Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e3231312e302f32342d3234203d3e203132313237.roa
File:                     3136382e3234332e3231312e302f32342d3234203d3e203132313237.roa (raw, json)
Hash identifier:          33yJRYiR4TkARXS1uplYKSdRiknF8/p56LZvWKs7r9g=
Subject key identifier:   9E:05:54:4A:89:8E:46:4F:4E:C0:78:89:B2:1E:4B:46:E0:85:39:3B
Certificate issuer:       /CN=D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA
Certificate serial:       38872A0E10B2B7FBA4569A29D75FD6AD73A57351
Authority key identifier: D3:50:3D:03:E3:D4:DF:A0:76:7F:6D:FF:3B:A7:1D:D7:B6:23:6A:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e3231312e302f32342d3234203d3e203132313237.roa
Signing time:             Tue 14 Jul 2026 14:30:02 +0000
ROA not before:           Tue 14 Jul 2026 14:25:02 +0000
ROA not after:            Tue 13 Jul 2027 14:30:02 +0000
asID:                     12127
IP address blocks:        168.243.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 27 Jul 2026 21:12:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:87:2a:0e:10:b2:b7:fb:a4:56:9a:29:d7:5f:d6:ad:73:a5:73:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA
        Validity
            Not Before: Jul 14 14:25:02 2026 GMT
            Not After : Jul 13 14:30:02 2027 GMT
        Subject: CN=9E05544A898E464F4EC07889B21E4B46E085393B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b6:36:2a:f2:a9:4d:f4:7e:21:70:39:3a:aa:
                    4b:43:b0:49:73:24:d2:5b:f5:3a:0a:8a:39:9e:7f:
                    99:0a:e6:c9:cb:15:f2:c4:37:39:f9:ce:75:5e:bd:
                    a0:06:72:26:7e:3b:2d:11:93:04:2a:27:a9:4a:be:
                    27:1d:5e:f9:3b:3f:f1:04:04:9b:1d:16:d0:40:f7:
                    c9:01:66:18:e7:2e:b7:9a:5f:a2:29:59:b3:7a:55:
                    d5:97:37:e7:48:aa:5f:2e:1d:13:4d:e9:30:35:0e:
                    65:38:86:a7:4d:c7:0e:20:f6:f4:86:de:90:44:59:
                    bc:9f:9e:fb:8e:47:17:62:eb:09:11:71:fb:4a:d2:
                    23:a9:a9:47:5a:3e:a6:8b:b8:15:16:df:16:cc:d2:
                    8b:39:40:7c:aa:66:cb:8e:51:1d:ef:b0:af:a3:b4:
                    d6:7d:47:fa:22:2d:37:f3:23:fe:5c:e4:a3:c4:95:
                    71:03:0a:3a:4f:91:20:80:bd:62:81:c7:ec:50:e7:
                    68:3c:09:fe:6b:1b:84:14:eb:6a:bf:ae:e3:3b:e4:
                    36:3e:34:3f:01:73:28:8b:9f:52:24:3b:35:d6:16:
                    27:05:4d:53:2b:a5:b7:02:16:bd:43:b7:cd:78:a7:
                    36:8a:35:0e:e6:d2:21:29:bf:29:0e:a6:65:6f:e4:
                    c0:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:05:54:4A:89:8E:46:4F:4E:C0:78:89:B2:1E:4B:46:E0:85:39:3B
            X509v3 Authority Key Identifier:
                keyid:D3:50:3D:03:E3:D4:DF:A0:76:7F:6D:FF:3B:A7:1D:D7:B6:23:6A:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e3231312e302f32342d3234203d3e203132313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.243.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:b7:bd:25:3c:b8:3d:69:56:98:06:eb:f3:90:17:ec:7e:ba:
         9b:93:fd:bb:e8:3e:64:61:b0:ac:1d:b4:37:0f:98:f4:54:51:
         80:40:8e:f5:ac:5f:b6:c5:1c:81:d0:44:32:af:be:5e:4b:5d:
         60:14:82:7b:89:20:dc:c5:da:91:4d:c9:9e:af:51:73:0c:3b:
         d2:5b:86:1a:a2:34:8d:2e:c3:bb:71:3a:9e:01:02:56:0b:08:
         ee:f4:64:bb:31:2e:68:2b:00:e4:de:47:ec:f3:b6:0a:0d:8b:
         de:f7:c2:b8:c8:75:d2:70:db:83:53:b7:3d:aa:d0:cb:bd:92:
         3e:a7:6b:22:86:4f:33:80:d2:36:1d:cc:c4:49:63:ad:bd:c8:
         13:91:bb:95:2e:df:aa:1f:9f:83:07:51:5e:c2:bc:7a:5b:45:
         f3:c8:6b:05:4b:b1:8e:49:1b:29:e1:d5:0c:1e:52:1b:41:f4:
         5d:e4:a2:ff:e2:10:d4:73:d4:92:32:03:6d:a6:a7:a4:7c:d4:
         a9:45:f5:02:70:01:63:b9:27:41:fe:44:f5:c4:07:ba:c0:a5:
         30:0e:61:c4:97:4a:ce:06:55:d0:28:81:d7:1e:bc:9a:7b:64:
         11:65:05:72:ae:46:3a:81:98:7d:00:c2:bc:5b:07:7e:62:75:
         65:c7:17:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:46:09 2026 by rpki-client