Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3136382e3139362e3235322e302f32342d3234203d3e203237393736.roa
File:                     3136382e3139362e3235322e302f32342d3234203d3e203237393736.roa (raw, json)
Hash identifier:          VkFMtGKX756zVf+WSYl+X5PvgmRGMMTVLe5Z+hudc1o=
Subject key identifier:   C4:5A:5F:7A:98:6E:D4:6F:C8:6A:B0:F7:63:5A:43:29:10:CF:EC:74
Certificate issuer:       /CN=C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39
Certificate serial:       1DD4F8E3D78F018508432B7FC4CDB5A450077A59
Authority key identifier: C4:E4:73:26:7C:7E:D8:DB:FC:CD:20:9A:C0:9A:1C:A7:B8:4A:7C:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3136382e3139362e3235322e302f32342d3234203d3e203237393736.roa
Signing time:             Fri 02 Oct 2026 18:38:00 +0000
ROA not before:           Fri 02 Oct 2026 18:33:00 +0000
ROA not after:            Fri 01 Oct 2027 18:38:00 +0000
asID:                     27976
IP address blocks:        168.196.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 19:09:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:d4:f8:e3:d7:8f:01:85:08:43:2b:7f:c4:cd:b5:a4:50:07:7a:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39
        Validity
            Not Before: Oct  2 18:33:00 2026 GMT
            Not After : Oct  1 18:38:00 2027 GMT
        Subject: CN=C45A5F7A986ED46FC86AB0F7635A432910CFEC74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:e9:7e:64:e8:6d:80:a2:9c:67:f8:54:32:83:
                    93:7e:eb:c8:0e:35:69:74:46:52:4b:ad:87:eb:0b:
                    85:94:f9:5b:8d:2a:f2:73:ee:4a:3c:28:3a:e4:20:
                    8f:7c:e3:c5:f4:73:4a:91:e5:63:5c:6c:49:ef:ea:
                    39:21:7c:c9:ed:20:50:13:56:4d:19:19:10:9d:bd:
                    09:3c:3f:bb:f5:a1:5f:e3:54:75:51:e0:e5:ac:f9:
                    46:9e:7f:f3:a7:fa:c5:8a:4b:10:70:79:3b:b1:48:
                    82:53:21:5d:6b:95:db:ab:d7:67:62:7a:00:35:50:
                    a3:b2:73:42:48:23:cb:77:e3:70:05:10:da:2b:31:
                    2f:c7:04:15:2a:d7:1d:c9:52:20:3e:4a:e8:62:0b:
                    b6:35:1b:56:0e:7d:a6:80:e4:0b:17:a6:12:ee:2b:
                    b4:2d:c3:3a:44:15:8f:d8:d4:f9:9d:3d:1a:10:e1:
                    f6:02:fc:43:77:3e:43:53:bd:58:30:a6:10:61:99:
                    fe:ec:c2:43:f9:63:83:75:c7:82:3e:3a:bb:0b:a3:
                    aa:d0:ca:bd:05:04:04:8b:71:cd:95:e2:16:60:8a:
                    1b:05:db:15:7f:fb:5e:90:57:84:44:56:e3:21:66:
                    7c:16:30:c9:37:31:bb:a3:6b:88:2a:75:78:92:a3:
                    7e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:5A:5F:7A:98:6E:D4:6F:C8:6A:B0:F7:63:5A:43:29:10:CF:EC:74
            X509v3 Authority Key Identifier:
                keyid:C4:E4:73:26:7C:7E:D8:DB:FC:CD:20:9A:C0:9A:1C:A7:B8:4A:7C:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3136382e3139362e3235322e302f32342d3234203d3e203237393736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:03:d7:e5:22:4b:25:c7:10:62:c0:4f:df:b6:50:c5:c2:86:
         27:35:e7:3e:f4:3a:ab:3b:d7:6c:2e:84:49:ad:40:58:35:11:
         fd:5b:c6:35:92:8d:f0:c1:d9:a0:d7:f5:7e:02:a1:f8:3c:97:
         7f:3a:47:9b:e9:8d:fe:58:03:9f:52:89:ee:af:e8:91:41:74:
         0e:d1:c3:bb:19:00:f4:e3:98:1d:98:38:e0:fe:f7:8b:5d:99:
         da:bb:73:36:f4:c3:be:9a:06:3b:b9:c0:76:52:c2:b7:8a:23:
         9c:7b:68:7a:0d:51:42:2c:16:c1:7c:9f:b4:33:0f:23:ad:96:
         dc:84:e2:e4:be:39:c6:6f:53:5a:21:7e:62:1d:c9:42:12:fb:
         0c:52:95:7c:36:c9:05:10:ba:cc:37:aa:30:62:78:93:7a:27:
         db:1e:31:5d:08:5c:50:00:dd:2f:28:6c:b0:b2:05:8c:35:07:
         f3:42:95:88:fa:16:06:c4:eb:d9:e0:02:f3:3d:13:8a:4c:56:
         83:a0:99:78:e6:86:5d:31:61:24:3f:71:c1:51:9c:ed:91:da:
         d9:72:8c:80:1a:db:a1:2f:c4:c7:0b:3e:83:a9:cf:de:19:28:
         d2:11:88:15:d7:40:73:d4:0f:ec:29:9f:18:84:a0:a0:04:43:
         0b:35:0b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 03:44:49 2026 by rpki-client