Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/3136382e3137362e3138342e302f32312d3234203d3e203138373437.roa
File:                     3136382e3137362e3138342e302f32312d3234203d3e203138373437.roa (raw, json)
Hash identifier:          DLXMH+CSamWaJvbPIwxclEAO8ljI++bHvOYbPf/b5xg=
Subject key identifier:   D2:2B:41:F5:7C:02:BE:47:03:2E:78:A4:E6:A5:E3:EC:EE:26:75:80
Certificate issuer:       /CN=D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C
Certificate serial:       3889BEE0E15E86453BA6DA9EE2B110F65384B0CA
Authority key identifier: D8:0F:DA:40:F8:BB:5C:A1:A7:B1:74:DA:0A:7B:37:6F:BD:FD:CB:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/3136382e3137362e3138342e302f32312d3234203d3e203138373437.roa
Signing time:             Thu 24 Sep 2026 13:00:03 +0000
ROA not before:           Thu 24 Sep 2026 12:55:03 +0000
ROA not after:            Thu 23 Sep 2027 13:00:03 +0000
asID:                     18747
IP address blocks:        168.176.184.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 02:58:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:89:be:e0:e1:5e:86:45:3b:a6:da:9e:e2:b1:10:f6:53:84:b0:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C
        Validity
            Not Before: Sep 24 12:55:03 2026 GMT
            Not After : Sep 23 13:00:03 2027 GMT
        Subject: CN=D22B41F57C02BE47032E78A4E6A5E3ECEE267580
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:0c:c5:3d:62:1a:cb:cb:b8:90:03:d9:8a:f1:
                    83:3c:99:b1:64:df:f0:a9:27:55:f0:34:0e:17:85:
                    cb:5e:bc:a3:18:3d:77:ff:6e:02:fc:7b:80:fd:cb:
                    03:72:3f:4e:71:63:28:75:e6:c0:79:c5:3f:8e:96:
                    78:9e:74:90:cb:7a:73:15:dc:72:1b:c5:8c:a1:85:
                    50:77:71:e3:b5:50:b4:b8:1f:c6:2a:ad:1f:2f:52:
                    18:4b:fa:85:3a:36:e6:8c:c1:4d:0c:d8:d5:49:22:
                    f7:d9:fb:8b:b5:6c:46:ba:3c:24:ca:09:46:f1:24:
                    b8:7c:62:a5:a9:99:b4:8a:45:63:ce:ac:9e:3a:9d:
                    11:32:bd:97:b7:70:a7:bd:60:a4:28:8d:04:19:0b:
                    ed:4a:0d:13:06:7d:e3:75:e1:b5:59:c9:d9:ff:41:
                    b2:90:e0:58:43:f9:31:1e:41:0e:2d:31:b5:51:30:
                    b7:72:18:71:c6:59:13:03:01:71:6a:b4:aa:da:d5:
                    dd:8b:2e:9b:04:1e:a1:84:54:9e:27:96:4a:b2:9d:
                    ee:a6:58:a8:6b:97:8f:c0:6e:33:fe:42:2a:64:e0:
                    ca:8a:3f:d4:0e:e4:80:a8:88:ce:99:f1:b0:4b:d3:
                    77:5b:82:75:ca:11:85:6a:5f:e8:99:2b:07:60:91:
                    40:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:2B:41:F5:7C:02:BE:47:03:2E:78:A4:E6:A5:E3:EC:EE:26:75:80
            X509v3 Authority Key Identifier:
                keyid:D8:0F:DA:40:F8:BB:5C:A1:A7:B1:74:DA:0A:7B:37:6F:BD:FD:CB:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/3136382e3137362e3138342e302f32312d3234203d3e203138373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.176.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0a:ff:29:de:54:d0:1f:22:f2:e8:b5:31:a0:38:cf:5c:db:a2:
         dd:7c:f9:7f:67:28:0d:b1:7b:8b:e1:02:99:49:7f:c4:bf:0d:
         ea:e1:94:f7:77:aa:57:97:7e:35:31:12:fd:c6:ea:69:fa:85:
         4a:a5:97:a6:31:b1:bf:cd:3d:00:dc:f2:ec:fa:82:b6:a5:1f:
         65:6a:1c:73:69:29:ce:e2:9b:f9:1c:c8:93:3d:2e:f5:f2:d7:
         23:b6:09:2a:a1:8b:f7:40:30:c0:54:a4:e7:68:d6:4e:3a:94:
         3b:94:d4:8c:b0:83:eb:45:2c:8c:7e:92:17:c1:b2:75:3c:ae:
         20:cb:bc:b5:f7:82:66:6e:62:e1:e6:62:f5:d7:13:66:8c:1e:
         3d:fb:ea:44:60:ec:8b:00:a2:52:17:d8:94:17:a1:e5:5f:7c:
         c0:f0:47:b8:d2:35:9e:20:db:bb:4a:05:ec:14:99:78:2c:15:
         0f:0e:de:35:2a:de:30:ca:ba:da:9d:9c:1d:d1:6f:62:1f:c0:
         8f:7e:5a:a4:ed:5f:f8:11:b8:46:b2:6d:06:46:01:e6:b6:72:
         af:6a:c0:b9:02:a1:c8:86:24:ba:02:67:b5:f1:59:68:b2:ab:
         c2:6c:51:f0:da:91:12:f0:ea:e5:c3:dd:21:23:61:cd:a2:42:
         79:93:af:62
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUOIm+4OFehkU7ptqe4rEQ9lOEsMowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDgwRkRBNDBGOEJCNUNBMUE3QjE3NERBMEE3QjM3NkZC
REZEQ0IzQzAeFw0yNjA5MjQxMjU1MDNaFw0yNzA5MjMxMzAwMDNaMDMxMTAvBgNV
BAMTKEQyMkI0MUY1N0MwMkJFNDcwMzJFNzhBNEU2QTVFM0VDRUUyNjc1ODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpDMU9YhrLy7iQA9mK8YM8mbFk
3/CpJ1XwNA4XhctevKMYPXf/bgL8e4D9ywNyP05xYyh15sB5xT+OlniedJDLenMV
3HIbxYyhhVB3ceO1ULS4H8YqrR8vUhhL+oU6NuaMwU0M2NVJIvfZ+4u1bEa6PCTK
CUbxJLh8YqWpmbSKRWPOrJ46nREyvZe3cKe9YKQojQQZC+1KDRMGfeN14bVZydn/
QbKQ4FhD+TEeQQ4tMbVRMLdyGHHGWRMDAXFqtKra1d2LLpsEHqGEVJ4nlkqyne6m
WKhrl4/AbjP+Qipk4MqKP9QO5ICoiM6Z8bBL03dbgnXKEYVqX+iZKwdgkUAnAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU0itB9XwCvkcDLnik5qXj7O4mdYAwHwYDVR0j
BBgwFoAU2A/aQPi7XKGnsXTaCns3b739yzwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BN0ZFQjFEMzBEQ0MxRjdENDI2M0FGNEIzQzVDNjU5NEQ1
MDA1RDAyREU1QUE0QUMzNTJENTc1OUYxRkQzREY1LzAvRDgwRkRBNDBGOEJCNUNB
MUE3QjE3NERBMEE3QjM3NkZCREZEQ0IzQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EODBGREE0MEY4QkI1Q0ExQTdC
MTc0REEwQTdCMzc2RkJERkRDQjNDLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTdGRUIxRDMwRENDMUY3RDQyNjNBRjRCM0M1QzY1OTRENTAwNUQwMkRF
NUFBNEFDMzUyRDU3NTlGMUZEM0RGNS8wLzMxMzYzODJlMzEzNzM2MmUzMTM4MzQy
ZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzMTM4MzczNDM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqLC4
MA0GCSqGSIb3DQEBCwUAA4IBAQAK/yneVNAfIvLotTGgOM9c26LdfPl/ZygNsXuL
4QKZSX/Evw3q4ZT3d6pXl341MRL9xupp+oVKpZemMbG/zT0A3PLs+oK2pR9lahxz
aSnO4pv5HMiTPS718tcjtgkqoYv3QDDAVKTnaNZOOpQ7lNSMsIPrRSyMfpIXwbJ1
PK4gy7y194JmbmLh5mL11xNmjB49++pEYOyLAKJSF9iUF6HlX3zA8Ee40jWeINu7
SgXsFJl4LBUPDt41Kt4wyrranZwd0W9iH8CPflqk7V/4EbhGsm0GRgHmtnKvasC5
AqHIhiS6Ame18VlosqvCbFHw2pES8Orlw90hI2HNokJ5k69i
-----END CERTIFICATE-----
Generated at Sun Oct 11 19:43:21 2026 by rpki-client