Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e3230352e302f32342d3234203d3e203132313237.roa
File:                     3136382e3234332e3230352e302f32342d3234203d3e203132313237.roa (raw, json)
Hash identifier:          TPMoVnBwGLp6KRmcKTJjBu9BNnfwyIcjVF2Wl0hwhIY=
Subject key identifier:   82:7B:7E:06:7C:D2:15:C0:EC:2C:52:6F:13:CD:5C:E9:F3:BE:0C:CB
Certificate issuer:       /CN=D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA
Certificate serial:       628DE168C76B511121735DE0C6C95E12BD274F37
Authority key identifier: D3:50:3D:03:E3:D4:DF:A0:76:7F:6D:FF:3B:A7:1D:D7:B6:23:6A:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e3230352e302f32342d3234203d3e203132313237.roa
Signing time:             Tue 14 Jul 2026 14:30:04 +0000
ROA not before:           Tue 14 Jul 2026 14:25:04 +0000
ROA not after:            Tue 13 Jul 2027 14:30:04 +0000
asID:                     12127
IP address blocks:        168.243.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 27 Jul 2026 21:12:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:8d:e1:68:c7:6b:51:11:21:73:5d:e0:c6:c9:5e:12:bd:27:4f:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA
        Validity
            Not Before: Jul 14 14:25:04 2026 GMT
            Not After : Jul 13 14:30:04 2027 GMT
        Subject: CN=827B7E067CD215C0EC2C526F13CD5CE9F3BE0CCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:99:39:86:28:f3:8e:20:f2:92:63:d5:40:c2:
                    35:62:e0:34:26:bd:72:1d:3d:c1:3a:d0:3d:71:79:
                    7f:e0:13:9d:17:5d:1b:bb:1e:99:76:e7:f5:df:a9:
                    40:88:e2:cd:70:1e:6c:a6:20:16:b0:0d:3d:28:94:
                    ee:4a:8e:6c:3c:d7:b2:84:b4:15:db:43:1e:e7:82:
                    73:63:3f:85:49:cd:41:1d:44:5c:87:e9:dc:8b:33:
                    7e:9a:c9:ee:a3:78:7e:f6:49:7a:e4:20:20:34:38:
                    69:0e:78:de:0c:12:d3:fb:37:88:6a:e7:43:c8:86:
                    2f:fb:a5:61:9a:7a:06:55:51:ce:71:ec:d4:16:52:
                    43:df:22:a6:c5:f5:29:dc:5b:5a:e3:fb:d4:3e:61:
                    b4:35:56:21:3b:44:f6:99:07:94:8f:b0:a8:78:99:
                    9c:0c:97:a2:06:24:65:c9:5a:a3:07:dd:a9:5d:a1:
                    9a:43:17:61:81:31:f0:1a:3e:f8:51:8a:20:a6:f5:
                    5e:1f:76:72:ba:47:9c:05:46:0b:27:9a:94:e2:16:
                    6d:ab:9d:8e:62:a9:1c:90:71:8f:35:b2:7a:c4:42:
                    a4:31:6f:7e:23:e3:00:61:1b:51:1d:9f:6a:e1:99:
                    34:55:bc:ea:08:89:7c:73:34:30:05:d5:67:ba:54:
                    a0:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:7B:7E:06:7C:D2:15:C0:EC:2C:52:6F:13:CD:5C:E9:F3:BE:0C:CB
            X509v3 Authority Key Identifier:
                keyid:D3:50:3D:03:E3:D4:DF:A0:76:7F:6D:FF:3B:A7:1D:D7:B6:23:6A:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e3230352e302f32342d3234203d3e203132313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.243.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:15:40:56:c7:e3:b7:b1:9b:2c:fc:0f:84:a0:15:c7:29:d2:
         e2:de:7e:5d:e2:18:a9:14:d9:b4:2a:78:25:3f:17:51:5b:eb:
         ad:f4:1b:cd:6a:7e:12:85:2c:5a:a2:6d:94:12:96:3b:16:6a:
         6b:47:12:30:db:02:51:b5:01:d5:a3:f8:33:d1:0b:e4:42:82:
         06:59:ba:3c:8d:a9:ad:1c:72:b0:e6:d7:84:32:40:fa:31:5e:
         10:4d:dc:a9:cb:9b:0a:fe:2a:72:b3:a1:41:b5:67:5b:70:8b:
         ec:82:09:16:90:f3:88:0c:64:82:34:59:ad:a8:ff:99:81:78:
         8c:f2:7b:02:98:2a:28:fe:cb:05:fe:27:e8:96:08:cf:d9:18:
         fc:4a:f6:70:41:a9:00:ca:69:ec:5c:54:91:dd:18:18:f5:47:
         49:d5:56:1f:45:61:d0:71:5c:75:ed:de:b9:55:48:56:17:8a:
         70:ca:48:da:d7:3a:ae:9e:dc:f8:d6:bf:13:f7:93:69:fa:06:
         41:58:74:44:e7:57:6d:52:be:59:2e:61:fb:8e:96:a2:ef:21:
         ed:bd:e2:a2:4f:3f:22:8a:1d:22:88:e5:7b:cf:6c:0f:bd:7f:
         19:c0:d8:69:b6:ef:97:f4:d5:19:9a:c5:76:07:07:fc:65:93:
         b5:9f:56:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:46:28 2026 by rpki-client