Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/36362e3233312e37302e302f32342d3234203d3e20323733383332.roa
File:                     36362e3233312e37302e302f32342d3234203d3e20323733383332.roa (raw, json)
Hash identifier:          xEezSeHpiejDZISzNjHXZTRNgtXmlcf5Ski6fS8gZUw=
Subject key identifier:   03:6A:EC:C3:59:35:69:0F:4C:AE:BA:44:F7:E0:BA:69:7E:2A:50:0B
Certificate issuer:       /CN=C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0
Certificate serial:       7D29275E25582A1DC39040A9B620F79A2153931B
Authority key identifier: C2:96:7F:F3:10:9E:0A:A7:EE:5E:C1:C6:40:30:0D:5A:00:FF:41:B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/36362e3233312e37302e302f32342d3234203d3e20323733383332.roa
Signing time:             Thu 16 Jul 2026 22:00:33 +0000
ROA not before:           Thu 16 Jul 2026 21:55:33 +0000
ROA not after:            Thu 15 Jul 2027 22:00:33 +0000
asID:                     273832
IP address blocks:        66.231.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:29:27:5e:25:58:2a:1d:c3:90:40:a9:b6:20:f7:9a:21:53:93:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0
        Validity
            Not Before: Jul 16 21:55:33 2026 GMT
            Not After : Jul 15 22:00:33 2027 GMT
        Subject: CN=036AECC35935690F4CAEBA44F7E0BA697E2A500B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:21:99:8c:13:fb:51:ad:ce:5d:48:7c:e6:94:
                    30:c6:ee:1d:0e:f2:7c:84:e4:20:b5:18:2c:e2:fe:
                    8f:e4:a7:c9:28:03:db:a5:71:62:83:86:7c:19:0d:
                    04:29:99:e3:99:25:81:ff:ef:47:ba:06:6a:8f:7d:
                    30:40:92:81:85:d2:aa:d3:f8:7e:2f:ef:7b:92:5d:
                    45:40:97:92:b9:1c:c8:28:cc:a7:d4:f7:9f:25:0b:
                    b3:83:af:d2:87:0d:cf:14:51:88:28:4b:b2:c0:07:
                    ca:a7:fa:99:46:f9:5c:d0:22:6a:34:69:21:45:f3:
                    07:c1:32:82:03:6c:18:b9:40:41:3b:81:9a:5f:e0:
                    59:28:e0:63:de:22:38:3e:81:73:52:0f:fe:55:71:
                    ba:61:cc:c4:84:71:8b:16:4d:53:46:e9:6d:8d:4f:
                    90:27:de:93:45:6c:26:eb:ec:00:e5:86:5a:a4:10:
                    76:de:fa:48:da:2e:24:1c:3e:54:e4:a6:cd:d7:09:
                    2f:1a:57:41:62:63:7e:0d:ef:50:d8:6d:02:cf:ca:
                    05:13:1c:45:eb:de:d5:23:44:fb:cb:d3:9d:bb:71:
                    ba:85:34:4c:b5:01:10:7d:7c:98:c5:28:b9:75:c1:
                    c2:48:a6:75:8d:11:1d:a0:63:e8:58:2a:ba:7a:13:
                    1d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:6A:EC:C3:59:35:69:0F:4C:AE:BA:44:F7:E0:BA:69:7E:2A:50:0B
            X509v3 Authority Key Identifier:
                keyid:C2:96:7F:F3:10:9E:0A:A7:EE:5E:C1:C6:40:30:0D:5A:00:FF:41:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/36362e3233312e37302e302f32342d3234203d3e20323733383332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.231.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:24:23:74:40:e8:6a:7d:37:35:2c:00:32:6e:8e:4d:31:41:
         27:25:2d:b4:14:ac:65:51:69:f7:e4:44:63:68:b1:bb:b2:4a:
         de:26:55:bc:6d:c3:78:c3:17:18:ff:1b:85:19:9a:a9:3a:38:
         84:17:51:32:6b:5f:12:3d:1c:4e:75:94:53:c2:40:3c:a5:ce:
         00:cc:5c:04:fa:6a:e0:0b:c2:81:c4:f3:5a:6b:56:4f:8f:96:
         a1:da:e0:63:d6:3e:23:cb:69:fe:0a:c7:1b:62:df:3a:fc:a2:
         19:c4:06:a1:bc:58:79:63:e2:05:c6:f7:42:c5:a1:b9:95:e4:
         d3:d6:81:31:6d:8c:70:bb:42:b6:81:47:f4:79:d2:02:9b:25:
         cb:d8:4b:d4:19:4e:3c:e6:c8:c2:8f:db:50:aa:1d:38:47:18:
         d9:53:a0:d7:8d:b6:84:75:12:6b:3d:28:99:6a:59:6e:ba:40:
         38:4b:5e:c7:c5:77:28:c1:49:66:44:b2:0b:9b:5d:45:d1:b5:
         99:22:42:f2:25:ec:d9:a1:65:a8:b1:b7:b5:d7:cd:20:09:eb:
         25:ff:62:d2:56:5d:13:0f:f6:5b:4b:de:19:68:34:b8:28:37:
         93:7e:5e:71:05:cc:31:bc:98:57:fe:a0:69:80:67:20:ff:22:
         16:74:90:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:29:23 2026 by rpki-client