Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3136382e3132312e3131382e302f32332d3233203d3e203237393736.roa
File:                     3136382e3132312e3131382e302f32332d3233203d3e203237393736.roa (raw, json)
Hash identifier:          bXHVIHocoNDoQV0gQzKUWY5PpONMG3Z2grYN4gN8lWM=
Subject key identifier:   63:FB:F3:3F:9D:14:47:3D:07:68:5F:7C:F9:18:F6:F7:C1:4F:E8:67
Certificate issuer:       /CN=C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39
Certificate serial:       43EED6389984EB45545C12E255E8C036604EF366
Authority key identifier: C4:E4:73:26:7C:7E:D8:DB:FC:CD:20:9A:C0:9A:1C:A7:B8:4A:7C:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3136382e3132312e3131382e302f32332d3233203d3e203237393736.roa
Signing time:             Fri 02 Oct 2026 18:37:53 +0000
ROA not before:           Fri 02 Oct 2026 18:32:53 +0000
ROA not after:            Fri 01 Oct 2027 18:37:53 +0000
asID:                     27976
IP address blocks:        168.121.118.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 19:09:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:ee:d6:38:99:84:eb:45:54:5c:12:e2:55:e8:c0:36:60:4e:f3:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39
        Validity
            Not Before: Oct  2 18:32:53 2026 GMT
            Not After : Oct  1 18:37:53 2027 GMT
        Subject: CN=63FBF33F9D14473D07685F7CF918F6F7C14FE867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:8a:73:64:c1:ee:ab:da:bf:5c:b4:af:0c:92:
                    ad:d5:90:81:48:1a:d9:f7:84:ae:80:20:8e:01:52:
                    2b:7d:e7:e8:4c:a9:2c:11:a9:33:e4:47:bf:35:3d:
                    79:e1:ce:01:3c:d2:39:d2:7a:f7:98:d2:0b:66:6a:
                    4b:1f:93:73:3b:23:37:f7:b6:16:92:7a:34:ac:93:
                    70:9e:6c:fe:72:81:d2:9e:79:cb:23:82:a6:48:ad:
                    db:d6:b8:12:00:d1:cb:df:7a:a5:9b:5a:69:1d:50:
                    03:a9:d3:72:94:cc:a5:7e:de:c1:dc:ca:7b:5d:4b:
                    2b:33:2c:73:2b:4b:b6:69:e2:a6:dc:c7:d8:66:37:
                    30:03:8c:8b:e9:63:3c:98:fb:d3:7d:42:1c:d7:cb:
                    11:23:31:56:cc:d9:15:31:ce:31:53:03:c9:7c:86:
                    01:76:8c:63:79:5d:de:3f:1d:70:53:52:39:ab:48:
                    d9:d0:3d:37:09:b0:3b:ca:21:70:cf:d6:c2:e7:01:
                    cd:21:81:95:52:df:bc:17:1b:86:f2:11:c4:24:cf:
                    6e:5b:cd:b8:02:b7:2e:d5:e1:b7:a6:e8:94:de:27:
                    69:ff:53:f1:b1:d2:71:ac:0d:8e:2d:82:10:eb:f1:
                    97:44:34:00:4e:c7:4d:11:86:b2:2b:80:79:56:5a:
                    6c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:FB:F3:3F:9D:14:47:3D:07:68:5F:7C:F9:18:F6:F7:C1:4F:E8:67
            X509v3 Authority Key Identifier:
                keyid:C4:E4:73:26:7C:7E:D8:DB:FC:CD:20:9A:C0:9A:1C:A7:B8:4A:7C:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3136382e3132312e3131382e302f32332d3233203d3e203237393736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:a4:ee:49:5c:34:e6:a4:76:5b:cd:05:62:57:68:46:99:ae:
         27:a2:cd:c5:a1:9b:2a:d3:b4:1e:93:dc:58:15:06:e7:fe:4d:
         4a:6b:22:31:39:5d:62:4c:a1:66:1e:e2:a9:99:26:0c:1c:3a:
         e2:b8:76:f6:76:e2:cb:a4:cf:7c:5b:4c:a2:b3:0d:1d:0d:a6:
         16:e3:a0:28:12:da:c7:8a:75:82:6a:53:e8:f6:ce:74:e1:81:
         88:59:92:64:e8:64:c5:fd:8b:9c:36:9d:7e:73:04:b0:33:83:
         9d:42:4c:3c:50:2e:18:19:09:5e:ef:9c:55:37:1f:05:d0:18:
         72:d0:ab:6a:a3:30:c2:2c:45:e7:5d:03:4f:cd:1e:79:c1:c8:
         c7:75:f6:f0:13:49:9b:b9:7c:44:9c:c3:4b:d6:3b:73:a2:f7:
         88:f1:1f:3e:77:2d:d5:02:12:7e:df:1f:ba:d8:b2:b2:9d:2b:
         05:76:0b:6c:11:fe:e4:7e:f0:00:37:8c:c1:b9:41:24:c6:af:
         b9:78:dd:bb:c3:29:a9:04:b5:b9:dd:3c:60:ef:b5:b8:88:c9:
         3d:26:84:a7:49:fa:b7:d3:ee:03:20:47:5f:74:ba:5e:06:d4:
         a8:61:ae:41:75:df:e9:5b:37:5b:d8:ff:b5:9f:d8:7f:65:10:
         bf:2f:c6:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 16:19:40 2026 by rpki-client