Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/3136382e3137362e3132382e302f32302d3234203d3e203532343638.roa
File:                     3136382e3137362e3132382e302f32302d3234203d3e203532343638.roa (raw, json)
Hash identifier:          K50XccqAU3qsyIpXt3efvBVQ9jTwhE4AKUDP6LR/JP0=
Subject key identifier:   F1:21:EB:36:A9:A2:48:63:52:3D:39:42:F7:68:7F:00:B3:5D:BD:EB
Certificate issuer:       /CN=D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C
Certificate serial:       38D0D3CEF3A9DCF2B75F2846F3F0CFF44C232579
Authority key identifier: D8:0F:DA:40:F8:BB:5C:A1:A7:B1:74:DA:0A:7B:37:6F:BD:FD:CB:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/3136382e3137362e3132382e302f32302d3234203d3e203532343638.roa
Signing time:             Thu 24 Sep 2026 13:00:03 +0000
ROA not before:           Thu 24 Sep 2026 12:55:03 +0000
ROA not after:            Thu 23 Sep 2027 13:00:03 +0000
asID:                     52468
IP address blocks:        168.176.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 Oct 2026 18:27:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:d0:d3:ce:f3:a9:dc:f2:b7:5f:28:46:f3:f0:cf:f4:4c:23:25:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C
        Validity
            Not Before: Sep 24 12:55:03 2026 GMT
            Not After : Sep 23 13:00:03 2027 GMT
        Subject: CN=F121EB36A9A24863523D3942F7687F00B35DBDEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:08:49:ec:1a:9f:8d:8c:62:7b:3c:85:69:c1:
                    26:7f:57:b5:7f:f0:4c:50:19:98:5c:e8:cc:64:99:
                    4b:a3:46:80:7a:ff:45:8e:09:4c:53:8a:26:03:5f:
                    86:64:96:69:02:23:87:61:79:8b:4b:d3:7b:50:dd:
                    41:6a:33:59:04:07:98:47:70:88:2a:ba:f0:d5:ab:
                    53:44:f2:5e:32:5f:0c:e7:43:ac:eb:bc:91:4e:ba:
                    c7:c8:c6:f8:f2:66:e9:6f:a3:a9:65:e4:96:6e:8a:
                    94:0d:f4:7b:6e:cb:f2:ab:0a:37:38:ef:18:91:cd:
                    13:b8:7f:50:ca:e8:d2:98:ed:98:15:dd:0d:cd:c9:
                    ac:8e:1d:49:7c:ec:ea:22:94:58:4a:67:09:90:fe:
                    e7:04:73:5e:38:10:e7:85:b6:69:ce:a7:f3:87:35:
                    b7:df:c4:33:14:24:ff:d6:9d:10:de:d1:87:46:73:
                    80:20:47:60:cb:3c:e1:d6:95:6f:68:06:1d:b4:a9:
                    da:28:de:09:2e:ff:d7:1e:d0:9d:89:51:c2:c4:10:
                    7d:c7:fa:c3:a3:0f:39:86:fb:12:75:54:57:d7:06:
                    ee:86:56:6c:23:3d:c9:6d:2a:63:bd:19:7d:83:9e:
                    60:3f:4a:f5:ab:82:cf:4d:f9:cb:01:3e:f3:49:34:
                    15:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:21:EB:36:A9:A2:48:63:52:3D:39:42:F7:68:7F:00:B3:5D:BD:EB
            X509v3 Authority Key Identifier:
                keyid:D8:0F:DA:40:F8:BB:5C:A1:A7:B1:74:DA:0A:7B:37:6F:BD:FD:CB:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/3136382e3137362e3132382e302f32302d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.176.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6e:29:29:91:76:c2:9d:11:66:c7:da:ae:90:df:d2:a6:62:82:
         f6:09:67:f6:6c:17:a2:db:b8:85:fc:b0:1a:01:40:c8:97:b7:
         db:e7:c9:d6:de:4c:1e:dc:cb:2b:68:56:4a:16:e8:40:40:a8:
         04:d9:cc:af:66:66:65:a2:f5:af:e1:4d:f6:48:f5:60:9f:a4:
         28:b4:fd:57:b6:0c:6a:f1:a6:ca:97:7f:a1:53:ee:44:84:b6:
         91:0e:5c:c1:14:27:94:a1:e0:da:d2:2a:08:43:28:bc:49:2c:
         93:3d:72:88:49:c0:5b:1d:6e:c3:0e:6f:c3:29:64:a0:b6:08:
         8d:46:b4:1e:79:05:83:4c:52:69:8b:cf:80:71:de:6d:9d:73:
         e4:b0:ad:c7:0b:36:a0:17:a8:4e:22:6f:28:96:4b:57:44:fa:
         e7:8e:57:a8:be:e4:c2:46:f3:b4:fc:e5:21:03:5c:94:a2:57:
         14:17:79:29:c4:4d:5b:87:f6:d5:29:67:1c:19:7c:e6:2e:7a:
         3e:7f:e5:c4:75:fd:22:f5:09:29:0e:17:02:f0:9d:71:4f:0f:
         90:6b:70:88:e7:48:ad:b0:d7:3d:8f:49:1e:7f:41:cd:f6:bd:
         64:dd:e8:86:a0:92:d8:d1:26:e2:9f:70:4a:ea:05:92:e3:6d:
         7b:8a:ea:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 07:20:55 2026 by rpki-client