Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F3B720031C90A5B979E3D45AF9ECAAAED732F1B8B1CE90CE68917F173D88D3D1/0/3136382e3138312e39322e302f32322d3234203d3e203232303131.roa
File:                     3136382e3138312e39322e302f32322d3234203d3e203232303131.roa (raw, json)
Hash identifier:          OuW41ks0p4JGhRiDHyf14/rYiix+rJn0TElG1zb+DSQ=
Subject key identifier:   D3:00:25:6F:71:0D:29:40:A9:24:0D:43:8C:B5:8D:55:49:A2:D2:10
Certificate issuer:       /CN=EED9740A57556413451C3DB2C7E611BB32EB036C
Certificate serial:       0809B9F6E8601945259E8534D1DC4DEBF5D032D5
Authority key identifier: EE:D9:74:0A:57:55:64:13:45:1C:3D:B2:C7:E6:11:BB:32:EB:03:6C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EED9740A57556413451C3DB2C7E611BB32EB036C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F3B720031C90A5B979E3D45AF9ECAAAED732F1B8B1CE90CE68917F173D88D3D1/0/3136382e3138312e39322e302f32322d3234203d3e203232303131.roa
Signing time:             Fri 10 Jul 2026 18:30:00 +0000
ROA not before:           Fri 10 Jul 2026 18:25:00 +0000
ROA not after:            Fri 09 Jul 2027 18:30:00 +0000
asID:                     22011
IP address blocks:        168.181.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F3B720031C90A5B979E3D45AF9ECAAAED732F1B8B1CE90CE68917F173D88D3D1/0/EED9740A57556413451C3DB2C7E611BB32EB036C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F3B720031C90A5B979E3D45AF9ECAAAED732F1B8B1CE90CE68917F173D88D3D1/0/EED9740A57556413451C3DB2C7E611BB32EB036C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EED9740A57556413451C3DB2C7E611BB32EB036C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Jul 2026 23:40:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:09:b9:f6:e8:60:19:45:25:9e:85:34:d1:dc:4d:eb:f5:d0:32:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EED9740A57556413451C3DB2C7E611BB32EB036C
        Validity
            Not Before: Jul 10 18:25:00 2026 GMT
            Not After : Jul  9 18:30:00 2027 GMT
        Subject: CN=D300256F710D2940A9240D438CB58D5549A2D210
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:42:fa:57:31:37:82:ba:31:fc:7c:fb:8a:79:
                    5e:68:54:62:b3:48:a1:7e:3c:61:c2:42:1d:fd:23:
                    6b:5b:88:ca:fe:d5:6e:03:d8:83:b7:a5:2d:e0:e9:
                    9c:49:1a:c2:cc:cc:9f:84:82:55:f1:70:f7:5a:6e:
                    4b:14:f9:7b:7b:a8:da:fd:4a:9e:5a:82:b6:70:97:
                    d4:e4:b9:c9:83:81:20:f9:a6:f7:5a:dd:42:7f:60:
                    fc:8d:58:fc:d6:6c:22:f0:26:e0:95:66:19:e4:6c:
                    ba:7b:6f:39:8e:41:ac:cc:79:96:3b:9d:52:5a:1a:
                    04:50:90:48:ac:39:33:39:e9:67:cd:f0:ac:60:0c:
                    ad:e2:56:ec:2c:61:36:c9:07:a7:ba:00:51:24:dd:
                    81:f1:ee:3b:3e:e1:6b:97:29:89:e8:d3:9f:6f:f5:
                    ce:e0:60:9a:00:7d:3c:2f:e2:a3:5a:b9:a6:24:ad:
                    62:9b:34:09:51:ca:5f:20:5a:6d:1e:de:b7:4a:e5:
                    d4:10:68:29:db:ab:46:57:ed:14:f6:87:1b:60:e7:
                    41:c9:31:08:29:0f:1e:86:14:83:ba:12:c2:74:2c:
                    4e:3a:1f:20:c8:66:28:c6:23:e1:f3:10:50:56:9a:
                    80:ae:4c:04:2e:f0:c5:06:17:b1:28:7e:81:e2:99:
                    8f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:00:25:6F:71:0D:29:40:A9:24:0D:43:8C:B5:8D:55:49:A2:D2:10
            X509v3 Authority Key Identifier:
                keyid:EE:D9:74:0A:57:55:64:13:45:1C:3D:B2:C7:E6:11:BB:32:EB:03:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F3B720031C90A5B979E3D45AF9ECAAAED732F1B8B1CE90CE68917F173D88D3D1/0/EED9740A57556413451C3DB2C7E611BB32EB036C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EED9740A57556413451C3DB2C7E611BB32EB036C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F3B720031C90A5B979E3D45AF9ECAAAED732F1B8B1CE90CE68917F173D88D3D1/0/3136382e3138312e39322e302f32322d3234203d3e203232303131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:35:9e:9a:b8:89:20:a2:b9:d8:2d:4c:06:cd:42:4f:0d:f9:
         0f:4a:1a:a9:6f:5b:fd:64:ae:87:da:34:2a:88:76:3e:5c:68:
         72:de:07:fe:b4:12:b2:b0:37:80:cc:56:03:56:cf:ac:78:2f:
         ae:8b:ca:d0:33:bb:1f:8e:23:92:4b:a6:ba:09:a8:99:77:d9:
         96:2b:b2:84:b0:7e:a6:f4:3f:c6:d8:c1:8e:89:a3:00:af:72:
         da:6a:a2:4c:3a:62:7f:55:8a:49:9b:85:38:c8:2d:bb:8b:17:
         8c:1b:87:98:64:80:25:5e:8c:c8:7c:93:8a:61:12:c0:c3:a3:
         eb:05:ce:ee:ea:9e:28:05:10:96:9e:3d:52:7d:7f:71:de:83:
         83:6f:58:77:6b:84:95:96:c1:03:43:f2:e9:18:ca:48:06:98:
         9f:5f:e6:83:11:39:46:b2:33:2c:f2:0f:77:b0:f2:a7:9a:d9:
         f2:6a:e4:3e:61:80:be:56:04:23:32:7e:98:92:0a:9c:ea:34:
         54:a7:cf:7b:e0:14:f3:ce:b6:a8:73:86:72:d0:83:10:59:d8:
         a4:b7:71:57:97:d4:63:f7:7c:b0:0d:58:d6:75:a6:7b:4f:4d:
         43:4a:b3:20:a7:27:a3:47:0a:56:95:9f:fd:22:d6:32:e8:af:
         83:28:72:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 15:54:09 2026 by rpki-client