Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FE23E216DF322905837021068BCA30C55CB95FDC90C21B9DDF83AC1123186D29/0/3136362e3131342e31362e302f32302d3234203d3e2036353638.roa
File:                     3136362e3131342e31362e302f32302d3234203d3e2036353638.roa (raw, json)
Hash identifier:          st0Lt2SVLlLU8/4b3T8ULu0Oils24mrrQGxED4io67Y=
Subject key identifier:   7C:3B:B1:DF:4C:9A:96:2C:B4:74:E5:E9:C1:35:13:9A:CF:80:4B:20
Certificate issuer:       /CN=677CEC9F1C4060755422FE75661CBC3718515578
Certificate serial:       1D07755FDA51D41420093BBB39938045DAA6E033
Authority key identifier: 67:7C:EC:9F:1C:40:60:75:54:22:FE:75:66:1C:BC:37:18:51:55:78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/677CEC9F1C4060755422FE75661CBC3718515578.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FE23E216DF322905837021068BCA30C55CB95FDC90C21B9DDF83AC1123186D29/0/3136362e3131342e31362e302f32302d3234203d3e2036353638.roa
Signing time:             Thu 23 Apr 2026 17:39:47 +0000
ROA not before:           Thu 23 Apr 2026 17:34:47 +0000
ROA not after:            Thu 22 Apr 2027 17:39:47 +0000
asID:                     6568
IP address blocks:        166.114.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FE23E216DF322905837021068BCA30C55CB95FDC90C21B9DDF83AC1123186D29/0/677CEC9F1C4060755422FE75661CBC3718515578.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FE23E216DF322905837021068BCA30C55CB95FDC90C21B9DDF83AC1123186D29/0/677CEC9F1C4060755422FE75661CBC3718515578.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/677CEC9F1C4060755422FE75661CBC3718515578.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 04 May 2026 10:13:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:07:75:5f:da:51:d4:14:20:09:3b:bb:39:93:80:45:da:a6:e0:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=677CEC9F1C4060755422FE75661CBC3718515578
        Validity
            Not Before: Apr 23 17:34:47 2026 GMT
            Not After : Apr 22 17:39:47 2027 GMT
        Subject: CN=7C3BB1DF4C9A962CB474E5E9C135139ACF804B20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f5:de:d7:33:29:05:9e:1e:6e:a1:c2:58:cc:
                    3f:28:1e:f3:e2:c1:87:62:aa:f9:d3:ed:9b:90:44:
                    23:a2:58:69:c7:c8:f2:8e:42:c4:24:1c:e6:ff:d9:
                    a4:77:d8:6c:63:ca:9f:9e:9b:b2:f9:89:90:48:f0:
                    04:24:08:f0:85:b2:de:06:11:fb:4d:98:86:41:3d:
                    e5:a3:12:43:1b:22:7e:51:21:72:71:ab:3b:68:5c:
                    f6:fd:71:aa:15:98:af:ee:51:0d:90:2b:b9:60:bf:
                    31:fa:c3:93:d7:a0:1a:bd:a7:20:56:55:e7:27:16:
                    90:75:7f:56:2f:2f:b3:7a:08:74:48:00:c5:f8:ab:
                    ff:80:11:a6:48:5a:34:88:92:d0:77:88:34:fd:0f:
                    ce:6a:29:c0:32:7a:64:2b:38:ae:64:6d:05:68:0f:
                    ac:e9:41:a4:74:65:ec:30:a3:2a:06:97:f6:97:4b:
                    ef:49:98:d6:53:f3:2b:75:81:d8:d7:b0:a4:65:61:
                    b7:f9:b7:23:71:ba:e8:fd:f6:a2:75:5a:66:c7:4d:
                    37:91:b3:d4:ce:32:2b:09:af:12:68:aa:16:6c:72:
                    ed:5c:eb:92:5d:95:d6:c4:5f:85:f8:c9:b9:6d:12:
                    e0:f1:a3:d7:f4:85:12:53:6e:f5:aa:f1:51:16:83:
                    c2:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:3B:B1:DF:4C:9A:96:2C:B4:74:E5:E9:C1:35:13:9A:CF:80:4B:20
            X509v3 Authority Key Identifier:
                keyid:67:7C:EC:9F:1C:40:60:75:54:22:FE:75:66:1C:BC:37:18:51:55:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FE23E216DF322905837021068BCA30C55CB95FDC90C21B9DDF83AC1123186D29/0/677CEC9F1C4060755422FE75661CBC3718515578.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/677CEC9F1C4060755422FE75661CBC3718515578.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FE23E216DF322905837021068BCA30C55CB95FDC90C21B9DDF83AC1123186D29/0/3136362e3131342e31362e302f32302d3234203d3e2036353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.114.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         22:4c:8f:e5:1a:82:a8:ea:f7:d3:48:9a:f9:da:d8:19:9b:e4:
         bb:92:46:0a:19:08:b9:ef:fd:f1:71:b4:fa:08:d6:e0:d7:ff:
         b7:42:76:55:bc:9b:60:ff:51:69:95:8d:35:95:a0:a2:72:f5:
         6f:13:87:d1:b5:2c:01:db:64:95:cb:c5:b7:dd:1e:60:4d:01:
         a1:b4:59:07:1c:60:06:c1:71:bd:d4:c3:21:2b:f9:f9:fd:b1:
         86:54:28:f0:5b:64:73:9f:a3:4e:88:b0:61:c8:d3:df:44:62:
         7d:7d:ec:4e:d9:c4:c0:a6:cc:ad:79:73:2b:56:18:62:d6:8c:
         98:d1:0e:a2:88:a3:db:2a:5f:f9:a7:31:e8:e5:c7:99:f7:3d:
         cb:be:39:8b:5a:0e:7a:ad:a6:c3:ca:d5:82:8b:73:74:7a:4b:
         5f:90:8a:2b:19:4e:83:be:b0:44:d8:58:86:1e:a4:05:a0:4b:
         46:cf:46:46:1c:ea:63:0f:60:9a:e5:03:c8:b5:38:dc:b2:5b:
         a2:dd:1c:60:ca:74:a8:e1:d2:a9:04:9e:c6:70:b7:0d:02:10:
         6f:4a:d8:cd:fa:80:4a:91:61:cb:08:da:0f:f8:8f:79:d5:52:
         f7:7b:55:6d:e9:54:12:ff:de:fc:7a:38:36:0a:b2:93:d6:06:
         e6:5d:d8:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 06:43:45 2026 by rpki-client