Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3136372e3234392e3131362e302f32322d3234203d3e203332303938.roa
File:                     3136372e3234392e3131362e302f32322d3234203d3e203332303938.roa (raw, json)
Hash identifier:          VSiy9FApeAuBdUuK8SM+Zw92quUSX0+itVsgGDQm5vI=
Subject key identifier:   E3:96:5C:17:A5:46:B7:3F:B8:B2:74:61:2D:80:7B:A4:31:85:9F:F5
Certificate issuer:       /CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
Certificate serial:       460FE0D79DE23201AB9A2C6DC1F0AA4F0AB75D09
Authority key identifier: 0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3136372e3234392e3131362e302f32322d3234203d3e203332303938.roa
Signing time:             Thu 24 Sep 2026 05:55:01 +0000
ROA not before:           Thu 24 Sep 2026 05:50:01 +0000
ROA not after:            Thu 23 Sep 2027 05:55:01 +0000
asID:                     32098
IP address blocks:        167.249.116.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl
                          rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 03:48:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:0f:e0:d7:9d:e2:32:01:ab:9a:2c:6d:c1:f0:aa:4f:0a:b7:5d:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
        Validity
            Not Before: Sep 24 05:50:01 2026 GMT
            Not After : Sep 23 05:55:01 2027 GMT
        Subject: CN=E3965C17A546B73FB8B274612D807BA431859FF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:14:fd:28:89:83:7b:bb:77:e7:ac:a2:dd:4e:
                    22:4d:2f:5a:a2:74:00:e9:39:d9:17:ed:48:9e:d9:
                    01:ae:4e:c0:ba:ad:13:32:8d:63:de:4e:79:d6:6a:
                    dc:15:dd:e8:1b:80:cd:56:ec:36:bc:6f:7b:06:91:
                    d5:0a:6d:ef:31:f6:7a:1a:db:0e:e1:a6:f6:b8:22:
                    1c:42:df:d7:96:a0:e5:c5:8c:74:7f:96:25:c2:c5:
                    e2:5c:fa:a7:5e:19:4c:74:e4:db:27:b2:8f:01:03:
                    08:11:a9:db:e6:b3:b3:43:84:63:ef:67:38:e9:d2:
                    bb:9c:f5:8b:e9:f4:33:c9:32:d5:3d:ea:68:93:d2:
                    fe:94:d9:ea:a0:66:2a:e3:41:08:cc:34:e0:02:af:
                    2e:cf:22:57:25:01:51:45:6e:b3:40:85:37:a9:83:
                    de:7f:e3:5e:7c:de:ea:60:a2:a7:17:45:e3:59:55:
                    a3:d0:89:c1:db:69:d8:6f:7c:e5:47:6f:74:fa:bb:
                    c4:91:eb:7e:e6:92:b3:41:c9:02:fb:8d:a5:a3:31:
                    f0:bc:eb:39:e5:36:51:8b:b9:82:7e:58:9c:77:42:
                    34:e3:20:4a:24:0e:8a:92:fe:51:e5:c2:d5:08:7f:
                    67:79:38:1e:15:b1:50:4b:5f:d0:ab:87:be:21:19:
                    49:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:96:5C:17:A5:46:B7:3F:B8:B2:74:61:2D:80:7B:A4:31:85:9F:F5
            X509v3 Authority Key Identifier:
                keyid:0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3136372e3234392e3131362e302f32322d3234203d3e203332303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:05:36:11:b0:3e:38:63:9a:41:7a:f8:84:c1:a3:4e:06:65:
         d5:09:a8:3e:2c:7b:93:5c:fa:50:87:27:39:d6:d9:94:5e:58:
         31:93:bd:41:8b:ee:8e:cf:a7:67:d3:c3:91:95:2d:a2:14:0d:
         06:ca:e2:48:e6:ae:4e:1d:f1:16:f7:2a:f1:68:99:85:9a:57:
         39:e7:88:ea:fc:4d:8d:a9:2d:49:0d:7f:2e:40:0c:a6:5f:09:
         38:d5:30:3f:28:2e:f2:05:c2:67:1c:96:28:3e:4c:50:3d:bc:
         f4:71:f8:87:cc:26:e9:31:1d:91:d2:dc:99:a4:0e:67:f3:f1:
         b7:ef:59:cb:f2:02:a6:73:25:53:50:85:82:d6:53:e5:68:12:
         5c:62:69:8f:fc:cf:07:94:04:9f:5e:ed:26:a9:48:1b:3a:40:
         5d:5e:49:c4:18:1f:61:d7:d1:35:76:f1:f7:f2:5a:af:8e:7b:
         7d:8b:cf:63:37:66:02:1b:41:6a:08:8d:8f:96:95:dc:71:55:
         f8:42:16:ab:0f:76:d5:e0:f3:20:15:fc:e6:dd:99:9b:09:e3:
         05:d3:2a:c1:ba:22:3c:b3:b3:20:95:9c:56:e7:57:45:54:f0:
         5a:16:0a:4d:06:b2:16:bf:ee:2f:70:a6:98:0b:50:d2:86:dd:
         9e:d7:fe:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:10:52 2026 by rpki-client