Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3136382e3139362e3235352e302f32342d3234203d3e203237393736.roa
File:                     3136382e3139362e3235352e302f32342d3234203d3e203237393736.roa (raw, json)
Hash identifier:          PGo/RCSv4Ywwa4Ub6e+NqXz7DV4iepRcN4VL6VYgYmo=
Subject key identifier:   D4:21:7B:2B:17:2B:C0:3C:ED:DE:8D:1F:CE:19:A0:F7:B5:A5:34:52
Certificate issuer:       /CN=C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39
Certificate serial:       51CEE8D12EC669ADA6E7C7C71B0F4001BDA84054
Authority key identifier: C4:E4:73:26:7C:7E:D8:DB:FC:CD:20:9A:C0:9A:1C:A7:B8:4A:7C:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3136382e3139362e3235352e302f32342d3234203d3e203237393736.roa
Signing time:             Fri 02 Oct 2026 18:37:53 +0000
ROA not before:           Fri 02 Oct 2026 18:32:53 +0000
ROA not after:            Fri 01 Oct 2027 18:37:53 +0000
asID:                     27976
IP address blocks:        168.196.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 18:47:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:ce:e8:d1:2e:c6:69:ad:a6:e7:c7:c7:1b:0f:40:01:bd:a8:40:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39
        Validity
            Not Before: Oct  2 18:32:53 2026 GMT
            Not After : Oct  1 18:37:53 2027 GMT
        Subject: CN=D4217B2B172BC03CEDDE8D1FCE19A0F7B5A53452
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:02:15:56:2b:de:49:c3:5f:66:6c:23:d1:52:
                    b1:8b:36:be:9d:42:87:95:0e:3a:ab:1b:4e:d6:47:
                    57:ca:96:3d:c1:32:8c:49:02:3f:a6:93:7f:eb:c4:
                    e2:ec:95:33:05:58:ef:80:40:b1:9e:9e:a2:ed:8f:
                    fe:8e:09:ab:6e:a3:6e:4a:83:67:88:24:e1:e3:17:
                    ce:f9:4c:4b:90:c8:6c:5f:f5:17:22:b8:2e:91:31:
                    86:c2:be:9b:48:95:a2:1d:dd:c6:e7:75:50:35:ad:
                    ae:76:31:ba:6e:41:3d:d5:9e:d1:2a:37:00:75:d9:
                    20:a0:78:ec:9f:c5:b3:73:a5:92:1f:93:25:8f:b3:
                    56:7f:de:3c:21:8d:b8:e2:38:8e:a5:af:91:71:fc:
                    74:60:88:81:d7:00:73:ce:f3:bd:af:3e:6e:ad:3f:
                    22:0b:53:53:10:f5:3e:16:67:3f:7a:49:3f:e7:1a:
                    ff:40:30:23:33:fa:e0:c5:4e:e4:69:ed:d4:53:8b:
                    5b:bf:63:ad:c5:25:47:1f:a8:c6:07:1a:16:e2:86:
                    0e:e4:38:66:32:f8:7b:6b:f8:ee:7a:1c:0c:91:7c:
                    3a:c2:5e:81:71:3b:45:b5:9b:a6:2f:69:ff:f8:15:
                    52:ee:14:eb:c9:7d:a8:d0:48:75:2c:36:f1:ba:11:
                    e3:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:21:7B:2B:17:2B:C0:3C:ED:DE:8D:1F:CE:19:A0:F7:B5:A5:34:52
            X509v3 Authority Key Identifier:
                keyid:C4:E4:73:26:7C:7E:D8:DB:FC:CD:20:9A:C0:9A:1C:A7:B8:4A:7C:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3136382e3139362e3235352e302f32342d3234203d3e203237393736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:94:5e:62:21:e6:36:d1:e6:f0:3f:91:55:42:08:0f:e2:0f:
         99:3d:bf:87:85:bc:11:85:94:bb:8e:7c:d3:99:e1:8d:b1:c8:
         3e:b8:42:a9:fc:17:8b:09:92:08:39:40:15:78:22:00:b1:8d:
         f2:5e:d8:57:af:6d:bc:22:c6:f3:50:45:07:89:ba:ab:e0:7e:
         d0:84:fb:1a:58:95:10:3c:f6:b8:7f:2c:dd:5b:bf:b8:5d:cd:
         79:6e:e8:11:e0:7d:41:01:f5:f4:96:73:4a:39:ce:a8:4f:26:
         be:0e:58:3e:d2:29:90:94:62:9e:e5:0d:91:cb:7d:8e:6e:63:
         6e:85:b1:d1:3b:70:7f:63:20:7c:c9:38:79:b1:69:3f:cd:1f:
         6e:71:51:6d:b2:8a:53:3e:fd:cb:ab:61:a9:94:b0:6d:ea:97:
         c6:e1:86:92:1e:4e:99:c0:51:69:91:bd:49:3d:10:fc:b0:c7:
         0b:81:2e:ea:99:0f:69:53:b1:7f:9f:f8:e2:87:a4:aa:53:ee:
         f1:e3:55:4e:d4:fb:3b:69:c6:62:cf:d2:38:12:85:af:e4:b4:
         52:43:39:04:30:1b:63:ba:10:d2:0f:82:ff:d9:e2:68:0f:83:
         d5:7f:e4:9c:5e:75:98:4a:e7:10:f4:ce:0d:75:f5:9b:67:c9:
         65:9d:98:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 12:57:03 2026 by rpki-client