Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3136382e3139362e3235332e302f32342d3234203d3e203237393736.roa
File:                     3136382e3139362e3235332e302f32342d3234203d3e203237393736.roa (raw, json)
Hash identifier:          r0wB0lVs0BdIK5F5dTiAuIumxsMM3N6uKEmHX5VKWxw=
Subject key identifier:   0B:8A:8E:80:87:34:B3:31:28:7A:3B:D4:5F:76:D1:16:AF:36:BD:C7
Certificate issuer:       /CN=C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39
Certificate serial:       62AFE33A11C249B9D5D94033B347B1A92688286D
Authority key identifier: C4:E4:73:26:7C:7E:D8:DB:FC:CD:20:9A:C0:9A:1C:A7:B8:4A:7C:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3136382e3139362e3235332e302f32342d3234203d3e203237393736.roa
Signing time:             Fri 02 Oct 2026 18:38:03 +0000
ROA not before:           Fri 02 Oct 2026 18:33:03 +0000
ROA not after:            Fri 01 Oct 2027 18:38:03 +0000
asID:                     27976
IP address blocks:        168.196.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 18:47:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:af:e3:3a:11:c2:49:b9:d5:d9:40:33:b3:47:b1:a9:26:88:28:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39
        Validity
            Not Before: Oct  2 18:33:03 2026 GMT
            Not After : Oct  1 18:38:03 2027 GMT
        Subject: CN=0B8A8E808734B331287A3BD45F76D116AF36BDC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:75:a1:48:f0:e6:7f:ab:54:dc:de:a5:06:bf:
                    44:46:84:ec:74:48:77:eb:e3:e1:05:44:70:28:b3:
                    3a:3f:b1:50:6e:db:2a:76:8e:51:10:a3:bd:6b:e0:
                    f9:13:cd:db:c3:44:b0:e7:8b:94:05:fd:89:32:cf:
                    56:d9:4a:53:89:96:bd:89:f7:a6:5b:d9:e8:ca:dd:
                    2d:78:74:d4:64:1c:bb:d3:64:bb:94:84:38:18:e5:
                    49:ad:8f:f3:db:9f:5f:a7:de:c3:07:f6:0e:c4:81:
                    5e:09:e6:ae:02:d8:b9:60:bc:a5:b1:c7:7e:4a:8b:
                    0c:39:4e:61:69:aa:6f:d3:60:4b:57:68:de:bc:7a:
                    70:17:1d:3f:66:c7:0f:62:fe:c1:52:04:56:31:ae:
                    80:57:14:75:8c:72:89:a4:0a:a8:17:c9:aa:3c:83:
                    72:08:85:0c:84:a2:f8:90:2e:a9:77:a3:1c:e5:b8:
                    fe:35:97:e1:f5:7b:4e:70:00:73:42:f8:7b:7d:71:
                    ef:a7:8a:63:f9:1a:a6:f9:28:e2:d2:6b:d1:95:3b:
                    cc:16:1b:47:4d:93:cf:23:7b:01:53:81:52:27:5c:
                    47:6c:5a:49:d6:3b:b0:e5:1c:14:72:ff:8c:33:3d:
                    30:3c:be:6e:9b:5f:72:93:cd:90:18:75:71:50:49:
                    b2:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:8A:8E:80:87:34:B3:31:28:7A:3B:D4:5F:76:D1:16:AF:36:BD:C7
            X509v3 Authority Key Identifier:
                keyid:C4:E4:73:26:7C:7E:D8:DB:FC:CD:20:9A:C0:9A:1C:A7:B8:4A:7C:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3136382e3139362e3235332e302f32342d3234203d3e203237393736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:16:dc:28:11:df:8b:2e:b3:55:0c:2f:55:17:7b:9d:03:94:
         4b:61:85:a7:5e:50:13:85:32:04:8e:fa:fe:7b:53:11:69:8c:
         0e:c9:31:0e:1e:1f:f7:f6:fe:c6:2e:eb:f2:a4:ca:0c:19:23:
         64:d8:64:32:7a:fc:b0:ec:b6:07:6f:5e:64:3c:82:55:bd:d2:
         1e:ca:d9:51:53:a0:a4:5d:7f:df:05:20:70:a6:28:93:f2:9d:
         44:88:c4:01:29:9a:7e:ee:7d:1d:ef:72:4d:24:10:c6:0b:e2:
         97:51:3a:17:40:59:8f:a3:5e:8b:3a:d9:b5:a0:db:7a:c6:e7:
         cb:8e:88:60:2e:9a:f4:96:5c:1b:2a:1c:d2:bf:a3:b6:23:e7:
         ad:b9:9b:40:2f:fd:38:fe:70:cd:5a:6b:29:b8:a4:39:6c:07:
         37:c3:df:a7:11:04:d2:f7:9a:b1:3d:06:f9:fa:a7:e6:c4:ec:
         5d:a3:d5:18:9e:b9:3a:d9:bc:14:ff:2b:6c:31:1f:9e:2e:3a:
         56:3a:f4:29:b6:e1:9e:f0:0f:ef:02:4f:b9:c9:dd:f1:01:15:
         89:29:53:71:1c:36:b8:d7:8c:ee:ab:88:96:94:9d:27:b1:47:
         4e:e0:31:f1:25:bc:30:58:fa:7b:f6:57:f2:36:8a:2b:f5:76:
         bc:86:9e:da
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUYq/jOhHCSbnV2UAzs0exqSaIKG0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzRFNDczMjY3QzdFRDhEQkZDQ0QyMDlBQzA5QTFDQTdC
ODRBN0MzOTAeFw0yNjEwMDIxODMzMDNaFw0yNzEwMDExODM4MDNaMDMxMTAvBgNV
BAMTKDBCOEE4RTgwODczNEIzMzEyODdBM0JENDVGNzZEMTE2QUYzNkJEQzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCddaFI8OZ/q1Tc3qUGv0RGhOx0
SHfr4+EFRHAoszo/sVBu2yp2jlEQo71r4PkTzdvDRLDni5QF/Ykyz1bZSlOJlr2J
96Zb2ejK3S14dNRkHLvTZLuUhDgY5Umtj/Pbn1+n3sMH9g7EgV4J5q4C2LlgvKWx
x35Kiww5TmFpqm/TYEtXaN68enAXHT9mxw9i/sFSBFYxroBXFHWMcomkCqgXyao8
g3IIhQyEoviQLql3oxzluP41l+H1e05wAHNC+Ht9ce+nimP5Gqb5KOLSa9GVO8wW
G0dNk88jewFTgVInXEdsWknWO7DlHBRy/4wzPTA8vm6bX3KTzZAYdXFQSbKDAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUC4qOgIc0szEoejvUX3bRFq82vccwHwYDVR0j
BBgwFoAUxORzJnx+2Nv8zSCawJocp7hKfDkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQzJEOUIxRTYxNkJGQzYwMzBGM0RBMUQ2RjIwQjZCNDE0
MzE5QThDREQ0NEVFNjQyMEI2RkZFNzBENjVDNUI5LzAvQzRFNDczMjY3QzdFRDhE
QkZDQ0QyMDlBQzA5QTFDQTdCODRBN0MzOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DNEU0NzMyNjdDN0VEOERCRkND
RDIwOUFDMDlBMUNBN0I4NEE3QzM5LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUMyRDlCMUU2MTZCRkM2MDMwRjNEQTFENkYyMEI2QjQxNDMxOUE4Q0RE
NDRFRTY0MjBCNkZGRTcwRDY1QzVCOS8wLzMxMzYzODJlMzEzOTM2MmUzMjM1MzMy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3MzkzNzM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqMT9
MA0GCSqGSIb3DQEBCwUAA4IBAQBtFtwoEd+LLrNVDC9VF3udA5RLYYWnXlAThTIE
jvr+e1MRaYwOyTEOHh/39v7GLuvypMoMGSNk2GQyevyw7LYHb15kPIJVvdIeytlR
U6CkXX/fBSBwpiiT8p1EiMQBKZp+7n0d73JNJBDGC+KXUToXQFmPo16LOtm1oNt6
xufLjohgLpr0llwbKhzSv6O2I+etuZtAL/04/nDNWmspuKQ5bAc3w9+nEQTS95qx
PQb5+qfmxOxdo9UYnrk62bwU/ytsMR+eLjpWOvQptuGe8A/vAk+5yd3xARWJKVNx
HDa414zuq4iWlJ0nsUdO4DHxJbwwWPp79lfyNoor9Xa8hp7a
-----END CERTIFICATE-----
Generated at Fri Oct 16 09:06:20 2026 by rpki-client