Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/AS3365.roa
File:                     AS3365.roa (raw, json)
Hash identifier:          p56ieqqAqJnPnHA7NFw17d1MNHSl2/4mCuoj5GqEy8Y=
Subject key identifier:   11:8F:E9:A2:39:E6:BE:23:23:71:8F:7E:AE:28:CD:CD:A9:E8:E9:90
Certificate issuer:       /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial:       7C0B93B4F4F4BF87CA28A075FE8F9D648F3AE420
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/AS3365.roa
Signing time:             Wed 08 Jul 2026 20:20:00 +0000
ROA not before:           Wed 08 Jul 2026 20:15:00 +0000
ROA not after:            Wed 07 Jul 2027 20:20:00 +0000
asID:                     3365
IP address blocks:        201.234.163.4/31 maxlen: 31
                          201.234.163.48/28 maxlen: 28
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 05:19:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:0b:93:b4:f4:f4:bf:87:ca:28:a0:75:fe:8f:9d:64:8f:3a:e4:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
        Validity
            Not Before: Jul  8 20:15:00 2026 GMT
            Not After : Jul  7 20:20:00 2027 GMT
        Subject: CN=118FE9A239E6BE2323718F7EAE28CDCDA9E8E990
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:1f:7d:5b:2e:ec:e4:3d:1c:44:ac:81:bf:1a:
                    2f:46:dc:fe:00:6a:c0:5d:c8:91:72:da:4b:34:4d:
                    1b:1f:56:39:58:e4:59:03:fb:4e:48:78:0b:f8:93:
                    9b:d2:c3:bf:4a:39:a6:9d:77:95:47:31:36:ca:c0:
                    09:f5:d6:95:18:34:0e:76:7b:40:e8:24:ea:86:86:
                    f1:22:d1:90:3f:69:d3:f9:cb:c5:c5:aa:ce:7e:b4:
                    90:a8:25:66:39:69:bd:c7:6a:0e:00:62:94:02:03:
                    d6:eb:6d:14:80:e3:28:93:6c:f9:f5:d3:65:7e:e5:
                    49:a3:7b:2a:42:e0:33:5b:a4:50:96:53:38:cb:16:
                    c5:46:6e:81:c0:64:58:da:21:70:17:b4:df:68:d2:
                    3c:ac:00:1d:47:4f:7f:e8:23:46:6c:3a:07:c9:76:
                    30:61:a8:2a:f1:4f:27:b6:99:92:6d:f5:69:41:f1:
                    1f:23:41:44:6c:d2:62:7a:c4:9c:cd:8a:71:82:bc:
                    04:dc:c3:44:ec:f0:cf:ce:80:b9:6a:fe:b3:fa:b5:
                    20:2e:a1:1d:6f:1c:fb:75:dd:1d:f8:94:eb:f9:b8:
                    8c:74:7a:22:51:b9:b3:ad:cf:74:a6:d4:17:b8:f8:
                    a2:27:65:46:a3:e7:3f:98:f2:7c:c5:fe:bf:b1:3e:
                    3a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:8F:E9:A2:39:E6:BE:23:23:71:8F:7E:AE:28:CD:CD:A9:E8:E9:90
            X509v3 Authority Key Identifier:
                keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/AS3365.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.234.163.4/31
                  201.234.163.48/28

    Signature Algorithm: sha256WithRSAEncryption
         b0:e6:75:57:4f:11:27:97:f8:ab:3b:1c:45:05:e4:6e:20:8e:
         13:43:79:eb:00:3a:a5:8d:8e:7d:81:fb:ef:bc:20:e3:f8:df:
         6c:7d:7b:d8:c7:fe:d7:02:53:8f:40:83:6b:13:c4:6a:32:9b:
         8f:21:ef:2b:96:d2:bd:36:b4:43:0a:89:35:07:87:75:89:b3:
         2f:89:02:16:82:42:d9:f2:0e:fa:25:a3:47:dd:cf:3b:9a:f7:
         01:03:91:81:2a:82:e7:47:17:9c:96:eb:61:75:c2:22:90:cd:
         07:02:c3:33:ec:80:c4:5a:81:3d:61:c4:d2:5c:e5:e3:9c:a6:
         61:3d:fd:c9:fe:34:f0:a2:46:6f:c3:9d:57:77:e7:f3:eb:38:
         be:a6:10:9e:df:a7:44:ae:f4:18:6f:55:48:13:a4:ec:8f:e3:
         f9:76:e7:b4:16:8b:7b:fd:7f:29:0c:19:14:d8:ad:cd:6d:a2:
         2e:0a:71:8b:92:3f:d0:57:80:66:de:a5:35:6e:61:11:0f:3d:
         09:50:25:c0:82:69:5c:28:5e:46:76:c0:fc:87:b8:7c:44:c7:
         75:d2:67:06:0c:91:0d:50:0d:b1:80:2d:13:50:fd:ec:c2:f6:
         c3:0d:b2:18:60:8b:6e:85:9c:9b:93:86:1e:50:a3:ea:35:59:
         2c:5a:81:1f
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIUfAuTtPT0v4fKKKB1/o+dZI865CAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzg3QzU1QTQ0ODFGMTlDOUI2MTg0OTQ0QjE4N0IzODEz
QjdDRUM1NjAeFw0yNjA3MDgyMDE1MDBaFw0yNzA3MDcyMDIwMDBaMDMxMTAvBgNV
BAMTKDExOEZFOUEyMzlFNkJFMjMyMzcxOEY3RUFFMjhDRENEQTlFOEU5OTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeH31bLuzkPRxErIG/Gi9G3P4A
asBdyJFy2ks0TRsfVjlY5FkD+05IeAv4k5vSw79KOaadd5VHMTbKwAn11pUYNA52
e0DoJOqGhvEi0ZA/adP5y8XFqs5+tJCoJWY5ab3Hag4AYpQCA9brbRSA4yiTbPn1
02V+5UmjeypC4DNbpFCWUzjLFsVGboHAZFjaIXAXtN9o0jysAB1HT3/oI0ZsOgfJ
djBhqCrxTye2mZJt9WlB8R8jQURs0mJ6xJzNinGCvATcw0Ts8M/OgLlq/rP6tSAu
oR1vHPt13R34lOv5uIx0eiJRubOtz3Sm1Be4+KInZUaj5z+Y8nzF/r+xPjoPAgMB
AAGjggKfMIICmzAdBgNVHQ4EFgQUEY/pojnmviMjcY9+rijNzano6ZAwHwYDVR0j
BBgwFoAUyHxVpEgfGcm2GElEsYezgTt87FYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wMEE2NkE2QTJBNkNGRTkzQzBGNkUzREZDMjBERDMzMUI1
ODBGQjIwMzgzQjYyRkU0QjI2QzAyOTRCNDY4N0M3LzAvQzg3QzU1QTQ0ODFGMTlD
OUI2MTg0OTQ0QjE4N0IzODEzQjdDRUM1Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DODdDNTVBNDQ4MUYxOUM5QjYx
ODQ5NDRCMTg3QjM4MTNCN0NFQzU2LmNlcjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMG
CCsGAQUFBzALhndyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy8wMEE2NkE2QTJBNkNGRTkzQzBGNkUzREZDMjBERDMzMUI1ODBGQjIwMzgz
QjYyRkU0QjI2QzAyOTRCNDY4N0M3LzAvQVMzMzY1LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUByeqjBAMF
BMnqozAwDQYJKoZIhvcNAQELBQADggEBALDmdVdPESeX+Ks7HEUF5G4gjhNDeesA
OqWNjn2B+++8IOP432x9e9jH/tcCU49Ag2sTxGoym48h7yuW0r02tEMKiTUHh3WJ
sy+JAhaCQtnyDvolo0fdzzua9wEDkYEqgudHF5yW62F1wiKQzQcCwzPsgMRagT1h
xNJc5eOcpmE9/cn+NPCiRm/DnVd35/PrOL6mEJ7fp0Su9BhvVUgTpOyP4/l257QW
i3v9fykMGRTYrc1toi4KcYuSP9BXgGbepTVuYREPPQlQJcCCaVwoXkZ2wPyHuHxE
x3XSZwYMkQ1QDbGALRNQ/ezC9sMNshhgi26FnJuThh5Qo+o1WSxagR8=
-----END CERTIFICATE-----
Generated at Wed Jul 22 06:00:14 2026 by rpki-client