Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e36362e302f32342d3234203d3e203238303837.roa
File:                     3136382e3233342e36362e302f32342d3234203d3e203238303837.roa (raw, json)
Hash identifier:          Nxd046ZQAEq/TQWvsZbjQgRBB2yIa5xwO+hc9TOJ2Nc=
Subject key identifier:   94:4D:87:31:A9:4F:B4:C8:F8:F8:43:34:16:F4:5D:E0:83:C2:75:89
Certificate issuer:       /CN=0D1797043F7F529F13952CEE646AE7365392BBC3
Certificate serial:       0925115DE0FE72D77F5541E082ACE47CD2D5994D
Authority key identifier: 0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e36362e302f32342d3234203d3e203238303837.roa
Signing time:             Thu 18 Sep 2025 00:30:00 +0000
ROA not before:           Thu 18 Sep 2025 00:25:00 +0000
ROA not after:            Thu 17 Sep 2026 00:30:00 +0000
asID:                     28087
IP address blocks:        168.234.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:25:11:5d:e0:fe:72:d7:7f:55:41:e0:82:ac:e4:7c:d2:d5:99:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D1797043F7F529F13952CEE646AE7365392BBC3
        Validity
            Not Before: Sep 18 00:25:00 2025 GMT
            Not After : Sep 17 00:30:00 2026 GMT
        Subject: CN=944D8731A94FB4C8F8F8433416F45DE083C27589
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:3f:ca:8d:6f:1f:a5:2a:4d:51:31:7b:01:78:
                    0f:f0:7e:e6:d9:93:20:15:d2:56:8c:7c:71:42:e7:
                    32:67:2f:27:46:51:b9:fd:64:55:43:18:64:44:3c:
                    23:e2:1a:86:16:77:dc:21:e6:f7:e7:59:6c:e3:4b:
                    c7:3d:67:32:57:a6:44:b0:3c:99:e1:02:86:a4:80:
                    9b:af:58:d0:8a:4f:cd:86:9f:c5:dc:15:11:b5:91:
                    0d:04:02:06:4b:eb:da:f8:e9:92:86:77:e6:33:f4:
                    0d:50:eb:01:a4:33:7a:d8:ba:1c:d5:ec:d4:3c:2c:
                    f0:29:c7:9f:94:5d:a6:79:8a:55:de:bc:3d:af:de:
                    6d:32:29:dc:ea:2b:1f:39:e8:75:32:81:a5:bb:e8:
                    7d:f2:51:6d:fd:41:24:03:f0:d8:66:53:64:35:4e:
                    67:69:04:85:14:39:72:8b:9f:85:12:d4:8a:85:65:
                    e0:f3:0a:a1:d9:5a:41:4c:47:24:57:d5:6c:fe:67:
                    1f:86:4d:af:00:39:4a:10:1f:f3:4f:f8:93:40:db:
                    3a:0e:22:15:98:7b:68:ad:09:ce:55:f2:49:e5:8d:
                    e3:60:16:19:2d:4d:44:9e:2d:cc:44:40:17:5d:69:
                    bd:cf:bb:b9:8a:6e:da:dd:ef:25:b0:f7:8f:fb:ac:
                    4c:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:4D:87:31:A9:4F:B4:C8:F8:F8:43:34:16:F4:5D:E0:83:C2:75:89
            X509v3 Authority Key Identifier:
                keyid:0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e36362e302f32342d3234203d3e203238303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.234.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:88:c0:5e:9a:bb:33:22:2f:85:01:d4:1b:8f:78:d9:fb:7e:
         ce:8a:d4:2a:8a:78:91:de:ed:ae:67:51:8b:12:22:54:f3:6e:
         90:3f:9b:19:a7:e6:af:53:ab:91:1e:2e:fb:7b:fe:b0:30:ce:
         81:5e:a1:0e:27:d5:a6:8d:5b:ca:c9:cb:b8:2d:b9:f9:5f:1f:
         7e:85:59:d0:c3:b7:cc:a6:35:f4:ee:7f:34:70:86:57:17:be:
         2c:ff:d0:d5:7f:ad:f3:68:58:88:08:45:5b:c5:45:ac:f3:3c:
         9c:de:da:96:35:bf:c5:bd:5c:50:f6:c1:62:d5:ee:a1:83:66:
         0a:94:9a:73:d8:84:77:8b:17:42:ba:48:92:28:02:ae:fd:20:
         d5:16:54:fd:ad:4d:b8:65:ce:18:a5:d0:56:62:7b:41:4d:4b:
         58:fb:b7:24:19:9f:ae:e4:bd:7c:60:bf:c1:5e:95:e7:96:fa:
         42:9b:a2:7f:ef:db:2c:45:7a:af:45:d4:22:81:ad:52:6f:33:
         85:b0:2a:63:ba:c8:84:11:67:74:db:fd:bd:26:dc:1c:b8:17:
         6a:f8:88:c8:80:1b:22:1a:47:bf:1e:43:08:77:39:d9:8d:ed:
         6d:11:34:40:e9:de:bb:0b:e5:3f:64:76:38:2b:9d:d4:a9:52:
         e4:a4:27:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:18:02 2025 by rpki-client