Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4ED6EB0CD247E17FF0A8DCE6B46C64555E8B6E899F5580B5E4C02BE5DC9F96EF/0/3136382e3139362e3234312e302f32342d3234203d3e20323633373434.roa
File:                     3136382e3139362e3234312e302f32342d3234203d3e20323633373434.roa (raw, json)
Hash identifier:          1ad3vmfmOWd2TgBZlgJVTrb37asPf6VXaylMjdIPPnU=
Subject key identifier:   AC:8E:27:9D:6A:85:73:B6:89:14:C3:D3:39:24:16:04:D6:A6:CF:1B
Certificate issuer:       /CN=DB11B7707911064B45F88A13AD77795D0BCE5CC6
Certificate serial:       1ADACC4A573F7DCD25FC462DBD6311F453E01386
Authority key identifier: DB:11:B7:70:79:11:06:4B:45:F8:8A:13:AD:77:79:5D:0B:CE:5C:C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB11B7707911064B45F88A13AD77795D0BCE5CC6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4ED6EB0CD247E17FF0A8DCE6B46C64555E8B6E899F5580B5E4C02BE5DC9F96EF/0/3136382e3139362e3234312e302f32342d3234203d3e20323633373434.roa
Signing time:             Wed 01 Oct 2025 14:49:17 +0000
ROA not before:           Wed 01 Oct 2025 14:44:17 +0000
ROA not after:            Wed 30 Sep 2026 14:49:17 +0000
asID:                     263744
IP address blocks:        168.196.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4ED6EB0CD247E17FF0A8DCE6B46C64555E8B6E899F5580B5E4C02BE5DC9F96EF/0/DB11B7707911064B45F88A13AD77795D0BCE5CC6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4ED6EB0CD247E17FF0A8DCE6B46C64555E8B6E899F5580B5E4C02BE5DC9F96EF/0/DB11B7707911064B45F88A13AD77795D0BCE5CC6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB11B7707911064B45F88A13AD77795D0BCE5CC6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:da:cc:4a:57:3f:7d:cd:25:fc:46:2d:bd:63:11:f4:53:e0:13:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB11B7707911064B45F88A13AD77795D0BCE5CC6
        Validity
            Not Before: Oct  1 14:44:17 2025 GMT
            Not After : Sep 30 14:49:17 2026 GMT
        Subject: CN=AC8E279D6A8573B68914C3D339241604D6A6CF1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ee:84:5d:d3:24:34:83:44:a8:d7:af:4f:c0:
                    3a:36:3d:78:f6:3b:fc:1b:d6:ff:91:54:10:2a:21:
                    c1:28:77:3f:33:aa:01:3e:d6:68:43:03:e9:5d:22:
                    fa:18:3b:66:53:69:11:c0:1b:cb:55:2d:64:78:0f:
                    5d:b2:38:6c:4e:2a:21:b6:9b:45:ed:38:cb:b9:c4:
                    df:41:22:83:05:f9:a3:b8:02:b1:be:db:44:73:c6:
                    10:cb:b5:33:03:ee:dd:85:8a:4d:5d:d7:4a:ae:13:
                    ce:c2:93:34:80:72:4f:ea:6f:98:6f:be:54:04:35:
                    4c:be:c9:f1:6d:80:5e:1d:47:ed:fe:e6:db:ec:b6:
                    4f:2e:ce:3c:7d:8b:3e:80:4f:a2:3f:87:97:f6:96:
                    b8:3a:e7:0c:c8:24:e8:f4:96:22:4a:13:ce:38:80:
                    f4:82:dd:f0:1f:26:dd:c3:0a:52:3e:6b:97:82:67:
                    47:91:35:ad:3d:d2:22:5d:b6:3f:6c:00:4e:13:ed:
                    e5:ae:16:bf:b6:ab:1a:b8:2c:a7:f1:9a:e6:54:c1:
                    4d:5a:07:ee:31:0d:8c:cb:89:7b:1e:9f:23:ab:43:
                    0c:e6:f8:e8:81:7b:a7:d0:a5:a4:9c:f1:37:90:91:
                    e2:7e:a3:e9:4f:10:71:e7:66:90:aa:b6:b4:10:71:
                    07:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:8E:27:9D:6A:85:73:B6:89:14:C3:D3:39:24:16:04:D6:A6:CF:1B
            X509v3 Authority Key Identifier:
                keyid:DB:11:B7:70:79:11:06:4B:45:F8:8A:13:AD:77:79:5D:0B:CE:5C:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4ED6EB0CD247E17FF0A8DCE6B46C64555E8B6E899F5580B5E4C02BE5DC9F96EF/0/DB11B7707911064B45F88A13AD77795D0BCE5CC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB11B7707911064B45F88A13AD77795D0BCE5CC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4ED6EB0CD247E17FF0A8DCE6B46C64555E8B6E899F5580B5E4C02BE5DC9F96EF/0/3136382e3139362e3234312e302f32342d3234203d3e20323633373434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:f2:d7:da:1e:c0:44:0c:ad:86:30:14:a8:5f:a3:06:b6:44:
         15:0e:46:d7:d3:17:0e:38:e7:c0:88:c0:49:2c:5b:5a:27:7d:
         62:68:8c:4f:08:cc:7f:36:33:2f:ba:11:09:1f:c0:23:64:a8:
         a5:47:3c:ae:30:6c:33:0c:69:e1:5e:8a:74:ce:1d:83:bc:fc:
         7e:01:8f:f8:fc:39:4f:c4:5b:52:55:61:5c:53:fc:55:a0:bb:
         d9:56:6d:36:45:1b:2f:5a:71:14:67:c5:5f:33:18:32:67:45:
         8f:c9:9c:f3:03:cd:59:c1:27:f9:a9:d8:46:d7:93:6b:fe:3a:
         08:37:f5:34:d2:b5:b1:ae:9f:48:21:d3:b5:dd:d6:85:00:66:
         21:ae:fc:fa:86:f1:e9:89:35:97:41:e9:d3:4f:31:fc:6a:f4:
         66:f7:5b:7e:9e:4b:52:b6:e3:4e:db:5c:b0:6c:b4:3c:4a:e8:
         15:c7:70:df:a5:1d:42:bc:c1:b9:fe:3c:db:2d:8f:e6:21:32:
         78:1a:9e:28:b5:64:9b:e6:66:c5:0a:76:b8:d7:09:d0:26:e6:
         53:b5:37:03:06:97:b1:91:aa:b1:12:03:94:9f:d2:a8:20:30:
         a1:cf:2e:dd:0f:1e:17:d8:3c:64:b8:f8:f9:51:94:0a:1b:15:
         c8:37:c2:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:30:40 2025 by rpki-client