Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3221D3654886B789AD128138DBEA2BF5CDFC9E89D3849DAC0AD56D5D29329070/0/3136342e3136332e3138342e302f32332d3233203d3e20323731383134.roa
File:                     3136342e3136332e3138342e302f32332d3233203d3e20323731383134.roa (raw, json)
Hash identifier:          F/f71sUgA4kHZBpxVevGGtP/zqxfXVZahyOSIV9px3k=
Subject key identifier:   0D:7C:EF:B7:64:AD:CC:9D:D8:62:E9:D7:D2:2C:2E:E6:5C:61:F7:76
Certificate issuer:       /CN=E8415F203EB930F191C0398A880C11B310EE5884
Certificate serial:       576C1DE9033792CCA886D313424A61BB256D7999
Authority key identifier: E8:41:5F:20:3E:B9:30:F1:91:C0:39:8A:88:0C:11:B3:10:EE:58:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8415F203EB930F191C0398A880C11B310EE5884.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3221D3654886B789AD128138DBEA2BF5CDFC9E89D3849DAC0AD56D5D29329070/0/3136342e3136332e3138342e302f32332d3233203d3e20323731383134.roa
Signing time:             Wed 15 Oct 2025 02:00:00 +0000
ROA not before:           Wed 15 Oct 2025 01:55:00 +0000
ROA not after:            Wed 14 Oct 2026 02:00:00 +0000
asID:                     271814
IP address blocks:        164.163.184.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3221D3654886B789AD128138DBEA2BF5CDFC9E89D3849DAC0AD56D5D29329070/0/E8415F203EB930F191C0398A880C11B310EE5884.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3221D3654886B789AD128138DBEA2BF5CDFC9E89D3849DAC0AD56D5D29329070/0/E8415F203EB930F191C0398A880C11B310EE5884.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8415F203EB930F191C0398A880C11B310EE5884.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:6c:1d:e9:03:37:92:cc:a8:86:d3:13:42:4a:61:bb:25:6d:79:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8415F203EB930F191C0398A880C11B310EE5884
        Validity
            Not Before: Oct 15 01:55:00 2025 GMT
            Not After : Oct 14 02:00:00 2026 GMT
        Subject: CN=0D7CEFB764ADCC9DD862E9D7D22C2EE65C61F776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f3:22:a6:dc:13:e1:2e:0f:d7:ca:8b:a3:35:
                    93:da:60:9f:f9:7b:37:bb:48:92:c9:c4:90:03:66:
                    ac:a5:f1:d3:58:1c:b5:e7:6b:fe:de:b4:e0:b0:fe:
                    9f:70:97:df:f2:5d:3f:60:4d:d8:40:1d:40:33:46:
                    35:f6:28:40:95:df:eb:a2:80:3b:6b:49:2f:26:02:
                    eb:c8:45:c7:15:b2:0c:45:21:c7:2c:04:b6:9b:6c:
                    9c:d0:dd:78:7c:1b:e1:90:46:90:21:11:1a:97:c5:
                    e4:2e:3d:27:56:a4:73:cd:0c:93:cc:89:37:2f:a9:
                    09:76:19:8a:33:4c:f1:14:ce:02:9d:fa:d0:96:dc:
                    c5:27:46:7e:b3:62:29:99:1e:a7:4c:72:ae:75:03:
                    24:2f:5b:b4:0d:a6:2c:38:44:35:fe:75:b3:66:40:
                    74:7f:8f:ee:fc:31:3d:12:1e:34:d1:65:24:4e:04:
                    18:1f:40:9e:4c:64:0b:65:c6:3d:33:bc:5f:35:ad:
                    8f:81:13:d2:d7:74:e7:15:88:ea:2f:85:80:52:59:
                    be:c5:a7:c4:f5:1e:81:c8:3a:f5:94:41:05:d4:5b:
                    a6:a2:fd:1c:27:e5:99:53:99:30:4d:9b:18:96:c9:
                    46:29:82:c4:0b:87:8f:40:f1:28:ab:33:3c:23:ba:
                    ad:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:7C:EF:B7:64:AD:CC:9D:D8:62:E9:D7:D2:2C:2E:E6:5C:61:F7:76
            X509v3 Authority Key Identifier:
                keyid:E8:41:5F:20:3E:B9:30:F1:91:C0:39:8A:88:0C:11:B3:10:EE:58:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3221D3654886B789AD128138DBEA2BF5CDFC9E89D3849DAC0AD56D5D29329070/0/E8415F203EB930F191C0398A880C11B310EE5884.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8415F203EB930F191C0398A880C11B310EE5884.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3221D3654886B789AD128138DBEA2BF5CDFC9E89D3849DAC0AD56D5D29329070/0/3136342e3136332e3138342e302f32332d3233203d3e20323731383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         99:2c:d8:22:f2:85:5f:25:b6:c3:b7:eb:92:0e:49:43:09:8a:
         c7:57:4d:3c:03:1e:01:ce:79:3f:48:ca:7c:ff:11:2e:ad:99:
         92:bc:96:c3:04:00:a6:32:d1:de:3e:d8:8f:f7:34:4e:b7:33:
         aa:5e:f5:bd:43:fd:0f:87:5b:c8:c6:c9:40:af:f3:91:01:7e:
         6c:7f:12:a0:28:ad:76:76:5e:15:73:3e:67:81:1a:8c:3c:6a:
         2e:b3:ad:ab:ca:fa:6d:5e:14:0c:aa:b3:fd:2b:ea:20:bc:04:
         5e:67:27:0b:c1:a7:df:1a:3a:4d:87:e8:1f:e8:1f:88:56:4d:
         43:56:76:27:3b:92:dc:d4:05:8b:c5:8b:ef:05:26:ad:f4:39:
         9d:f3:af:fb:ad:f5:0d:ed:be:69:eb:43:e5:33:b6:1a:a0:4d:
         a9:45:71:df:17:48:d4:25:2b:06:2c:44:a1:4c:53:0a:e1:c0:
         0f:c2:0b:6c:39:d2:26:ed:d5:ae:7f:09:b3:86:22:a2:48:cd:
         5c:5f:31:2d:87:81:7a:c8:93:26:c8:de:ef:c0:b0:04:07:c0:
         96:84:4e:16:a7:70:64:f6:54:31:25:77:5d:07:e9:9b:f0:aa:
         10:27:e5:33:10:84:d1:bb:d0:3f:5b:0c:31:e2:65:9c:54:77:
         2b:d4:a9:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:21:19 2025 by rpki-client