Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/AS21756.roa
File:                     AS21756.roa (raw, json)
Hash identifier:          x9x7SDYilTeaj2ahpoukIMdRa8K38i66yDSiaFjoQiY=
Subject key identifier:   68:5B:1D:CC:25:45:00:8F:0B:36:0D:66:DE:08:94:0C:BA:BE:C1:00
Certificate issuer:       /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial:       23BF39E548AD2B9D7DD00A28E9650453852FE913
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/AS21756.roa
Signing time:             Fri 27 Mar 2026 21:05:00 +0000
ROA not before:           Fri 27 Mar 2026 21:00:00 +0000
ROA not after:            Fri 26 Mar 2027 21:05:00 +0000
asID:                     21756
IP address blocks:        201.234.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 04:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:bf:39:e5:48:ad:2b:9d:7d:d0:0a:28:e9:65:04:53:85:2f:e9:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
        Validity
            Not Before: Mar 27 21:00:00 2026 GMT
            Not After : Mar 26 21:05:00 2027 GMT
        Subject: CN=685B1DCC2545008F0B360D66DE08940CBABEC100
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1b:2c:21:ec:4e:6c:39:68:66:4e:1d:37:14:
                    82:a4:25:4d:e1:c5:d7:22:5b:4e:e8:eb:a8:ec:3b:
                    f4:b1:41:ed:3f:8c:53:52:33:8d:f9:0f:16:f6:94:
                    86:13:85:19:d9:d7:b6:9a:5e:22:15:08:10:bb:e3:
                    b7:42:2e:4d:fd:1d:b1:af:3b:02:32:02:e5:2f:47:
                    ad:8e:fe:ff:78:ab:51:12:a7:5d:75:df:72:f0:53:
                    83:52:38:1a:6e:26:aa:26:f2:99:c3:31:c0:b0:fd:
                    1e:a0:1f:c3:a3:bf:3c:9b:51:cd:41:53:20:b1:75:
                    8a:21:b8:9f:8a:38:11:c9:35:38:30:83:3f:ab:b8:
                    7d:ed:e3:83:0f:fb:f9:d0:7a:1a:07:df:b9:ec:00:
                    3e:75:01:2a:1f:fe:93:e4:ba:6d:59:fb:2d:77:8b:
                    25:89:a7:27:35:ae:e8:88:cf:10:e8:49:09:04:f1:
                    cd:9e:2c:87:60:e2:6b:b5:52:a1:af:0a:c2:27:f8:
                    c0:38:ac:b8:22:5c:b7:7f:d9:7a:c6:48:06:f0:8c:
                    f4:8a:96:6f:f6:b5:87:c2:e4:c0:e6:2a:dc:fc:62:
                    41:9f:89:30:bb:0b:59:fa:72:9d:70:72:93:92:6d:
                    a6:c0:16:2d:ef:7a:67:94:31:60:0e:ac:e8:7a:a7:
                    a6:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:5B:1D:CC:25:45:00:8F:0B:36:0D:66:DE:08:94:0C:BA:BE:C1:00
            X509v3 Authority Key Identifier:
                keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/AS21756.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.234.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:29:12:c3:1c:65:30:4e:61:42:42:d0:70:22:bb:d0:ea:a7:
         5c:eb:41:77:7f:51:ea:c1:19:97:8f:2c:e9:83:e2:a4:57:93:
         16:81:0d:76:78:e2:ae:4e:5c:50:8a:e9:cd:55:0b:1f:8c:a4:
         40:07:bc:34:41:c4:b8:40:15:7f:53:5b:cf:84:12:b5:8f:98:
         42:12:1b:41:51:f2:05:50:a4:11:89:74:81:65:44:c9:32:a5:
         3d:4c:36:ac:90:4d:3b:7a:5b:86:a2:53:6b:be:6f:83:12:ca:
         f5:c5:80:5a:4a:b5:0a:3d:a1:51:a4:2f:f4:8b:fd:fd:57:53:
         97:f5:e6:29:6f:99:e7:7e:63:fd:30:84:b6:f0:6f:98:6f:bf:
         4d:8e:fb:97:99:29:3b:6d:fa:83:3a:24:05:40:4f:fd:4d:c1:
         b9:88:8d:2b:be:99:14:3f:25:68:9d:f6:d4:94:20:f0:05:4b:
         43:20:14:bd:09:19:72:e5:d2:4d:60:07:09:db:e3:24:7f:62:
         5b:26:6a:fd:15:43:47:3f:d2:43:27:dd:a5:da:fb:77:2c:19:
         e1:27:0f:24:e7:42:d6:41:e4:dc:1b:04:c8:62:ff:60:22:4f:
         63:65:a1:ff:28:4b:34:41:9a:69:96:71:0c:ef:fe:9d:e5:46:
         13:a1:dc:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:29:25 2026 by rpki-client