Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/56FE30248DEB42234B16A54E3F9E8897FCC5C61DBF3DFE437311E515E730CCD4/0/3137372e3138342e39312e302f32342d3234203d3e20323632323136.roa
File:                     3137372e3138342e39312e302f32342d3234203d3e20323632323136.roa (raw, json)
Hash identifier:          hfBc3BN62QBnPdPk9KOPojV8VCsxCqtcTuhAIi4pPOo=
Subject key identifier:   01:EA:03:EE:57:DA:A4:40:E2:08:5A:28:C4:B0:F8:9C:99:AF:E7:31
Certificate issuer:       /CN=04066F3321E4D30296716F0BC0C96F60BA79A6E3
Certificate serial:       031C2213F3032594BDAFFB89E4BA4E9368747621
Authority key identifier: 04:06:6F:33:21:E4:D3:02:96:71:6F:0B:C0:C9:6F:60:BA:79:A6:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/04066F3321E4D30296716F0BC0C96F60BA79A6E3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/56FE30248DEB42234B16A54E3F9E8897FCC5C61DBF3DFE437311E515E730CCD4/0/3137372e3138342e39312e302f32342d3234203d3e20323632323136.roa
Signing time:             Thu 30 Jul 2026 15:19:17 +0000
ROA not before:           Thu 30 Jul 2026 15:14:17 +0000
ROA not after:            Thu 29 Jul 2027 15:19:17 +0000
asID:                     262216
IP address blocks:        177.184.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/56FE30248DEB42234B16A54E3F9E8897FCC5C61DBF3DFE437311E515E730CCD4/0/04066F3321E4D30296716F0BC0C96F60BA79A6E3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/56FE30248DEB42234B16A54E3F9E8897FCC5C61DBF3DFE437311E515E730CCD4/0/04066F3321E4D30296716F0BC0C96F60BA79A6E3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/04066F3321E4D30296716F0BC0C96F60BA79A6E3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 15 Sep 2026 10:15:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:1c:22:13:f3:03:25:94:bd:af:fb:89:e4:ba:4e:93:68:74:76:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04066F3321E4D30296716F0BC0C96F60BA79A6E3
        Validity
            Not Before: Jul 30 15:14:17 2026 GMT
            Not After : Jul 29 15:19:17 2027 GMT
        Subject: CN=01EA03EE57DAA440E2085A28C4B0F89C99AFE731
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:75:d5:6f:28:94:7c:b5:f7:41:85:06:48:2f:
                    03:4e:98:8e:ee:65:a5:3e:cb:16:af:56:71:24:ab:
                    32:01:9c:1e:01:67:fc:60:d2:8b:dc:51:61:b3:ec:
                    a3:f5:f6:06:24:58:77:03:48:3c:0d:f8:62:35:94:
                    77:37:c6:46:23:fa:9f:50:cc:e5:80:96:d5:66:a7:
                    61:57:1b:39:61:f7:2d:37:7d:78:39:d8:5f:0b:86:
                    af:34:5f:52:4c:07:47:07:9e:cc:44:e0:19:af:87:
                    ae:66:00:b4:bb:af:a5:13:ed:2d:46:2f:fd:53:74:
                    72:83:a2:99:66:2d:92:2a:d6:af:fb:6c:ac:b7:73:
                    b3:f8:9f:f2:4f:df:b9:07:da:7b:8c:09:b2:50:15:
                    e0:fd:d7:b3:87:76:6d:d2:b5:b0:4c:4a:a3:42:eb:
                    bc:9c:3c:d5:fa:6f:4a:41:b6:1c:cc:59:4d:f9:40:
                    5c:18:ff:b9:b2:71:32:a3:b2:a5:f8:10:ac:24:02:
                    ff:a7:16:29:ab:40:d5:54:f1:b9:ec:fc:64:e2:0a:
                    30:57:bc:e8:f3:a5:a1:03:16:cf:2a:c2:b4:b6:04:
                    4a:f5:f5:de:78:02:5a:a5:1e:ac:d1:5a:c1:6e:03:
                    b6:bb:ff:7c:d9:7d:b3:a4:46:09:c7:44:b7:83:32:
                    5f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:EA:03:EE:57:DA:A4:40:E2:08:5A:28:C4:B0:F8:9C:99:AF:E7:31
            X509v3 Authority Key Identifier:
                keyid:04:06:6F:33:21:E4:D3:02:96:71:6F:0B:C0:C9:6F:60:BA:79:A6:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/56FE30248DEB42234B16A54E3F9E8897FCC5C61DBF3DFE437311E515E730CCD4/0/04066F3321E4D30296716F0BC0C96F60BA79A6E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/04066F3321E4D30296716F0BC0C96F60BA79A6E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/56FE30248DEB42234B16A54E3F9E8897FCC5C61DBF3DFE437311E515E730CCD4/0/3137372e3138342e39312e302f32342d3234203d3e20323632323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.184.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:56:9b:48:71:24:b1:4c:90:0a:5c:91:b3:d8:26:30:aa:10:
         35:5d:ea:32:d7:f1:bd:a9:12:45:08:b9:22:dd:a4:99:26:f7:
         38:67:85:e4:7c:1d:11:70:ed:df:bf:98:eb:1a:c4:65:4c:47:
         2a:07:bd:e2:3d:e4:75:74:88:ee:ee:60:ce:6a:f9:c7:cf:64:
         d2:48:87:58:88:69:9d:3f:52:30:6a:ce:20:ba:e1:c4:eb:e2:
         bc:07:80:ab:d1:44:f0:16:3a:9b:26:be:55:0f:67:84:df:ac:
         5f:5c:b6:81:11:7c:90:60:24:18:12:46:4b:bc:c5:b5:76:40:
         4d:6c:8f:e4:ad:e1:fc:b3:91:89:3e:72:57:0f:79:08:7e:0d:
         8c:c5:ba:45:07:44:35:20:72:55:4a:94:be:b0:69:b9:01:e4:
         9d:a9:0c:9a:54:25:c8:da:31:27:6d:19:a4:af:78:55:65:f8:
         1e:b7:ca:7a:db:b4:ed:94:95:4d:87:19:c8:a3:a5:56:7e:60:
         ff:97:9f:9c:21:59:69:36:a7:c6:aa:5f:4d:3e:27:73:64:4d:
         13:6c:c4:07:e3:d9:6a:de:84:27:8e:1c:1e:59:4e:c5:69:5f:
         06:2a:92:74:f0:da:39:27:44:89:aa:65:29:4d:3a:e8:26:a5:
         31:2c:a4:1e
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUAxwiE/MDJZS9r/uJ5LpOk2h0diEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQwNjZGMzMyMUU0RDMwMjk2NzE2RjBCQzBDOTZGNjBC
QTc5QTZFMzAeFw0yNjA3MzAxNTE0MTdaFw0yNzA3MjkxNTE5MTdaMDMxMTAvBgNV
BAMTKDAxRUEwM0VFNTdEQUE0NDBFMjA4NUEyOEM0QjBGODlDOTlBRkU3MzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHddVvKJR8tfdBhQZILwNOmI7u
ZaU+yxavVnEkqzIBnB4BZ/xg0ovcUWGz7KP19gYkWHcDSDwN+GI1lHc3xkYj+p9Q
zOWAltVmp2FXGzlh9y03fXg52F8Lhq80X1JMB0cHnsxE4Bmvh65mALS7r6UT7S1G
L/1TdHKDoplmLZIq1q/7bKy3c7P4n/JP37kH2nuMCbJQFeD917OHdm3StbBMSqNC
67ycPNX6b0pBthzMWU35QFwY/7mycTKjsqX4EKwkAv+nFimrQNVU8bns/GTiCjBX
vOjzpaEDFs8qwrS2BEr19d54AlqlHqzRWsFuA7a7/3zZfbOkRgnHRLeDMl99AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUAeoD7lfapEDiCFooxLD4nJmv5zEwHwYDVR0j
BBgwFoAUBAZvMyHk0wKWcW8LwMlvYLp5puMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NkZFMzAyNDhERUI0MjIzNEIxNkE1NEUzRjlFODg5N0ZD
QzVDNjFEQkYzREZFNDM3MzExRTUxNUU3MzBDQ0Q0LzAvMDQwNjZGMzMyMUU0RDMw
Mjk2NzE2RjBCQzBDOTZGNjBCQTc5QTZFMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wNDA2NkYzMzIxRTREMzAyOTY3
MTZGMEJDMEM5NkY2MEJBNzlBNkUzLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTZGRTMwMjQ4REVCNDIyMzRCMTZBNTRFM0Y5RTg4OTdGQ0M1QzYxREJG
M0RGRTQzNzMxMUU1MTVFNzMwQ0NENC8wLzMxMzczNzJlMzEzODM0MmUzOTMxMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMyMzIzMTM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsbhb
MA0GCSqGSIb3DQEBCwUAA4IBAQBDVptIcSSxTJAKXJGz2CYwqhA1Xeoy1/G9qRJF
CLki3aSZJvc4Z4XkfB0RcO3fv5jrGsRlTEcqB73iPeR1dIju7mDOavnHz2TSSIdY
iGmdP1Iwas4guuHE6+K8B4Cr0UTwFjqbJr5VD2eE36xfXLaBEXyQYCQYEkZLvMW1
dkBNbI/kreH8s5GJPnJXD3kIfg2MxbpFB0Q1IHJVSpS+sGm5AeSdqQyaVCXI2jEn
bRmkr3hVZfget8p627TtlJVNhxnIo6VWfmD/l5+cIVlpNqfGql9NPidzZE0TbMQH
49lq3oQnjhweWU7FaV8GKpJ08No5J0SJqmUpTTroJqUxLKQe
-----END CERTIFICATE-----
Generated at Fri Sep 11 01:16:33 2026 by rpki-client