Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B7637F3972392C9408841506A009C0E58793566DC9ECF11D2B194EDAA707D0AE/0/3138312e34312e37382e302f32342d3234203d3e203139383633.roa
File:                     3138312e34312e37382e302f32342d3234203d3e203139383633.roa (raw, json)
Hash identifier:          lhmK26C5ipaYh29sEhr/kNl7L7aYd4FQjVXnnqArN84=
Subject key identifier:   3F:6E:AF:FB:25:30:1E:74:DC:17:D0:78:BF:E5:C3:37:BC:99:6C:11
Certificate issuer:       /CN=56BA7549B3C1698AA281B67A49603425B3B3D575
Certificate serial:       5A0E8E7A68DDDF01856BC4323AF6012734717943
Authority key identifier: 56:BA:75:49:B3:C1:69:8A:A2:81:B6:7A:49:60:34:25:B3:B3:D5:75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/56BA7549B3C1698AA281B67A49603425B3B3D575.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B7637F3972392C9408841506A009C0E58793566DC9ECF11D2B194EDAA707D0AE/0/3138312e34312e37382e302f32342d3234203d3e203139383633.roa
Signing time:             Wed 01 Apr 2026 14:30:01 +0000
ROA not before:           Wed 01 Apr 2026 14:25:01 +0000
ROA not after:            Wed 31 Mar 2027 14:30:01 +0000
asID:                     19863
IP address blocks:        181.41.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B7637F3972392C9408841506A009C0E58793566DC9ECF11D2B194EDAA707D0AE/0/56BA7549B3C1698AA281B67A49603425B3B3D575.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B7637F3972392C9408841506A009C0E58793566DC9ECF11D2B194EDAA707D0AE/0/56BA7549B3C1698AA281B67A49603425B3B3D575.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/56BA7549B3C1698AA281B67A49603425B3B3D575.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 04:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:0e:8e:7a:68:dd:df:01:85:6b:c4:32:3a:f6:01:27:34:71:79:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56BA7549B3C1698AA281B67A49603425B3B3D575
        Validity
            Not Before: Apr  1 14:25:01 2026 GMT
            Not After : Mar 31 14:30:01 2027 GMT
        Subject: CN=3F6EAFFB25301E74DC17D078BFE5C337BC996C11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:23:f4:99:2e:c9:16:60:29:01:1c:66:e2:c1:
                    4f:5f:e4:b5:d1:d6:c7:7f:ea:a4:60:b7:ce:7f:16:
                    d0:4a:26:71:9e:f9:21:e6:fd:8b:34:c4:0d:f0:6a:
                    0a:4d:8e:67:2c:9f:0d:6e:c8:8a:be:b3:9b:03:ca:
                    64:e7:96:2c:63:9b:8c:a1:cf:5a:d7:6c:9a:49:8e:
                    13:72:f0:26:70:8d:5f:e6:d3:cf:f4:a2:c8:c7:d9:
                    cd:94:be:37:bb:33:f5:e9:ed:15:41:a3:6d:42:81:
                    4d:c7:06:97:72:ce:e3:e3:4d:87:fb:d6:fc:0e:00:
                    94:60:78:e7:3e:d6:14:59:e0:9d:ae:c9:cf:ce:86:
                    47:33:a4:37:4c:cf:1d:b8:1e:0d:64:f5:5d:e3:d2:
                    26:07:cc:7d:2c:53:17:bf:eb:c0:67:3d:cd:dc:4a:
                    4d:b8:dd:58:ea:a3:46:83:60:03:c0:97:9d:67:d8:
                    9c:0c:74:19:94:b7:d3:4d:f1:37:1f:b7:dc:6a:3e:
                    48:17:ff:c2:ed:37:70:1d:83:bf:68:d8:4c:19:f3:
                    d6:fb:c3:10:11:da:2c:82:13:c4:20:66:89:96:25:
                    a9:23:bd:5b:e7:fb:90:8f:b6:ed:1b:01:b9:c7:d7:
                    44:45:63:cc:a6:b6:e7:8e:94:9a:cc:8c:b8:ce:aa:
                    dd:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:6E:AF:FB:25:30:1E:74:DC:17:D0:78:BF:E5:C3:37:BC:99:6C:11
            X509v3 Authority Key Identifier:
                keyid:56:BA:75:49:B3:C1:69:8A:A2:81:B6:7A:49:60:34:25:B3:B3:D5:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B7637F3972392C9408841506A009C0E58793566DC9ECF11D2B194EDAA707D0AE/0/56BA7549B3C1698AA281B67A49603425B3B3D575.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/56BA7549B3C1698AA281B67A49603425B3B3D575.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B7637F3972392C9408841506A009C0E58793566DC9ECF11D2B194EDAA707D0AE/0/3138312e34312e37382e302f32342d3234203d3e203139383633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.41.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:a2:6b:8e:45:35:91:7b:0a:32:16:0f:cb:1e:12:3b:4e:cf:
         7d:f0:2e:d1:23:ac:5c:b2:69:93:b1:61:43:4d:6f:f7:de:e6:
         ed:24:0a:d0:de:d9:ea:2b:c0:de:a1:28:e4:6c:ae:6e:fa:2e:
         9d:f8:9d:87:61:b6:f2:ab:f7:15:98:62:f9:d0:fb:4b:85:1f:
         4b:c0:1f:84:ec:7f:49:be:ef:39:4e:90:85:9b:7c:5f:32:f7:
         b8:1f:06:33:e1:fa:c9:a6:f7:6c:06:1d:97:76:bf:b3:99:cc:
         e5:92:85:93:10:8c:46:ae:10:c4:68:93:b0:25:de:e1:2f:dd:
         b5:67:30:0f:d5:7f:74:45:6f:88:c4:97:87:8a:13:b3:81:9a:
         26:4d:cd:fd:80:43:c2:17:9a:42:6b:ea:ea:cc:ad:b0:a8:15:
         b3:07:32:87:63:0a:c3:23:94:e5:43:e7:d4:85:71:b9:9d:a9:
         8e:19:98:b8:c5:b1:1d:39:41:44:f9:07:93:62:2f:d9:d3:d5:
         da:aa:0f:32:b4:0a:1d:c3:68:fa:89:29:66:1f:2d:42:8f:ae:
         1a:a8:53:f4:7a:5d:8a:7f:f5:e5:17:72:f6:f4:50:c3:dd:23:
         c8:e7:09:75:58:c3:28:62:98:b0:cd:a5:6e:24:d5:0e:6d:2e:
         91:99:87:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:01:37 2026 by rpki-client