Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e3230302e302f32342d3234203d3e203132313237.roa
File:                     3136382e3234332e3230302e302f32342d3234203d3e203132313237.roa (raw, json)
Hash identifier:          bXmetaj3HqwNgLmKBpcrbrNvF6bVsTMDG8GDUotAqWw=
Subject key identifier:   8E:E4:33:FE:CA:DB:75:F0:22:F6:04:4C:69:11:DD:EB:2F:F5:91:79
Certificate issuer:       /CN=D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA
Certificate serial:       2A5792521EA4D1E4ADA99957BB20F2A1DBC7E644
Authority key identifier: D3:50:3D:03:E3:D4:DF:A0:76:7F:6D:FF:3B:A7:1D:D7:B6:23:6A:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e3230302e302f32342d3234203d3e203132313237.roa
Signing time:             Tue 14 Jul 2026 14:30:01 +0000
ROA not before:           Tue 14 Jul 2026 14:25:01 +0000
ROA not after:            Tue 13 Jul 2027 14:30:01 +0000
asID:                     12127
IP address blocks:        168.243.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 27 Jul 2026 21:12:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:57:92:52:1e:a4:d1:e4:ad:a9:99:57:bb:20:f2:a1:db:c7:e6:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA
        Validity
            Not Before: Jul 14 14:25:01 2026 GMT
            Not After : Jul 13 14:30:01 2027 GMT
        Subject: CN=8EE433FECADB75F022F6044C6911DDEB2FF59179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:86:e5:d7:27:3c:58:1c:b2:8e:5e:b2:eb:c6:
                    4c:f2:73:6d:a4:ba:20:65:c8:32:23:65:70:40:87:
                    8f:06:9d:60:28:df:17:c1:69:05:c5:5b:b9:80:cc:
                    0a:2b:49:f3:7a:a2:1e:6f:42:b7:f2:e9:44:c8:e0:
                    28:04:14:84:15:14:23:3c:52:56:63:ee:94:b4:80:
                    b0:b6:72:e3:ac:54:24:7d:0c:15:b7:72:84:16:0d:
                    92:8a:64:a8:fb:a7:08:a6:8f:7d:db:37:22:93:24:
                    db:86:24:4a:04:e1:7a:ca:01:fb:00:12:d5:37:8e:
                    05:b0:0c:ad:3b:30:56:d8:19:d2:61:03:3d:66:e1:
                    1e:99:d8:4c:43:64:b6:75:77:99:65:df:db:84:7f:
                    71:89:c6:84:5a:be:4d:47:95:8e:ef:52:a3:9b:5c:
                    fd:b2:ab:d9:5a:8c:ae:7f:13:8e:a9:f1:eb:de:84:
                    be:17:42:96:ab:6e:cd:63:38:3e:6c:32:21:4c:2d:
                    37:19:fe:0b:20:08:b1:07:7d:ec:b2:cb:4d:9b:95:
                    73:0c:39:c5:64:b5:4f:4f:83:c1:ac:d0:24:ba:a4:
                    64:05:92:ea:0a:11:eb:f5:29:ab:30:d0:bf:b9:04:
                    78:19:34:37:20:5f:9c:3b:c7:32:05:65:b4:08:82:
                    39:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:E4:33:FE:CA:DB:75:F0:22:F6:04:4C:69:11:DD:EB:2F:F5:91:79
            X509v3 Authority Key Identifier:
                keyid:D3:50:3D:03:E3:D4:DF:A0:76:7F:6D:FF:3B:A7:1D:D7:B6:23:6A:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e3230302e302f32342d3234203d3e203132313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.243.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:f3:1e:61:42:ac:2c:6b:ba:f5:56:88:70:1b:f2:4c:a5:fb:
         a4:63:66:fb:d8:db:6d:9f:73:45:56:40:f1:13:68:7b:1d:2b:
         5e:3a:8c:54:4c:ec:3d:c0:99:ee:7c:b0:57:ba:af:ba:96:f4:
         d4:83:ef:41:7d:39:89:2e:64:5a:c1:6e:c2:f0:43:7d:f3:cf:
         4b:62:91:1e:86:8e:7f:fe:8f:3b:3f:cc:05:d6:2c:0a:67:9d:
         3c:b9:f1:44:fd:e4:6e:da:d0:c5:a6:3b:60:e8:41:83:d5:3e:
         f9:c0:71:92:f0:ab:e9:bc:c8:5e:07:4b:e3:0b:80:bd:4c:67:
         76:3d:41:fd:e8:c1:64:36:b5:ad:69:ad:5c:ec:9b:6f:31:55:
         45:e2:9f:e0:cf:8f:26:50:fa:72:a8:5a:83:de:72:7a:5f:30:
         10:d1:ce:c8:1e:f7:e8:f3:ac:5d:95:62:89:61:e3:b0:67:b4:
         99:5e:4a:b4:f9:ee:2d:cd:dd:fe:34:4a:5e:bc:55:2a:5c:78:
         a9:0c:e2:3d:32:35:37:2d:f6:61:5c:2b:e1:3a:a7:4c:1c:ba:
         fa:2c:16:6a:89:fc:f1:1c:e6:71:43:04:3d:51:72:6b:f5:ed:
         1b:bc:84:1c:bc:b2:d8:62:28:aa:7a:31:46:aa:59:e5:28:75:
         0d:72:80:ff
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUKleSUh6k0eStqZlXuyDyodvH5kQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM1MDNEMDNFM0Q0REZBMDc2N0Y2REZGM0JBNzFERDdC
NjIzNkFGQTAeFw0yNjA3MTQxNDI1MDFaFw0yNzA3MTMxNDMwMDFaMDMxMTAvBgNV
BAMTKDhFRTQzM0ZFQ0FEQjc1RjAyMkY2MDQ0QzY5MTFEREVCMkZGNTkxNzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQhuXXJzxYHLKOXrLrxkzyc22k
uiBlyDIjZXBAh48GnWAo3xfBaQXFW7mAzAorSfN6oh5vQrfy6UTI4CgEFIQVFCM8
UlZj7pS0gLC2cuOsVCR9DBW3coQWDZKKZKj7pwimj33bNyKTJNuGJEoE4XrKAfsA
EtU3jgWwDK07MFbYGdJhAz1m4R6Z2ExDZLZ1d5ll39uEf3GJxoRavk1HlY7vUqOb
XP2yq9lajK5/E46p8evehL4XQparbs1jOD5sMiFMLTcZ/gsgCLEHfeyyy02blXMM
OcVktU9Pg8Gs0CS6pGQFkuoKEev1Kasw0L+5BHgZNDcgX5w7xzIFZbQIgjmxAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUjuQz/srbdfAi9gRMaRHd6y/1kXkwHwYDVR0j
BBgwFoAU01A9A+PU36B2f23/O6cd17YjavowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wQkIwNzFEOTZEOEZCRTJBODY5OTA5MDVEQzE3RTE5OTM3
MEE1NzA1MjM2QTAwMDY1RDY4NTYzRkFBREI4NUU2LzAvRDM1MDNEMDNFM0Q0REZB
MDc2N0Y2REZGM0JBNzFERDdCNjIzNkFGQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EMzUwM0QwM0UzRDRERkEwNzY3
RjZERkYzQkE3MUREN0I2MjM2QUZBLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMEJCMDcxRDk2RDhGQkUyQTg2OTkwOTA1REMxN0UxOTkzNzBBNTcwNTIz
NkEwMDA2NUQ2ODU2M0ZBQURCODVFNi8wLzMxMzYzODJlMzIzNDMzMmUzMjMwMzAy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMyMzEzMjM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqPPI
MA0GCSqGSIb3DQEBCwUAA4IBAQB28x5hQqwsa7r1VohwG/JMpfukY2b72Nttn3NF
VkDxE2h7HSteOoxUTOw9wJnufLBXuq+6lvTUg+9BfTmJLmRawW7C8EN9889LYpEe
ho5//o87P8wF1iwKZ508ufFE/eRu2tDFpjtg6EGD1T75wHGS8KvpvMheB0vjC4C9
TGd2PUH96MFkNrWtaa1c7JtvMVVF4p/gz48mUPpyqFqD3nJ6XzAQ0c7IHvfo86xd
lWKJYeOwZ7SZXkq0+e4tzd3+NEpevFUqXHipDOI9MjU3LfZhXCvhOqdMHLr6LBZq
ifzxHOZxQwQ9UXJr9e0bvIQcvLLYYiiqejFGqlnlKHUNcoD/
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:46:28 2026 by rpki-client