Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e3232332e302f32342d3234203d3e203132313237.roa
File:                     3136382e3234332e3232332e302f32342d3234203d3e203132313237.roa (raw, json)
Hash identifier:          YytM7+oaEsELBNN8cjqT9cdITY0Kg3vBEEmCZiXPRyA=
Subject key identifier:   43:DF:DB:D1:3E:14:47:62:88:65:C6:EA:57:05:34:48:3E:16:37:64
Certificate issuer:       /CN=D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA
Certificate serial:       51768FB180A7C859207BF5F2A28BAED7699BA71F
Authority key identifier: D3:50:3D:03:E3:D4:DF:A0:76:7F:6D:FF:3B:A7:1D:D7:B6:23:6A:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e3232332e302f32342d3234203d3e203132313237.roa
Signing time:             Mon 23 Mar 2026 13:35:39 +0000
ROA not before:           Mon 23 Mar 2026 13:30:39 +0000
ROA not after:            Mon 22 Mar 2027 13:35:39 +0000
asID:                     12127
IP address blocks:        168.243.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Mar 2026 23:09:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:76:8f:b1:80:a7:c8:59:20:7b:f5:f2:a2:8b:ae:d7:69:9b:a7:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA
        Validity
            Not Before: Mar 23 13:30:39 2026 GMT
            Not After : Mar 22 13:35:39 2027 GMT
        Subject: CN=43DFDBD13E1447628865C6EA570534483E163764
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:36:50:e8:59:33:26:d9:ab:76:ed:7f:71:f4:
                    56:a3:2d:c3:2e:eb:90:08:4d:48:35:f9:d4:be:7f:
                    a5:92:0f:ad:49:c7:cd:ad:8c:ca:67:b0:95:21:8d:
                    be:07:84:51:66:1c:3f:c7:61:c9:78:b2:38:89:84:
                    c9:67:0a:3a:1c:b2:6e:db:20:ab:b8:37:31:d6:b9:
                    9c:1d:74:0f:4b:f4:ba:65:e7:a9:c7:a8:54:e9:bd:
                    aa:2c:24:4a:fe:1c:7e:33:c9:12:55:4d:03:13:4c:
                    a8:1b:7d:db:4b:a3:5c:f6:77:8b:22:ea:90:92:1b:
                    37:11:46:cc:40:09:92:ff:e0:bb:10:a8:60:0d:43:
                    d5:09:f8:1c:0e:83:df:74:b9:00:ab:1f:be:53:03:
                    7d:04:b5:87:00:3b:8d:01:c0:33:cc:07:13:12:dc:
                    15:0f:fa:e2:2d:3d:27:dd:66:ba:9a:e7:b2:eb:e5:
                    6b:5b:46:d0:60:8b:8d:c9:fc:3a:d0:36:ae:87:4e:
                    b3:02:a0:ca:12:7f:75:79:89:9d:9a:cf:c2:98:ab:
                    e9:2d:39:6d:83:52:21:c3:23:67:ff:06:f2:bb:39:
                    f8:41:9e:48:8d:02:e1:21:01:c7:d8:45:cc:2b:5e:
                    97:eb:0d:56:09:16:32:18:a0:ba:af:20:be:93:f7:
                    00:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:DF:DB:D1:3E:14:47:62:88:65:C6:EA:57:05:34:48:3E:16:37:64
            X509v3 Authority Key Identifier:
                keyid:D3:50:3D:03:E3:D4:DF:A0:76:7F:6D:FF:3B:A7:1D:D7:B6:23:6A:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e3232332e302f32342d3234203d3e203132313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.243.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:ff:ee:9a:a7:59:11:2f:f1:df:e7:9c:4b:4f:b3:a3:69:0e:
         b6:1d:de:f7:22:40:e1:8e:31:ae:37:d8:54:07:56:f2:a1:0c:
         21:72:31:dd:ac:ac:82:0c:98:92:d5:96:69:cd:4a:81:91:47:
         ee:3f:12:0f:1f:22:7d:3e:1d:5f:1d:be:e4:6f:91:73:37:66:
         8c:0b:72:f1:73:97:c6:19:03:07:82:f5:02:8b:f4:c7:9d:22:
         96:17:3c:3a:66:0e:f1:ba:aa:9b:44:4e:76:81:d7:8f:9a:0b:
         b2:77:13:da:76:19:93:6a:41:fc:55:3d:57:c1:f7:21:fc:71:
         ee:7e:12:e7:ec:2d:d6:0b:3d:45:a2:27:cd:7f:19:48:71:b6:
         4f:c7:28:2d:06:be:48:ee:07:8d:cb:c9:dd:4e:d3:85:9d:80:
         dd:7f:ef:e2:37:3f:76:d3:f7:aa:b1:82:15:9a:7e:02:38:c9:
         3c:ba:4e:0a:a5:02:0b:c1:88:60:89:0d:cf:45:25:25:f7:b6:
         85:51:52:52:7c:c2:35:42:d9:a7:3d:82:15:54:4a:2b:7d:29:
         a4:74:04:0e:cb:65:2e:8f:d8:59:1d:22:8a:97:49:5f:a3:f3:
         94:ce:ac:52:30:c8:85:bb:50:3a:1f:78:b7:a2:91:c5:46:1c:
         46:71:d6:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:57:26 2026 by rpki-client