Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e33322e302f32342d3234203d3e203236363137.roa
File:                     3136382e3234332e33322e302f32342d3234203d3e203236363137.roa (raw, json)
Hash identifier:          hqBeWVBxTtGG3XkeLMwX+L0rcGvACwUt1X0ZmEGnmC4=
Subject key identifier:   A9:B8:AD:89:52:F6:82:54:B1:D5:F7:27:2C:81:C8:CE:99:99:0A:61
Certificate issuer:       /CN=D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA
Certificate serial:       05031BBADDE018F60AA9451D2EAFE28738B40B22
Authority key identifier: D3:50:3D:03:E3:D4:DF:A0:76:7F:6D:FF:3B:A7:1D:D7:B6:23:6A:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e33322e302f32342d3234203d3e203236363137.roa
Signing time:             Sat 03 Oct 2026 21:38:31 +0000
ROA not before:           Sat 03 Oct 2026 21:33:31 +0000
ROA not after:            Sat 02 Oct 2027 21:38:31 +0000
asID:                     26617
IP address blocks:        168.243.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 Oct 2026 05:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:03:1b:ba:dd:e0:18:f6:0a:a9:45:1d:2e:af:e2:87:38:b4:0b:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA
        Validity
            Not Before: Oct  3 21:33:31 2026 GMT
            Not After : Oct  2 21:38:31 2027 GMT
        Subject: CN=A9B8AD8952F68254B1D5F7272C81C8CE99990A61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6e:ab:37:16:5c:fb:c4:6a:aa:58:c7:f2:04:
                    c7:c2:37:ca:af:62:a1:96:2b:c3:fa:fe:36:28:f9:
                    06:2f:32:5b:52:48:ca:26:60:4a:ba:b0:12:f8:55:
                    a0:3d:38:fd:8c:e1:60:55:77:e2:8e:43:d0:13:bb:
                    b0:56:a4:2a:cb:70:4c:70:c3:82:39:29:43:3b:fe:
                    76:eb:3e:28:06:61:3f:e9:22:af:7f:79:ea:80:dd:
                    81:99:99:1c:74:44:68:0a:9b:38:a7:51:a3:3b:c0:
                    9e:2c:46:03:97:ea:4b:76:a8:f8:35:2b:aa:49:2c:
                    20:f0:ea:48:57:07:4e:78:7c:1e:15:c8:00:68:93:
                    64:9e:7f:60:93:6d:4e:99:c4:b4:ab:a5:4b:90:b2:
                    fe:51:61:57:bb:82:96:ee:8f:3d:b6:38:cc:c8:ce:
                    1d:d8:cd:7d:27:88:7e:0b:58:2c:cb:ce:3f:1a:ad:
                    9a:6c:69:b5:00:a1:77:a6:c1:7f:82:fd:d0:02:f0:
                    c0:7c:c6:d3:0e:b9:16:28:a4:f4:1d:7f:d7:64:83:
                    c1:3f:1b:a9:a4:e2:c1:f9:bb:59:55:2c:3a:43:8d:
                    37:d9:a7:0a:a7:05:65:3a:98:52:45:1a:c6:bd:fe:
                    24:4a:87:27:39:3a:42:73:6f:0f:a3:8c:5d:f8:40:
                    b5:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:B8:AD:89:52:F6:82:54:B1:D5:F7:27:2C:81:C8:CE:99:99:0A:61
            X509v3 Authority Key Identifier:
                keyid:D3:50:3D:03:E3:D4:DF:A0:76:7F:6D:FF:3B:A7:1D:D7:B6:23:6A:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e33322e302f32342d3234203d3e203236363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.243.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:70:c1:a0:ec:23:d0:4c:5f:58:1b:c4:10:45:dc:ec:3a:2a:
         f2:bc:04:39:82:b2:b9:f1:77:17:ab:54:53:b4:c3:77:87:b1:
         b6:b9:ff:07:a7:7d:4f:b9:8b:ab:b7:79:bd:93:fc:15:9b:e6:
         72:3d:cb:08:67:72:b8:0d:92:04:82:f2:2a:6b:eb:5c:9e:09:
         f5:15:a3:b1:d3:ae:b6:23:a0:2f:66:38:4e:16:74:62:17:6d:
         38:b5:f6:51:a9:9a:22:ea:4b:62:91:d7:4e:f2:52:06:c9:69:
         9e:12:6d:05:00:00:bf:da:dd:68:84:16:1d:d3:b6:2b:0b:3a:
         5a:80:12:cd:4b:9a:c3:c8:27:25:1e:23:bb:28:2e:7e:b2:3a:
         78:30:db:f8:85:db:a8:a3:7a:d4:1f:4f:50:60:f1:e1:70:f9:
         fb:ce:03:3c:9e:0d:b4:e1:30:fa:05:5c:c8:25:30:b5:04:12:
         09:81:02:49:bc:0f:b3:16:75:32:d8:31:dd:3a:2e:ff:0d:17:
         50:94:05:a1:15:29:50:ea:fc:a8:4f:7e:db:11:1c:7b:16:f3:
         2f:cd:da:14:95:84:dc:71:2c:84:3f:f4:b8:28:fa:51:3d:61:
         50:7b:c5:da:a4:7f:bf:80:ed:df:c7:0e:bf:8b:c8:5a:ce:11:
         90:31:02:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 22:26:52 2026 by rpki-client