Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DA9A08D7DE5F9D286D58F723E30EE9AEBB94BC057CD886728AF6F611050EE5B6/0/3132382e3230312e3134372e302f32342d3234203d3e203535303832.roa
File:                     3132382e3230312e3134372e302f32342d3234203d3e203535303832.roa (raw, json)
Hash identifier:          bXLtM63jXmQFsPOfxBTHXMLuL8S+kZYMenxirIrMnpk=
Subject key identifier:   F0:8F:3C:60:A7:1A:FA:96:91:77:06:19:5C:CF:D9:6A:A6:35:51:F8
Certificate issuer:       /CN=4C78CC976DFE47B81477BCC595C469015140DEDB
Certificate serial:       7A03B86EDFDF6E15CCA03DC28D3B8D2AC169DF98
Authority key identifier: 4C:78:CC:97:6D:FE:47:B8:14:77:BC:C5:95:C4:69:01:51:40:DE:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C78CC976DFE47B81477BCC595C469015140DEDB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DA9A08D7DE5F9D286D58F723E30EE9AEBB94BC057CD886728AF6F611050EE5B6/0/3132382e3230312e3134372e302f32342d3234203d3e203535303832.roa
Signing time:             Wed 15 Apr 2026 15:38:53 +0000
ROA not before:           Wed 15 Apr 2026 15:33:53 +0000
ROA not after:            Wed 14 Apr 2027 15:38:53 +0000
asID:                     55082
IP address blocks:        128.201.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DA9A08D7DE5F9D286D58F723E30EE9AEBB94BC057CD886728AF6F611050EE5B6/0/4C78CC976DFE47B81477BCC595C469015140DEDB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DA9A08D7DE5F9D286D58F723E30EE9AEBB94BC057CD886728AF6F611050EE5B6/0/4C78CC976DFE47B81477BCC595C469015140DEDB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C78CC976DFE47B81477BCC595C469015140DEDB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 Apr 2026 23:46:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:03:b8:6e:df:df:6e:15:cc:a0:3d:c2:8d:3b:8d:2a:c1:69:df:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C78CC976DFE47B81477BCC595C469015140DEDB
        Validity
            Not Before: Apr 15 15:33:53 2026 GMT
            Not After : Apr 14 15:38:53 2027 GMT
        Subject: CN=F08F3C60A71AFA96917706195CCFD96AA63551F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a2:7b:0e:d6:6b:a6:b4:6c:96:56:05:40:a5:
                    2e:3a:f4:8f:96:fe:86:2b:9c:ee:60:a2:f7:b8:ce:
                    9a:29:be:b1:96:98:4c:21:97:76:60:3b:44:d3:6c:
                    09:11:f0:f6:8d:d1:23:ed:97:0e:65:e4:7a:fb:5f:
                    f2:6b:fb:a0:73:23:e4:2c:58:41:8a:8d:fe:75:49:
                    9e:cc:ee:0b:9e:03:a8:67:2c:8d:35:6f:a0:f0:ca:
                    07:4f:0e:eb:60:ab:f5:65:b0:47:54:96:dd:39:a7:
                    0f:ae:c3:f3:a6:c9:ab:78:6d:9c:30:4e:e5:a4:b0:
                    a3:76:46:a4:bd:5b:19:88:9d:cc:da:c2:a8:04:ae:
                    62:d4:9f:e2:71:12:4c:0a:a4:f3:45:c6:11:d9:60:
                    6c:94:f3:0b:de:d6:bb:23:81:ba:7e:65:d2:82:74:
                    8c:54:17:f7:66:30:ca:be:d5:06:fb:6a:7a:66:d6:
                    40:db:00:d1:69:d2:1f:58:13:2c:a6:27:93:4a:f1:
                    b8:13:bd:67:d8:ea:d4:ba:2a:7b:45:a3:fa:4d:76:
                    0b:0f:a0:5a:e5:e0:5f:e6:c0:75:33:64:7f:51:91:
                    60:15:d2:fa:24:21:b6:17:b4:d6:eb:6c:dc:4b:6c:
                    46:2d:89:d4:82:ac:10:09:f4:08:ee:0d:4f:a3:b0:
                    e2:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:8F:3C:60:A7:1A:FA:96:91:77:06:19:5C:CF:D9:6A:A6:35:51:F8
            X509v3 Authority Key Identifier:
                keyid:4C:78:CC:97:6D:FE:47:B8:14:77:BC:C5:95:C4:69:01:51:40:DE:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DA9A08D7DE5F9D286D58F723E30EE9AEBB94BC057CD886728AF6F611050EE5B6/0/4C78CC976DFE47B81477BCC595C469015140DEDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C78CC976DFE47B81477BCC595C469015140DEDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DA9A08D7DE5F9D286D58F723E30EE9AEBB94BC057CD886728AF6F611050EE5B6/0/3132382e3230312e3134372e302f32342d3234203d3e203535303832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:13:21:8d:43:a5:01:53:30:8b:cd:04:80:ae:e3:94:e3:bd:
         dc:58:8a:a1:e3:e2:dc:a8:09:75:23:31:93:ae:2d:de:da:d7:
         47:15:dc:24:80:e1:2e:14:c9:19:4a:c2:0c:17:5e:ed:99:e5:
         5a:f0:43:55:ad:96:19:e3:e1:c8:20:f1:2f:26:e9:f2:3d:2c:
         30:df:75:e1:0c:f2:67:fd:d7:38:ec:0d:bd:33:56:8b:9e:b1:
         0c:c0:e7:57:2f:e5:5f:7a:28:a7:d6:fc:f3:11:5a:7a:c8:c8:
         99:e4:87:ea:3d:0c:22:f3:08:e2:d4:00:4a:e9:15:98:ee:e5:
         64:38:87:47:35:2a:7c:76:fa:8b:55:a9:8b:91:a2:61:d4:02:
         52:e8:49:da:c2:c6:89:4f:ea:99:fd:b0:dc:d8:4b:2f:2c:a3:
         02:34:d5:82:de:dc:ab:08:95:1b:93:f0:8d:a5:10:cb:88:a8:
         98:4a:1d:07:e7:60:ff:e1:6e:f0:2e:88:19:4d:f9:a5:7a:e7:
         97:c3:d9:43:c9:49:06:f0:c6:d8:49:d2:33:7e:09:c4:49:b6:
         50:6a:3e:78:e8:e2:35:7f:77:22:76:c3:ef:7c:5c:e9:8f:31:
         7e:5f:3f:f1:50:9e:08:f3:c1:b9:53:81:3e:fb:c2:39:41:ca:
         ce:f8:84:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:10:57 2026 by rpki-client