Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e3230302e302f32342d3234203d3e20323633373833.roa
File:                     3136382e3234332e3230302e302f32342d3234203d3e20323633373833.roa (raw, json)
Hash identifier:          Ra/Yo6BjqVPnf6BOwsvwJkUdhulAZ19lMPYT/GUon/E=
Subject key identifier:   96:20:28:2E:28:2D:62:CB:7F:1F:A3:FA:5C:06:40:D2:2F:04:2C:8D
Certificate issuer:       /CN=D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA
Certificate serial:       690A402263F91159ADA47EB282FF790C4486FCAA
Authority key identifier: D3:50:3D:03:E3:D4:DF:A0:76:7F:6D:FF:3B:A7:1D:D7:B6:23:6A:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e3230302e302f32342d3234203d3e20323633373833.roa
Signing time:             Tue 14 Jul 2026 14:30:03 +0000
ROA not before:           Tue 14 Jul 2026 14:25:03 +0000
ROA not after:            Tue 13 Jul 2027 14:30:03 +0000
asID:                     263783
IP address blocks:        168.243.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 27 Jul 2026 21:12:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:0a:40:22:63:f9:11:59:ad:a4:7e:b2:82:ff:79:0c:44:86:fc:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA
        Validity
            Not Before: Jul 14 14:25:03 2026 GMT
            Not After : Jul 13 14:30:03 2027 GMT
        Subject: CN=9620282E282D62CB7F1FA3FA5C0640D22F042C8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:1c:5d:9d:f2:5d:73:d3:4c:09:a6:3d:1a:48:
                    be:2d:74:de:cb:e9:e0:1f:b9:e2:60:d0:8f:d5:58:
                    f9:85:8c:45:d2:35:61:41:d5:55:a3:da:a3:ce:b6:
                    e1:e7:0e:c0:c4:13:f5:10:b1:0f:a4:d4:8f:a6:b3:
                    83:ba:af:b0:96:e4:9a:65:c9:44:54:91:e0:fb:9e:
                    6b:75:75:f1:5b:44:28:ba:3a:2d:03:9d:92:49:00:
                    3f:aa:1c:d0:47:d1:e9:17:9f:fe:24:f7:49:bf:18:
                    b7:63:11:ce:65:66:71:f7:ac:d7:d7:c0:09:80:7c:
                    bb:35:a5:51:58:39:b4:85:51:5d:4e:e2:f8:5f:b8:
                    b5:56:1c:0e:4b:02:cc:e0:06:b2:9f:8d:fa:1c:83:
                    41:34:61:96:43:96:c8:88:e2:45:b9:74:74:a1:75:
                    3a:73:fe:73:47:b1:00:91:d0:fb:ea:d6:ed:6b:64:
                    90:6f:40:1b:ec:38:47:2d:e7:f5:aa:e5:82:10:16:
                    81:e7:13:f2:9f:25:da:91:2c:62:20:4f:fa:f0:a3:
                    ae:0e:ae:54:ea:d3:fb:2d:f1:e7:ab:d8:98:f9:d7:
                    7f:4f:24:5c:43:28:f6:8a:27:35:9e:b0:05:a4:d9:
                    85:79:34:4b:39:5a:72:25:05:64:2d:da:a4:79:41:
                    01:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:20:28:2E:28:2D:62:CB:7F:1F:A3:FA:5C:06:40:D2:2F:04:2C:8D
            X509v3 Authority Key Identifier:
                keyid:D3:50:3D:03:E3:D4:DF:A0:76:7F:6D:FF:3B:A7:1D:D7:B6:23:6A:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e3230302e302f32342d3234203d3e20323633373833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.243.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:ac:08:f9:65:01:ef:31:ea:ec:48:c8:6d:11:58:8c:4d:f2:
         15:0b:e0:85:de:8b:13:ae:ad:a0:5c:e3:79:cc:14:ce:49:95:
         86:c7:bd:b5:75:27:ba:8a:83:7a:1e:64:50:d7:34:aa:ca:e7:
         6e:10:0a:5b:f0:c9:3e:8b:1f:87:97:c2:98:cd:ad:5c:57:ee:
         6a:8d:ef:a0:f1:05:3e:1f:74:5c:69:9d:f6:ec:a6:69:b3:df:
         55:ce:1a:8b:47:8d:8a:90:0d:ac:df:0a:99:f5:e8:9f:30:1c:
         b2:a8:46:a8:89:6b:f1:09:e7:17:23:54:34:0c:c2:a6:60:bc:
         0e:28:a4:73:21:bc:34:56:b3:7c:cc:cc:56:f7:27:f3:67:06:
         f3:3b:1d:48:07:5f:00:59:4d:35:6f:43:dd:da:7f:d7:fb:f5:
         53:e6:89:88:3d:2a:5e:13:1f:87:63:6a:54:33:e6:57:8f:52:
         44:d1:48:10:0d:6f:db:53:f7:89:aa:19:19:d6:b8:32:79:4c:
         65:48:4b:be:1c:a0:ad:ec:f5:96:fe:8b:82:d7:87:07:a6:72:
         a3:52:d9:e8:c9:35:63:48:39:22:ad:d7:b7:f6:5f:00:80:fe:
         e6:c8:44:79:ad:e0:f9:42:d8:ce:52:fd:f7:90:db:73:85:64:
         4d:6f:5c:a8
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUaQpAImP5EVmtpH6ygv95DESG/KowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM1MDNEMDNFM0Q0REZBMDc2N0Y2REZGM0JBNzFERDdC
NjIzNkFGQTAeFw0yNjA3MTQxNDI1MDNaFw0yNzA3MTMxNDMwMDNaMDMxMTAvBgNV
BAMTKDk2MjAyODJFMjgyRDYyQ0I3RjFGQTNGQTVDMDY0MEQyMkYwNDJDOEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYHF2d8l1z00wJpj0aSL4tdN7L
6eAfueJg0I/VWPmFjEXSNWFB1VWj2qPOtuHnDsDEE/UQsQ+k1I+ms4O6r7CW5Jpl
yURUkeD7nmt1dfFbRCi6Oi0DnZJJAD+qHNBH0ekXn/4k90m/GLdjEc5lZnH3rNfX
wAmAfLs1pVFYObSFUV1O4vhfuLVWHA5LAszgBrKfjfocg0E0YZZDlsiI4kW5dHSh
dTpz/nNHsQCR0Pvq1u1rZJBvQBvsOEct5/Wq5YIQFoHnE/KfJdqRLGIgT/rwo64O
rlTq0/st8eer2Jj5139PJFxDKPaKJzWesAWk2YV5NEs5WnIlBWQt2qR5QQG/AgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUliAoLigtYst/H6P6XAZA0i8ELI0wHwYDVR0j
BBgwFoAU01A9A+PU36B2f23/O6cd17YjavowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wQkIwNzFEOTZEOEZCRTJBODY5OTA5MDVEQzE3RTE5OTM3
MEE1NzA1MjM2QTAwMDY1RDY4NTYzRkFBREI4NUU2LzAvRDM1MDNEMDNFM0Q0REZB
MDc2N0Y2REZGM0JBNzFERDdCNjIzNkFGQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EMzUwM0QwM0UzRDRERkEwNzY3
RjZERkYzQkE3MUREN0I2MjM2QUZBLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMEJCMDcxRDk2RDhGQkUyQTg2OTkwOTA1REMxN0UxOTkzNzBBNTcwNTIz
NkEwMDA2NUQ2ODU2M0ZBQURCODVFNi8wLzMxMzYzODJlMzIzNDMzMmUzMjMwMzAy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzMzNzM4MzMucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACo
88gwDQYJKoZIhvcNAQELBQADggEBAEmsCPllAe8x6uxIyG0RWIxN8hUL4IXeixOu
raBc43nMFM5JlYbHvbV1J7qKg3oeZFDXNKrK524QClvwyT6LH4eXwpjNrVxX7mqN
76DxBT4fdFxpnfbspmmz31XOGotHjYqQDazfCpn16J8wHLKoRqiJa/EJ5xcjVDQM
wqZgvA4opHMhvDRWs3zMzFb3J/NnBvM7HUgHXwBZTTVvQ93af9f79VPmiYg9Kl4T
H4djalQz5lePUkTRSBANb9tT94mqGRnWuDJ5TGVIS74coK3s9Zb+i4LXhwemcqNS
2ejJNWNIOSKt17f2XwCA/ubIRHmt4PlC2M5S/feQ23OFZE1vXKg=
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:46:42 2026 by rpki-client