Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/3136382e3137362e3134342e302f32302d3234203d3e203138373437.roa
File:                     3136382e3137362e3134342e302f32302d3234203d3e203138373437.roa (raw, json)
Hash identifier:          2r9LHNkN/ZhfMD1YEpu5zHsQzBuCjDe7ITZftfSlLJo=
Subject key identifier:   04:AE:EB:98:E1:DD:E3:9F:35:D6:9A:63:32:3E:3E:03:63:A3:65:32
Certificate issuer:       /CN=D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C
Certificate serial:       46B9F986B3F7508BC5D391D750B9D87F4ADA3FB9
Authority key identifier: D8:0F:DA:40:F8:BB:5C:A1:A7:B1:74:DA:0A:7B:37:6F:BD:FD:CB:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/3136382e3137362e3134342e302f32302d3234203d3e203138373437.roa
Signing time:             Thu 24 Sep 2026 13:00:03 +0000
ROA not before:           Thu 24 Sep 2026 12:55:03 +0000
ROA not after:            Thu 23 Sep 2027 13:00:03 +0000
asID:                     18747
IP address blocks:        168.176.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 Oct 2026 18:27:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:b9:f9:86:b3:f7:50:8b:c5:d3:91:d7:50:b9:d8:7f:4a:da:3f:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C
        Validity
            Not Before: Sep 24 12:55:03 2026 GMT
            Not After : Sep 23 13:00:03 2027 GMT
        Subject: CN=04AEEB98E1DDE39F35D69A63323E3E0363A36532
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:02:6d:18:5c:b2:a2:48:e5:fa:88:a0:67:c2:
                    e9:e7:f8:fd:db:da:3f:59:e8:44:81:1f:9c:fb:f5:
                    e8:32:99:ea:96:61:c9:77:b3:40:67:be:9f:16:fa:
                    bf:8b:d4:37:c5:c8:5a:d5:f0:c5:2b:ed:03:88:22:
                    50:4f:8d:cd:f6:96:f6:0f:9c:7d:0d:d7:fa:32:19:
                    60:ca:3e:c2:d2:ac:e8:a0:63:da:25:d8:29:aa:2a:
                    2f:16:3b:15:da:c4:b5:38:39:c3:e7:ce:8a:97:8e:
                    14:22:3d:aa:5a:42:b2:c0:97:c1:63:9e:c9:64:53:
                    08:a0:db:60:4a:a9:86:6d:ad:2e:bc:ad:37:b1:b3:
                    df:6f:f5:71:aa:ed:d9:41:c0:b0:7b:a4:8d:cf:15:
                    12:f6:ac:6f:f5:e9:7d:7d:14:e5:73:af:6c:29:62:
                    92:f5:7c:c3:48:8c:e6:5a:51:a9:f9:b0:e3:cb:20:
                    1e:80:cf:1e:87:8b:23:8d:94:00:b2:c6:5f:1b:89:
                    bd:91:7e:2c:b4:6d:c7:42:fb:da:2e:b2:4b:d0:a6:
                    77:45:81:4b:6b:16:37:6b:37:80:8d:98:d4:4b:2a:
                    26:24:4e:1b:d9:13:8a:48:4b:82:10:07:6c:2f:c8:
                    d1:f4:11:3e:48:81:50:db:80:3b:6a:c4:ad:e8:57:
                    de:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:AE:EB:98:E1:DD:E3:9F:35:D6:9A:63:32:3E:3E:03:63:A3:65:32
            X509v3 Authority Key Identifier:
                keyid:D8:0F:DA:40:F8:BB:5C:A1:A7:B1:74:DA:0A:7B:37:6F:BD:FD:CB:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/3136382e3137362e3134342e302f32302d3234203d3e203138373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.176.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         be:6c:a1:95:50:6d:89:a7:fe:88:20:da:77:b1:7a:ee:0b:84:
         5d:d1:7a:64:14:e3:42:82:6d:a1:34:f7:ab:cc:c2:ac:c6:fe:
         13:75:1f:ac:4e:26:de:71:fd:32:1f:2b:15:e5:3f:09:2a:21:
         67:ee:a6:7f:d9:bb:88:88:1e:7a:6a:b3:32:6b:d4:14:6c:e4:
         4e:72:8f:6e:2f:e4:63:85:63:98:27:1a:c6:d0:bd:67:60:8f:
         f6:2e:02:92:9b:31:4e:f0:a6:58:70:35:02:ba:07:29:f8:7f:
         c4:60:3e:20:bf:21:31:e1:0a:b7:97:7c:d3:88:ce:72:0a:cc:
         f0:eb:25:02:1b:92:cf:82:af:fe:5a:fb:69:ca:ff:7e:c9:af:
         eb:7c:0c:5f:ce:06:76:ee:e7:ed:91:69:75:88:f6:af:7f:ae:
         f3:41:58:e3:e2:3c:e1:19:de:6c:96:39:18:a7:41:98:33:24:
         ca:5b:7b:36:d6:fb:22:a6:2e:17:f8:ea:19:00:40:dd:77:9e:
         b0:3c:5c:2c:fd:52:04:9d:7f:c8:ab:05:63:d6:17:5a:5e:c2:
         e6:bf:a4:5c:c9:80:c6:4d:51:56:29:fa:77:33:f5:41:41:74:
         e7:06:83:08:c8:d5:cb:e1:05:5f:54:77:e8:8a:8a:46:4c:9b:
         3a:e8:04:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 05:58:03 2026 by rpki-client