Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7723525693CA5EFAE411F74287CC84D32C6F508D91EFBB8BDE3F9B6ABEBDF445/0/3136382e3230352e3139392e302f32342d3234203d3e20323732383135.roa
File:                     3136382e3230352e3139392e302f32342d3234203d3e20323732383135.roa (raw, json)
Hash identifier:          KNeCUQteX1n8YsbBwJ9qrVf5Hg7bEjzdgALBfa6C9RY=
Subject key identifier:   B2:04:23:38:99:6C:03:EF:C1:33:AB:8A:68:85:1A:23:7B:FB:5C:59
Certificate issuer:       /CN=9BBDE3D30F759E5C970265DEB89E394FDC96E147
Certificate serial:       328FA42DA5A3AADBC4235E41E7D347B272E9F0D9
Authority key identifier: 9B:BD:E3:D3:0F:75:9E:5C:97:02:65:DE:B8:9E:39:4F:DC:96:E1:47
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BBDE3D30F759E5C970265DEB89E394FDC96E147.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7723525693CA5EFAE411F74287CC84D32C6F508D91EFBB8BDE3F9B6ABEBDF445/0/3136382e3230352e3139392e302f32342d3234203d3e20323732383135.roa
Signing time:             Tue 14 Jul 2026 13:30:00 +0000
ROA not before:           Tue 14 Jul 2026 13:25:00 +0000
ROA not after:            Tue 13 Jul 2027 13:30:00 +0000
asID:                     272815
IP address blocks:        168.205.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7723525693CA5EFAE411F74287CC84D32C6F508D91EFBB8BDE3F9B6ABEBDF445/0/9BBDE3D30F759E5C970265DEB89E394FDC96E147.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7723525693CA5EFAE411F74287CC84D32C6F508D91EFBB8BDE3F9B6ABEBDF445/0/9BBDE3D30F759E5C970265DEB89E394FDC96E147.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BBDE3D30F759E5C970265DEB89E394FDC96E147.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:8f:a4:2d:a5:a3:aa:db:c4:23:5e:41:e7:d3:47:b2:72:e9:f0:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BBDE3D30F759E5C970265DEB89E394FDC96E147
        Validity
            Not Before: Jul 14 13:25:00 2026 GMT
            Not After : Jul 13 13:30:00 2027 GMT
        Subject: CN=B2042338996C03EFC133AB8A68851A237BFB5C59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ac:73:a5:2f:6f:96:13:53:e7:fd:c3:8c:ef:
                    e5:65:1b:82:67:68:a6:b2:a4:b7:82:51:13:2d:03:
                    36:60:79:19:8d:ba:f7:40:16:6a:09:ae:ca:f6:1c:
                    9f:07:cc:77:22:a2:bb:fd:02:bc:e5:58:18:c8:a7:
                    09:37:ee:2b:d2:a0:73:98:f3:88:d8:34:bc:d9:fd:
                    e0:50:b1:f5:37:76:77:40:94:41:e3:18:20:02:07:
                    e7:65:db:d9:98:c7:73:01:52:53:79:92:cd:b3:e4:
                    e6:b2:3f:96:2c:ea:5a:2a:93:8c:9e:43:0d:46:52:
                    ee:53:e2:6e:bf:85:fa:35:e1:a4:39:91:f1:57:41:
                    f0:d3:01:37:a7:b4:f2:23:9c:e0:95:ec:eb:03:7e:
                    8d:7c:13:35:40:7c:5d:b4:19:f4:98:fb:22:41:e4:
                    95:1d:2e:86:ae:4e:0e:00:68:86:28:e7:b0:01:19:
                    88:44:4f:54:40:6c:66:10:f0:83:ff:4b:4d:da:60:
                    e1:22:f5:8c:0e:0c:a0:d9:99:71:c2:55:39:2f:dd:
                    db:3b:41:0c:95:ea:51:7a:ac:7e:17:43:7d:4f:60:
                    80:43:89:56:c6:ae:8e:7b:27:4f:c1:ed:ec:51:41:
                    f1:57:c0:c3:14:cf:be:64:f1:b1:8e:a6:1e:9d:b6:
                    0d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:04:23:38:99:6C:03:EF:C1:33:AB:8A:68:85:1A:23:7B:FB:5C:59
            X509v3 Authority Key Identifier:
                keyid:9B:BD:E3:D3:0F:75:9E:5C:97:02:65:DE:B8:9E:39:4F:DC:96:E1:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7723525693CA5EFAE411F74287CC84D32C6F508D91EFBB8BDE3F9B6ABEBDF445/0/9BBDE3D30F759E5C970265DEB89E394FDC96E147.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BBDE3D30F759E5C970265DEB89E394FDC96E147.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7723525693CA5EFAE411F74287CC84D32C6F508D91EFBB8BDE3F9B6ABEBDF445/0/3136382e3230352e3139392e302f32342d3234203d3e20323732383135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:18:0e:81:83:13:df:68:de:75:4a:66:83:13:a4:b9:21:e1:
         a6:13:bd:67:4f:f3:71:26:f6:6d:7d:05:d0:88:93:ff:02:b2:
         88:b0:5f:9d:ff:a4:f7:a4:e5:77:21:6d:72:8b:40:ea:94:ad:
         61:a2:ba:f8:17:62:d2:51:09:b2:80:16:70:da:81:2f:c5:80:
         3b:3d:5e:c2:3d:37:21:2b:93:8d:02:23:fc:91:0e:37:6c:a9:
         99:68:f7:b9:a8:14:32:7b:70:ba:c2:76:2d:9c:0a:c5:85:7d:
         de:a9:1e:02:2a:77:c7:c4:fb:98:66:99:a4:56:00:e4:11:05:
         e6:13:d7:b6:bc:b7:9a:8a:0d:b8:9c:c3:56:fb:c5:51:6e:b3:
         10:dd:0b:45:6c:39:91:45:ea:36:c1:11:92:be:f0:6d:1c:18:
         ad:ae:31:4e:cf:05:5e:8e:17:69:f3:96:60:21:b4:29:e4:41:
         d8:a0:28:a7:9d:39:9b:95:db:cf:9d:34:bc:aa:34:4a:59:f3:
         c1:fc:5d:a9:41:16:7e:17:fb:8a:71:5a:cc:b8:d7:23:b4:35:
         ca:17:8c:69:58:ab:3c:e5:a9:af:27:d0:c1:63:82:cd:82:76:
         c5:39:ce:e2:ac:18:62:73:3a:07:d9:cc:43:16:a1:36:bb:c2:
         72:78:3e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:45:25 2026 by rpki-client