Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B7637F3972392C9408841506A009C0E58793566DC9ECF11D2B194EDAA707D0AE/0/3138312e34312e37372e302f32342d3234203d3e203139383633.roa
File:                     3138312e34312e37372e302f32342d3234203d3e203139383633.roa (raw, json)
Hash identifier:          FBrm0c/YHdb+AM3iQz93lrxyeyiBZmM+t/VWO9G1Z/k=
Subject key identifier:   7F:68:73:AA:DA:01:1D:C8:DE:A4:84:AD:3F:81:41:E3:8D:88:C0:90
Certificate issuer:       /CN=56BA7549B3C1698AA281B67A49603425B3B3D575
Certificate serial:       27CCCB36581430FB8A69B3C56913140230DEC407
Authority key identifier: 56:BA:75:49:B3:C1:69:8A:A2:81:B6:7A:49:60:34:25:B3:B3:D5:75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/56BA7549B3C1698AA281B67A49603425B3B3D575.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B7637F3972392C9408841506A009C0E58793566DC9ECF11D2B194EDAA707D0AE/0/3138312e34312e37372e302f32342d3234203d3e203139383633.roa
Signing time:             Wed 01 Apr 2026 14:30:01 +0000
ROA not before:           Wed 01 Apr 2026 14:25:01 +0000
ROA not after:            Wed 31 Mar 2027 14:30:01 +0000
asID:                     19863
IP address blocks:        181.41.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B7637F3972392C9408841506A009C0E58793566DC9ECF11D2B194EDAA707D0AE/0/56BA7549B3C1698AA281B67A49603425B3B3D575.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B7637F3972392C9408841506A009C0E58793566DC9ECF11D2B194EDAA707D0AE/0/56BA7549B3C1698AA281B67A49603425B3B3D575.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/56BA7549B3C1698AA281B67A49603425B3B3D575.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 04:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:cc:cb:36:58:14:30:fb:8a:69:b3:c5:69:13:14:02:30:de:c4:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56BA7549B3C1698AA281B67A49603425B3B3D575
        Validity
            Not Before: Apr  1 14:25:01 2026 GMT
            Not After : Mar 31 14:30:01 2027 GMT
        Subject: CN=7F6873AADA011DC8DEA484AD3F8141E38D88C090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c7:d8:bc:d8:88:c2:9a:13:46:e2:f0:f0:8a:
                    00:b8:d4:5a:24:53:a8:ba:07:06:8d:69:fe:a8:88:
                    dd:ee:72:17:f7:5a:d7:03:2a:f7:dc:47:3b:24:76:
                    e7:22:22:ca:01:bf:bc:4a:77:09:cf:b2:c8:d7:f0:
                    d3:0d:b2:7d:91:fd:02:ab:ac:3e:e4:3c:fd:43:af:
                    fa:0d:cc:56:44:14:47:d9:c0:3c:ed:61:9d:dd:ca:
                    cc:9e:93:be:96:74:a2:70:1a:b3:93:57:d6:1e:13:
                    62:2f:e0:3d:ac:aa:87:59:8a:20:18:f6:4f:09:e8:
                    f7:3d:72:c2:ab:43:35:62:3a:8a:91:a7:4c:83:6d:
                    86:38:e5:2d:8f:17:b2:d9:dc:4a:7d:fd:0a:90:65:
                    80:3c:4f:22:63:65:40:18:9c:d8:cb:ca:b9:80:ac:
                    a7:09:74:a1:31:3c:66:2f:9b:9d:b3:c5:d4:73:4d:
                    d6:05:1d:f8:61:b4:87:a7:d5:83:64:17:d0:65:78:
                    97:92:11:bc:35:f3:75:f8:c3:93:b9:79:bc:65:a9:
                    82:a8:47:e1:f3:ec:30:77:ad:44:b7:a7:3c:cc:37:
                    88:ca:61:70:a8:4b:90:30:b7:d0:fb:98:bd:1d:97:
                    1a:da:b8:a9:49:12:f2:4b:25:81:ac:60:82:dd:52:
                    9e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:68:73:AA:DA:01:1D:C8:DE:A4:84:AD:3F:81:41:E3:8D:88:C0:90
            X509v3 Authority Key Identifier:
                keyid:56:BA:75:49:B3:C1:69:8A:A2:81:B6:7A:49:60:34:25:B3:B3:D5:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B7637F3972392C9408841506A009C0E58793566DC9ECF11D2B194EDAA707D0AE/0/56BA7549B3C1698AA281B67A49603425B3B3D575.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/56BA7549B3C1698AA281B67A49603425B3B3D575.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B7637F3972392C9408841506A009C0E58793566DC9ECF11D2B194EDAA707D0AE/0/3138312e34312e37372e302f32342d3234203d3e203139383633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.41.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:8f:86:96:a1:7c:a5:6b:bf:54:22:60:92:98:d1:2f:62:d6:
         49:57:43:14:ae:2b:e3:03:5a:de:5f:4a:09:eb:76:e6:b4:16:
         58:30:1d:79:ff:a1:1e:c9:36:1a:75:95:4b:a5:0f:9c:d1:57:
         6f:3e:aa:dd:70:5d:b1:61:ce:29:15:bc:ac:71:f8:03:db:7e:
         ad:47:a2:e9:77:e2:98:44:e5:f3:cb:aa:5c:c6:88:0b:30:b5:
         55:6a:5f:5d:7d:83:42:bb:ef:57:9c:88:7e:cb:bf:7a:33:c6:
         64:94:6c:d0:bf:86:8b:b7:c0:f1:89:29:ef:a6:93:ae:67:e1:
         a3:be:49:dc:0c:67:8e:16:84:fe:9d:c5:a7:9c:7d:c7:4c:79:
         fe:8b:d7:07:6c:34:91:a7:e9:4b:96:d9:cb:97:0c:c1:77:62:
         dd:e7:e0:a9:16:a1:5e:4a:d7:3b:a3:ab:ae:99:2f:6d:31:d2:
         cc:51:83:26:96:15:38:74:9e:f2:3c:85:ea:43:fc:d0:31:59:
         d8:ed:f4:7a:b4:f6:9e:b2:f4:78:41:ea:58:08:2d:4d:4a:3c:
         c2:1d:d7:21:8a:99:79:86:bc:f5:5d:09:ca:db:7e:c3:cf:6b:
         07:cd:fb:53:be:7a:7c:c7:56:30:73:d1:21:5a:23:e1:f1:1d:
         22:a5:6f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:33:10 2026 by rpki-client