Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3136382e3139362e3235322e302f32322d3232203d3e203237393736.roa
File:                     3136382e3139362e3235322e302f32322d3232203d3e203237393736.roa (raw, json)
Hash identifier:          LYiSPlhxznNOtXyNHpPvGv87eq8oyX4aalkY9ekKEII=
Subject key identifier:   A3:6C:A4:59:FA:7A:B9:D8:25:83:A3:2F:DA:BC:EB:F2:B1:4F:C8:BA
Certificate issuer:       /CN=C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39
Certificate serial:       4A9101EAF740652292DCC6404862C014021F61B0
Authority key identifier: C4:E4:73:26:7C:7E:D8:DB:FC:CD:20:9A:C0:9A:1C:A7:B8:4A:7C:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3136382e3139362e3235322e302f32322d3232203d3e203237393736.roa
Signing time:             Fri 02 Oct 2026 18:38:05 +0000
ROA not before:           Fri 02 Oct 2026 18:33:05 +0000
ROA not after:            Fri 01 Oct 2027 18:38:05 +0000
asID:                     27976
IP address blocks:        168.196.252.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 18:47:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:91:01:ea:f7:40:65:22:92:dc:c6:40:48:62:c0:14:02:1f:61:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39
        Validity
            Not Before: Oct  2 18:33:05 2026 GMT
            Not After : Oct  1 18:38:05 2027 GMT
        Subject: CN=A36CA459FA7AB9D82583A32FDABCEBF2B14FC8BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:79:b2:d4:6d:f4:3c:d3:a3:b7:14:8f:22:e5:
                    37:7a:7e:93:ab:c8:69:24:de:b3:51:54:f4:ce:36:
                    8f:0a:15:60:17:ce:6e:9f:96:78:da:a3:7f:d9:bf:
                    90:47:f5:64:ea:e4:37:1e:67:b9:90:0d:90:19:eb:
                    7f:a1:a9:88:cb:df:b8:7e:3d:ff:32:1b:af:ec:e0:
                    fe:5c:7c:cd:b1:30:2a:90:94:d6:7b:a3:37:34:96:
                    6b:3a:f9:2f:ac:76:d5:c2:23:66:1b:84:cd:fa:84:
                    02:00:41:78:18:75:3a:d8:65:3b:2e:ef:9f:f6:86:
                    bc:ff:95:a7:27:68:45:84:45:e0:67:9a:10:89:e6:
                    fe:2b:f8:6f:3c:4b:1d:a9:d7:b7:5c:ba:5c:bf:0b:
                    de:d3:67:23:17:25:30:91:a1:32:f9:16:f6:be:8c:
                    5f:6d:58:06:58:9b:80:55:4c:dd:58:5a:b0:2d:14:
                    0b:92:26:9e:da:da:fe:4b:5d:37:5a:ba:b6:d9:e9:
                    79:e3:ee:18:7b:4c:dc:06:c0:9c:ee:c6:ae:4b:96:
                    d9:fd:06:00:f4:f9:cb:7f:05:a3:c1:f8:72:88:7a:
                    f7:c4:48:de:c8:64:5c:1b:02:55:a9:fe:95:c5:89:
                    c2:3b:a4:0a:90:f0:88:16:a6:d5:1f:a7:c6:b6:22:
                    73:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:6C:A4:59:FA:7A:B9:D8:25:83:A3:2F:DA:BC:EB:F2:B1:4F:C8:BA
            X509v3 Authority Key Identifier:
                keyid:C4:E4:73:26:7C:7E:D8:DB:FC:CD:20:9A:C0:9A:1C:A7:B8:4A:7C:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3136382e3139362e3235322e302f32322d3232203d3e203237393736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1d:82:9b:f9:26:df:69:a2:fb:f1:3f:c6:3f:27:b6:52:0a:fd:
         3b:d0:40:32:3a:f8:9f:14:56:99:42:19:bb:11:5c:f4:67:4e:
         0a:f5:98:56:23:33:83:8e:98:dd:d6:41:fb:f6:79:4c:47:fa:
         33:38:32:f3:b0:2d:99:ee:09:87:71:b9:e5:0d:60:a8:ab:52:
         0a:4b:e1:dd:43:f7:b1:9c:92:4c:35:94:2d:31:33:8d:d7:98:
         0d:21:62:7b:be:da:bc:ad:3b:6a:14:4e:0a:dc:dc:bc:6a:46:
         79:a7:51:69:ff:e0:4f:5b:99:d0:1c:cf:b9:5c:72:11:a8:23:
         b0:93:22:a0:47:ec:b0:66:10:a0:72:e9:3d:1c:9f:68:ec:52:
         f4:7a:58:a5:8e:b6:67:88:6c:9b:c9:ed:d2:b4:dd:54:b4:20:
         37:56:67:4d:0a:90:d0:cd:0d:e8:25:a2:33:18:5d:6e:bc:6c:
         f4:33:15:19:28:78:fd:98:c2:53:e1:46:87:3d:4f:2e:c9:73:
         b8:7c:69:cf:f3:8f:46:fa:59:d5:21:b5:cc:11:cf:85:a7:53:
         3a:b6:08:4f:3c:ae:37:16:0c:c6:63:7b:38:d3:19:48:04:0c:
         ce:a5:71:dd:75:f3:c3:41:0b:3a:72:21:65:f1:3b:40:06:5f:
         b9:12:12:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 04:21:05 2026 by rpki-client