Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C1698F32138AF4429524D454163F67230DC130CC4E23D163FE7CFB8A7B0E2DE3/0/3136312e302e36342e302f32322d3234203d3e20323632393335.roa
File:                     3136312e302e36342e302f32322d3234203d3e20323632393335.roa (raw, json)
Hash identifier:          whXgr6Qt6gpsMQNsDYXLEbNK+QxyUYICJ8GXHbf9iXA=
Subject key identifier:   36:54:D1:A5:BA:30:BB:CD:95:C5:B8:65:48:C0:50:21:E3:55:4E:08
Certificate issuer:       /CN=757DADF1F2EB6AA36F2041416BF44D36D82E365C
Certificate serial:       4EB179CCCDB56122D88ED2447FB8728FC4CF0F2A
Authority key identifier: 75:7D:AD:F1:F2:EB:6A:A3:6F:20:41:41:6B:F4:4D:36:D8:2E:36:5C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/757DADF1F2EB6AA36F2041416BF44D36D82E365C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C1698F32138AF4429524D454163F67230DC130CC4E23D163FE7CFB8A7B0E2DE3/0/3136312e302e36342e302f32322d3234203d3e20323632393335.roa
Signing time:             Thu 28 Aug 2025 20:41:42 +0000
ROA not before:           Thu 28 Aug 2025 20:36:42 +0000
ROA not after:            Thu 27 Aug 2026 20:41:42 +0000
asID:                     262935
IP address blocks:        161.0.64.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C1698F32138AF4429524D454163F67230DC130CC4E23D163FE7CFB8A7B0E2DE3/0/757DADF1F2EB6AA36F2041416BF44D36D82E365C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C1698F32138AF4429524D454163F67230DC130CC4E23D163FE7CFB8A7B0E2DE3/0/757DADF1F2EB6AA36F2041416BF44D36D82E365C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/757DADF1F2EB6AA36F2041416BF44D36D82E365C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Sep 2025 15:04:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:b1:79:cc:cd:b5:61:22:d8:8e:d2:44:7f:b8:72:8f:c4:cf:0f:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=757DADF1F2EB6AA36F2041416BF44D36D82E365C
        Validity
            Not Before: Aug 28 20:36:42 2025 GMT
            Not After : Aug 27 20:41:42 2026 GMT
        Subject: CN=3654D1A5BA30BBCD95C5B86548C05021E3554E08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f6:f0:21:30:6d:c7:a0:c1:23:12:fc:98:c0:
                    3e:f8:36:d9:14:23:92:1f:64:17:81:7b:e5:05:8c:
                    65:12:1e:5f:84:7b:13:38:91:d4:06:15:71:4f:78:
                    f5:52:06:8a:23:0b:2b:f6:10:48:81:d2:67:c0:e1:
                    67:78:3a:66:30:0c:bc:dc:65:26:b4:80:ba:62:2d:
                    6b:f2:d2:28:9e:04:00:d9:85:3a:f7:f8:db:b3:e5:
                    2c:da:52:78:f9:24:13:88:5e:b3:be:c2:93:ba:eb:
                    70:8f:01:ca:b0:30:46:d4:44:e9:5c:11:74:2e:71:
                    f4:0c:e7:13:5a:ac:3e:72:87:c1:d4:15:9b:ff:df:
                    12:b1:38:55:fd:fd:e2:43:1b:73:f2:f7:0d:d7:ef:
                    ca:31:9d:2c:76:1e:4d:56:7e:ae:d5:48:38:2f:b8:
                    df:c2:ee:de:f8:ea:01:d6:f2:21:1e:b4:13:d0:df:
                    35:5b:06:d2:2d:b1:36:ab:84:d2:b5:91:8f:b3:30:
                    7c:b8:68:bb:60:0d:08:f9:a7:75:f0:a1:88:eb:12:
                    ce:7e:1c:81:af:2c:a3:c9:c5:0d:9e:b4:02:ee:83:
                    a4:d4:8a:69:d9:c6:c4:07:3a:da:93:ff:37:f7:95:
                    30:8c:74:b8:1e:d0:31:bb:a7:28:1f:d3:d8:7d:2f:
                    d0:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:54:D1:A5:BA:30:BB:CD:95:C5:B8:65:48:C0:50:21:E3:55:4E:08
            X509v3 Authority Key Identifier:
                keyid:75:7D:AD:F1:F2:EB:6A:A3:6F:20:41:41:6B:F4:4D:36:D8:2E:36:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C1698F32138AF4429524D454163F67230DC130CC4E23D163FE7CFB8A7B0E2DE3/0/757DADF1F2EB6AA36F2041416BF44D36D82E365C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/757DADF1F2EB6AA36F2041416BF44D36D82E365C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C1698F32138AF4429524D454163F67230DC130CC4E23D163FE7CFB8A7B0E2DE3/0/3136312e302e36342e302f32322d3234203d3e20323632393335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.0.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         65:d6:0d:0e:79:d4:f6:3a:53:fb:59:13:fe:c6:ca:9c:bd:c4:
         7e:6f:c5:02:a3:5d:8e:3f:95:ca:51:8a:ef:9b:db:94:bc:94:
         65:c1:92:a1:01:03:21:13:d5:69:d5:f4:82:28:c2:54:b2:6f:
         ce:88:62:5b:51:a0:59:69:0b:e5:ea:84:04:ea:33:c7:30:ec:
         5a:5c:46:11:bd:35:eb:f3:25:7b:09:67:ea:d9:5a:01:67:b0:
         85:8b:f9:9e:58:57:4c:02:48:ad:e7:88:26:5a:e9:d3:60:36:
         a6:44:03:85:8f:4e:f1:f6:29:b2:80:1d:44:20:ab:f6:95:a9:
         0d:00:b6:0a:21:f3:eb:54:e7:a8:60:ac:11:3e:8c:d8:5b:81:
         48:e9:24:59:2b:14:0c:fb:b3:12:b8:29:7a:df:b4:86:23:20:
         1d:77:7f:b8:ba:e1:80:67:83:fa:8e:f9:3d:1c:5b:a2:57:56:
         b9:88:19:b3:19:05:25:f7:2d:5d:48:86:16:89:af:13:70:2a:
         de:da:06:8d:9c:cc:fb:a7:a8:f3:70:8e:16:1d:46:cd:49:3e:
         21:52:54:1f:b5:4b:e8:41:97:54:31:12:56:8a:ca:e2:2c:a9:
         f6:4c:1f:19:62:af:6f:94:3a:97:87:47:f9:3c:88:46:8a:6a:
         b7:f6:cc:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 02:40:35 2025 by rpki-client