Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/AS3356.roa
File:                     AS3356.roa (raw, json)
Hash identifier:          smVlO5fsRr+6ZGZc4ZDik+iHRcWHY2bD9/gGM34Ysck=
Subject key identifier:   68:53:1A:16:CE:C2:F0:2B:F7:CC:E3:A1:DB:2F:F0:8E:3B:4A:C0:FA
Certificate issuer:       /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial:       091DDEB4285735C9029439E6B953FDBF91A1025C
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/AS3356.roa
Signing time:             Wed 08 Jul 2026 19:55:00 +0000
ROA not before:           Wed 08 Jul 2026 19:50:00 +0000
ROA not after:            Wed 07 Jul 2027 19:55:00 +0000
asID:                     3356
IP address blocks:        190.216.51.32/27 maxlen: 27
                          190.216.110.0/24 maxlen: 24
                          200.41.8.0/24 maxlen: 24
                          201.234.13.168/30 maxlen: 30
                          201.234.65.90/31 maxlen: 31
                          201.234.91.0/24 maxlen: 24
                          201.234.144.76/30 maxlen: 30
                          201.234.146.208/29 maxlen: 29
                          201.234.163.32/29 maxlen: 29
                          2001:13b0:8001:22::/64 maxlen: 64
                          2001:13b0:8021::/48 maxlen: 48
                          2001:13b0:be80:f003::/64 maxlen: 64
                          2001:13b2:8000:28::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 05:19:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:1d:de:b4:28:57:35:c9:02:94:39:e6:b9:53:fd:bf:91:a1:02:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
        Validity
            Not Before: Jul  8 19:50:00 2026 GMT
            Not After : Jul  7 19:55:00 2027 GMT
        Subject: CN=68531A16CEC2F02BF7CCE3A1DB2FF08E3B4AC0FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d7:34:88:4b:cc:9d:c8:2d:dc:4b:68:6e:8c:
                    32:03:d5:ba:a5:cd:15:0a:fa:12:5f:ac:af:f1:20:
                    05:fc:80:33:14:79:34:f7:05:c8:66:37:6d:70:66:
                    29:d5:93:40:84:5d:26:68:9d:d4:e2:ca:b0:62:c1:
                    af:a8:67:30:14:3e:9c:d9:b1:1c:24:ee:84:0e:ab:
                    ca:a0:2e:bd:92:aa:27:b0:16:67:92:ae:2e:5b:a6:
                    05:77:18:c4:39:71:09:23:a8:af:0e:04:cb:b3:fd:
                    f5:b1:35:31:86:ec:06:7b:2c:57:76:0d:63:fe:df:
                    9d:a1:eb:00:0a:aa:52:02:3a:7d:44:80:2c:fd:c2:
                    50:01:84:96:f9:b7:08:53:29:0a:ac:b6:c1:5f:10:
                    0a:3f:8f:c3:68:7d:85:06:3e:6d:34:35:46:6f:a8:
                    4c:11:f4:af:c6:23:6c:ab:df:21:cb:64:3d:50:2a:
                    a2:36:8b:c3:99:7d:91:6c:20:0e:03:fa:69:07:02:
                    78:9e:b7:30:7c:ef:63:1c:89:cb:f2:23:e2:73:74:
                    66:da:cc:3f:9c:2f:cd:65:88:be:4a:14:87:d2:a4:
                    bd:8d:bb:7b:9e:5e:b9:93:de:79:83:54:27:da:da:
                    41:dd:ed:87:8f:e6:98:4e:4a:5a:79:0d:6f:de:93:
                    ae:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:53:1A:16:CE:C2:F0:2B:F7:CC:E3:A1:DB:2F:F0:8E:3B:4A:C0:FA
            X509v3 Authority Key Identifier:
                keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/AS3356.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.216.51.32/27
                  190.216.110.0/24
                  200.41.8.0/24
                  201.234.13.168/30
                  201.234.65.90/31
                  201.234.91.0/24
                  201.234.144.76/30
                  201.234.146.208/29
                  201.234.163.32/29
                IPv6:
                  2001:13b0:8001:22::/64
                  2001:13b0:8021::/48
                  2001:13b0:be80:f003::/64
                  2001:13b2:8000:28::/64

    Signature Algorithm: sha256WithRSAEncryption
         6f:ee:69:e2:3c:1a:74:e1:62:db:7c:86:74:b9:a6:a3:0e:9d:
         2a:97:0b:9a:1c:34:e7:dd:fd:45:a2:5e:8b:2e:36:cb:53:25:
         d3:75:3f:38:dc:0b:9e:da:7f:75:ff:bc:e6:35:3d:af:6e:a8:
         4d:90:48:22:bc:cb:a7:78:54:cf:b4:1d:70:4d:6d:38:b6:ef:
         a0:ad:57:3f:b5:8b:de:dc:b1:e9:7a:9d:2b:bf:16:ad:28:e7:
         51:4c:9f:1c:61:bd:ae:08:6f:6c:66:87:14:17:53:bd:eb:04:
         dc:64:e2:84:82:e5:cd:5f:66:d0:9d:47:1a:57:9d:22:22:f1:
         25:66:1f:d6:65:64:40:b7:ad:45:0f:fb:30:c3:97:a9:f9:b3:
         28:ed:7b:7e:bf:1e:0f:57:f3:7f:f2:7f:eb:4d:fd:ba:a3:46:
         c4:dd:5c:84:54:5c:41:b4:ed:ac:4d:7d:e1:65:b1:44:60:ee:
         37:ea:b7:e2:c7:bd:77:ab:cf:8d:1c:58:70:d0:98:14:7b:87:
         e5:b7:32:93:b8:3a:bc:ac:79:79:f6:77:08:c4:e7:78:71:fa:
         6e:bc:bc:74:24:1e:d6:96:c9:46:9e:b9:70:52:3e:34:a0:d0:
         29:5a:47:72:1f:e7:5a:5b:84:52:91:09:4b:e6:7e:5b:b6:6a:
         1a:68:5b:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 06:01:52 2026 by rpki-client