Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS4926.roa
File:                     AS4926.roa (raw, json)
Hash identifier:          nxeAtIVt4werN97W9oaSZL92FnyDPUKjThaf4ACkYOg=
Subject key identifier:   8F:E2:78:44:60:E3:C8:DD:7A:F7:E6:65:6F:60:6C:65:D6:38:13:A7
Certificate issuer:       /CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
Certificate serial:       21F2A94B5440800CEAF26E2E11CC552E3773A729
Authority key identifier: 41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS4926.roa
Signing time:             Mon 01 Sep 2025 14:30:00 +0000
ROA not before:           Mon 01 Sep 2025 14:25:00 +0000
ROA not after:            Mon 31 Aug 2026 14:30:00 +0000
asID:                     4926
IP address blocks:        168.226.39.0/24 maxlen: 24
                          168.226.40.0/24 maxlen: 24
                          168.226.41.0/24 maxlen: 24
                          168.226.42.0/24 maxlen: 24
                          168.226.43.0/24 maxlen: 24
                          168.226.44.0/24 maxlen: 24
                          168.226.45.0/24 maxlen: 24
                          168.226.46.0/24 maxlen: 24
                          168.226.47.0/24 maxlen: 24
                          168.226.48.0/24 maxlen: 24
                          168.226.49.0/24 maxlen: 24
                          200.51.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 18 Sep 2025 12:03:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:f2:a9:4b:54:40:80:0c:ea:f2:6e:2e:11:cc:55:2e:37:73:a7:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
        Validity
            Not Before: Sep  1 14:25:00 2025 GMT
            Not After : Aug 31 14:30:00 2026 GMT
        Subject: CN=8FE2784460E3C8DD7AF7E6656F606C65D63813A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6d:e9:cd:d2:1b:1f:93:19:e7:a2:6e:bf:32:
                    93:b1:bf:c5:08:70:3a:9d:13:31:9b:dc:83:a7:f1:
                    15:06:21:a4:8d:af:bc:2a:fd:19:02:70:c5:4e:09:
                    d7:ee:f8:1e:09:19:0a:64:7c:05:1c:90:ff:1f:8b:
                    f6:4a:5c:35:66:e9:5c:36:9f:35:04:98:81:3d:6c:
                    0e:b7:a1:99:4f:5b:0c:9d:1b:1d:be:05:5f:9c:70:
                    32:74:c1:2f:d6:fa:8f:fb:8f:8d:d0:73:d3:d5:b3:
                    26:de:3b:0a:cf:9f:a6:0a:1b:2b:88:f7:00:b2:a6:
                    b5:5c:61:5f:92:bc:43:b1:ea:21:6d:3e:68:7e:f8:
                    00:55:3e:8a:5e:a7:96:e9:a6:cb:37:a4:7c:4b:20:
                    6f:2e:01:0a:a5:e5:5f:7c:46:46:ec:c1:c5:eb:ed:
                    4c:02:4f:06:92:29:19:40:88:eb:e0:e1:ab:64:21:
                    66:17:d5:74:20:68:47:d5:8b:2b:fc:86:6b:44:7c:
                    8f:54:e5:eb:25:e7:4e:fe:24:1c:38:36:a2:a4:05:
                    cb:a1:02:6d:8b:f8:7d:8c:83:a5:0a:00:aa:7e:9a:
                    0f:1d:38:65:ac:07:59:39:ce:a7:6a:b0:c4:41:fd:
                    f3:1e:cd:d3:6b:66:b5:30:85:09:9f:8c:e6:a9:29:
                    09:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:E2:78:44:60:E3:C8:DD:7A:F7:E6:65:6F:60:6C:65:D6:38:13:A7
            X509v3 Authority Key Identifier:
                keyid:41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS4926.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.226.39.0-168.226.49.255
                  200.51.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:3a:4d:c8:6a:95:71:4c:68:9f:c4:ad:97:32:19:85:0e:11:
         bb:f2:4f:86:3f:7e:21:c1:75:1b:28:44:40:35:e9:18:15:ee:
         b9:6a:80:13:8b:ea:8b:d1:d0:a7:e2:12:ec:7a:1d:62:9f:ca:
         e2:ba:4f:14:e3:2d:fe:0f:c7:b1:51:0e:b8:3d:71:d3:e8:5a:
         5a:bc:73:4e:0b:f8:33:73:1b:c6:32:d9:95:a2:11:fe:e2:7f:
         3a:b9:20:45:ed:30:f2:f3:f5:8a:cd:9c:a2:76:1e:90:ba:25:
         e5:20:8e:51:5f:c7:e8:b3:b8:f6:fc:93:e5:a2:7d:fe:78:ef:
         d9:b5:1f:36:fe:69:ee:8e:7a:3e:3f:70:92:94:c3:4d:29:f0:
         d9:50:45:40:15:bf:e5:b4:92:88:28:dc:7c:17:bb:bb:60:ef:
         03:1f:32:84:e4:ec:13:94:0e:9c:1a:45:b3:8b:37:51:21:33:
         cf:65:14:51:46:ce:15:39:e6:13:2d:db:0d:5c:58:d9:17:95:
         e7:3f:c2:ce:8e:87:82:96:99:8f:35:fe:40:d4:05:d5:cd:84:
         fe:ce:83:91:72:76:f3:1c:7e:b9:6e:7b:a7:be:8f:7f:25:e8:
         a2:b7:ba:25:ea:c9:bd:b3:1c:f9:e7:a2:2c:2f:06:84:f5:eb:
         e5:ba:93:61
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Sep 14 15:17:54 2025 by rpki-client