Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/3136382e3137362e3231322e302f32342d3234203d3e203532343638.roa
File:                     3136382e3137362e3231322e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          Db411NNQO/dZgkNTf0lu5BkkqQB31ZrJCxc8h1XBO9I=
Subject key identifier:   71:97:91:AE:13:FC:57:D9:2B:90:4A:F9:43:EF:8B:32:A0:F2:35:7C
Certificate issuer:       /CN=D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C
Certificate serial:       23F8E546E582A7428FFEBD20D3E4334FA75C6CF2
Authority key identifier: D8:0F:DA:40:F8:BB:5C:A1:A7:B1:74:DA:0A:7B:37:6F:BD:FD:CB:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/3136382e3137362e3231322e302f32342d3234203d3e203532343638.roa
Signing time:             Mon 21 Sep 2026 13:00:02 +0000
ROA not before:           Mon 21 Sep 2026 12:55:02 +0000
ROA not after:            Mon 20 Sep 2027 13:00:02 +0000
asID:                     52468
IP address blocks:        168.176.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 Oct 2026 14:30:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:f8:e5:46:e5:82:a7:42:8f:fe:bd:20:d3:e4:33:4f:a7:5c:6c:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C
        Validity
            Not Before: Sep 21 12:55:02 2026 GMT
            Not After : Sep 20 13:00:02 2027 GMT
        Subject: CN=719791AE13FC57D92B904AF943EF8B32A0F2357C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:3c:2d:02:65:c2:e5:b0:2b:ea:d2:51:d5:5b:
                    d5:4d:c4:3c:73:37:bd:66:f5:3a:0a:26:03:17:78:
                    a8:e4:22:c4:e5:54:85:df:87:90:db:d1:0f:fe:e9:
                    02:f7:ac:9b:b5:59:eb:3a:7a:f4:1c:8c:3f:0e:81:
                    75:f9:2e:f2:7e:4f:e4:8e:95:08:95:de:39:20:e5:
                    eb:13:bc:85:dc:c2:6c:08:04:b3:ca:27:a5:7b:ec:
                    55:fb:ba:14:07:e0:fd:ca:d3:dd:cb:af:49:4d:ea:
                    c8:47:4b:6d:36:81:6c:ae:54:a8:f8:3f:67:4a:86:
                    b1:06:2a:e2:9f:6f:8d:d4:fb:29:ab:2f:21:b5:39:
                    45:06:7b:bd:c4:17:e9:9b:dc:62:9a:a0:d9:72:3d:
                    d4:f5:bc:e8:a3:5b:d2:a2:f1:47:ac:42:78:b0:f7:
                    31:0a:d8:63:0f:c8:93:a8:3d:1a:79:a7:93:fa:9a:
                    00:27:9a:b5:00:eb:26:18:f5:7a:3d:c2:34:0a:49:
                    00:f6:0d:80:b0:05:48:a9:cd:79:4e:91:dc:c3:db:
                    14:1a:cd:ff:8a:0c:a5:f2:f5:ef:c2:49:02:0d:63:
                    5f:e1:0a:d7:c4:69:41:ae:f6:0a:8d:b6:f0:e0:b9:
                    9e:73:f1:52:8a:96:06:48:c9:e8:90:50:2b:e1:d3:
                    f3:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:97:91:AE:13:FC:57:D9:2B:90:4A:F9:43:EF:8B:32:A0:F2:35:7C
            X509v3 Authority Key Identifier:
                keyid:D8:0F:DA:40:F8:BB:5C:A1:A7:B1:74:DA:0A:7B:37:6F:BD:FD:CB:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/3136382e3137362e3231322e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.176.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:28:da:da:e4:32:02:9f:ac:5e:35:f0:8b:b9:50:a0:6b:36:
         65:21:57:b6:74:f5:28:56:49:e3:65:86:12:f8:e0:70:db:15:
         8f:aa:74:c6:dd:4e:71:2c:c7:a1:02:38:8e:cb:5f:43:1d:46:
         5f:83:86:89:7d:a7:48:77:6d:0d:ae:ae:7f:82:52:f3:99:d9:
         90:5f:fe:d7:63:db:43:6b:04:ce:5b:85:5e:c8:11:a4:6a:2a:
         66:cb:5f:68:19:38:28:58:74:c3:82:68:a6:67:0a:28:90:81:
         be:5c:b1:74:dc:4e:54:90:98:cb:5b:17:78:ff:05:02:1f:c2:
         0e:71:dc:3c:6c:90:17:16:4e:74:da:a6:8d:11:09:2f:1d:d2:
         85:62:6b:0e:27:f8:70:01:57:f3:57:79:92:62:b8:46:cf:c9:
         f4:bd:90:e9:d3:e7:05:bd:07:d9:5a:d0:5f:71:46:e3:40:58:
         cf:c0:21:0f:53:dd:76:87:a3:a6:1b:47:e6:4c:6c:05:1d:fc:
         e6:df:23:16:59:73:a3:72:ce:09:a8:c1:82:7b:47:7d:00:db:
         35:63:8c:5e:a0:3b:86:fc:58:84:a0:07:8f:96:25:33:28:20:
         98:f4:33:63:1c:99:b8:09:6d:ed:3e:81:51:15:f9:17:7c:b6:
         7e:6b:09:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 14:29:49 2026 by rpki-client