Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/7B56E16EB5165EE881F1E257222FEB94C62BA85CA4CC3947A9BB5AB077020662/0/3133312e3139362e3137362e302f32322d3234203d3e20323635373537.roa
File:                     3133312e3139362e3137362e302f32322d3234203d3e20323635373537.roa (raw, json)
Hash identifier:          eM5Sb7t5wu7vbAjBZK1ZSPScDXeeq37NXnG5WvR4UJQ=
Subject key identifier:   17:58:CC:F4:D5:35:38:FE:99:32:50:AA:0F:60:92:82:36:AD:D1:AC
Certificate issuer:       /CN=C6D272EFD56E520A8547DB043AB04F349FEC4166
Certificate serial:       6532EF324C2B6C963987456125DA6669373ECD36
Authority key identifier: C6:D2:72:EF:D5:6E:52:0A:85:47:DB:04:3A:B0:4F:34:9F:EC:41:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6D272EFD56E520A8547DB043AB04F349FEC4166.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7B56E16EB5165EE881F1E257222FEB94C62BA85CA4CC3947A9BB5AB077020662/0/3133312e3139362e3137362e302f32322d3234203d3e20323635373537.roa
Signing time:             Tue 22 Sep 2026 14:36:24 +0000
ROA not before:           Tue 22 Sep 2026 14:31:24 +0000
ROA not after:            Tue 21 Sep 2027 14:36:24 +0000
asID:                     265757
IP address blocks:        131.196.176.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7B56E16EB5165EE881F1E257222FEB94C62BA85CA4CC3947A9BB5AB077020662/0/C6D272EFD56E520A8547DB043AB04F349FEC4166.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7B56E16EB5165EE881F1E257222FEB94C62BA85CA4CC3947A9BB5AB077020662/0/C6D272EFD56E520A8547DB043AB04F349FEC4166.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6D272EFD56E520A8547DB043AB04F349FEC4166.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 08:35:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:32:ef:32:4c:2b:6c:96:39:87:45:61:25:da:66:69:37:3e:cd:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6D272EFD56E520A8547DB043AB04F349FEC4166
        Validity
            Not Before: Sep 22 14:31:24 2026 GMT
            Not After : Sep 21 14:36:24 2027 GMT
        Subject: CN=1758CCF4D53538FE993250AA0F60928236ADD1AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:87:25:15:b6:7d:b2:85:3d:b8:36:4f:86:67:
                    51:54:c0:14:cc:f7:60:42:04:ed:09:00:2c:50:df:
                    e9:0c:c4:1c:72:67:bf:7d:cc:a0:8c:af:76:af:89:
                    6c:af:5f:9d:66:ee:4b:69:51:24:ec:d7:e2:56:4c:
                    41:31:63:f3:bb:dc:1a:cd:d2:b3:f2:d7:eb:25:20:
                    10:ce:4a:7c:df:2f:fb:e5:86:4f:e9:87:b0:0e:d6:
                    45:69:9e:12:2d:ae:27:07:fb:1a:fc:12:55:b3:3e:
                    ba:16:06:8c:fd:9a:dc:c6:d6:eb:0a:7e:bf:d0:a8:
                    6f:70:02:fe:e4:a8:8c:39:b6:fe:6d:bd:ca:c8:0f:
                    2b:84:e6:81:c6:41:71:9a:61:20:a3:71:8a:70:78:
                    73:5b:1a:6b:5d:f5:0d:bb:b1:b5:4f:ec:98:f0:34:
                    12:77:20:56:f6:5b:b1:2f:7e:39:b2:15:ef:dc:96:
                    a1:86:bf:34:06:e5:6f:0b:c0:64:ff:a1:35:ac:89:
                    0e:62:50:90:48:6a:33:f3:58:c0:c4:64:a6:ef:f4:
                    f4:2c:f2:b7:cf:da:18:1c:e4:b9:52:5a:f4:cb:8a:
                    6d:88:0f:b0:db:fe:5f:21:1e:26:9e:37:46:20:fa:
                    c2:cf:00:2c:7e:ef:9e:9a:12:f2:f3:a3:26:4a:8c:
                    7b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:58:CC:F4:D5:35:38:FE:99:32:50:AA:0F:60:92:82:36:AD:D1:AC
            X509v3 Authority Key Identifier:
                keyid:C6:D2:72:EF:D5:6E:52:0A:85:47:DB:04:3A:B0:4F:34:9F:EC:41:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7B56E16EB5165EE881F1E257222FEB94C62BA85CA4CC3947A9BB5AB077020662/0/C6D272EFD56E520A8547DB043AB04F349FEC4166.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6D272EFD56E520A8547DB043AB04F349FEC4166.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B56E16EB5165EE881F1E257222FEB94C62BA85CA4CC3947A9BB5AB077020662/0/3133312e3139362e3137362e302f32322d3234203d3e20323635373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:9f:bb:da:ab:a8:c2:62:6a:79:f0:f5:e1:9b:47:a3:43:a8:
         6d:c5:d8:e2:33:f1:50:ad:18:74:7f:87:aa:52:fa:02:d3:62:
         73:11:40:da:60:8d:08:c9:d0:9d:a5:bd:2c:b6:f2:06:67:79:
         68:87:ea:b8:4a:60:8b:72:18:0c:7b:30:c0:f2:e3:e9:67:eb:
         19:19:ba:d8:1c:eb:8f:ff:e8:5d:84:bd:93:81:dd:51:5c:fe:
         7b:e1:e9:45:74:0a:87:08:c1:b3:50:1f:bb:c7:c5:ef:14:98:
         a7:8a:da:f0:b5:cf:b9:49:66:09:ca:44:e3:cc:a5:26:f9:ae:
         b3:8b:b8:14:50:da:09:38:a8:04:a8:bf:f6:42:5b:0c:ab:a9:
         8b:02:82:59:c8:34:20:82:1b:41:cb:f2:14:8e:36:a9:ec:b5:
         bf:42:e9:30:d1:61:44:f8:13:71:1e:b6:23:11:c1:a4:c3:65:
         24:6b:02:cb:82:b1:82:8c:a1:ed:fd:c8:94:5e:71:22:06:55:
         9e:b9:12:68:8d:2e:34:a4:4a:ce:9d:4a:e7:fe:2b:41:d1:db:
         dc:8f:eb:2a:fa:ad:df:86:42:cc:45:7a:6b:3a:df:69:b6:1a:
         16:95:3d:44:5e:35:1e:81:f4:9e:05:ae:b6:07:9f:8f:6b:0c:
         e6:da:7f:3d
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUZTLvMkwrbJY5h0VhJdpmaTc+zTYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzZEMjcyRUZENTZFNTIwQTg1NDdEQjA0M0FCMDRGMzQ5
RkVDNDE2NjAeFw0yNjA5MjIxNDMxMjRaFw0yNzA5MjExNDM2MjRaMDMxMTAvBgNV
BAMTKDE3NThDQ0Y0RDUzNTM4RkU5OTMyNTBBQTBGNjA5MjgyMzZBREQxQUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9hyUVtn2yhT24Nk+GZ1FUwBTM
92BCBO0JACxQ3+kMxBxyZ799zKCMr3aviWyvX51m7ktpUSTs1+JWTEExY/O73BrN
0rPy1+slIBDOSnzfL/vlhk/ph7AO1kVpnhItricH+xr8ElWzProWBoz9mtzG1usK
fr/QqG9wAv7kqIw5tv5tvcrIDyuE5oHGQXGaYSCjcYpweHNbGmtd9Q27sbVP7Jjw
NBJ3IFb2W7EvfjmyFe/clqGGvzQG5W8LwGT/oTWsiQ5iUJBIajPzWMDEZKbv9PQs
8rfP2hgc5LlSWvTLim2ID7Db/l8hHiaeN0Yg+sLPACx+756aEvLzoyZKjHvzAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUF1jM9NU1OP6ZMlCqD2CSgjat0awwHwYDVR0j
BBgwFoAUxtJy79VuUgqFR9sEOrBPNJ/sQWYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83QjU2RTE2RUI1MTY1RUU4ODFGMUUyNTcyMjJGRUI5NEM2
MkJBODVDQTRDQzM5NDdBOUJCNUFCMDc3MDIwNjYyLzAvQzZEMjcyRUZENTZFNTIw
QTg1NDdEQjA0M0FCMDRGMzQ5RkVDNDE2Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DNkQyNzJFRkQ1NkU1MjBBODU0
N0RCMDQzQUIwNEYzNDlGRUM0MTY2LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0I1NkUxNkVCNTE2NUVFODgxRjFFMjU3MjIyRkVCOTRDNjJCQTg1Q0E0
Q0MzOTQ3QTlCQjVBQjA3NzAyMDY2Mi8wLzMxMzMzMTJlMzEzOTM2MmUzMTM3MzYy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzUzNzM1Mzcucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKD
xLAwDQYJKoZIhvcNAQELBQADggEBAG6fu9qrqMJiannw9eGbR6NDqG3F2OIz8VCt
GHR/h6pS+gLTYnMRQNpgjQjJ0J2lvSy28gZneWiH6rhKYItyGAx7MMDy4+ln6xkZ
utgc64//6F2EvZOB3VFc/nvh6UV0CocIwbNQH7vHxe8UmKeK2vC1z7lJZgnKROPM
pSb5rrOLuBRQ2gk4qASov/ZCWwyrqYsCglnINCCCG0HL8hSONqnstb9C6TDRYUT4
E3EetiMRwaTDZSRrAsuCsYKMoe39yJRecSIGVZ65EmiNLjSkSs6dSuf+K0HR29yP
6yr6rd+GQsxFems632m2GhaVPUReNR6B9J4FrrYHn49rDObafz0=
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:19:14 2026 by rpki-client