Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e37362e302f32342d3234203d3e20323731393638.roa
File:                     3136382e3234332e37362e302f32342d3234203d3e20323731393638.roa (raw, json)
Hash identifier:          OH+EHBhXbtQYt85d4XUcW3pKDXBELjXFw840dYNijgw=
Subject key identifier:   8B:60:ED:31:08:C5:10:05:1E:4F:00:D2:87:6D:94:F5:C3:28:9F:EF
Certificate issuer:       /CN=D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA
Certificate serial:       7F28E3C332C9AB485FA00D181A9C402474AD8AC1
Authority key identifier: D3:50:3D:03:E3:D4:DF:A0:76:7F:6D:FF:3B:A7:1D:D7:B6:23:6A:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e37362e302f32342d3234203d3e20323731393638.roa
Signing time:             Fri 10 Jul 2026 18:51:53 +0000
ROA not before:           Fri 10 Jul 2026 18:46:53 +0000
ROA not after:            Fri 09 Jul 2027 18:51:53 +0000
asID:                     271968
IP address blocks:        168.243.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 27 Jul 2026 21:12:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:28:e3:c3:32:c9:ab:48:5f:a0:0d:18:1a:9c:40:24:74:ad:8a:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA
        Validity
            Not Before: Jul 10 18:46:53 2026 GMT
            Not After : Jul  9 18:51:53 2027 GMT
        Subject: CN=8B60ED3108C510051E4F00D2876D94F5C3289FEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4f:24:b5:99:01:1a:75:23:7f:4a:5d:e6:90:
                    ee:53:6b:cc:1e:5f:70:24:a8:15:80:b7:ce:c2:3a:
                    54:a1:db:56:78:d8:ce:fe:b6:3f:de:41:96:72:9a:
                    1e:80:3b:59:39:4f:50:ae:c9:3c:d0:84:5f:a9:6a:
                    e0:78:b6:ae:a8:00:a2:f5:69:84:81:31:87:81:46:
                    ca:33:e8:32:bc:a3:7b:f5:21:41:4b:8e:f6:3c:cc:
                    84:93:3f:d6:e2:32:be:50:10:4d:25:23:bc:be:fc:
                    8a:6d:48:a1:92:19:9d:10:67:f4:e4:32:62:88:97:
                    8a:54:59:82:f3:2d:16:73:32:dc:8a:a7:57:d0:27:
                    ec:04:02:a6:d6:38:f5:59:9b:3b:e8:df:e6:f7:52:
                    60:23:d7:f6:18:bb:d5:5d:32:7c:49:32:92:32:0c:
                    ec:f6:0d:b0:90:f4:a6:b8:f6:25:5d:ad:56:bc:a7:
                    a0:04:c7:6f:af:82:ee:16:e8:f7:19:5c:a4:c9:b6:
                    92:7d:8f:6d:b8:94:2f:cd:de:d5:81:cb:e0:ff:8e:
                    2a:0d:a9:4f:ce:d3:4b:0e:46:ed:f0:73:75:bc:84:
                    be:ad:d7:07:75:d8:d7:12:11:f1:b4:25:bc:2a:36:
                    fa:1e:0f:d9:9f:eb:92:11:cc:4a:2d:5c:59:77:13:
                    82:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:60:ED:31:08:C5:10:05:1E:4F:00:D2:87:6D:94:F5:C3:28:9F:EF
            X509v3 Authority Key Identifier:
                keyid:D3:50:3D:03:E3:D4:DF:A0:76:7F:6D:FF:3B:A7:1D:D7:B6:23:6A:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e37362e302f32342d3234203d3e20323731393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.243.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:3c:e5:c3:14:26:e4:20:d9:67:f6:4d:3a:e1:ed:fa:3b:9d:
         06:de:8b:39:ae:a5:a8:89:7d:a6:a6:a2:80:13:1f:30:2d:8c:
         ab:e4:db:62:96:4a:33:f3:55:c9:6d:62:3d:f8:4e:19:91:4c:
         0d:d1:52:33:99:e7:55:79:2b:07:01:d1:f6:fd:96:81:a6:ca:
         fd:fb:54:d3:d2:f8:d6:03:94:90:5e:8f:5b:db:7e:9a:39:32:
         02:7f:9f:ba:52:94:36:f7:79:65:4f:26:65:f4:bb:2b:54:c7:
         b2:19:17:21:e9:07:41:ba:31:31:5e:bc:1c:35:23:37:68:dd:
         84:72:e8:ec:d9:f5:df:a9:96:dd:6d:a9:32:2e:85:ed:c8:c8:
         21:94:f0:42:bc:e7:29:e6:37:97:1d:60:a5:79:3f:04:9f:b2:
         e4:cb:d6:0d:7c:00:b3:a7:57:c7:84:14:95:00:37:c6:6e:c1:
         68:37:1b:55:73:c5:69:0f:98:9d:a4:b8:f2:f6:1f:bd:35:4e:
         40:d1:20:78:be:12:b1:72:5e:70:d9:9b:0a:2c:54:fb:df:18:
         16:7c:8e:d9:0e:4e:2a:d9:8b:af:41:40:33:1a:10:a1:54:4f:
         19:c2:67:1f:5c:0e:09:3f:19:b7:7c:f9:eb:40:d3:1c:5e:8d:
         69:e3:90:b8
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUfyjjwzLJq0hfoA0YGpxAJHStisEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM1MDNEMDNFM0Q0REZBMDc2N0Y2REZGM0JBNzFERDdC
NjIzNkFGQTAeFw0yNjA3MTAxODQ2NTNaFw0yNzA3MDkxODUxNTNaMDMxMTAvBgNV
BAMTKDhCNjBFRDMxMDhDNTEwMDUxRTRGMDBEMjg3NkQ5NEY1QzMyODlGRUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3TyS1mQEadSN/Sl3mkO5Ta8we
X3AkqBWAt87COlSh21Z42M7+tj/eQZZymh6AO1k5T1CuyTzQhF+pauB4tq6oAKL1
aYSBMYeBRsoz6DK8o3v1IUFLjvY8zISTP9biMr5QEE0lI7y+/IptSKGSGZ0QZ/Tk
MmKIl4pUWYLzLRZzMtyKp1fQJ+wEAqbWOPVZmzvo3+b3UmAj1/YYu9VdMnxJMpIy
DOz2DbCQ9Ka49iVdrVa8p6AEx2+vgu4W6PcZXKTJtpJ9j224lC/N3tWBy+D/jioN
qU/O00sORu3wc3W8hL6t1wd12NcSEfG0JbwqNvoeD9mf65IRzEotXFl3E4LpAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUi2DtMQjFEAUeTwDSh22U9cMon+8wHwYDVR0j
BBgwFoAU01A9A+PU36B2f23/O6cd17YjavowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wQkIwNzFEOTZEOEZCRTJBODY5OTA5MDVEQzE3RTE5OTM3
MEE1NzA1MjM2QTAwMDY1RDY4NTYzRkFBREI4NUU2LzAvRDM1MDNEMDNFM0Q0REZB
MDc2N0Y2REZGM0JBNzFERDdCNjIzNkFGQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EMzUwM0QwM0UzRDRERkEwNzY3
RjZERkYzQkE3MUREN0I2MjM2QUZBLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMEJCMDcxRDk2RDhGQkUyQTg2OTkwOTA1REMxN0UxOTkzNzBBNTcwNTIz
NkEwMDA2NUQ2ODU2M0ZBQURCODVFNi8wLzMxMzYzODJlMzIzNDMzMmUzNzM2MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMxMzkzNjM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqPNM
MA0GCSqGSIb3DQEBCwUAA4IBAQBVPOXDFCbkINln9k064e36O50G3os5rqWoiX2m
pqKAEx8wLYyr5Ntilkoz81XJbWI9+E4ZkUwN0VIzmedVeSsHAdH2/ZaBpsr9+1TT
0vjWA5SQXo9b236aOTICf5+6UpQ293llTyZl9LsrVMeyGRch6QdBujExXrwcNSM3
aN2Ecujs2fXfqZbdbakyLoXtyMghlPBCvOcp5jeXHWCleT8En7Lky9YNfACzp1fH
hBSVADfGbsFoNxtVc8VpD5idpLjy9h+9NU5A0SB4vhKxcl5w2ZsKLFT73xgWfI7Z
Dk4q2YuvQUAzGhChVE8ZwmcfXA4JPxm3fPnrQNMcXo1p45C4
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:20:43 2026 by rpki-client