Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EA569A2C0BA6C78B647EF489CB5E9E4BB121C3AB97E1096D075C082A5CABCAC0/0/37342e3132332e34382e302f32322d3234203d3e20323639393436.roa
File:                     37342e3132332e34382e302f32322d3234203d3e20323639393436.roa (raw, json)
Hash identifier:          2xqXKVOKMM9GZaPoEzwGYuzcysFdSNIdBl/NK8svaM4=
Subject key identifier:   FC:9D:8C:B9:79:9E:E4:B2:2E:A8:68:D7:05:1B:1F:0D:B3:D5:55:80
Certificate issuer:       /CN=076D658E829278AC386107272C8E0E68EADD5F5E
Certificate serial:       54A31EC0F9103304B3A737CEFC51541FC3B6FCEC
Authority key identifier: 07:6D:65:8E:82:92:78:AC:38:61:07:27:2C:8E:0E:68:EA:DD:5F:5E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/076D658E829278AC386107272C8E0E68EADD5F5E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EA569A2C0BA6C78B647EF489CB5E9E4BB121C3AB97E1096D075C082A5CABCAC0/0/37342e3132332e34382e302f32322d3234203d3e20323639393436.roa
Signing time:             Fri 30 Jan 2026 06:52:46 +0000
ROA not before:           Fri 30 Jan 2026 06:47:46 +0000
ROA not after:            Fri 29 Jan 2027 06:52:46 +0000
asID:                     269946
IP address blocks:        74.123.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EA569A2C0BA6C78B647EF489CB5E9E4BB121C3AB97E1096D075C082A5CABCAC0/0/076D658E829278AC386107272C8E0E68EADD5F5E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EA569A2C0BA6C78B647EF489CB5E9E4BB121C3AB97E1096D075C082A5CABCAC0/0/076D658E829278AC386107272C8E0E68EADD5F5E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/076D658E829278AC386107272C8E0E68EADD5F5E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Mar 2026 15:10:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:a3:1e:c0:f9:10:33:04:b3:a7:37:ce:fc:51:54:1f:c3:b6:fc:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=076D658E829278AC386107272C8E0E68EADD5F5E
        Validity
            Not Before: Jan 30 06:47:46 2026 GMT
            Not After : Jan 29 06:52:46 2027 GMT
        Subject: CN=FC9D8CB9799EE4B22EA868D7051B1F0DB3D55580
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:3c:f9:e8:ae:93:20:50:f4:37:f6:26:71:f6:
                    17:97:96:b9:a3:f4:0d:f0:b9:55:f3:69:37:49:32:
                    c3:c0:3f:7e:cc:10:f1:9b:f9:b1:1e:64:fe:f3:57:
                    57:ac:ee:cd:32:94:49:c7:94:69:45:ba:9d:f2:a7:
                    6a:62:37:18:fe:e0:6a:d1:c9:be:e5:77:4d:b5:e4:
                    36:40:8b:7f:1d:14:8f:eb:02:0b:17:7e:7f:c4:2a:
                    fd:89:92:06:79:12:26:da:1d:86:d8:d5:99:8f:a7:
                    f8:87:23:ef:2a:4f:9b:bd:5b:e4:26:f1:03:87:fc:
                    c6:a8:7b:ea:ad:16:3a:01:21:86:c5:89:b6:33:63:
                    9a:b5:77:b4:6a:e5:26:c8:48:0e:ed:0f:65:a2:be:
                    21:9d:c5:54:36:a2:d9:8b:e7:18:e9:f1:52:6e:a5:
                    14:90:1c:13:40:2a:a7:38:f9:36:c6:35:a9:a7:c8:
                    a6:8c:e0:85:1a:67:4f:c0:85:e4:2f:44:71:69:b6:
                    49:30:c5:c3:7b:91:fd:38:5d:7a:3b:57:05:e5:0e:
                    a8:59:94:7e:e6:25:23:0f:6d:4f:b2:f2:a9:19:ce:
                    20:b9:8a:8a:bd:61:ca:f8:be:81:f6:bf:aa:b5:2b:
                    73:2d:17:43:9c:50:38:63:54:ef:38:78:4c:88:67:
                    6a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:9D:8C:B9:79:9E:E4:B2:2E:A8:68:D7:05:1B:1F:0D:B3:D5:55:80
            X509v3 Authority Key Identifier:
                keyid:07:6D:65:8E:82:92:78:AC:38:61:07:27:2C:8E:0E:68:EA:DD:5F:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EA569A2C0BA6C78B647EF489CB5E9E4BB121C3AB97E1096D075C082A5CABCAC0/0/076D658E829278AC386107272C8E0E68EADD5F5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/076D658E829278AC386107272C8E0E68EADD5F5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EA569A2C0BA6C78B647EF489CB5E9E4BB121C3AB97E1096D075C082A5CABCAC0/0/37342e3132332e34382e302f32322d3234203d3e20323639393436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.123.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:4e:fb:79:63:9b:a3:02:94:d3:42:38:71:6b:64:74:3c:80:
         6e:fa:c1:17:67:e3:cb:41:de:2b:64:33:f1:87:49:3a:b8:f6:
         2c:2e:0e:3a:14:92:6a:a7:2e:24:1d:d8:80:4e:10:60:7a:9d:
         1a:bb:c3:07:ee:a1:82:22:29:af:54:3f:ea:7c:cf:c6:f2:ce:
         f2:3a:27:bb:f5:b5:5d:aa:92:5f:26:dc:4b:ff:29:61:b4:82:
         80:e5:34:f2:06:55:ef:24:f7:24:1a:64:52:c9:77:8f:8e:6e:
         a2:81:c0:cc:7d:17:f3:75:3a:18:d5:3a:95:63:54:3b:f9:8b:
         32:08:38:8f:d6:5a:96:c7:d5:0d:42:d5:74:16:de:9b:96:08:
         c4:67:c0:8d:c5:a9:0a:7d:a8:fc:18:d5:e4:3e:2f:19:49:ce:
         df:06:63:5a:ac:c8:e0:e9:18:7b:94:1d:58:06:c6:5e:f1:4b:
         d5:1a:26:56:69:bd:fc:01:d2:f7:0f:a2:64:35:c3:c0:0e:26:
         b0:27:ff:b8:5e:e7:50:c5:4a:36:0b:aa:23:5f:25:85:36:b3:
         b4:95:7e:7c:a3:1c:e6:89:8d:21:66:a9:f3:3d:65:dd:fb:4a:
         de:47:71:da:a4:46:fc:62:4d:36:45:c6:67:3d:c3:65:bd:8e:
         66:8f:34:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:18:24 2026 by rpki-client