ad:c7:46:4e:
         c3:60:37:3e:49:a9:0a:da:13:d1:7d:ca:b3:9c:63:92:91:e0:
         6f:aa:41:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:53:50 2026 by rpki-client