Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C61F4D8E318209841A7C3F556C9B3ADA6D33B229018202AAB1CAFA46B60B8770/0/3136382e3138312e37372e302f32342d3234203d3e203232303131.roa
File:                     3136382e3138312e37372e302f32342d3234203d3e203232303131.roa (raw, json)
Hash identifier:          zFrua/s98xL1ZMXhCmiUkx5FzMTgP4o+q7ozBAbbwhU=
Subject key identifier:   4F:29:32:E0:B8:EF:CD:5E:57:98:AC:5D:43:EE:C5:40:D7:21:3B:69
Certificate issuer:       /CN=49F51DA6C4B18E80CACE58916331C212E02860C4
Certificate serial:       18D2DB3EDD1FAB3BB0928E9A889306DFF3C03F14
Authority key identifier: 49:F5:1D:A6:C4:B1:8E:80:CA:CE:58:91:63:31:C2:12:E0:28:60:C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49F51DA6C4B18E80CACE58916331C212E02860C4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C61F4D8E318209841A7C3F556C9B3ADA6D33B229018202AAB1CAFA46B60B8770/0/3136382e3138312e37372e302f32342d3234203d3e203232303131.roa
Signing time:             Fri 27 Mar 2026 01:25:00 +0000
ROA not before:           Fri 27 Mar 2026 01:20:00 +0000
ROA not after:            Fri 26 Mar 2027 01:25:00 +0000
asID:                     22011
IP address blocks:        168.181.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C61F4D8E318209841A7C3F556C9B3ADA6D33B229018202AAB1CAFA46B60B8770/0/49F51DA6C4B18E80CACE58916331C212E02860C4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C61F4D8E318209841A7C3F556C9B3ADA6D33B229018202AAB1CAFA46B60B8770/0/49F51DA6C4B18E80CACE58916331C212E02860C4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49F51DA6C4B18E80CACE58916331C212E02860C4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Apr 2026 08:32:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:d2:db:3e:dd:1f:ab:3b:b0:92:8e:9a:88:93:06:df:f3:c0:3f:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49F51DA6C4B18E80CACE58916331C212E02860C4
        Validity
            Not Before: Mar 27 01:20:00 2026 GMT
            Not After : Mar 26 01:25:00 2027 GMT
        Subject: CN=4F2932E0B8EFCD5E5798AC5D43EEC540D7213B69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4e:7a:59:aa:84:05:c7:25:f6:6f:89:3a:43:
                    b7:4d:d0:05:17:47:75:1b:a9:ae:e9:ec:9c:f3:b6:
                    da:7e:c3:d1:a1:18:77:2a:5f:6b:fd:b1:69:79:b3:
                    e0:f6:d5:92:2d:42:69:bc:4f:60:69:86:7f:bb:6f:
                    2c:c4:0d:bd:53:9b:1a:e1:2f:40:6e:69:1b:da:ef:
                    1c:7f:24:44:f7:33:19:bf:24:32:53:a0:98:20:bc:
                    aa:57:ca:fb:c6:f8:a0:7c:3c:44:f4:5a:b3:8c:b1:
                    ce:3e:24:be:4b:69:76:d6:e1:8c:26:d3:d4:a4:18:
                    4e:33:51:79:f6:b1:e4:ff:f7:a4:d8:88:09:50:5a:
                    db:5a:bd:fe:34:1f:39:29:59:1e:28:71:4b:3b:f0:
                    cb:16:13:58:e0:f7:3d:05:63:c7:b2:07:ff:4a:1b:
                    b9:ac:a3:ea:f5:2b:03:1d:00:3e:a5:c6:90:67:c1:
                    33:35:e0:14:28:4c:fc:ce:74:19:34:4b:66:0c:d0:
                    cb:02:99:79:63:70:7b:e1:81:54:21:f0:0b:a2:20:
                    b2:2d:c4:a2:d9:77:84:3d:c2:ce:0a:4b:4d:7c:38:
                    1e:3a:47:95:db:8d:f1:c7:31:88:9b:ea:1e:cf:f0:
                    b0:79:05:8e:43:a0:97:f5:af:6f:25:9b:06:4a:bc:
                    d6:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:29:32:E0:B8:EF:CD:5E:57:98:AC:5D:43:EE:C5:40:D7:21:3B:69
            X509v3 Authority Key Identifier:
                keyid:49:F5:1D:A6:C4:B1:8E:80:CA:CE:58:91:63:31:C2:12:E0:28:60:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C61F4D8E318209841A7C3F556C9B3ADA6D33B229018202AAB1CAFA46B60B8770/0/49F51DA6C4B18E80CACE58916331C212E02860C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49F51DA6C4B18E80CACE58916331C212E02860C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C61F4D8E318209841A7C3F556C9B3ADA6D33B229018202AAB1CAFA46B60B8770/0/3136382e3138312e37372e302f32342d3234203d3e203232303131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:84:bc:41:c5:fc:76:9b:24:d0:f7:6c:fd:c2:c1:8e:8f:2a:
         bd:87:ea:b4:72:50:0d:06:83:15:d8:79:2b:28:ff:94:a2:9d:
         6b:03:b0:36:6d:b6:fb:49:3d:79:46:4f:59:0f:e4:51:ff:9e:
         51:e1:1d:68:91:51:01:79:02:f4:f7:89:03:5a:51:45:64:bb:
         20:16:80:72:48:74:db:8e:46:88:26:d5:7f:c7:27:97:6a:1d:
         cd:da:01:94:3f:b3:96:d1:4f:cd:77:91:25:15:e7:74:14:30:
         e1:fd:85:49:1c:11:44:66:d4:2f:cc:f5:56:07:7e:5a:04:02:
         24:0a:61:f7:2b:df:1a:42:20:a3:ed:7c:cc:8e:98:bd:4a:d6:
         62:f6:15:32:f0:64:e7:c0:e0:9e:5a:57:a9:43:f3:37:46:8e:
         5b:0e:df:5c:77:ce:4c:c2:2f:4a:d2:21:d3:41:dc:9a:58:27:
         69:09:a0:6b:0e:2d:e3:5b:98:49:8e:17:e4:9b:ba:58:fb:2d:
         ec:38:66:2b:72:76:37:38:0d:b1:03:3e:a8:32:2d:f5:fa:49:
         3b:76:ea:04:9f:2b:4c:83:15:b4:35:10:59:50:35:02:28:61:
         cb:a8:32:33:14:37:f7:53:ca:2f:77:32:8c:91:f2:fe:45:0c:
         65:45:1a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:56:58 2026 by rpki-client