Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/3136382e3137362e3139322e302f32342d3234203d3e203138373437.roa
File:                     3136382e3137362e3139322e302f32342d3234203d3e203138373437.roa (raw, json)
Hash identifier:          +FZ14wFnMCz25Z9Tqy92o19EnIanf58VmOr/L+fPIQw=
Subject key identifier:   FC:A1:E5:DC:B7:02:78:EF:F4:AE:20:8B:37:40:EA:4A:4C:72:19:E3
Certificate issuer:       /CN=D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C
Certificate serial:       7E4BABE9CC958C87369DF120E47FBB40EAFA253A
Authority key identifier: D8:0F:DA:40:F8:BB:5C:A1:A7:B1:74:DA:0A:7B:37:6F:BD:FD:CB:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/3136382e3137362e3139322e302f32342d3234203d3e203138373437.roa
Signing time:             Mon 21 Sep 2026 13:05:03 +0000
ROA not before:           Mon 21 Sep 2026 13:00:03 +0000
ROA not after:            Mon 20 Sep 2027 13:05:03 +0000
asID:                     18747
IP address blocks:        168.176.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 02:58:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:4b:ab:e9:cc:95:8c:87:36:9d:f1:20:e4:7f:bb:40:ea:fa:25:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C
        Validity
            Not Before: Sep 21 13:00:03 2026 GMT
            Not After : Sep 20 13:05:03 2027 GMT
        Subject: CN=FCA1E5DCB70278EFF4AE208B3740EA4A4C7219E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:13:f8:df:57:16:69:5a:d3:e5:2a:d9:b1:3d:
                    4f:92:fe:27:42:e4:f2:aa:4d:cf:24:de:e0:c7:f1:
                    88:c5:c5:e2:fd:1c:f9:d2:98:d2:39:50:f2:22:1c:
                    6c:be:35:a5:ee:c9:fb:c6:5f:c0:28:38:60:ce:ea:
                    0d:8b:e6:6b:8b:20:7f:b3:b3:fe:62:cc:ad:88:f7:
                    6b:41:68:bb:3a:26:ca:dd:db:86:ba:8d:df:6d:06:
                    25:24:ea:f3:cb:37:0b:6a:9c:29:ea:fa:1c:8b:b3:
                    5f:65:fb:2c:10:bd:d2:1a:66:5c:fd:e5:d8:2b:95:
                    50:4e:3b:9f:83:5c:d6:d4:e0:7f:4c:1d:d6:f0:b3:
                    24:01:84:22:d2:10:46:dc:ce:cf:21:a9:da:b2:52:
                    0d:88:0f:d3:99:7d:8d:58:47:08:1c:1f:cb:52:d6:
                    24:ac:3c:40:5f:82:e4:df:6d:c6:19:d3:7f:fa:90:
                    aa:71:b3:89:a1:84:3b:48:e4:81:69:f3:03:34:46:
                    38:b7:3a:7a:f0:f1:b4:02:42:a2:98:eb:cf:e5:d3:
                    95:aa:53:64:f7:46:60:ef:7c:ea:b5:40:db:a2:89:
                    18:cc:bc:bb:c1:7b:9d:42:6c:1c:11:c1:c0:6d:c5:
                    be:d6:08:2a:35:2b:cf:81:73:0a:d2:e8:9b:6d:9c:
                    45:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:A1:E5:DC:B7:02:78:EF:F4:AE:20:8B:37:40:EA:4A:4C:72:19:E3
            X509v3 Authority Key Identifier:
                keyid:D8:0F:DA:40:F8:BB:5C:A1:A7:B1:74:DA:0A:7B:37:6F:BD:FD:CB:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/3136382e3137362e3139322e302f32342d3234203d3e203138373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.176.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:42:f4:cc:60:2c:4c:8f:78:1a:bd:ee:f7:3f:12:0e:83:c0:
         2e:bb:1e:10:86:8a:a2:2c:82:f7:e3:3f:1e:40:e4:0c:bc:2f:
         21:c7:ac:79:64:a4:f0:93:00:5d:1a:86:2b:28:ad:78:f1:21:
         f4:2d:ae:fc:69:f5:5b:c7:85:1c:97:ae:5e:5b:13:95:c2:c0:
         5b:89:ab:fb:eb:19:10:26:8f:c8:1b:f7:7a:ab:cb:5e:aa:7b:
         95:95:9e:7c:e2:e4:60:0d:d1:5a:cc:b4:5e:c7:02:5c:7e:dd:
         84:b5:bd:e9:01:30:14:3a:c1:69:c5:78:41:05:a2:64:48:b1:
         fd:f0:b2:4b:94:b9:5f:7c:f4:90:a8:07:34:9f:4b:c9:38:a7:
         c5:54:78:05:1a:04:52:1a:c9:4e:7b:3a:b3:d0:da:67:46:3e:
         bc:2d:b6:30:99:b8:8d:fc:4a:36:48:80:39:ad:b4:c7:ab:8f:
         0f:e8:9a:e1:06:27:0a:bb:fe:44:9c:40:f7:2c:47:17:7d:9b:
         99:25:8c:3f:ef:c8:74:73:00:bd:07:9d:38:be:f1:fb:65:8e:
         ff:5f:07:30:35:e5:b4:b5:b4:9a:53:c4:d1:ce:8f:e3:37:26:
         33:16:60:23:71:9f:7b:5a:85:9a:66:ec:93:89:6d:67:fe:78:
         5c:18:75:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:44:26 2026 by rpki-client