Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3136382e3132312e3131362e302f32342d3234203d3e203237393736.roa
File:                     3136382e3132312e3131362e302f32342d3234203d3e203237393736.roa (raw, json)
Hash identifier:          ZR9oxBCIZ1czQmnc8GhK6k1v6MFlORFobRqhlh63LIs=
Subject key identifier:   A3:61:3E:81:D8:93:4F:78:A4:31:75:3B:11:EC:B5:28:06:15:93:C9
Certificate issuer:       /CN=C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39
Certificate serial:       3546844D39E430EC20DF12C6DA297B6F737AEC75
Authority key identifier: C4:E4:73:26:7C:7E:D8:DB:FC:CD:20:9A:C0:9A:1C:A7:B8:4A:7C:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3136382e3132312e3131362e302f32342d3234203d3e203237393736.roa
Signing time:             Fri 02 Oct 2026 18:38:02 +0000
ROA not before:           Fri 02 Oct 2026 18:33:02 +0000
ROA not after:            Fri 01 Oct 2027 18:38:02 +0000
asID:                     27976
IP address blocks:        168.121.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 06:54:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:46:84:4d:39:e4:30:ec:20:df:12:c6:da:29:7b:6f:73:7a:ec:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39
        Validity
            Not Before: Oct  2 18:33:02 2026 GMT
            Not After : Oct  1 18:38:02 2027 GMT
        Subject: CN=A3613E81D8934F78A431753B11ECB528061593C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fb:ce:0f:b3:ac:b9:9b:f9:97:7d:1e:ba:7b:
                    96:31:0a:b6:9d:f8:a0:1f:82:25:9d:0c:cc:02:81:
                    50:22:4e:4e:ec:b1:2d:96:f5:0b:7a:cf:0a:98:8d:
                    25:78:dd:9a:9b:b3:24:55:46:cf:04:c4:c4:94:d6:
                    f5:57:be:f1:02:1a:ea:44:ca:8e:37:0e:5b:d7:2f:
                    42:69:11:ab:d5:2d:c9:a9:59:0f:de:65:f7:20:bf:
                    d4:06:6b:fd:d1:1f:6e:41:5c:c0:06:8c:86:d4:a2:
                    ad:0c:f8:65:ac:21:49:96:60:44:d8:0a:2b:ce:34:
                    81:94:e9:99:05:42:cd:9b:79:8f:5f:e3:ca:fe:28:
                    fd:72:40:9a:a2:78:c0:c7:aa:49:6f:1c:d3:c3:56:
                    6e:38:bd:99:9d:f8:6c:2b:70:18:10:c0:ce:ba:fe:
                    a5:02:46:09:73:5d:48:2b:42:61:4f:55:26:a7:77:
                    7a:07:63:80:dc:9a:dd:ee:5c:54:fe:c9:63:5f:6e:
                    6e:79:ef:f0:2a:b6:12:bb:2d:2b:02:77:54:79:bc:
                    40:97:4c:2f:91:c1:da:33:ec:8e:08:47:49:e5:bf:
                    fe:75:73:5f:3f:dd:1c:16:e6:72:77:8b:bc:05:87:
                    5c:ae:3d:81:4b:7d:e1:8b:5b:6f:9d:07:12:4b:bc:
                    88:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:61:3E:81:D8:93:4F:78:A4:31:75:3B:11:EC:B5:28:06:15:93:C9
            X509v3 Authority Key Identifier:
                keyid:C4:E4:73:26:7C:7E:D8:DB:FC:CD:20:9A:C0:9A:1C:A7:B8:4A:7C:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3136382e3132312e3131362e302f32342d3234203d3e203237393736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:dc:65:e0:ce:cf:60:6d:70:4d:7c:25:c2:38:6a:f8:ef:b6:
         06:08:19:94:fe:24:d9:d4:15:4c:7c:e0:ce:2a:c7:8c:86:c2:
         1b:b6:16:f9:da:05:85:f7:b0:fd:98:77:7a:f7:d1:08:52:c2:
         cd:fa:f2:82:5b:07:1e:48:62:4b:d7:46:d5:08:d7:f0:89:41:
         1a:1f:62:a8:7f:92:ca:4e:7e:57:38:70:15:13:0a:36:53:19:
         c9:16:b1:37:61:11:0f:ba:05:36:75:b2:f7:a2:83:e3:5c:01:
         ac:bd:34:20:84:b2:b2:55:44:a5:2f:86:b8:68:28:31:d3:b6:
         37:3b:3e:d5:11:3e:e8:ea:80:01:0d:47:26:8f:a0:1a:99:1f:
         e0:48:0a:b0:a0:2e:7f:3a:ce:92:31:96:ca:c0:41:d5:b9:4d:
         99:4d:15:48:a9:d7:92:5c:ed:5b:b6:2d:8f:27:87:6d:f5:c8:
         31:c9:52:01:c9:03:96:33:ee:98:f7:06:d3:79:09:e6:49:a1:
         41:df:2a:6c:56:6b:ad:42:39:8d:87:8a:9f:cb:5c:47:ad:ba:
         dd:66:da:a8:d6:e5:35:9b:8b:c2:f3:95:b4:dc:0a:0b:b6:a0:
         52:ec:4c:32:83:1b:b8:5c:07:78:7c:08:4c:6a:a6:c2:92:57:
         98:ab:d0:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 21:09:18 2026 by rpki-client