Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e3139362e302f32342d3234203d3e203132313237.roa
File:                     3136382e3234332e3139362e302f32342d3234203d3e203132313237.roa (raw, json)
Hash identifier:          m3G14r/MbxAWmqG8/ihSplyBZjEx3rwhP8oCfaOJAVA=
Subject key identifier:   17:5F:96:C0:A3:3B:CE:29:0C:FF:E4:B1:34:B6:1F:8A:0A:08:F3:F1
Certificate issuer:       /CN=D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA
Certificate serial:       36EFEAFCE9D5EAD4308A7B0784C85F9F2301C440
Authority key identifier: D3:50:3D:03:E3:D4:DF:A0:76:7F:6D:FF:3B:A7:1D:D7:B6:23:6A:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e3139362e302f32342d3234203d3e203132313237.roa
Signing time:             Tue 14 Jul 2026 14:30:03 +0000
ROA not before:           Tue 14 Jul 2026 14:25:03 +0000
ROA not after:            Tue 13 Jul 2027 14:30:03 +0000
asID:                     12127
IP address blocks:        168.243.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 27 Jul 2026 21:12:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:ef:ea:fc:e9:d5:ea:d4:30:8a:7b:07:84:c8:5f:9f:23:01:c4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA
        Validity
            Not Before: Jul 14 14:25:03 2026 GMT
            Not After : Jul 13 14:30:03 2027 GMT
        Subject: CN=175F96C0A33BCE290CFFE4B134B61F8A0A08F3F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:22:b6:6f:a2:c5:f1:ff:5a:32:ea:97:ad:a5:
                    fd:46:e1:a7:8b:a3:15:93:c0:18:f4:2b:b5:2d:50:
                    c0:8c:6e:7e:75:f9:70:9f:84:2f:8b:2a:f4:3e:35:
                    9f:f5:56:7c:41:6c:c1:cd:b8:95:7b:a5:44:28:28:
                    b4:ae:94:ec:a2:11:ac:36:9c:c4:40:a5:83:cb:d0:
                    d0:52:d9:04:3e:30:97:40:90:f1:f9:23:2a:7b:f4:
                    64:75:8d:85:f6:2e:92:64:a5:ef:32:73:e4:f0:7a:
                    1c:80:42:36:ff:3f:53:b8:5d:6f:c5:89:cc:02:59:
                    5d:3d:b4:ca:50:04:27:56:71:2d:0f:8e:3b:db:b2:
                    46:78:65:e7:31:63:8e:c3:46:68:2a:8d:8e:52:e9:
                    e5:b1:3a:25:22:eb:87:19:5d:16:a0:a6:95:06:5a:
                    9f:5d:3d:e7:1c:91:4b:ac:49:2d:e9:03:3d:2f:9f:
                    c4:44:9e:12:e0:ed:e4:0f:b6:40:e1:98:d4:13:9d:
                    6e:a4:82:29:07:78:69:ea:13:65:ca:71:07:73:6e:
                    cf:46:05:19:ba:48:b3:91:f1:e5:9b:f4:21:e4:d1:
                    6a:4a:ce:bc:e6:a6:9b:b5:61:ac:3d:fc:56:0a:f3:
                    5c:3c:86:a9:08:fa:77:c7:f7:21:86:dc:56:73:d7:
                    5e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:5F:96:C0:A3:3B:CE:29:0C:FF:E4:B1:34:B6:1F:8A:0A:08:F3:F1
            X509v3 Authority Key Identifier:
                keyid:D3:50:3D:03:E3:D4:DF:A0:76:7F:6D:FF:3B:A7:1D:D7:B6:23:6A:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e3139362e302f32342d3234203d3e203132313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.243.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:87:e6:55:57:7b:55:4b:b3:94:3c:e5:3f:3f:9d:3a:68:1f:
         db:5f:cf:05:30:94:87:70:c2:04:a8:11:2e:9c:64:d7:03:8a:
         67:dd:a3:e4:2c:02:c0:ff:bd:67:ff:b2:ac:17:1b:17:b3:fd:
         6a:7e:da:7b:95:4a:8d:13:e6:3c:62:25:c9:6a:4c:df:ba:b3:
         4d:79:7b:06:17:90:d4:ba:4a:0d:93:00:23:a1:8b:4b:46:d7:
         11:e6:52:89:15:8e:91:f3:c3:cc:eb:5e:53:0c:e9:28:de:9a:
         a6:a8:0e:44:89:2b:b2:40:9b:40:b5:1c:0c:8c:0f:db:b5:4b:
         56:c7:0f:ba:f8:dd:6c:45:e5:98:30:29:43:64:b3:35:5e:b9:
         05:70:f6:ed:41:5a:0a:fa:3f:69:84:b1:f7:92:5b:66:ed:13:
         ad:d0:11:f6:6c:bc:6b:91:7e:58:22:09:0d:db:51:52:f6:f6:
         dd:bf:7c:9f:d6:75:05:65:43:d7:05:b8:68:0a:a0:3e:34:64:
         27:a0:ac:ac:0e:40:da:23:38:3e:09:58:b5:21:a5:93:0b:fe:
         b4:2d:70:e8:cb:5b:c7:c9:25:9f:f4:4a:89:fa:ca:4d:09:c0:
         52:27:a9:fc:87:8f:fb:2c:ab:dc:28:99:f6:f6:4f:3c:d3:e2:
         84:fc:37:7a
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUNu/q/OnV6tQwinsHhMhfnyMBxEAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM1MDNEMDNFM0Q0REZBMDc2N0Y2REZGM0JBNzFERDdC
NjIzNkFGQTAeFw0yNjA3MTQxNDI1MDNaFw0yNzA3MTMxNDMwMDNaMDMxMTAvBgNV
BAMTKDE3NUY5NkMwQTMzQkNFMjkwQ0ZGRTRCMTM0QjYxRjhBMEEwOEYzRjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaIrZvosXx/1oy6petpf1G4aeL
oxWTwBj0K7UtUMCMbn51+XCfhC+LKvQ+NZ/1VnxBbMHNuJV7pUQoKLSulOyiEaw2
nMRApYPL0NBS2QQ+MJdAkPH5Iyp79GR1jYX2LpJkpe8yc+TwehyAQjb/P1O4XW/F
icwCWV09tMpQBCdWcS0PjjvbskZ4ZecxY47DRmgqjY5S6eWxOiUi64cZXRagppUG
Wp9dPecckUusSS3pAz0vn8REnhLg7eQPtkDhmNQTnW6kgikHeGnqE2XKcQdzbs9G
BRm6SLOR8eWb9CHk0WpKzrzmppu1Yaw9/FYK81w8hqkI+nfH9yGG3FZz116HAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUF1+WwKM7zikM/+SxNLYfigoI8/EwHwYDVR0j
BBgwFoAU01A9A+PU36B2f23/O6cd17YjavowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wQkIwNzFEOTZEOEZCRTJBODY5OTA5MDVEQzE3RTE5OTM3
MEE1NzA1MjM2QTAwMDY1RDY4NTYzRkFBREI4NUU2LzAvRDM1MDNEMDNFM0Q0REZB
MDc2N0Y2REZGM0JBNzFERDdCNjIzNkFGQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EMzUwM0QwM0UzRDRERkEwNzY3
RjZERkYzQkE3MUREN0I2MjM2QUZBLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMEJCMDcxRDk2RDhGQkUyQTg2OTkwOTA1REMxN0UxOTkzNzBBNTcwNTIz
NkEwMDA2NUQ2ODU2M0ZBQURCODVFNi8wLzMxMzYzODJlMzIzNDMzMmUzMTM5MzYy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMyMzEzMjM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqPPE
MA0GCSqGSIb3DQEBCwUAA4IBAQBwh+ZVV3tVS7OUPOU/P506aB/bX88FMJSHcMIE
qBEunGTXA4pn3aPkLALA/71n/7KsFxsXs/1qftp7lUqNE+Y8YiXJakzfurNNeXsG
F5DUukoNkwAjoYtLRtcR5lKJFY6R88PM615TDOko3pqmqA5EiSuyQJtAtRwMjA/b
tUtWxw+6+N1sReWYMClDZLM1XrkFcPbtQVoK+j9phLH3kltm7ROt0BH2bLxrkX5Y
IgkN21FS9vbdv3yf1nUFZUPXBbhoCqA+NGQnoKysDkDaIzg+CVi1IaWTC/60LXDo
y1vHySWf9EqJ+spNCcBSJ6n8h4/7LKvcKJn29k880+KE/Dd6
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:47:38 2026 by rpki-client