Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/084B3E1616B843A5943E3E9082A0D26AFAEBC8EF9EF20E26AAD49531C3DC9494/0/3230312e3133312e37392e302f32342d3234203d3e203136373031.roa
File:                     3230312e3133312e37392e302f32342d3234203d3e203136373031.roa (raw, json)
Hash identifier:          MSCUVQy3P7C7ARyVJwAq2QfmjCMD/NPjD5P13Q1Pv68=
Subject key identifier:   71:FE:58:D3:8C:37:A1:FD:BB:EB:46:78:22:C7:AD:C3:1C:E4:86:48
Certificate issuer:       /CN=12072E6C1A48AEC19505180D145D1D56D72980F3
Certificate serial:       779D3BF0363DCD5BC75620835286774007FFDC60
Authority key identifier: 12:07:2E:6C:1A:48:AE:C1:95:05:18:0D:14:5D:1D:56:D7:29:80:F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12072E6C1A48AEC19505180D145D1D56D72980F3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/084B3E1616B843A5943E3E9082A0D26AFAEBC8EF9EF20E26AAD49531C3DC9494/0/3230312e3133312e37392e302f32342d3234203d3e203136373031.roa
Signing time:             Tue 07 Apr 2026 20:37:52 +0000
ROA not before:           Tue 07 Apr 2026 20:32:52 +0000
ROA not after:            Tue 06 Apr 2027 20:37:52 +0000
asID:                     16701
IP address blocks:        201.131.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/084B3E1616B843A5943E3E9082A0D26AFAEBC8EF9EF20E26AAD49531C3DC9494/0/12072E6C1A48AEC19505180D145D1D56D72980F3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/084B3E1616B843A5943E3E9082A0D26AFAEBC8EF9EF20E26AAD49531C3DC9494/0/12072E6C1A48AEC19505180D145D1D56D72980F3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12072E6C1A48AEC19505180D145D1D56D72980F3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 04:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:9d:3b:f0:36:3d:cd:5b:c7:56:20:83:52:86:77:40:07:ff:dc:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12072E6C1A48AEC19505180D145D1D56D72980F3
        Validity
            Not Before: Apr  7 20:32:52 2026 GMT
            Not After : Apr  6 20:37:52 2027 GMT
        Subject: CN=71FE58D38C37A1FDBBEB467822C7ADC31CE48648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b6:33:24:7d:d4:7c:81:51:09:f8:0b:99:8c:
                    ea:f0:25:10:81:93:04:de:c0:e1:e2:3f:11:74:36:
                    62:fb:6e:ef:b1:e2:68:73:48:4f:d7:b2:bd:f9:d8:
                    75:e5:63:2b:12:10:16:c6:fe:b9:0f:1c:52:df:98:
                    40:8f:b3:ad:cd:fa:11:32:d8:ef:82:ed:1d:1c:f1:
                    3f:d0:14:23:56:2e:a4:9c:1b:d2:97:23:8b:12:a8:
                    85:20:01:d7:f4:8a:e1:d1:c6:62:4d:30:74:d9:88:
                    75:44:0f:17:52:57:bf:0c:ff:51:9d:f8:9d:fa:84:
                    b8:82:71:e9:c7:4e:58:fe:87:cc:07:c3:06:ee:c6:
                    56:ed:92:ad:e1:df:8f:a8:c0:3b:94:03:82:cd:55:
                    07:d3:36:96:c9:83:7d:cd:08:2c:c4:f7:89:7d:e6:
                    43:ef:6c:fa:be:31:58:a2:07:84:1c:69:d3:cb:9d:
                    09:28:50:fd:7f:ee:dc:52:f5:01:71:59:34:d5:0d:
                    c2:a7:4b:80:f2:52:46:af:5a:df:c5:7e:db:d6:fd:
                    28:41:46:80:b9:d8:c8:b5:58:42:ae:7e:5d:8b:ee:
                    0b:7f:1f:89:da:0e:6e:dc:7b:1f:fd:5d:ee:f1:b4:
                    f7:5f:65:e7:43:f0:15:a6:52:53:62:19:0e:cb:fa:
                    90:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:FE:58:D3:8C:37:A1:FD:BB:EB:46:78:22:C7:AD:C3:1C:E4:86:48
            X509v3 Authority Key Identifier:
                keyid:12:07:2E:6C:1A:48:AE:C1:95:05:18:0D:14:5D:1D:56:D7:29:80:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/084B3E1616B843A5943E3E9082A0D26AFAEBC8EF9EF20E26AAD49531C3DC9494/0/12072E6C1A48AEC19505180D145D1D56D72980F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12072E6C1A48AEC19505180D145D1D56D72980F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/084B3E1616B843A5943E3E9082A0D26AFAEBC8EF9EF20E26AAD49531C3DC9494/0/3230312e3133312e37392e302f32342d3234203d3e203136373031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:b6:69:23:42:70:57:77:70:e6:eb:4c:a0:91:70:c5:06:3f:
         1d:5c:d9:53:ed:fd:3a:9c:ae:8f:08:7d:8b:bf:8d:26:3b:34:
         32:b4:c4:2d:a8:ba:55:67:1a:02:75:24:85:62:ee:0c:37:c3:
         31:32:6c:80:37:a5:2b:11:28:b6:58:39:96:1d:85:f8:3b:63:
         f6:d1:15:d1:5e:16:60:18:65:f6:fa:cb:bc:36:5b:f2:aa:9f:
         11:f2:de:ad:f4:60:92:f5:5d:a7:7f:e5:ad:ee:5f:92:4e:b2:
         b8:13:0b:05:b0:09:56:4c:9b:b5:76:88:92:cf:6f:d9:7f:e8:
         f8:21:df:c8:72:84:01:0f:8b:72:e5:f9:cf:b4:5e:34:b3:d2:
         cb:22:38:da:3d:6c:a2:91:d5:b9:c1:c0:c8:1c:db:27:59:18:
         3d:b4:c0:e7:68:4b:4f:8a:7e:aa:3a:b2:2d:a8:f6:21:06:42:
         25:82:76:9f:1e:da:94:a4:35:87:19:7b:2c:82:d2:93:7d:13:
         30:22:a2:5f:c7:0b:4c:4c:c4:b3:1d:00:f9:bf:fc:8e:d0:f9:
         73:dc:45:fe:26:80:00:5e:78:5e:8e:e1:32:f0:13:0b:09:b5:
         fe:32:9b:63:46:f6:4c:50:77:3b:3a:ee:31:ad:bf:a2:b5:1c:
         6b:75:30:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:38:19 2026 by rpki-client