Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/36362e3233312e36342e302f32302d3230203d3e203233303331.roa
File:                     36362e3233312e36342e302f32302d3230203d3e203233303331.roa (raw, json)
Hash identifier:          T3RskjPc+5OY3rxIvfia2PwV2YuRCZUjvyIKuEdEOX0=
Subject key identifier:   F4:1B:BA:89:4F:EA:D3:B3:95:AE:B1:76:55:37:C8:7F:EF:62:26:2B
Certificate issuer:       /CN=C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0
Certificate serial:       3DAFEF99F35762300DE18A093A48966E855A444C
Authority key identifier: C2:96:7F:F3:10:9E:0A:A7:EE:5E:C1:C6:40:30:0D:5A:00:FF:41:B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/36362e3233312e36342e302f32302d3230203d3e203233303331.roa
Signing time:             Wed 13 May 2026 17:42:20 +0000
ROA not before:           Wed 13 May 2026 17:37:20 +0000
ROA not after:            Wed 12 May 2027 17:42:20 +0000
asID:                     23031
IP address blocks:        66.231.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:af:ef:99:f3:57:62:30:0d:e1:8a:09:3a:48:96:6e:85:5a:44:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0
        Validity
            Not Before: May 13 17:37:20 2026 GMT
            Not After : May 12 17:42:20 2027 GMT
        Subject: CN=F41BBA894FEAD3B395AEB1765537C87FEF62262B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:45:d1:70:7f:58:c1:08:82:88:e4:dc:c8:32:
                    73:d7:31:c1:36:4f:68:8c:91:db:05:de:ab:6c:94:
                    7b:d7:51:f9:f2:19:c2:28:31:ec:6c:81:18:03:84:
                    79:35:78:3b:be:3b:65:0d:71:21:9b:ad:14:9b:dd:
                    18:51:ab:f2:f1:18:f7:77:fd:63:59:f3:43:81:43:
                    ed:4a:a9:40:82:8e:40:6e:85:b0:44:97:fd:8e:be:
                    04:c9:2b:de:7c:f0:23:d2:9d:2b:b4:64:a7:8d:79:
                    ea:b5:2c:72:ed:1c:ff:b8:a9:3c:f1:9a:25:65:c1:
                    35:8c:a8:00:65:a6:36:97:19:99:40:53:d8:6d:f4:
                    0c:ba:dc:99:d2:8e:47:8f:87:e4:38:1c:d8:67:e2:
                    cd:59:6f:11:4e:93:d8:fe:12:f0:e1:b6:a6:e1:11:
                    56:bb:6a:ac:41:13:32:e9:ac:8a:6d:d0:1c:52:e8:
                    08:48:80:50:cd:5f:0c:a3:83:52:07:28:c5:ca:31:
                    90:11:b4:f0:40:fa:01:af:d9:3c:5d:0d:d5:2e:28:
                    a4:dd:38:36:d5:00:d9:91:a0:c5:bc:3b:47:74:d8:
                    d0:c1:f2:2f:08:2f:b5:0d:a7:21:01:48:87:59:70:
                    4b:a6:2c:6c:a8:d7:c9:77:98:12:2c:c8:62:3e:5b:
                    3f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:1B:BA:89:4F:EA:D3:B3:95:AE:B1:76:55:37:C8:7F:EF:62:26:2B
            X509v3 Authority Key Identifier:
                keyid:C2:96:7F:F3:10:9E:0A:A7:EE:5E:C1:C6:40:30:0D:5A:00:FF:41:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/36362e3233312e36342e302f32302d3230203d3e203233303331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.231.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         58:ab:84:e7:84:c2:6f:bb:56:cd:e2:4a:ee:bf:87:10:28:9a:
         db:07:9f:06:7d:c0:f2:78:2a:20:d1:93:f7:fb:83:0e:57:b7:
         4f:3b:3b:08:17:e2:01:3a:81:29:97:62:e6:f0:60:6e:17:dd:
         70:ec:b2:2d:8b:a6:65:6f:87:49:cb:81:81:cc:00:03:01:bd:
         1e:33:27:f7:ae:ae:8a:0f:4e:b0:bd:fa:6f:f1:fe:5d:93:98:
         96:4c:93:53:9a:c2:cd:b1:ad:22:8d:5a:91:3d:e4:f6:40:6c:
         50:8b:43:4c:7e:8f:d8:3d:c6:69:9f:14:c5:b9:14:b8:81:bb:
         66:d6:df:78:9e:c3:d6:16:1e:ce:01:f0:c1:da:bd:af:2b:37:
         e1:2a:64:59:87:9e:bf:58:ec:dc:5f:90:5f:16:4a:0e:61:2a:
         a1:5a:cd:a8:12:89:41:8f:49:70:0a:c8:4a:e9:84:61:df:ad:
         e0:c1:b8:9f:0f:0b:08:7d:e4:8e:e0:f2:ce:a0:a6:38:1c:a4:
         d0:2d:67:9a:53:ba:f2:51:c0:6a:73:e9:ea:88:f0:cb:ec:28:
         a3:1f:2f:9c:47:8d:e5:3f:69:61:e4:94:f6:96:d3:5e:06:68:
         f6:02:f1:ef:ca:4f:49:64:70:d0:00:1b:6d:e8:b1:cb:61:1e:
         de:19:7a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:12:59 2026 by rpki-client