Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4B145B6D0FD3CA90448F4302F3851DA4E85F7B5C644E280464C7578318BB67A0/0/3137372e3132362e34382e302f32322d3232203d3e20323731383632.roa
File:                     3137372e3132362e34382e302f32322d3232203d3e20323731383632.roa (raw, json)
Hash identifier:          RRCzc7qIkeVt/aZCEJhQD+GsdlCskYHXwXURT3Yf3Mw=
Subject key identifier:   5C:84:8F:8F:52:F2:BB:E4:55:54:77:96:57:E1:30:22:9B:AE:B4:8C
Certificate issuer:       /CN=DCDA04F0CBDD74C0B90014116FCD138125A6F0B9
Certificate serial:       6A0DCAA4E13208A2B9852262BEF5C4F258579731
Authority key identifier: DC:DA:04:F0:CB:DD:74:C0:B9:00:14:11:6F:CD:13:81:25:A6:F0:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDA04F0CBDD74C0B90014116FCD138125A6F0B9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4B145B6D0FD3CA90448F4302F3851DA4E85F7B5C644E280464C7578318BB67A0/0/3137372e3132362e34382e302f32322d3232203d3e20323731383632.roa
Signing time:             Sat 23 May 2026 13:43:59 +0000
ROA not before:           Sat 23 May 2026 13:38:59 +0000
ROA not after:            Sat 22 May 2027 13:43:59 +0000
asID:                     271862
IP address blocks:        177.126.48.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4B145B6D0FD3CA90448F4302F3851DA4E85F7B5C644E280464C7578318BB67A0/0/DCDA04F0CBDD74C0B90014116FCD138125A6F0B9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4B145B6D0FD3CA90448F4302F3851DA4E85F7B5C644E280464C7578318BB67A0/0/DCDA04F0CBDD74C0B90014116FCD138125A6F0B9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDA04F0CBDD74C0B90014116FCD138125A6F0B9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:0d:ca:a4:e1:32:08:a2:b9:85:22:62:be:f5:c4:f2:58:57:97:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCDA04F0CBDD74C0B90014116FCD138125A6F0B9
        Validity
            Not Before: May 23 13:38:59 2026 GMT
            Not After : May 22 13:43:59 2027 GMT
        Subject: CN=5C848F8F52F2BBE45554779657E130229BAEB48C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:9e:30:78:03:2e:72:89:da:7b:c4:b7:64:e5:
                    46:ea:c0:2d:18:30:7c:0a:05:7e:c7:44:7d:9b:df:
                    cd:1d:2c:73:e9:f7:05:87:42:f2:ef:8d:f3:fc:db:
                    7a:5a:57:e3:85:30:75:c9:0b:d6:be:f2:cd:8c:de:
                    3f:58:dd:cf:4f:e5:95:b4:12:61:a0:fc:de:17:81:
                    e6:10:58:ff:8e:b6:01:d1:96:8a:51:37:6a:59:4f:
                    cf:9a:6a:88:4d:11:ec:1a:22:9e:cc:69:5e:79:4b:
                    f3:9b:80:09:6a:dd:97:66:7a:d4:8d:dd:f8:70:54:
                    7c:b8:4a:e3:00:e3:b9:62:03:c8:ca:37:8f:26:17:
                    b9:0d:ba:bb:b9:95:25:e6:b4:b8:a5:cb:d3:4b:10:
                    0c:55:af:46:a8:0a:2e:0e:ee:e5:40:cc:41:66:06:
                    2d:1d:66:e9:80:39:6d:76:c2:51:37:dc:18:f1:3a:
                    55:e4:5a:1f:3d:f8:99:73:a8:44:bb:a3:79:c6:6b:
                    ba:c3:ab:77:0f:dd:43:61:c1:16:17:89:21:48:33:
                    31:35:81:05:52:54:29:13:56:0a:88:23:29:4e:8d:
                    92:72:ca:83:c6:bd:01:3e:8e:55:b6:fd:99:13:6e:
                    15:22:7b:0f:e1:52:9e:42:3c:73:8c:50:bb:c9:c1:
                    8c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:84:8F:8F:52:F2:BB:E4:55:54:77:96:57:E1:30:22:9B:AE:B4:8C
            X509v3 Authority Key Identifier:
                keyid:DC:DA:04:F0:CB:DD:74:C0:B9:00:14:11:6F:CD:13:81:25:A6:F0:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4B145B6D0FD3CA90448F4302F3851DA4E85F7B5C644E280464C7578318BB67A0/0/DCDA04F0CBDD74C0B90014116FCD138125A6F0B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDA04F0CBDD74C0B90014116FCD138125A6F0B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4B145B6D0FD3CA90448F4302F3851DA4E85F7B5C644E280464C7578318BB67A0/0/3137372e3132362e34382e302f32322d3232203d3e20323731383632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         96:6c:ff:5b:09:1f:7d:9b:24:fa:12:a3:0f:52:05:a7:9d:d2:
         9d:cc:1e:3e:9a:4e:39:da:6a:ca:ab:9e:a6:a2:32:f6:3a:13:
         77:b2:d7:3a:fb:6f:c0:f2:a8:a9:90:d1:6d:6d:a7:64:1a:62:
         7b:0b:a7:2a:d4:0c:dd:a4:ad:f6:d6:01:d1:27:c3:26:0c:ad:
         9e:a4:ef:da:9b:6d:d3:1a:2b:7f:2e:3b:b9:32:ec:74:3a:af:
         7f:6c:ac:8c:c3:05:ab:26:3e:21:34:00:b5:b2:15:a8:1f:5b:
         b2:ef:24:59:dd:c1:e7:d0:bf:7d:51:a7:a2:f2:4f:01:22:9a:
         c7:f5:75:30:16:1b:8d:bf:e5:2f:8d:a7:05:eb:86:0d:84:1a:
         15:81:30:0e:5e:eb:15:f8:1d:9c:65:c1:ce:d8:be:a5:c2:70:
         41:5c:0e:e5:43:a8:86:78:6d:90:f5:bb:f0:ba:27:71:04:4c:
         42:ec:a3:38:ff:a8:8b:40:b3:99:39:9a:ca:b7:8e:36:3d:38:
         0b:b2:15:bb:9b:c8:62:85:7a:b6:62:80:10:ea:cd:22:8a:24:
         75:ab:a3:76:63:5b:7d:eb:37:2c:ff:6c:28:b3:f1:91:49:64:
         1a:bf:59:54:8d:9a:ed:53:38:f8:fb:2c:1e:15:d8:5e:38:eb:
         bb:34:a7:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:40:16 2026 by rpki-client