Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/3136382e3137362e3234362e302f32342d3234203d3e203133343839.roa
File:                     3136382e3137362e3234362e302f32342d3234203d3e203133343839.roa (raw, json)
Hash identifier:          gWGYXx76cHu8QXLqcEyPSmlUxyLVDzLFI8DKuwAhbTA=
Subject key identifier:   ED:5E:82:3D:08:03:68:B4:F3:EE:60:A6:19:78:11:E2:1F:22:56:6D
Certificate issuer:       /CN=D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C
Certificate serial:       6731521E2C437BB5BEFF763EAA22BF0E9DCF34E0
Authority key identifier: D8:0F:DA:40:F8:BB:5C:A1:A7:B1:74:DA:0A:7B:37:6F:BD:FD:CB:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/3136382e3137362e3234362e302f32342d3234203d3e203133343839.roa
Signing time:             Mon 21 Sep 2026 13:05:02 +0000
ROA not before:           Mon 21 Sep 2026 13:00:02 +0000
ROA not after:            Mon 20 Sep 2027 13:05:02 +0000
asID:                     13489
IP address blocks:        168.176.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 Oct 2026 18:27:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:31:52:1e:2c:43:7b:b5:be:ff:76:3e:aa:22:bf:0e:9d:cf:34:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C
        Validity
            Not Before: Sep 21 13:00:02 2026 GMT
            Not After : Sep 20 13:05:02 2027 GMT
        Subject: CN=ED5E823D080368B4F3EE60A6197811E21F22566D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:4d:19:92:05:b5:c7:c2:47:39:2a:ea:c1:11:
                    87:6c:78:85:c3:94:30:10:57:7b:6f:91:07:ee:c2:
                    70:8b:48:53:76:40:4b:b8:6d:2f:17:b0:bc:57:d7:
                    b5:74:4d:13:0c:a5:ba:98:b0:15:9c:26:fc:f8:0c:
                    69:9a:b4:da:0a:2e:47:39:d5:86:c9:ee:81:c7:f6:
                    c9:6b:bd:f4:27:fd:4b:d0:78:85:e9:c1:9d:56:43:
                    1a:6c:f5:84:81:a3:87:88:d2:39:98:64:28:e1:03:
                    54:d7:f5:04:bf:d5:24:80:2d:f6:4b:71:49:a2:1d:
                    8b:6b:27:69:75:23:ff:69:89:8d:2c:a7:5d:a0:24:
                    d1:33:d7:95:f6:bd:eb:7a:f8:cd:2f:e1:c9:ad:a5:
                    6b:4c:15:86:1b:49:79:7a:79:af:1d:86:de:50:cd:
                    c2:11:c0:49:df:95:0f:18:cc:25:e1:4a:bf:f8:92:
                    0d:ba:23:35:0e:ed:e5:bf:92:6c:0f:f0:74:c9:85:
                    81:24:ad:97:76:0e:62:d4:0f:2c:62:a8:94:e5:0e:
                    a9:81:84:05:63:70:fd:2b:a7:94:f8:9b:17:85:60:
                    c8:bf:45:a2:30:c3:e1:a1:19:ad:0b:e9:a2:0c:35:
                    30:1f:06:e7:69:6f:2b:10:67:d9:d0:07:1c:9e:55:
                    50:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:5E:82:3D:08:03:68:B4:F3:EE:60:A6:19:78:11:E2:1F:22:56:6D
            X509v3 Authority Key Identifier:
                keyid:D8:0F:DA:40:F8:BB:5C:A1:A7:B1:74:DA:0A:7B:37:6F:BD:FD:CB:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/3136382e3137362e3234362e302f32342d3234203d3e203133343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.176.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:ca:67:06:87:06:93:cd:94:ca:f9:6b:7b:3b:ff:c6:d5:b3:
         49:2f:28:bd:53:34:c6:57:0e:a4:8d:f7:5b:b0:97:e9:c8:1b:
         1c:06:1e:45:2b:33:87:71:50:06:49:e5:48:30:d1:e6:e9:2e:
         a8:3d:06:0f:d5:5f:02:dc:5e:19:5c:07:23:10:cc:17:d9:ab:
         07:b0:c1:41:94:92:17:47:d3:79:12:dc:c2:a7:20:f8:ed:54:
         a3:87:c1:99:16:71:0b:9e:59:0f:16:96:b7:4c:a3:dc:9a:cb:
         7f:1e:bd:15:dc:86:f5:13:e8:d7:e4:30:4e:fe:2b:eb:1b:54:
         6c:30:06:23:a3:a5:af:4a:77:26:95:11:cf:cf:f1:76:79:54:
         92:93:50:af:eb:dd:31:d5:be:e0:e8:59:23:e3:f6:20:d7:19:
         dd:69:02:a2:a7:f0:47:33:e6:98:20:6b:2b:60:b3:3b:cb:cf:
         bd:ee:c9:ff:8e:f3:e0:80:b6:8f:d6:72:36:e1:3c:86:89:03:
         16:6f:bd:88:f2:2c:08:6b:36:4d:2a:92:00:2d:49:c6:0d:71:
         19:0f:ad:c2:8c:dd:f0:0b:14:45:0d:c8:d6:97:a5:5a:2b:0a:
         e2:1d:d8:67:1d:f8:cf:7e:84:bd:89:24:4b:32:24:1a:57:bb:
         35:a7:9d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 10:42:01 2026 by rpki-client