Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C71E9B6EEE78F12B15E3BEBF954942DBC0CDCA94DA317B83F0CD62B2FDB26ECE/0/3230312e3135302e3136372e302f32342d3234203d3e20323733313631.roa
File:                     3230312e3135302e3136372e302f32342d3234203d3e20323733313631.roa (raw, json)
Hash identifier:          kM5HGa9mu0UwtgldESM2pC3DJ0TGWE7Nv4wCuFQCBME=
Subject key identifier:   79:50:31:13:A5:C6:58:92:2D:AA:FD:C5:9C:D2:53:1A:0B:53:CD:FA
Certificate issuer:       /CN=21B4A6594D293307A54FC67EA972CF9E807930DF
Certificate serial:       3BD1FE098F63D98EE5BC3404B4CFE5E2287F30F7
Authority key identifier: 21:B4:A6:59:4D:29:33:07:A5:4F:C6:7E:A9:72:CF:9E:80:79:30:DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21B4A6594D293307A54FC67EA972CF9E807930DF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C71E9B6EEE78F12B15E3BEBF954942DBC0CDCA94DA317B83F0CD62B2FDB26ECE/0/3230312e3135302e3136372e302f32342d3234203d3e20323733313631.roa
Signing time:             Tue 21 Jul 2026 18:10:00 +0000
ROA not before:           Tue 21 Jul 2026 18:05:00 +0000
ROA not after:            Tue 20 Jul 2027 18:10:00 +0000
asID:                     273161
IP address blocks:        201.150.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C71E9B6EEE78F12B15E3BEBF954942DBC0CDCA94DA317B83F0CD62B2FDB26ECE/0/21B4A6594D293307A54FC67EA972CF9E807930DF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C71E9B6EEE78F12B15E3BEBF954942DBC0CDCA94DA317B83F0CD62B2FDB26ECE/0/21B4A6594D293307A54FC67EA972CF9E807930DF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21B4A6594D293307A54FC67EA972CF9E807930DF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:d1:fe:09:8f:63:d9:8e:e5:bc:34:04:b4:cf:e5:e2:28:7f:30:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21B4A6594D293307A54FC67EA972CF9E807930DF
        Validity
            Not Before: Jul 21 18:05:00 2026 GMT
            Not After : Jul 20 18:10:00 2027 GMT
        Subject: CN=79503113A5C658922DAAFDC59CD2531A0B53CDFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:6f:65:cc:66:13:b4:2e:32:86:7e:61:89:0b:
                    3e:64:96:79:3b:62:5b:23:19:86:5a:17:ca:88:23:
                    f6:cc:95:64:47:d0:f5:dd:57:13:fd:76:c0:bc:74:
                    63:52:e8:da:a7:91:71:8f:e5:a1:76:4b:8c:7c:d2:
                    32:44:30:02:d5:39:78:05:99:28:f0:71:aa:2b:9e:
                    a6:8e:81:e3:52:e3:6d:6c:80:f2:05:1c:f2:71:c1:
                    0d:32:d4:77:a3:c5:4f:2b:cb:a3:de:c6:c4:45:55:
                    95:59:49:22:bc:73:ec:60:a3:a2:72:8a:1f:8c:a8:
                    6f:ec:d1:fd:98:c1:97:53:b1:d7:b7:c1:b7:92:71:
                    b9:1d:8d:36:45:c0:c0:a9:ab:9e:c8:dc:c3:82:28:
                    f9:9a:e5:e6:c9:8d:f0:58:8f:11:da:32:35:74:bc:
                    ad:96:e6:2e:76:e6:3e:3f:9e:79:7a:59:00:28:8f:
                    a0:5f:29:ce:24:1d:64:c4:1a:ca:95:8f:1a:ce:4e:
                    f9:32:6e:0b:80:4c:eb:ba:4d:30:24:ab:63:c7:4d:
                    07:8e:a4:3c:b1:98:26:6c:d9:f1:d2:f8:da:76:4f:
                    c4:97:f2:c1:90:ae:6e:46:7b:07:9c:92:d4:8a:bf:
                    09:f4:ed:65:91:91:50:b4:bf:80:51:1c:c9:e6:68:
                    29:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:50:31:13:A5:C6:58:92:2D:AA:FD:C5:9C:D2:53:1A:0B:53:CD:FA
            X509v3 Authority Key Identifier:
                keyid:21:B4:A6:59:4D:29:33:07:A5:4F:C6:7E:A9:72:CF:9E:80:79:30:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C71E9B6EEE78F12B15E3BEBF954942DBC0CDCA94DA317B83F0CD62B2FDB26ECE/0/21B4A6594D293307A54FC67EA972CF9E807930DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21B4A6594D293307A54FC67EA972CF9E807930DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C71E9B6EEE78F12B15E3BEBF954942DBC0CDCA94DA317B83F0CD62B2FDB26ECE/0/3230312e3135302e3136372e302f32342d3234203d3e20323733313631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.150.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:b0:8c:16:54:d5:0d:6d:72:50:8c:c9:b2:2d:60:35:e2:99:
         4f:e9:44:e0:8c:c3:9c:48:dc:82:d5:2c:54:11:18:a9:c7:dd:
         05:6b:57:ff:a6:8f:c4:46:5b:8d:1a:01:5e:c1:b0:22:d7:ca:
         c5:74:27:52:3d:f3:1c:1b:03:44:94:1f:92:6f:3f:a6:6d:aa:
         48:43:9f:25:c2:b0:14:8e:67:f6:32:38:e3:65:d5:f4:97:9a:
         9f:0c:d5:8a:c6:40:18:92:2f:ac:80:5e:a1:04:79:37:ed:67:
         60:ab:fd:56:af:e2:08:a2:a8:7c:b0:0e:33:b4:98:05:80:4f:
         b3:7c:09:1f:a0:ea:37:2b:0d:35:8b:20:c9:32:e1:58:69:5b:
         3b:d3:14:45:64:23:97:60:59:7e:0c:aa:99:84:93:f0:60:24:
         8e:00:cc:95:d4:cb:66:6e:6e:c5:9b:53:76:9b:c9:96:3a:e2:
         b6:2f:8e:81:6a:30:c1:4b:dc:52:a8:4a:1f:6b:7f:aa:48:c4:
         52:6e:ab:6f:df:d1:87:2f:dc:02:f4:3f:a6:eb:fd:98:21:c8:
         4b:62:bf:5a:15:3b:30:c1:3a:82:dc:91:95:40:b6:fe:6f:6f:
         2e:c9:bc:e2:ad:c7:12:0e:4a:25:25:c4:13:1b:05:37:46:03:
         00:9c:cb:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:46:04 2026 by rpki-client