Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/36362e3233312e37362e302f32322d3232203d3e203233323436.roa
File:                     36362e3233312e37362e302f32322d3232203d3e203233323436.roa (raw, json)
Hash identifier:          B09Gw9xbknOaDb4efxU+Ds5VKrfNWEM+VjhXNcjrg3k=
Subject key identifier:   C9:60:3E:92:C7:2E:87:FA:21:7F:91:87:7E:E2:66:B9:FF:8D:5F:0E
Certificate issuer:       /CN=C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0
Certificate serial:       0F04D92AC7C09F9647775E86198402C03B921BAA
Authority key identifier: C2:96:7F:F3:10:9E:0A:A7:EE:5E:C1:C6:40:30:0D:5A:00:FF:41:B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/36362e3233312e37362e302f32322d3232203d3e203233323436.roa
Signing time:             Tue 12 May 2026 00:42:08 +0000
ROA not before:           Tue 12 May 2026 00:37:08 +0000
ROA not after:            Tue 11 May 2027 00:42:08 +0000
asID:                     23246
IP address blocks:        66.231.76.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:04:d9:2a:c7:c0:9f:96:47:77:5e:86:19:84:02:c0:3b:92:1b:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0
        Validity
            Not Before: May 12 00:37:08 2026 GMT
            Not After : May 11 00:42:08 2027 GMT
        Subject: CN=C9603E92C72E87FA217F91877EE266B9FF8D5F0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:84:bf:99:3f:55:0d:99:1e:14:84:23:d0:93:
                    86:09:db:5b:7a:14:fe:e4:ab:fe:28:78:46:48:8d:
                    9e:5c:e7:d7:49:e5:08:ec:db:91:37:da:47:06:4d:
                    fd:03:72:55:e7:a5:d6:6c:67:2a:64:10:73:ca:a1:
                    c4:c4:77:7f:79:1a:f3:60:79:b6:fe:10:6d:a5:fb:
                    b4:fd:b6:81:3a:67:67:aa:9f:95:8e:51:d5:78:8c:
                    91:4c:db:58:d4:96:08:43:60:02:1b:31:33:57:fe:
                    9c:27:fa:c8:46:af:93:b6:6b:82:15:e2:ec:e1:70:
                    ce:b8:ca:b0:73:b2:51:97:af:c9:c0:73:2a:b9:b9:
                    37:e6:79:0c:b2:aa:d9:2c:43:13:a6:b3:e7:a5:04:
                    1b:6c:f8:22:67:bf:fd:b9:4d:d1:42:26:53:30:6d:
                    d9:75:42:9f:48:04:c0:de:d7:8a:a1:75:2d:4a:3b:
                    24:bd:90:45:69:05:c9:6d:ea:80:80:db:48:70:c6:
                    61:5b:ee:2d:49:c6:a2:da:52:f3:1c:4d:4b:f9:0f:
                    5c:5a:54:a0:95:32:1e:a6:07:ae:b4:f4:6b:28:a3:
                    4a:71:c8:f3:dd:2b:36:75:22:f4:bf:e8:c9:75:2a:
                    54:e0:01:ed:b0:b0:67:6b:29:80:10:33:40:d9:56:
                    23:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:60:3E:92:C7:2E:87:FA:21:7F:91:87:7E:E2:66:B9:FF:8D:5F:0E
            X509v3 Authority Key Identifier:
                keyid:C2:96:7F:F3:10:9E:0A:A7:EE:5E:C1:C6:40:30:0D:5A:00:FF:41:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/36362e3233312e37362e302f32322d3232203d3e203233323436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.231.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:3c:48:0c:16:3d:19:5c:89:35:53:11:d6:92:6c:b2:06:7e:
         2e:49:90:fe:a8:b0:a2:f8:87:92:17:1b:0b:44:a7:97:36:ee:
         82:d0:c3:1b:f4:50:24:4a:03:5a:e3:cb:00:8d:d8:f5:a3:3a:
         e1:62:8e:80:49:d1:47:32:77:17:4a:94:20:f7:47:66:af:27:
         e8:c9:9b:b8:02:fc:a0:9b:cb:5a:17:bb:fb:97:18:65:29:ba:
         9f:34:17:14:e0:3d:0d:cc:b8:ec:07:22:7e:dd:18:31:f1:2b:
         85:9b:d5:56:5c:5a:78:85:4d:f9:6d:5d:a8:6a:6d:77:d6:4b:
         0e:ba:61:d7:85:e1:71:69:44:d1:06:e6:ce:9e:63:20:fe:7d:
         2c:3c:e7:a5:13:61:68:a8:44:6d:01:27:e5:09:74:9a:b1:12:
         2e:f3:b4:db:f6:83:92:e0:52:20:e3:d3:04:95:ad:80:6f:35:
         e1:8d:ab:2a:59:4a:21:b9:61:84:72:df:e9:31:f6:4d:2f:6c:
         a0:49:38:49:0b:a2:6b:c0:65:d7:0d:ce:27:8a:cb:3e:ba:0e:
         62:df:9a:f8:6f:4e:cc:3a:54:36:8a:03:e7:a8:cb:5c:d1:ea:
         9d:7a:f2:d7:75:7d:b3:78:8b:27:d5:e4:2d:bf:65:13:53:dc:
         41:b3:bb:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:10:36 2026 by rpki-client