Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e37342e302f32342d3234203d3e20323731393839.roa
File:                     3136382e3234332e37342e302f32342d3234203d3e20323731393839.roa (raw, json)
Hash identifier:          sRcyE5OKfhpCXR5uAsEA0rUh/KVclNXxoDwg6vPQfRI=
Subject key identifier:   CA:BA:6E:40:9A:A9:FD:9E:5C:A2:AB:32:BE:B4:9F:60:75:87:ED:E1
Certificate issuer:       /CN=D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA
Certificate serial:       27E39CC6AA82A9D7A6870F3F1DFDC2E85B928D34
Authority key identifier: D3:50:3D:03:E3:D4:DF:A0:76:7F:6D:FF:3B:A7:1D:D7:B6:23:6A:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e37342e302f32342d3234203d3e20323731393839.roa
Signing time:             Thu 09 Jul 2026 00:51:34 +0000
ROA not before:           Thu 09 Jul 2026 00:46:34 +0000
ROA not after:            Thu 08 Jul 2027 00:51:34 +0000
asID:                     271989
IP address blocks:        168.243.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:e3:9c:c6:aa:82:a9:d7:a6:87:0f:3f:1d:fd:c2:e8:5b:92:8d:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA
        Validity
            Not Before: Jul  9 00:46:34 2026 GMT
            Not After : Jul  8 00:51:34 2027 GMT
        Subject: CN=CABA6E409AA9FD9E5CA2AB32BEB49F607587EDE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f1:ea:75:86:50:69:61:11:b5:93:30:46:c0:
                    de:de:00:07:04:20:01:84:8d:5c:5c:d9:22:d1:bb:
                    03:1d:18:75:02:97:be:64:10:10:8f:76:65:8c:e9:
                    4d:24:cf:35:ec:19:73:ed:5b:db:5b:39:85:dd:0a:
                    36:d3:ff:2a:75:47:cb:75:b9:65:92:c4:33:04:84:
                    00:bb:f4:e1:f1:20:04:66:76:c5:86:0d:26:7e:43:
                    22:b7:96:f1:b0:2b:4e:a7:8e:07:89:f9:a5:46:45:
                    65:77:de:30:83:55:ce:be:ab:a5:82:6d:18:e5:77:
                    e5:a1:dc:ed:14:7f:fd:9a:71:34:a3:e7:ad:ad:b6:
                    71:4c:9a:de:37:e4:26:f3:0c:8f:77:61:3f:f1:66:
                    0a:fc:b6:be:79:2f:07:b4:b0:79:76:78:20:ea:a6:
                    03:bc:fd:7a:70:bc:08:77:06:b1:14:dd:b9:7e:93:
                    d1:cc:42:62:63:78:0a:4c:a6:a2:98:e6:78:08:51:
                    dd:87:bf:bd:f2:3c:66:72:f9:ed:6a:f8:53:6e:ef:
                    e4:89:90:85:35:4a:50:2d:6e:65:9e:e7:73:f5:5a:
                    d5:93:6b:d6:d9:7c:61:9f:51:c5:75:13:3e:9f:19:
                    35:6a:b0:84:8a:5f:9a:e4:cd:5c:96:a1:68:66:79:
                    40:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:BA:6E:40:9A:A9:FD:9E:5C:A2:AB:32:BE:B4:9F:60:75:87:ED:E1
            X509v3 Authority Key Identifier:
                keyid:D3:50:3D:03:E3:D4:DF:A0:76:7F:6D:FF:3B:A7:1D:D7:B6:23:6A:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e37342e302f32342d3234203d3e20323731393839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.243.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:3b:6a:8a:fe:90:c5:00:3d:3d:a2:79:39:cb:40:a5:36:20:
         a6:0a:5e:5d:88:08:2e:e7:0c:1b:21:f7:da:be:31:c9:26:13:
         44:28:06:e9:9e:8a:2d:3b:51:ba:14:34:26:32:46:78:0d:99:
         1e:1a:52:ee:cc:7b:67:29:01:34:9d:d7:c8:d6:93:b1:fc:43:
         40:80:59:a2:fb:66:04:81:c6:38:4c:bc:b8:cd:c0:24:32:31:
         5f:17:ef:ba:66:60:03:c9:72:57:6d:f5:d2:05:fb:93:59:d8:
         15:9e:53:41:03:d4:6a:2e:bf:b2:70:88:88:4f:41:86:4e:6e:
         98:cf:99:fd:e7:26:38:5f:d7:5f:af:4a:85:c2:09:4c:2c:df:
         89:52:b8:0c:d4:9d:e1:3a:3d:4e:9d:e9:44:cc:b9:41:6b:af:
         73:24:d3:8d:7f:26:fd:c8:5a:20:c9:d0:b4:70:f2:85:c6:15:
         89:be:c0:6b:49:fb:22:a5:58:00:2a:85:ca:5e:d2:3f:46:2e:
         3e:b2:2a:8f:f0:24:30:1a:5e:9a:4f:68:ef:af:51:b8:6a:cf:
         e1:f2:1d:48:57:73:de:8e:75:4b:81:ca:b2:60:bb:af:90:94:
         19:d3:64:46:f0:9c:61:5d:d6:31:8a:44:64:55:93:9d:88:e5:
         e9:37:37:4f
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUJ+OcxqqCqdemhw8/Hf3C6FuSjTQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM1MDNEMDNFM0Q0REZBMDc2N0Y2REZGM0JBNzFERDdC
NjIzNkFGQTAeFw0yNjA3MDkwMDQ2MzRaFw0yNzA3MDgwMDUxMzRaMDMxMTAvBgNV
BAMTKENBQkE2RTQwOUFBOUZEOUU1Q0EyQUIzMkJFQjQ5RjYwNzU4N0VERTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv8ep1hlBpYRG1kzBGwN7eAAcE
IAGEjVxc2SLRuwMdGHUCl75kEBCPdmWM6U0kzzXsGXPtW9tbOYXdCjbT/yp1R8t1
uWWSxDMEhAC79OHxIARmdsWGDSZ+QyK3lvGwK06njgeJ+aVGRWV33jCDVc6+q6WC
bRjld+Wh3O0Uf/2acTSj562ttnFMmt435CbzDI93YT/xZgr8tr55Lwe0sHl2eCDq
pgO8/XpwvAh3BrEU3bl+k9HMQmJjeApMpqKY5ngIUd2Hv73yPGZy+e1q+FNu7+SJ
kIU1SlAtbmWe53P1WtWTa9bZfGGfUcV1Ez6fGTVqsISKX5rkzVyWoWhmeUB3AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUyrpuQJqp/Z5coqsyvrSfYHWH7eEwHwYDVR0j
BBgwFoAU01A9A+PU36B2f23/O6cd17YjavowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wQkIwNzFEOTZEOEZCRTJBODY5OTA5MDVEQzE3RTE5OTM3
MEE1NzA1MjM2QTAwMDY1RDY4NTYzRkFBREI4NUU2LzAvRDM1MDNEMDNFM0Q0REZB
MDc2N0Y2REZGM0JBNzFERDdCNjIzNkFGQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EMzUwM0QwM0UzRDRERkEwNzY3
RjZERkYzQkE3MUREN0I2MjM2QUZBLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMEJCMDcxRDk2RDhGQkUyQTg2OTkwOTA1REMxN0UxOTkzNzBBNTcwNTIz
NkEwMDA2NUQ2ODU2M0ZBQURCODVFNi8wLzMxMzYzODJlMzIzNDMzMmUzNzM0MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMxMzkzODM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqPNK
MA0GCSqGSIb3DQEBCwUAA4IBAQCNO2qK/pDFAD09onk5y0ClNiCmCl5diAgu5wwb
IffavjHJJhNEKAbpnootO1G6FDQmMkZ4DZkeGlLuzHtnKQE0ndfI1pOx/ENAgFmi
+2YEgcY4TLy4zcAkMjFfF++6ZmADyXJXbfXSBfuTWdgVnlNBA9RqLr+ycIiIT0GG
Tm6Yz5n95yY4X9dfr0qFwglMLN+JUrgM1J3hOj1OnelEzLlBa69zJNONfyb9yFog
ydC0cPKFxhWJvsBrSfsipVgAKoXKXtI/Ri4+siqP8CQwGl6aT2jvr1G4as/h8h1I
V3PejnVLgcqyYLuvkJQZ02RG8JxhXdYxikRkVZOdiOXpNzdP
-----END CERTIFICATE-----
Generated at Sat Jul 25 01:44:14 2026 by rpki-client