Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0B43101488BA799FDB85F7CF2366A3E0EB94B5E306C6AD847E6388F20E756590/0/39312e3231362e37372e302f32342d3234203d3e20323734383535.roa
File:                     39312e3231362e37372e302f32342d3234203d3e20323734383535.roa (raw, json)
Hash identifier:          f30Nmod+SmIMtZoxtq4mMyl2KLPOSoKW6yji/vnyIvg=
Subject key identifier:   4A:EB:FD:77:F0:61:8E:34:D3:E5:15:9A:FA:03:56:67:B1:9C:8F:64
Certificate issuer:       /CN=4EA81D6D171BDC87094E6597847845C094934BF8
Certificate serial:       4BEC6E03600D87EFEA4B09AEAE4F63AAA8685A33
Authority key identifier: 4E:A8:1D:6D:17:1B:DC:87:09:4E:65:97:84:78:45:C0:94:93:4B:F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4EA81D6D171BDC87094E6597847845C094934BF8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0B43101488BA799FDB85F7CF2366A3E0EB94B5E306C6AD847E6388F20E756590/0/39312e3231362e37372e302f32342d3234203d3e20323734383535.roa
Signing time:             Tue 31 Mar 2026 12:25:00 +0000
ROA not before:           Tue 31 Mar 2026 12:20:00 +0000
ROA not after:            Tue 30 Mar 2027 12:25:00 +0000
asID:                     274855
IP address blocks:        91.216.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0B43101488BA799FDB85F7CF2366A3E0EB94B5E306C6AD847E6388F20E756590/0/4EA81D6D171BDC87094E6597847845C094934BF8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0B43101488BA799FDB85F7CF2366A3E0EB94B5E306C6AD847E6388F20E756590/0/4EA81D6D171BDC87094E6597847845C094934BF8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4EA81D6D171BDC87094E6597847845C094934BF8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 04:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:ec:6e:03:60:0d:87:ef:ea:4b:09:ae:ae:4f:63:aa:a8:68:5a:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EA81D6D171BDC87094E6597847845C094934BF8
        Validity
            Not Before: Mar 31 12:20:00 2026 GMT
            Not After : Mar 30 12:25:00 2027 GMT
        Subject: CN=4AEBFD77F0618E34D3E5159AFA035667B19C8F64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:49:b4:fd:ad:cf:b0:a6:3b:81:94:21:ab:a4:
                    46:5f:e5:3f:90:4c:d9:06:1b:16:93:f1:c4:9e:29:
                    8d:27:56:6e:7e:25:72:2a:4b:3e:e0:c2:1e:ce:b0:
                    71:46:64:de:e7:dd:2e:49:df:ee:43:92:8e:b0:d8:
                    8a:cd:c8:7f:a8:31:16:6c:7f:7b:74:08:c3:e8:18:
                    fe:eb:68:4b:a6:fe:b2:5c:ee:20:03:5e:e9:87:b3:
                    3f:ef:fb:b9:8f:ec:17:48:7b:44:8d:d3:1d:0b:da:
                    7a:13:0e:38:c6:ec:b7:82:a1:5c:d1:cc:42:7d:bb:
                    50:4a:81:8f:80:4a:f3:be:91:0e:fd:fd:4a:8b:b3:
                    60:66:e3:d9:2a:c1:7d:d9:22:eb:1c:6a:1e:6b:86:
                    3f:d1:1a:12:77:b6:4a:d9:a5:4d:a9:2e:f2:ba:b4:
                    b3:0b:8b:fb:30:3a:63:13:1c:71:89:81:8d:54:54:
                    00:fb:d4:21:08:97:3d:4c:6c:a8:d3:ff:1e:69:5d:
                    a3:50:5b:34:3a:ad:46:6e:04:ef:64:d9:8b:bb:de:
                    e3:a0:b0:dd:38:49:66:5a:8b:22:f3:69:07:02:42:
                    ea:4b:57:60:38:d5:90:79:96:af:04:ea:63:88:a0:
                    72:bb:24:0f:3e:48:b1:87:ff:19:f2:64:2b:5b:e0:
                    c9:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:EB:FD:77:F0:61:8E:34:D3:E5:15:9A:FA:03:56:67:B1:9C:8F:64
            X509v3 Authority Key Identifier:
                keyid:4E:A8:1D:6D:17:1B:DC:87:09:4E:65:97:84:78:45:C0:94:93:4B:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0B43101488BA799FDB85F7CF2366A3E0EB94B5E306C6AD847E6388F20E756590/0/4EA81D6D171BDC87094E6597847845C094934BF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4EA81D6D171BDC87094E6597847845C094934BF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0B43101488BA799FDB85F7CF2366A3E0EB94B5E306C6AD847E6388F20E756590/0/39312e3231362e37372e302f32342d3234203d3e20323734383535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.216.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:b1:f6:b0:e4:56:ff:52:a4:45:fe:bc:09:c3:e3:2f:c9:7c:
         04:d1:2f:4e:45:35:7e:a4:be:59:7b:ef:4b:81:57:71:a2:1b:
         8b:64:21:fc:b4:88:26:bf:1a:d8:7d:42:4d:c9:7e:37:21:7e:
         a9:40:2b:5c:bb:9d:3b:51:e2:1f:d5:e6:9c:25:12:36:10:8c:
         5d:f7:2b:09:b4:2d:76:21:3a:ca:c4:d1:5a:87:ec:44:3b:d3:
         03:10:fa:91:1b:6a:56:9e:57:f5:aa:65:e8:05:ea:fb:37:d3:
         22:e6:12:6c:c8:a9:aa:b2:67:28:09:54:13:56:07:8b:8f:e2:
         0e:e9:b8:31:89:1b:0d:54:0e:16:49:76:56:bf:40:b6:d4:a5:
         a2:01:4e:71:b9:7d:e4:bd:c8:ef:3f:50:4d:e8:4b:a3:26:f4:
         14:6a:61:ed:54:c1:dd:7b:5e:f6:31:32:7c:05:e0:2d:20:44:
         1f:de:0f:d3:a5:7a:20:10:d1:c5:c7:e9:f5:d0:6e:4e:29:4f:
         1f:cc:36:cf:f9:6a:88:84:e8:28:12:08:50:d5:a1:63:b0:48:
         f8:f4:be:91:20:13:c4:fd:8c:06:6e:c2:1b:84:4c:8e:d3:68:
         e7:2c:74:26:b2:b3:71:3a:98:4e:8d:b9:8d:84:75:d2:b3:b3:
         b3:4d:c1:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:01:42 2026 by rpki-client