Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DA9A08D7DE5F9D286D58F723E30EE9AEBB94BC057CD886728AF6F611050EE5B6/0/3132382e3230312e3134342e302f32342d3234203d3e203535303832.roa
File:                     3132382e3230312e3134342e302f32342d3234203d3e203535303832.roa (raw, json)
Hash identifier:          N28TZp1aaHJovc44LZnMvFKNlsvuH9sFai2mvqU59KA=
Subject key identifier:   E6:F7:91:20:65:5E:4A:00:41:BF:DE:9F:5F:F4:13:EF:13:FB:25:0A
Certificate issuer:       /CN=4C78CC976DFE47B81477BCC595C469015140DEDB
Certificate serial:       43F869B272EBA73B4946F02252D5512243ED2AD9
Authority key identifier: 4C:78:CC:97:6D:FE:47:B8:14:77:BC:C5:95:C4:69:01:51:40:DE:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C78CC976DFE47B81477BCC595C469015140DEDB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DA9A08D7DE5F9D286D58F723E30EE9AEBB94BC057CD886728AF6F611050EE5B6/0/3132382e3230312e3134342e302f32342d3234203d3e203535303832.roa
Signing time:             Sun 19 Apr 2026 23:39:22 +0000
ROA not before:           Sun 19 Apr 2026 23:34:22 +0000
ROA not after:            Sun 18 Apr 2027 23:39:22 +0000
asID:                     55082
IP address blocks:        128.201.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DA9A08D7DE5F9D286D58F723E30EE9AEBB94BC057CD886728AF6F611050EE5B6/0/4C78CC976DFE47B81477BCC595C469015140DEDB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DA9A08D7DE5F9D286D58F723E30EE9AEBB94BC057CD886728AF6F611050EE5B6/0/4C78CC976DFE47B81477BCC595C469015140DEDB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C78CC976DFE47B81477BCC595C469015140DEDB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 04 May 2026 09:52:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:f8:69:b2:72:eb:a7:3b:49:46:f0:22:52:d5:51:22:43:ed:2a:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C78CC976DFE47B81477BCC595C469015140DEDB
        Validity
            Not Before: Apr 19 23:34:22 2026 GMT
            Not After : Apr 18 23:39:22 2027 GMT
        Subject: CN=E6F79120655E4A0041BFDE9F5FF413EF13FB250A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:da:86:53:8f:98:b4:ba:8a:2f:7b:7f:6b:ce:
                    7c:66:2c:e3:84:94:1f:4f:ab:7f:f6:9e:27:a0:3c:
                    f9:5d:2e:c3:d7:65:84:cd:e1:36:ff:15:db:70:d7:
                    a7:99:e9:9b:3b:c2:00:b9:cf:58:be:c1:43:5f:fa:
                    92:fe:3f:52:a1:88:c5:6d:09:b1:b9:08:90:42:fd:
                    fc:40:7c:0b:6c:47:8b:23:73:55:04:30:fb:1d:25:
                    80:c7:2b:35:17:9e:5d:63:ab:32:30:05:80:9e:57:
                    b0:83:12:50:02:d0:8c:bf:60:ed:de:95:dc:1f:71:
                    a2:46:91:97:8e:50:04:8b:10:07:c2:e2:1e:e3:e2:
                    0a:29:2a:66:21:ea:f5:e1:25:98:bd:fb:af:4f:94:
                    17:cc:43:3d:35:da:fc:d3:92:0a:9b:77:07:e2:63:
                    e5:61:fd:58:93:08:7b:54:73:7a:3d:8e:1c:c7:a3:
                    80:9e:d0:74:c0:7d:6d:d0:a9:b0:4a:39:e3:b3:d4:
                    be:20:67:3b:65:a8:f1:20:cc:d7:ca:eb:ac:ab:80:
                    16:94:9e:b4:da:e9:29:a2:5e:25:e7:4a:e6:5b:dc:
                    bd:a9:86:8a:92:e3:25:e1:de:ab:e6:35:d5:d0:34:
                    53:09:a9:95:31:6a:73:b4:33:1e:66:21:eb:7a:35:
                    17:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:F7:91:20:65:5E:4A:00:41:BF:DE:9F:5F:F4:13:EF:13:FB:25:0A
            X509v3 Authority Key Identifier:
                keyid:4C:78:CC:97:6D:FE:47:B8:14:77:BC:C5:95:C4:69:01:51:40:DE:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DA9A08D7DE5F9D286D58F723E30EE9AEBB94BC057CD886728AF6F611050EE5B6/0/4C78CC976DFE47B81477BCC595C469015140DEDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C78CC976DFE47B81477BCC595C469015140DEDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DA9A08D7DE5F9D286D58F723E30EE9AEBB94BC057CD886728AF6F611050EE5B6/0/3132382e3230312e3134342e302f32342d3234203d3e203535303832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:51:e5:64:18:4b:ed:e1:79:c1:dc:27:97:8c:bd:a3:f0:0a:
         c9:4a:44:2c:c2:ec:e4:e7:6b:1c:a5:ae:67:af:61:f2:8f:46:
         4a:51:ea:f5:be:73:5e:6b:5a:3b:50:f1:7c:d6:20:75:23:79:
         78:8f:21:08:ad:42:22:57:81:ac:db:3a:bc:bb:13:7d:7a:da:
         43:72:26:95:69:5c:57:05:02:04:18:3a:2d:3e:43:e6:11:27:
         93:2e:f1:ef:19:f0:65:b3:e8:e0:d9:d9:6f:8a:e6:4f:9f:98:
         b7:eb:ad:73:34:e6:5d:c5:fb:3f:4e:38:28:a7:a7:ea:4f:38:
         9f:f2:a8:b8:fc:c7:e4:d6:2e:1d:ab:83:b7:67:1d:7a:d2:35:
         f3:0a:9a:7e:4f:3a:2a:b8:27:1f:2d:15:ac:7d:e5:f8:18:37:
         9e:5a:29:f6:90:94:76:29:41:74:74:be:1b:4d:92:0b:29:67:
         bb:f3:83:b9:09:6d:cf:c9:af:05:73:31:8f:5e:db:c1:1b:8d:
         62:10:10:78:fc:3d:53:e4:41:e7:36:52:8c:5a:75:5e:fe:2f:
         f8:f5:ca:18:ce:48:59:63:3a:1b:78:a3:c5:a3:98:aa:98:d4:
         4a:a0:37:67:bf:16:3b:f5:c0:1b:29:2b:c3:38:e9:1a:2b:d7:
         d8:21:58:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 06:36:11 2026 by rpki-client