Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/36362e3233312e36342e302f32302d3230203d3e203233323436.roa
File:                     36362e3233312e36342e302f32302d3230203d3e203233323436.roa (raw, json)
Hash identifier:          64/+WiMUJ2/k4OM86xbhA3kUrK61zXUvkiAO3xySDn0=
Subject key identifier:   E9:6E:20:9B:E5:A3:45:26:67:B0:73:05:11:FF:79:82:C4:1E:85:54
Certificate issuer:       /CN=C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0
Certificate serial:       70A68EF690908B1D603FD0E77E844BE85C3D851F
Authority key identifier: C2:96:7F:F3:10:9E:0A:A7:EE:5E:C1:C6:40:30:0D:5A:00:FF:41:B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/36362e3233312e36342e302f32302d3230203d3e203233323436.roa
Signing time:             Tue 12 May 2026 00:42:08 +0000
ROA not before:           Tue 12 May 2026 00:37:08 +0000
ROA not after:            Tue 11 May 2027 00:42:08 +0000
asID:                     23246
IP address blocks:        66.231.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:a6:8e:f6:90:90:8b:1d:60:3f:d0:e7:7e:84:4b:e8:5c:3d:85:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0
        Validity
            Not Before: May 12 00:37:08 2026 GMT
            Not After : May 11 00:42:08 2027 GMT
        Subject: CN=E96E209BE5A3452667B0730511FF7982C41E8554
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:67:23:ff:2e:bf:b8:d3:cc:f7:ec:f6:51:7b:
                    db:2a:f7:b0:1b:9a:db:99:8d:68:63:6d:fa:a4:f6:
                    3f:2d:2e:db:14:f2:d4:16:f6:7e:4b:62:52:20:1d:
                    5f:a3:51:2b:73:19:df:a0:c4:cb:aa:dc:80:42:37:
                    6b:24:89:4b:4f:61:00:5d:26:89:42:0a:a6:65:8a:
                    10:37:78:66:b0:86:07:68:5a:fc:4b:d4:af:d0:da:
                    8d:e0:0c:82:5a:3e:b8:81:70:d3:5f:40:16:c8:39:
                    58:8f:3b:c9:af:bb:27:51:37:21:73:07:82:00:48:
                    e5:82:f8:34:97:8a:57:2a:61:ee:5e:22:73:e5:fa:
                    6c:fd:cb:5e:73:52:14:db:c2:59:3c:ad:bf:e3:9f:
                    3b:cb:04:74:5b:37:23:cc:e4:f8:ba:64:17:d2:0c:
                    db:f9:0d:f2:45:b5:16:b7:6e:88:89:2c:fc:5d:d2:
                    f6:c8:06:41:47:5b:b1:63:e2:80:a9:28:af:fd:b6:
                    cc:37:56:f1:b6:e8:cb:d5:3e:5f:25:2b:1c:7d:92:
                    42:9b:f4:f7:19:58:34:6c:dc:c7:e9:b9:f5:41:5c:
                    5b:67:47:e7:ca:40:e3:ff:b2:a3:b8:41:53:4b:d4:
                    21:45:bf:46:72:fc:ba:2c:e7:ad:ee:8a:41:6a:e4:
                    00:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:6E:20:9B:E5:A3:45:26:67:B0:73:05:11:FF:79:82:C4:1E:85:54
            X509v3 Authority Key Identifier:
                keyid:C2:96:7F:F3:10:9E:0A:A7:EE:5E:C1:C6:40:30:0D:5A:00:FF:41:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/36362e3233312e36342e302f32302d3230203d3e203233323436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.231.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         19:c2:80:c6:53:43:7a:69:4e:55:b8:0c:5c:1d:8c:0f:ce:8b:
         3b:e7:5d:8f:ee:4c:64:dd:b6:d8:95:fe:49:24:c9:73:01:ae:
         0d:01:94:81:54:cb:a0:88:d8:ac:e4:47:9b:8e:30:ef:0f:26:
         53:84:f6:a6:97:a7:1a:5e:b1:22:d1:ec:4f:e6:69:b6:f0:cf:
         67:62:90:c8:ae:fa:47:77:bb:05:34:2f:4c:02:5a:8f:23:8b:
         a2:d8:4a:1f:f4:a3:e2:09:87:ba:d5:99:e7:5d:ce:e0:b6:ce:
         bc:bb:b3:17:b5:64:24:7c:26:a7:13:aa:22:a8:45:70:ff:c4:
         e4:5b:3b:18:52:ef:af:c2:8d:5b:c6:ec:59:62:ce:e7:68:56:
         03:b9:db:04:1f:22:92:14:06:ad:36:7c:d2:84:42:cf:04:ac:
         24:c9:36:e6:26:4d:af:59:75:bf:7a:df:6d:f7:ea:7d:16:af:
         2c:90:9c:78:c8:cc:c7:f0:76:cf:51:d6:14:55:9d:cf:a0:f1:
         19:c6:20:26:b2:27:10:03:e0:30:df:23:0a:72:e4:cc:84:c4:
         46:e3:77:1f:3c:09:a7:5c:1b:7d:93:11:f8:53:4c:67:20:52:
         48:fd:07:f3:10:e1:4e:45:03:ec:d9:7b:7c:4d:ab:03:17:6c:
         e6:19:06:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:34:09 2026 by rpki-client