Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/36362e3233312e37342e302f32332d3233203d3e20323730303439.roa
File:                     36362e3233312e37342e302f32332d3233203d3e20323730303439.roa (raw, json)
Hash identifier:          nsZOToyaQzaNJDLfi1s+AVWtFDtksBYz4//1ZIlLerE=
Subject key identifier:   3F:16:87:4E:E2:EF:47:16:25:C2:E3:F1:47:9F:29:03:5A:46:B4:25
Certificate issuer:       /CN=C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0
Certificate serial:       0F4D3406B5ABE513392E65A3191E776B5E967727
Authority key identifier: C2:96:7F:F3:10:9E:0A:A7:EE:5E:C1:C6:40:30:0D:5A:00:FF:41:B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/36362e3233312e37342e302f32332d3233203d3e20323730303439.roa
Signing time:             Wed 26 Aug 2026 20:26:41 +0000
ROA not before:           Wed 26 Aug 2026 20:21:41 +0000
ROA not after:            Wed 25 Aug 2027 20:26:41 +0000
asID:                     270049
IP address blocks:        66.231.74.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Sep 2026 22:36:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:4d:34:06:b5:ab:e5:13:39:2e:65:a3:19:1e:77:6b:5e:96:77:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0
        Validity
            Not Before: Aug 26 20:21:41 2026 GMT
            Not After : Aug 25 20:26:41 2027 GMT
        Subject: CN=3F16874EE2EF471625C2E3F1479F29035A46B425
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8d:14:f7:da:2f:56:8a:54:3f:b5:88:29:3c:
                    fb:b8:6e:11:ba:71:a3:d3:7c:f1:fd:33:ca:2a:df:
                    d8:cd:8e:29:7f:b5:5e:59:e0:5a:da:7d:c2:78:69:
                    1b:8d:f2:21:30:39:7f:00:d9:cf:87:b7:a4:fe:4a:
                    27:f2:fe:5f:b9:46:b7:0e:3f:e3:23:9a:61:3a:cc:
                    29:02:7f:80:81:2f:51:a4:68:08:41:07:54:f8:d3:
                    24:39:9c:52:50:b0:b7:9b:c6:5f:d0:b0:e6:53:92:
                    d6:86:c5:c2:2e:cc:07:0f:58:f4:ff:81:c2:d7:0d:
                    4b:c2:74:19:4e:18:7b:f5:2d:17:5b:e9:48:1d:36:
                    4e:77:ee:76:7f:b2:f9:f6:08:8b:4f:cf:f1:f5:12:
                    30:6b:6d:64:ac:4a:90:8f:7f:21:72:2b:32:76:4f:
                    a4:6e:b4:82:7b:6f:64:f1:59:10:13:8e:d9:aa:f6:
                    a4:42:c7:01:2c:8b:db:ae:1e:dd:d2:9a:1b:2e:04:
                    fe:ff:a2:cc:91:58:0c:cd:42:9d:ab:d5:f7:99:19:
                    66:03:20:79:95:96:47:05:af:81:b2:35:fd:0a:67:
                    37:e8:74:ed:38:4e:a9:d1:5a:23:7c:48:70:66:9d:
                    7b:fb:65:4d:08:35:bd:66:8d:f0:e7:8d:3a:da:2b:
                    1c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:16:87:4E:E2:EF:47:16:25:C2:E3:F1:47:9F:29:03:5A:46:B4:25
            X509v3 Authority Key Identifier:
                keyid:C2:96:7F:F3:10:9E:0A:A7:EE:5E:C1:C6:40:30:0D:5A:00:FF:41:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/36362e3233312e37342e302f32332d3233203d3e20323730303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.231.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ba:e5:bc:c9:72:78:29:74:3f:15:5f:36:ba:2d:72:b2:03:90:
         67:a7:15:d5:22:70:6d:fc:10:18:12:78:ac:f8:24:7a:e8:3f:
         34:45:eb:b5:bd:c6:d4:55:e4:7b:18:ba:90:88:5e:44:b8:ed:
         0f:ac:18:77:86:53:88:a0:77:9e:bf:34:3b:08:43:df:ed:f9:
         5d:52:c3:38:c2:95:9c:e5:c6:d6:30:b0:f5:8e:15:6d:3f:b6:
         7d:65:84:4f:b7:9b:7c:6f:08:4a:b6:c5:91:5b:1b:02:4e:b4:
         ab:c5:2f:74:5e:05:dc:14:b6:2c:a9:b8:d9:b5:75:cf:3e:29:
         45:1a:59:86:7e:c2:2b:98:ec:51:24:9c:46:f0:18:97:04:2a:
         41:65:40:28:a5:0d:d5:d7:0d:12:6d:8a:b3:f1:19:45:7b:56:
         43:36:6a:2a:3e:3b:3b:68:34:47:a0:55:dc:8d:7c:40:b5:4b:
         dd:d3:e9:fd:41:3a:50:2b:92:17:2c:d6:a2:38:5d:04:49:93:
         23:1a:95:61:8b:42:79:eb:69:7c:3d:b6:54:ea:61:70:33:5d:
         ea:d7:22:5c:d0:93:6c:67:d7:6f:d7:26:da:84:2f:0e:fb:8d:
         b1:1d:47:aa:ff:cb:37:06:cb:bf:df:bd:df:75:aa:70:51:70:
         54:1e:03:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 06:50:23 2026 by rpki-client