Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e37392e302f32342d3234203d3e20323732303237.roa
File:                     3136382e3234332e37392e302f32342d3234203d3e20323732303237.roa (raw, json)
Hash identifier:          F7jeM5NWfNrzFqE+lujKl5/K+HlPhESV2beXSMP4ILA=
Subject key identifier:   34:E7:6E:5E:50:A9:4D:2B:CD:F4:BF:52:24:2D:FE:68:95:51:97:A0
Certificate issuer:       /CN=D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA
Certificate serial:       70FFE12202F6C5B927B89DF6F74C5840B9DC18BC
Authority key identifier: D3:50:3D:03:E3:D4:DF:A0:76:7F:6D:FF:3B:A7:1D:D7:B6:23:6A:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e37392e302f32342d3234203d3e20323732303237.roa
Signing time:             Wed 15 Oct 2025 18:30:00 +0000
ROA not before:           Wed 15 Oct 2025 18:25:00 +0000
ROA not after:            Wed 14 Oct 2026 18:30:00 +0000
asID:                     272027
IP address blocks:        168.243.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 23 Oct 2025 10:42:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:ff:e1:22:02:f6:c5:b9:27:b8:9d:f6:f7:4c:58:40:b9:dc:18:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA
        Validity
            Not Before: Oct 15 18:25:00 2025 GMT
            Not After : Oct 14 18:30:00 2026 GMT
        Subject: CN=34E76E5E50A94D2BCDF4BF52242DFE68955197A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:bc:27:60:33:a9:2c:51:a5:fa:33:71:29:04:
                    69:82:e6:ef:0d:97:67:c4:4f:a6:b8:29:9c:60:bd:
                    78:eb:89:ca:bb:fa:f1:4a:d1:7f:d7:05:17:47:69:
                    d5:9b:65:58:5a:de:9d:89:30:8c:c0:82:98:e1:bd:
                    94:5d:04:9d:27:4a:ba:a8:f3:19:7b:e4:72:76:4c:
                    03:35:fa:be:88:93:c7:5f:4c:4a:5c:11:ed:57:ac:
                    80:87:d2:16:e4:c0:0b:65:a4:55:da:63:57:94:b0:
                    cc:1f:84:ee:ee:be:90:e3:57:f5:24:64:05:71:5a:
                    f6:03:7d:ae:0f:27:4c:f9:39:c0:05:2e:17:ff:5f:
                    e2:fd:14:04:4f:60:63:43:22:3d:03:3c:1e:1b:2e:
                    35:c4:90:0c:78:e1:8a:fe:8b:b9:a7:32:ec:bb:95:
                    b1:23:be:1d:04:c6:60:40:50:d5:bc:27:d1:2e:bb:
                    9c:c6:32:11:93:61:fa:0b:57:1e:3a:62:e9:f3:1c:
                    1d:cd:53:a1:e4:f6:02:6c:6b:f9:21:50:24:a2:cb:
                    32:a7:b4:40:c4:33:81:f8:0a:e3:57:06:41:f2:60:
                    d6:56:0f:f3:f4:32:4b:39:20:aa:5f:3d:9c:30:0c:
                    71:4d:52:1b:94:72:fd:83:b0:fb:d0:c1:48:75:5e:
                    23:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:E7:6E:5E:50:A9:4D:2B:CD:F4:BF:52:24:2D:FE:68:95:51:97:A0
            X509v3 Authority Key Identifier:
                keyid:D3:50:3D:03:E3:D4:DF:A0:76:7F:6D:FF:3B:A7:1D:D7:B6:23:6A:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e37392e302f32342d3234203d3e20323732303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.243.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:f4:01:76:69:84:e1:2a:65:2c:63:b1:2b:fd:b0:e7:54:fa:
         04:a3:cc:4c:f1:22:09:6b:d0:0b:1b:20:ba:c8:97:5a:45:59:
         56:eb:99:1a:6a:29:48:5e:6a:f4:00:a6:0b:05:20:e0:d4:f0:
         36:6b:35:cd:10:55:0b:23:c5:80:e0:2f:d1:b0:96:22:33:09:
         93:00:5c:0d:c3:c2:db:75:d1:bc:69:c7:c5:9d:43:99:64:e3:
         89:e8:5c:b8:43:a4:87:e3:21:cc:62:ca:48:98:95:00:c4:72:
         a2:49:f2:4e:af:d6:45:e8:15:64:34:9c:5c:c9:ed:6d:40:19:
         5a:4c:4e:f0:50:a4:cb:37:24:ad:fd:69:01:57:8c:d3:f7:4b:
         97:98:07:9a:f7:1d:05:48:55:19:e5:ea:e0:41:a3:bc:88:62:
         7f:13:08:fd:b4:d9:33:09:98:8f:bd:de:0e:53:e2:cf:28:be:
         35:64:6d:58:d5:a8:e2:92:ae:85:d8:a7:a0:86:ac:6a:d4:e1:
         ea:bd:71:07:2b:63:f7:10:79:c5:7a:5f:27:c5:f0:6f:2a:a6:
         2b:39:d6:46:c4:54:17:18:0b:97:e7:ff:ed:c8:23:1a:30:88:
         63:5e:5a:0f:c0:63:17:9c:22:63:36:26:56:89:93:c0:84:6a:
         56:36:c6:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:11:05 2025 by rpki-client