Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/91C2D064366F8DDC97479572A0F6F27DBE6D727577953757876088A7B0D537AF/0/3136382e3139362e3131322e302f32322d3234203d3e20323634373637.roa
File:                     3136382e3139362e3131322e302f32322d3234203d3e20323634373637.roa (raw, json)
Hash identifier:          h098zC+jmAZ4bz8Yk+jaIOdKYakJ35yGqybtBvh5zfw=
Subject key identifier:   46:E9:A0:35:4B:AE:6E:77:4A:30:EB:93:AA:1B:B6:97:BD:51:F0:33
Certificate issuer:       /CN=DAF4891978146B0CD7A7F84B2A82824830B88416
Certificate serial:       01F714412164347C95AAE56D987DCC43101FEF66
Authority key identifier: DA:F4:89:19:78:14:6B:0C:D7:A7:F8:4B:2A:82:82:48:30:B8:84:16
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DAF4891978146B0CD7A7F84B2A82824830B88416.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/91C2D064366F8DDC97479572A0F6F27DBE6D727577953757876088A7B0D537AF/0/3136382e3139362e3131322e302f32322d3234203d3e20323634373637.roa
Signing time:             Tue 19 Aug 2025 22:40:19 +0000
ROA not before:           Tue 19 Aug 2025 22:35:19 +0000
ROA not after:            Tue 18 Aug 2026 22:40:19 +0000
asID:                     264767
IP address blocks:        168.196.112.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/91C2D064366F8DDC97479572A0F6F27DBE6D727577953757876088A7B0D537AF/0/DAF4891978146B0CD7A7F84B2A82824830B88416.crl
                          rsync://repository.lacnic.net/rpki/lacnic/91C2D064366F8DDC97479572A0F6F27DBE6D727577953757876088A7B0D537AF/0/DAF4891978146B0CD7A7F84B2A82824830B88416.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DAF4891978146B0CD7A7F84B2A82824830B88416.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 05:02:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:f7:14:41:21:64:34:7c:95:aa:e5:6d:98:7d:cc:43:10:1f:ef:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DAF4891978146B0CD7A7F84B2A82824830B88416
        Validity
            Not Before: Aug 19 22:35:19 2025 GMT
            Not After : Aug 18 22:40:19 2026 GMT
        Subject: CN=46E9A0354BAE6E774A30EB93AA1BB697BD51F033
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:07:f5:fa:cd:89:4f:eb:a4:9e:21:07:2f:5c:
                    49:7c:79:03:df:fc:64:0b:14:94:8b:03:36:df:c7:
                    7c:b8:28:97:8b:b2:f4:90:de:5a:a5:25:d8:20:bd:
                    fb:35:70:7b:45:5a:c6:b0:1f:65:c3:e0:60:d0:76:
                    a0:3b:7d:fb:fa:d6:d4:03:5e:ed:2c:69:8f:56:dc:
                    f6:38:7f:13:2d:a2:e7:eb:31:2f:d0:52:9c:98:af:
                    9a:1a:a5:6b:b6:04:4f:70:65:50:e6:63:17:a6:9d:
                    c3:aa:69:bf:3d:3e:f1:78:86:22:1a:0d:95:d5:4d:
                    0a:67:80:92:73:b4:5e:4c:76:67:fc:90:35:aa:ce:
                    18:a2:35:ea:1d:6c:ec:c5:ab:60:e4:0a:c1:84:85:
                    35:a5:94:4d:60:07:91:b8:1e:78:b9:23:ed:90:b4:
                    66:f2:42:32:d5:1c:ca:bc:f1:7b:45:49:82:2f:3e:
                    f5:43:7f:b9:c7:c5:51:9d:69:8a:0f:b9:16:ab:7b:
                    6a:91:d0:dd:a1:ec:ff:8c:27:37:e8:89:14:c9:ed:
                    a2:3c:76:a4:c9:2c:bd:fb:2e:4e:9d:98:1a:52:74:
                    43:f1:ee:72:1e:da:dc:57:98:52:15:06:dc:7c:cc:
                    c7:30:89:bd:3f:0c:d4:a0:79:0f:af:82:d0:76:80:
                    d0:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:E9:A0:35:4B:AE:6E:77:4A:30:EB:93:AA:1B:B6:97:BD:51:F0:33
            X509v3 Authority Key Identifier:
                keyid:DA:F4:89:19:78:14:6B:0C:D7:A7:F8:4B:2A:82:82:48:30:B8:84:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/91C2D064366F8DDC97479572A0F6F27DBE6D727577953757876088A7B0D537AF/0/DAF4891978146B0CD7A7F84B2A82824830B88416.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DAF4891978146B0CD7A7F84B2A82824830B88416.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/91C2D064366F8DDC97479572A0F6F27DBE6D727577953757876088A7B0D537AF/0/3136382e3139362e3131322e302f32322d3234203d3e20323634373637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:39:66:26:90:04:a9:b3:02:00:14:f2:ea:99:a5:ab:ba:23:
         84:6c:a9:ac:36:16:b2:64:3e:48:58:b2:45:93:f2:98:8d:1d:
         6c:ab:22:7e:94:e6:5c:66:75:bd:9b:8f:1d:e0:74:4e:b0:10:
         21:64:0e:e8:78:b2:ba:82:0d:c5:b3:25:46:61:0d:27:65:42:
         72:14:ce:ba:39:33:6d:d7:05:9e:5b:07:14:91:dc:48:c6:b5:
         27:35:14:a5:ee:7e:d8:90:9d:87:c9:7d:5d:50:1f:db:86:8b:
         4e:87:3f:fc:56:34:ad:b4:cf:02:03:cd:14:06:2c:b3:ae:71:
         2d:d1:5e:c9:c1:40:ae:7f:f5:d5:18:d9:dc:1f:d7:b5:52:8b:
         41:18:39:51:5c:09:f9:fe:7a:55:4b:cb:a7:19:93:1b:d4:7c:
         fc:df:cb:15:f7:a2:a1:a4:f4:16:7c:e9:ac:5d:b3:97:1c:58:
         8a:80:76:5a:1a:46:a2:5a:7a:b8:c1:1f:2b:fd:57:b4:af:e7:
         25:fa:9d:8a:fd:d9:16:d4:54:ff:7d:27:c7:36:76:6c:8f:a4:
         df:4c:dd:38:76:87:3d:d0:21:b8:ca:78:ac:c6:4d:05:c1:ce:
         e4:c8:80:16:2e:75:af:aa:1e:96:53:b9:16:7f:7e:0a:5d:85:
         e6:f2:31:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:51:23 2025 by rpki-client