Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/3136382e3233322e3130322e302f32332d3233203d3e203631343631.roa
File:                     3136382e3233322e3130322e302f32332d3233203d3e203631343631.roa (raw, json)
Hash identifier:          +GaxYusIwydm+2KXvRxbEDlHimecxINnDPWWr2bsjtU=
Subject key identifier:   83:37:8E:9A:87:68:5B:34:07:24:B3:EA:EE:7A:9D:C7:7B:38:05:94
Certificate issuer:       /CN=B137142754DED915D3341628E74A8B91AF0CB76A
Certificate serial:       56D38DDF0F1163B9F20B6960FE752969CEFA7E80
Authority key identifier: B1:37:14:27:54:DE:D9:15:D3:34:16:28:E7:4A:8B:91:AF:0C:B7:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/3136382e3233322e3130322e302f32332d3233203d3e203631343631.roa
Signing time:             Fri 03 Apr 2026 14:37:22 +0000
ROA not before:           Fri 03 Apr 2026 14:32:22 +0000
ROA not after:            Fri 02 Apr 2027 14:37:22 +0000
asID:                     61461
IP address blocks:        168.232.102.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/B137142754DED915D3341628E74A8B91AF0CB76A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/B137142754DED915D3341628E74A8B91AF0CB76A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 12 Apr 2026 05:52:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:d3:8d:df:0f:11:63:b9:f2:0b:69:60:fe:75:29:69:ce:fa:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B137142754DED915D3341628E74A8B91AF0CB76A
        Validity
            Not Before: Apr  3 14:32:22 2026 GMT
            Not After : Apr  2 14:37:22 2027 GMT
        Subject: CN=83378E9A87685B340724B3EAEE7A9DC77B380594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:6b:fa:68:37:45:ca:75:ec:73:8b:31:57:f3:
                    57:8f:6e:3a:a7:8d:9d:2d:83:ab:ce:03:dd:c2:bb:
                    22:5e:f1:9e:a1:65:9d:d6:7d:fb:dc:63:10:77:76:
                    40:42:9e:f9:e3:b6:47:23:b2:90:c6:92:ab:fc:d6:
                    6c:50:23:0c:78:fc:3f:1c:f2:26:3d:df:72:70:23:
                    58:f6:08:3c:dd:ae:26:e4:b9:bf:93:30:4e:db:35:
                    dd:ae:d6:db:c9:84:5e:af:3b:e7:77:02:b5:eb:e5:
                    58:22:5c:53:a4:a9:b9:b3:b9:2b:a4:0c:c5:c6:23:
                    14:42:46:a1:95:d5:8c:92:e2:c3:f8:3c:1f:cc:46:
                    bd:cf:b0:01:b8:82:86:91:c5:42:30:45:bd:05:cc:
                    1a:ee:8d:b0:88:f4:29:63:b8:04:ba:59:f6:45:7a:
                    b6:4c:35:e2:77:1b:f6:a0:2e:09:0d:cd:0a:f3:c1:
                    85:d8:e0:fc:8a:f1:33:d2:7f:6a:66:7f:06:82:0b:
                    2e:59:75:9b:e6:9f:fe:82:9a:a7:73:5c:4b:cd:19:
                    3f:b7:c9:98:e6:e4:20:b0:73:53:65:ac:f4:45:cb:
                    88:eb:89:6c:0b:e0:4c:9b:68:ac:2c:40:3e:14:56:
                    69:5a:72:60:0c:1f:cd:d5:65:72:25:51:78:02:92:
                    bd:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:37:8E:9A:87:68:5B:34:07:24:B3:EA:EE:7A:9D:C7:7B:38:05:94
            X509v3 Authority Key Identifier:
                keyid:B1:37:14:27:54:DE:D9:15:D3:34:16:28:E7:4A:8B:91:AF:0C:B7:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/B137142754DED915D3341628E74A8B91AF0CB76A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/3136382e3233322e3130322e302f32332d3233203d3e203631343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         71:6c:ab:b8:63:9f:7c:bd:bc:d2:d9:68:94:6f:20:16:0a:5a:
         77:8c:d5:e2:b1:42:75:6a:95:86:ed:f4:2c:0f:76:f7:24:08:
         c2:0e:59:c1:68:23:18:eb:cc:b8:22:f6:6e:96:c0:e0:df:0f:
         dc:85:49:84:ac:73:42:cc:73:02:a9:5e:3c:fc:4a:66:64:80:
         6f:fb:5d:36:9f:c8:ce:b8:74:b9:98:fe:35:d7:d2:90:ed:1b:
         10:ae:93:a2:c4:a2:82:3e:ee:1e:09:f1:a0:41:09:fa:a9:65:
         6d:61:53:c7:ee:69:82:45:b2:01:fd:69:ca:83:08:14:d4:a3:
         b1:15:80:be:0b:ac:08:7c:f6:df:15:24:49:21:56:9a:db:e4:
         50:c1:2d:e5:80:a2:c5:f5:87:07:95:e9:a0:1d:40:86:58:66:
         11:f7:b8:06:71:ea:b6:77:1d:91:67:a8:cb:c6:e2:f7:90:64:
         83:2a:11:e3:3a:5c:6c:4d:6a:03:48:ee:67:c2:4d:ab:a1:f6:
         78:f7:85:3d:3e:ca:e7:5b:56:e5:d8:c8:99:84:87:bb:65:ee:
         64:cc:18:a0:af:7c:c6:28:9e:ed:a3:fb:58:05:20:29:4e:fa:
         65:ab:88:54:53:c0:9d:9e:c1:0c:6d:24:a0:4b:a2:02:62:be:
         8e:77:d4:de
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUVtON3w8RY7nyC2lg/nUpac76foAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjEzNzE0Mjc1NERFRDkxNUQzMzQxNjI4RTc0QThCOTFB
RjBDQjc2QTAeFw0yNjA0MDMxNDMyMjJaFw0yNzA0MDIxNDM3MjJaMDMxMTAvBgNV
BAMTKDgzMzc4RTlBODc2ODVCMzQwNzI0QjNFQUVFN0E5REM3N0IzODA1OTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIa/poN0XKdexzizFX81ePbjqn
jZ0tg6vOA93CuyJe8Z6hZZ3WffvcYxB3dkBCnvnjtkcjspDGkqv81mxQIwx4/D8c
8iY933JwI1j2CDzdribkub+TME7bNd2u1tvJhF6vO+d3ArXr5VgiXFOkqbmzuSuk
DMXGIxRCRqGV1YyS4sP4PB/MRr3PsAG4goaRxUIwRb0FzBrujbCI9CljuAS6WfZF
erZMNeJ3G/agLgkNzQrzwYXY4PyK8TPSf2pmfwaCCy5ZdZvmn/6CmqdzXEvNGT+3
yZjm5CCwc1NlrPRFy4jriWwL4EybaKwsQD4UVmlacmAMH83VZXIlUXgCkr1RAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUgzeOmodoWzQHJLPq7nqdx3s4BZQwHwYDVR0j
BBgwFoAUsTcUJ1Te2RXTNBYo50qLka8Mt2owDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yRTdCNjQzMDk3MjdGNDQ2N0I2OEE3NkQ5MEQzMDVCRkUz
Q0NGQzkxNTE4NTM1QkQ4NzVFRTU1MDM4MUExREZDLzAvQjEzNzE0Mjc1NERFRDkx
NUQzMzQxNjI4RTc0QThCOTFBRjBDQjc2QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CMTM3MTQyNzU0REVEOTE1RDMz
NDE2MjhFNzRBOEI5MUFGMENCNzZBLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMkU3QjY0MzA5NzI3RjQ0NjdCNjhBNzZEOTBEMzA1QkZFM0NDRkM5MTUx
ODUzNUJEODc1RUU1NTAzODFBMURGQy8wLzMxMzYzODJlMzIzMzMyMmUzMTMwMzIy
ZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNjMxMzQzNjMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqOhm
MA0GCSqGSIb3DQEBCwUAA4IBAQBxbKu4Y598vbzS2WiUbyAWClp3jNXisUJ1apWG
7fQsD3b3JAjCDlnBaCMY68y4IvZulsDg3w/chUmErHNCzHMCqV48/EpmZIBv+102
n8jOuHS5mP4119KQ7RsQrpOixKKCPu4eCfGgQQn6qWVtYVPH7mmCRbIB/WnKgwgU
1KOxFYC+C6wIfPbfFSRJIVaa2+RQwS3lgKLF9YcHlemgHUCGWGYR97gGceq2dx2R
Z6jLxuL3kGSDKhHjOlxsTWoDSO5nwk2rofZ494U9PsrnW1bl2MiZhIe7Ze5kzBig
r3zGKJ7to/tYBSApTvplq4hUU8CdnsEMbSSgS6ICYr6Od9Te
-----END CERTIFICATE-----
Generated at Wed Apr 8 06:16:14 2026 by rpki-client