Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4B145B6D0FD3CA90448F4302F3851DA4E85F7B5C644E280464C7578318BB67A0/0/3137372e3132362e34392e302f32342d3234203d3e20323731383632.roa
File:                     3137372e3132362e34392e302f32342d3234203d3e20323731383632.roa (raw, json)
Hash identifier:          arAKAhoGea3oOXB09bfOJ7UIANbfWe0wtJpV2+83tnk=
Subject key identifier:   A9:DC:FE:F9:A4:45:90:8D:33:9F:54:3B:75:7A:5F:B8:1B:98:85:07
Certificate issuer:       /CN=DCDA04F0CBDD74C0B90014116FCD138125A6F0B9
Certificate serial:       766593A6FC935F138991228701CA94E7B65E5839
Authority key identifier: DC:DA:04:F0:CB:DD:74:C0:B9:00:14:11:6F:CD:13:81:25:A6:F0:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDA04F0CBDD74C0B90014116FCD138125A6F0B9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4B145B6D0FD3CA90448F4302F3851DA4E85F7B5C644E280464C7578318BB67A0/0/3137372e3132362e34392e302f32342d3234203d3e20323731383632.roa
Signing time:             Sat 23 May 2026 13:44:00 +0000
ROA not before:           Sat 23 May 2026 13:39:00 +0000
ROA not after:            Sat 22 May 2027 13:44:00 +0000
asID:                     271862
IP address blocks:        177.126.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4B145B6D0FD3CA90448F4302F3851DA4E85F7B5C644E280464C7578318BB67A0/0/DCDA04F0CBDD74C0B90014116FCD138125A6F0B9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4B145B6D0FD3CA90448F4302F3851DA4E85F7B5C644E280464C7578318BB67A0/0/DCDA04F0CBDD74C0B90014116FCD138125A6F0B9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDA04F0CBDD74C0B90014116FCD138125A6F0B9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:65:93:a6:fc:93:5f:13:89:91:22:87:01:ca:94:e7:b6:5e:58:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCDA04F0CBDD74C0B90014116FCD138125A6F0B9
        Validity
            Not Before: May 23 13:39:00 2026 GMT
            Not After : May 22 13:44:00 2027 GMT
        Subject: CN=A9DCFEF9A445908D339F543B757A5FB81B988507
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:35:3d:4c:0e:ac:15:0b:98:04:ee:48:d4:4e:
                    7b:f2:8f:f1:49:8c:57:f9:ba:4e:08:7d:83:8e:f7:
                    be:ef:7b:e6:ba:c6:8e:0c:0d:1f:8d:37:2f:e0:24:
                    de:98:71:c8:13:08:37:17:0c:2f:87:46:38:cc:4d:
                    fd:87:f5:7a:d2:e5:5a:73:c2:5b:56:0b:e1:a9:98:
                    0f:9c:c8:06:ae:45:ec:e6:56:b4:5d:6f:fd:6d:d1:
                    be:47:6c:fd:09:4a:a7:99:53:9e:a6:df:6f:75:6a:
                    08:49:bf:b0:eb:f9:da:db:ec:24:c9:82:2d:50:f8:
                    4e:fc:25:91:e2:00:12:fb:f0:1b:77:2b:33:0e:f3:
                    55:ed:5b:f8:18:62:bf:87:7e:ce:ee:c5:42:14:5c:
                    a2:02:0a:34:f1:e3:85:d7:2b:4e:09:4b:86:74:03:
                    77:1b:04:65:81:43:b9:1d:cb:e9:23:92:22:a5:56:
                    e8:3f:4a:11:18:a8:d7:0a:9a:23:c1:7a:7c:b0:35:
                    4e:28:a2:9f:82:d8:a1:12:0b:37:30:42:c4:0c:37:
                    61:76:15:ef:54:8e:ed:c0:a0:c3:39:9d:c3:50:a0:
                    e5:4c:9a:46:8a:85:3f:dc:71:9d:9d:97:9f:0d:35:
                    ee:6e:3a:bf:8d:47:68:f5:6f:0b:0a:0d:c3:47:27:
                    f6:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:DC:FE:F9:A4:45:90:8D:33:9F:54:3B:75:7A:5F:B8:1B:98:85:07
            X509v3 Authority Key Identifier:
                keyid:DC:DA:04:F0:CB:DD:74:C0:B9:00:14:11:6F:CD:13:81:25:A6:F0:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4B145B6D0FD3CA90448F4302F3851DA4E85F7B5C644E280464C7578318BB67A0/0/DCDA04F0CBDD74C0B90014116FCD138125A6F0B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDA04F0CBDD74C0B90014116FCD138125A6F0B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4B145B6D0FD3CA90448F4302F3851DA4E85F7B5C644E280464C7578318BB67A0/0/3137372e3132362e34392e302f32342d3234203d3e20323731383632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:e1:54:ef:1c:04:0c:16:4a:75:84:21:4c:88:e8:ff:5c:c3:
         c2:dd:1f:5e:54:c7:f7:5d:95:a5:b8:53:1b:34:0a:14:0b:d8:
         d8:55:b4:80:53:78:6f:fa:f9:e3:a7:3c:1d:e2:3f:b2:34:f9:
         6d:2d:0d:2b:02:41:16:34:33:ac:98:0d:a4:91:0d:bd:06:ac:
         75:e0:37:58:d7:6c:a1:6f:9f:ac:49:8d:c0:ad:ab:ff:52:2b:
         9a:90:18:14:61:0c:13:ee:8b:71:05:57:3e:b7:e4:d0:be:c2:
         82:2c:65:c5:af:fe:a4:a5:b9:08:37:06:3f:76:13:37:6a:7e:
         1a:ee:97:49:c8:13:90:93:9c:d2:13:f8:a1:67:41:73:c5:6f:
         0e:d1:1e:04:c3:11:17:ac:11:46:5b:6a:90:b3:c7:28:13:d1:
         3b:3e:d7:98:84:6c:c7:a0:b2:76:eb:94:70:34:be:ac:53:f4:
         79:7b:38:0a:6a:7e:54:49:8d:30:40:21:4d:bb:03:fa:64:86:
         36:43:5b:6a:90:19:9e:03:34:ad:7d:6a:12:28:3d:99:b5:cc:
         e5:e2:ab:52:42:94:83:aa:95:8b:94:6d:63:be:6c:49:13:7a:
         6e:60:96:af:93:8b:17:89:bf:23:34:ec:bd:18:af:84:a7:4a:
         06:6e:d6:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:40:57 2026 by rpki-client