Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F79AB5BE66A9803D5219845A3724819995932FC9856663D47F42228B2EFEAA32/0/3136372e3234392e35322e302f32332d3234203d3e20323633373933.roa
File:                     3136372e3234392e35322e302f32332d3234203d3e20323633373933.roa (raw, json)
Hash identifier:          D9wXAH9sYvTU9EH6G8rCxwpPNCQ//K5VIKabbZfV97k=
Subject key identifier:   E9:02:7E:4E:53:46:44:EC:C2:5E:20:A7:54:31:2B:EE:14:27:13:D5
Certificate issuer:       /CN=D7EE67424E7FC3136531741689B53CDA16769DD7
Certificate serial:       401898726D07A2EE0C2D380908B48C6869911216
Authority key identifier: D7:EE:67:42:4E:7F:C3:13:65:31:74:16:89:B5:3C:DA:16:76:9D:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7EE67424E7FC3136531741689B53CDA16769DD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F79AB5BE66A9803D5219845A3724819995932FC9856663D47F42228B2EFEAA32/0/3136372e3234392e35322e302f32332d3234203d3e20323633373933.roa
Signing time:             Wed 24 Jun 2026 18:49:31 +0000
ROA not before:           Wed 24 Jun 2026 18:44:31 +0000
ROA not after:            Wed 23 Jun 2027 18:49:31 +0000
asID:                     263793
IP address blocks:        167.249.52.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F79AB5BE66A9803D5219845A3724819995932FC9856663D47F42228B2EFEAA32/0/D7EE67424E7FC3136531741689B53CDA16769DD7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F79AB5BE66A9803D5219845A3724819995932FC9856663D47F42228B2EFEAA32/0/D7EE67424E7FC3136531741689B53CDA16769DD7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7EE67424E7FC3136531741689B53CDA16769DD7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:18:98:72:6d:07:a2:ee:0c:2d:38:09:08:b4:8c:68:69:91:12:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7EE67424E7FC3136531741689B53CDA16769DD7
        Validity
            Not Before: Jun 24 18:44:31 2026 GMT
            Not After : Jun 23 18:49:31 2027 GMT
        Subject: CN=E9027E4E534644ECC25E20A754312BEE142713D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:77:4e:94:a3:2e:a3:ab:0f:e5:97:6e:c3:c5:
                    c8:33:a0:2c:4a:79:cf:b9:82:83:d8:62:9d:c2:c3:
                    01:0e:55:6f:e5:74:c0:2b:13:8f:25:93:de:3f:00:
                    a1:49:3f:48:10:22:ae:6c:79:fc:6c:d6:1b:d6:ae:
                    2f:01:f5:dc:37:5e:7f:26:94:4c:22:47:40:2c:39:
                    bd:0f:25:30:e5:f3:2f:b0:78:b8:14:73:e0:c3:78:
                    28:be:10:55:12:83:eb:41:e7:68:fd:43:47:ef:20:
                    fe:52:4b:61:13:3f:29:d8:c8:01:8d:0e:46:dd:a7:
                    26:16:bf:69:56:26:6b:34:a2:ae:45:ae:7a:2a:e6:
                    73:f7:ea:f1:e3:aa:0f:90:8b:65:90:79:2c:43:c2:
                    59:9e:bf:ed:58:69:97:af:84:f5:e3:9a:2c:aa:d6:
                    ca:11:35:9a:0b:89:3f:6d:70:06:ad:5b:c6:50:f7:
                    03:a8:c4:6e:77:c4:cf:63:fd:c8:27:d6:59:64:97:
                    0d:fc:e2:7d:fa:4e:dc:8c:5e:0d:ed:2a:4d:f5:b1:
                    91:8e:b2:38:80:08:04:36:4a:36:8c:8a:14:fc:a8:
                    6b:14:69:3d:d8:fd:19:28:27:39:3b:a3:2f:a4:1d:
                    f2:41:2f:d6:95:d9:0b:0c:8a:7f:8c:5f:ac:21:32:
                    58:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:02:7E:4E:53:46:44:EC:C2:5E:20:A7:54:31:2B:EE:14:27:13:D5
            X509v3 Authority Key Identifier:
                keyid:D7:EE:67:42:4E:7F:C3:13:65:31:74:16:89:B5:3C:DA:16:76:9D:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F79AB5BE66A9803D5219845A3724819995932FC9856663D47F42228B2EFEAA32/0/D7EE67424E7FC3136531741689B53CDA16769DD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7EE67424E7FC3136531741689B53CDA16769DD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F79AB5BE66A9803D5219845A3724819995932FC9856663D47F42228B2EFEAA32/0/3136372e3234392e35322e302f32332d3234203d3e20323633373933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         76:53:26:99:e6:2c:9d:fc:35:d9:9e:0f:7e:f3:f7:de:97:1f:
         0c:e0:1b:ec:ac:4b:c9:ff:02:bd:2b:ae:a2:be:1c:8e:2f:f9:
         29:f8:f7:a3:a1:88:dc:02:c4:e9:6b:08:b4:00:04:8d:d3:28:
         92:7c:3d:4a:d5:a9:c7:ab:d4:db:51:04:13:85:ff:53:a4:64:
         0d:a5:31:80:55:b1:42:fa:19:b2:e8:e2:89:10:52:ce:28:34:
         ce:df:0b:7b:ba:30:40:c5:58:e6:84:9e:f5:58:3c:a3:c5:d0:
         71:a6:7c:4f:f8:1e:75:8c:8a:01:77:ab:e2:a3:75:83:63:29:
         ce:8b:d8:1a:d7:00:f9:7b:d8:90:3d:97:4a:1e:48:09:fb:42:
         ba:e0:35:74:dd:62:2f:22:57:f7:b0:12:5d:9e:65:48:81:84:
         e9:88:a9:5d:45:23:11:2f:e4:a2:05:0f:f6:e0:99:13:7f:b2:
         59:59:e9:26:34:5a:62:a5:ce:82:20:b6:1e:42:2c:f2:26:96:
         02:cd:b4:23:d3:69:03:71:a5:19:9e:7c:34:90:16:95:ba:33:
         61:46:f9:b9:9e:a5:5d:23:67:73:be:2f:52:2b:af:63:b8:d8:
         57:1b:b9:3c:7b:9f:dc:a4:20:e6:1d:4c:e2:71:78:d5:07:75:
         a6:f4:c8:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:23:00 2026 by rpki-client