Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/3136382e3137362e3139362e302f32342d3234203d3e203532343638.roa
File:                     3136382e3137362e3139362e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          QqvV824Q/GQ0H59s4ZxA1ymz45Cj+I814YjZ/PtZFFU=
Subject key identifier:   17:75:64:8E:C6:31:73:DC:DA:5D:BD:21:D9:50:33:DB:28:B8:C0:5E
Certificate issuer:       /CN=D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C
Certificate serial:       37FD3CD0F8F900218B1B701840E8457A45278F20
Authority key identifier: D8:0F:DA:40:F8:BB:5C:A1:A7:B1:74:DA:0A:7B:37:6F:BD:FD:CB:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/3136382e3137362e3139362e302f32342d3234203d3e203532343638.roa
Signing time:             Mon 21 Sep 2026 13:00:00 +0000
ROA not before:           Mon 21 Sep 2026 12:55:00 +0000
ROA not after:            Mon 20 Sep 2027 13:00:00 +0000
asID:                     52468
IP address blocks:        168.176.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 Oct 2026 18:27:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:fd:3c:d0:f8:f9:00:21:8b:1b:70:18:40:e8:45:7a:45:27:8f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C
        Validity
            Not Before: Sep 21 12:55:00 2026 GMT
            Not After : Sep 20 13:00:00 2027 GMT
        Subject: CN=1775648EC63173DCDA5DBD21D95033DB28B8C05E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b8:0a:66:e6:0f:aa:02:ee:37:b5:c2:d1:11:
                    cd:aa:6f:49:a2:48:0d:94:ba:5a:83:22:1c:11:4b:
                    d3:1a:45:df:c8:02:c7:43:6c:87:71:17:b6:01:46:
                    80:0b:f6:c9:d4:e2:4e:20:e4:4b:0e:e6:68:33:97:
                    60:c7:d0:ce:17:22:d1:a5:86:e9:47:eb:eb:a2:47:
                    51:8d:cf:bc:7b:0a:30:75:f9:e4:61:b0:0f:0b:21:
                    da:a2:6f:1a:3d:9a:e5:26:c4:7c:19:68:c1:5e:d8:
                    a0:f3:84:38:24:7b:bc:51:73:44:83:98:36:03:a8:
                    64:76:0d:5b:74:cf:7c:90:4a:20:fd:a8:6d:84:cf:
                    b6:9e:23:f7:1e:23:48:36:a5:bf:82:67:db:da:ad:
                    e9:2f:bb:a9:53:27:10:f1:ba:8e:26:f2:44:b6:fd:
                    9e:84:1e:be:62:5d:60:0b:9c:a7:93:dc:4b:d1:b8:
                    72:37:ba:52:3b:af:3e:20:47:a5:1f:fa:8e:69:11:
                    e2:a1:f9:88:f4:f8:03:e8:33:6d:85:0e:b4:00:f6:
                    14:c3:85:d1:5e:fa:a7:c3:eb:60:51:19:34:8e:35:
                    d7:f8:8f:68:9a:4f:cd:30:bf:27:c7:25:18:10:57:
                    a9:99:c8:3b:de:8a:95:17:a8:83:cb:cb:42:df:c7:
                    84:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:75:64:8E:C6:31:73:DC:DA:5D:BD:21:D9:50:33:DB:28:B8:C0:5E
            X509v3 Authority Key Identifier:
                keyid:D8:0F:DA:40:F8:BB:5C:A1:A7:B1:74:DA:0A:7B:37:6F:BD:FD:CB:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/3136382e3137362e3139362e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.176.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:6c:67:d4:f8:3e:b8:02:ec:e1:5e:a0:e1:13:17:74:d4:04:
         09:b9:1a:c9:34:aa:3c:93:92:a2:3a:14:0e:44:a2:5f:5b:14:
         4b:63:76:25:be:4b:ea:5e:20:a8:90:79:07:03:a1:74:b4:c3:
         10:a1:59:95:31:ef:66:63:ea:76:4c:b6:cd:21:26:d5:d8:dc:
         17:0c:03:cd:f2:9d:16:60:7e:43:a1:20:69:23:53:f2:3f:44:
         cd:51:9b:08:24:f9:b0:74:ec:c7:21:b3:46:ba:e4:2c:17:a2:
         25:c5:00:b9:f1:27:88:a1:11:2c:33:db:b7:6f:16:cc:02:da:
         f3:9b:41:be:02:8b:39:a0:b3:07:53:2a:7a:04:d0:e7:2d:f8:
         50:53:62:41:7d:a7:39:44:42:3c:4c:cc:4c:ec:7a:36:bc:e2:
         ef:12:d6:b6:72:35:2c:03:3f:93:b9:50:2d:e0:b5:da:37:55:
         29:41:61:4e:27:fb:a6:25:b2:cf:17:48:d3:fc:e1:b3:f5:fc:
         b1:6b:25:31:cb:52:f9:25:70:e7:a8:04:8b:b2:26:61:c2:42:
         3e:bb:69:dc:46:ee:5c:3e:ea:35:42:88:a6:ab:af:b5:f0:8f:
         b0:2e:62:39:75:e2:70:3f:87:ee:07:3c:81:4f:8e:81:56:ff:
         18:93:9b:25
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUN/080Pj5ACGLG3AYQOhFekUnjyAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDgwRkRBNDBGOEJCNUNBMUE3QjE3NERBMEE3QjM3NkZC
REZEQ0IzQzAeFw0yNjA5MjExMjU1MDBaFw0yNzA5MjAxMzAwMDBaMDMxMTAvBgNV
BAMTKDE3NzU2NDhFQzYzMTczRENEQTVEQkQyMUQ5NTAzM0RCMjhCOEMwNUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGuApm5g+qAu43tcLREc2qb0mi
SA2UulqDIhwRS9MaRd/IAsdDbIdxF7YBRoAL9snU4k4g5EsO5mgzl2DH0M4XItGl
hulH6+uiR1GNz7x7CjB1+eRhsA8LIdqibxo9muUmxHwZaMFe2KDzhDgke7xRc0SD
mDYDqGR2DVt0z3yQSiD9qG2Ez7aeI/ceI0g2pb+CZ9varekvu6lTJxDxuo4m8kS2
/Z6EHr5iXWALnKeT3EvRuHI3ulI7rz4gR6Uf+o5pEeKh+Yj0+APoM22FDrQA9hTD
hdFe+qfD62BRGTSONdf4j2iaT80wvyfHJRgQV6mZyDveipUXqIPLy0Lfx4QpAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUF3VkjsYxc9zaXb0h2VAz2yi4wF4wHwYDVR0j
BBgwFoAU2A/aQPi7XKGnsXTaCns3b739yzwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BN0ZFQjFEMzBEQ0MxRjdENDI2M0FGNEIzQzVDNjU5NEQ1
MDA1RDAyREU1QUE0QUMzNTJENTc1OUYxRkQzREY1LzAvRDgwRkRBNDBGOEJCNUNB
MUE3QjE3NERBMEE3QjM3NkZCREZEQ0IzQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EODBGREE0MEY4QkI1Q0ExQTdC
MTc0REEwQTdCMzc2RkJERkRDQjNDLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTdGRUIxRDMwRENDMUY3RDQyNjNBRjRCM0M1QzY1OTRENTAwNUQwMkRF
NUFBNEFDMzUyRDU3NTlGMUZEM0RGNS8wLzMxMzYzODJlMzEzNzM2MmUzMTM5MzYy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMyMzQzNjM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqLDE
MA0GCSqGSIb3DQEBCwUAA4IBAQChbGfU+D64AuzhXqDhExd01AQJuRrJNKo8k5Ki
OhQORKJfWxRLY3YlvkvqXiCokHkHA6F0tMMQoVmVMe9mY+p2TLbNISbV2NwXDAPN
8p0WYH5DoSBpI1PyP0TNUZsIJPmwdOzHIbNGuuQsF6IlxQC58SeIoREsM9u3bxbM
Atrzm0G+Aos5oLMHUyp6BNDnLfhQU2JBfac5REI8TMxM7Ho2vOLvEta2cjUsAz+T
uVAt4LXaN1UpQWFOJ/umJbLPF0jT/OGz9fyxayUxy1L5JXDnqASLsiZhwkI+u2nc
Ru5cPuo1Qoimq6+18I+wLmI5deJwP4fuBzyBT46BVv8Yk5sl
-----END CERTIFICATE-----
Generated at Mon Sep 28 10:41:49 2026 by rpki-client