Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/968E0ACB76CBF36C95DF5D96E80D200EF6E74615658B4932191E5F1827E4DAF7/0/36362e3132382e34302e302f32312d3234203d3e20323633323336.roa
File:                     36362e3132382e34302e302f32312d3234203d3e20323633323336.roa (raw, json)
Hash identifier:          +LyPX8aaMorM3pUBVwSA6HaZ0J9GrJGZ5dcElAeXRqA=
Subject key identifier:   4C:11:8D:34:45:56:9A:E9:A1:A2:2B:34:4B:4A:C1:1D:50:F1:69:0B
Certificate issuer:       /CN=160B7951E0606756250A049D4BCA8B87E03112C2
Certificate serial:       7B24EF25AAAEBD175567CF4C5F20F28AB76AD892
Authority key identifier: 16:0B:79:51:E0:60:67:56:25:0A:04:9D:4B:CA:8B:87:E0:31:12:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/160B7951E0606756250A049D4BCA8B87E03112C2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/968E0ACB76CBF36C95DF5D96E80D200EF6E74615658B4932191E5F1827E4DAF7/0/36362e3132382e34302e302f32312d3234203d3e20323633323336.roa
Signing time:             Wed 17 Sep 2025 14:47:03 +0000
ROA not before:           Wed 17 Sep 2025 14:42:03 +0000
ROA not after:            Wed 16 Sep 2026 14:47:03 +0000
asID:                     263236
IP address blocks:        66.128.40.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/968E0ACB76CBF36C95DF5D96E80D200EF6E74615658B4932191E5F1827E4DAF7/0/160B7951E0606756250A049D4BCA8B87E03112C2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/968E0ACB76CBF36C95DF5D96E80D200EF6E74615658B4932191E5F1827E4DAF7/0/160B7951E0606756250A049D4BCA8B87E03112C2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/160B7951E0606756250A049D4BCA8B87E03112C2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Sep 2025 23:39:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:24:ef:25:aa:ae:bd:17:55:67:cf:4c:5f:20:f2:8a:b7:6a:d8:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=160B7951E0606756250A049D4BCA8B87E03112C2
        Validity
            Not Before: Sep 17 14:42:03 2025 GMT
            Not After : Sep 16 14:47:03 2026 GMT
        Subject: CN=4C118D3445569AE9A1A22B344B4AC11D50F1690B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:35:bf:b0:56:c4:8b:1a:b3:d6:02:10:4e:7b:
                    02:74:68:8d:46:57:07:62:b0:1d:33:ae:e7:d8:96:
                    7b:47:77:13:36:91:2c:80:4c:10:44:84:fa:79:06:
                    0c:b3:df:e9:12:b4:c1:a2:a6:fa:42:ca:b5:97:e8:
                    9c:78:77:a7:95:1c:a0:51:9b:dc:f4:da:eb:a3:c2:
                    29:18:df:c2:8c:d0:f6:94:a9:17:1a:a7:5c:7a:31:
                    48:35:3d:3e:ed:48:bb:02:65:8c:8f:06:a2:36:0a:
                    88:50:6e:4d:a1:63:dc:71:6c:c5:cb:be:d1:56:81:
                    f2:01:19:17:d6:95:23:f4:a2:d0:89:7f:c0:8f:66:
                    a7:e1:94:51:59:fc:c5:43:0e:94:34:3f:cd:58:1e:
                    47:63:81:e9:eb:d9:d4:af:ba:94:db:f7:8a:2f:0e:
                    6a:9e:9d:5b:5a:ca:ad:ed:fb:19:e5:fa:d5:ad:dc:
                    ee:87:06:da:37:3b:cb:81:84:70:b7:f4:82:e9:b6:
                    e0:33:76:c2:e0:16:02:60:2d:a7:ca:a8:17:0d:e7:
                    a5:fb:04:a7:05:6d:cd:e2:cc:8f:64:9b:7f:b6:88:
                    af:7d:cc:bf:f5:28:71:d7:64:52:ed:ac:5f:36:98:
                    c8:53:0d:1d:b5:44:85:ef:26:9f:f5:16:c2:f5:4d:
                    00:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:11:8D:34:45:56:9A:E9:A1:A2:2B:34:4B:4A:C1:1D:50:F1:69:0B
            X509v3 Authority Key Identifier:
                keyid:16:0B:79:51:E0:60:67:56:25:0A:04:9D:4B:CA:8B:87:E0:31:12:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/968E0ACB76CBF36C95DF5D96E80D200EF6E74615658B4932191E5F1827E4DAF7/0/160B7951E0606756250A049D4BCA8B87E03112C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/160B7951E0606756250A049D4BCA8B87E03112C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/968E0ACB76CBF36C95DF5D96E80D200EF6E74615658B4932191E5F1827E4DAF7/0/36362e3132382e34302e302f32312d3234203d3e20323633323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.128.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         70:fa:f3:43:64:7f:fc:13:32:cf:1d:36:a8:2a:0c:fe:2e:6c:
         7c:10:c5:fc:3d:38:c7:8f:9f:45:e1:4a:c3:c6:4d:23:7a:2f:
         6a:2f:8d:91:64:30:ad:48:fa:64:ea:ed:87:b3:b3:14:60:87:
         b7:d2:95:4b:82:40:08:2e:9c:39:fe:7f:20:95:ac:ec:e5:96:
         c4:30:ab:92:62:3c:b0:45:bc:86:aa:21:a4:8a:37:00:85:14:
         df:1a:06:9c:89:9b:aa:6d:18:fc:28:f3:41:8e:31:bd:c6:06:
         e1:c6:69:8c:1e:20:73:b2:45:79:7f:6c:3a:08:71:45:a8:01:
         75:b3:b0:f2:3e:58:59:ad:ca:ec:a7:ba:d0:9e:0d:8d:35:2b:
         96:a3:60:39:1a:e5:8e:c3:e8:dc:22:cc:77:a0:55:af:43:66:
         87:99:bb:fd:97:80:12:d7:21:8c:e4:44:f6:c7:5b:11:ea:73:
         03:d1:9a:16:8e:98:83:0f:ed:43:a2:80:3d:a7:27:5e:a7:ac:
         5d:38:40:17:d6:4b:b3:dd:f9:db:a7:c1:51:f1:f0:4f:9d:07:
         04:5b:6f:ab:c8:ba:27:fa:be:49:a3:01:11:4b:b8:62:ab:c6:
         40:be:6e:9b:6d:c9:25:8b:1e:d1:47:18:d0:13:9d:c7:c6:7c:
         b6:fd:37:b9
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUeyTvJaquvRdVZ89MXyDyirdq2JIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTYwQjc5NTFFMDYwNjc1NjI1MEEwNDlENEJDQThCODdF
MDMxMTJDMjAeFw0yNTA5MTcxNDQyMDNaFw0yNjA5MTYxNDQ3MDNaMDMxMTAvBgNV
BAMTKDRDMTE4RDM0NDU1NjlBRTlBMUEyMkIzNDRCNEFDMTFENTBGMTY5MEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0Nb+wVsSLGrPWAhBOewJ0aI1G
VwdisB0zrufYlntHdxM2kSyATBBEhPp5Bgyz3+kStMGipvpCyrWX6Jx4d6eVHKBR
m9z02uujwikY38KM0PaUqRcap1x6MUg1PT7tSLsCZYyPBqI2CohQbk2hY9xxbMXL
vtFWgfIBGRfWlSP0otCJf8CPZqfhlFFZ/MVDDpQ0P81YHkdjgenr2dSvupTb94ov
DmqenVtayq3t+xnl+tWt3O6HBto3O8uBhHC39ILptuAzdsLgFgJgLafKqBcN56X7
BKcFbc3izI9km3+2iK99zL/1KHHXZFLtrF82mMhTDR21RIXvJp/1FsL1TQDfAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUTBGNNEVWmumhois0S0rBHVDxaQswHwYDVR0j
BBgwFoAUFgt5UeBgZ1YlCgSdS8qLh+AxEsIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85NjhFMEFDQjc2Q0JGMzZDOTVERjVEOTZFODBEMjAwRUY2
RTc0NjE1NjU4QjQ5MzIxOTFFNUYxODI3RTREQUY3LzAvMTYwQjc5NTFFMDYwNjc1
NjI1MEEwNDlENEJDQThCODdFMDMxMTJDMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xNjBCNzk1MUUwNjA2NzU2MjUw
QTA0OUQ0QkNBOEI4N0UwMzExMkMyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTY4RTBBQ0I3NkNCRjM2Qzk1REY1RDk2RTgwRDIwMEVGNkU3NDYxNTY1
OEI0OTMyMTkxRTVGMTgyN0U0REFGNy8wLzM2MzYyZTMxMzIzODJlMzQzMDJlMzAy
ZjMyMzEyZDMyMzQyMDNkM2UyMDMyMzYzMzMyMzMzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA0KAKDAN
BgkqhkiG9w0BAQsFAAOCAQEAcPrzQ2R//BMyzx02qCoM/i5sfBDF/D04x4+fReFK
w8ZNI3ovai+NkWQwrUj6ZOrth7OzFGCHt9KVS4JACC6cOf5/IJWs7OWWxDCrkmI8
sEW8hqohpIo3AIUU3xoGnImbqm0Y/CjzQY4xvcYG4cZpjB4gc7JFeX9sOghxRagB
dbOw8j5YWa3K7Ke60J4NjTUrlqNgORrljsPo3CLMd6BVr0Nmh5m7/ZeAEtchjORE
9sdbEepzA9GaFo6Ygw/tQ6KAPacnXqesXThAF9ZLs93526fBUfHwT50HBFtvq8i6
J/q+SaMBEUu4YqvGQL5um23JJYse0UcY0BOdx8Z8tv03uQ==
-----END CERTIFICATE-----
Generated at Thu Sep 18 21:41:03 2025 by rpki-client