Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/3136382e3137362e39362e302f31392d3234203d3e203532343638.roa
File:                     3136382e3137362e39362e302f31392d3234203d3e203532343638.roa (raw, json)
Hash identifier:          SbUqCTqnDFiQgfPPuW+VbWN6gNeFYQlhUPzB4Om91e4=
Subject key identifier:   D2:D7:A5:DE:51:DF:D9:50:2A:A4:7C:56:4F:0D:62:8F:65:D2:B2:5F
Certificate issuer:       /CN=D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C
Certificate serial:       48CF9400E33BCB88187B4379B22F60FAAE9D6832
Authority key identifier: D8:0F:DA:40:F8:BB:5C:A1:A7:B1:74:DA:0A:7B:37:6F:BD:FD:CB:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/3136382e3137362e39362e302f31392d3234203d3e203532343638.roa
Signing time:             Thu 24 Sep 2026 13:00:00 +0000
ROA not before:           Thu 24 Sep 2026 12:55:00 +0000
ROA not after:            Thu 23 Sep 2027 13:00:00 +0000
asID:                     52468
IP address blocks:        168.176.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 Oct 2026 23:56:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:cf:94:00:e3:3b:cb:88:18:7b:43:79:b2:2f:60:fa:ae:9d:68:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C
        Validity
            Not Before: Sep 24 12:55:00 2026 GMT
            Not After : Sep 23 13:00:00 2027 GMT
        Subject: CN=D2D7A5DE51DFD9502AA47C564F0D628F65D2B25F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:4f:49:ec:57:bc:79:a9:aa:99:1b:38:b3:0c:
                    77:d0:f0:6b:b9:66:55:e9:4d:dc:83:68:ee:15:3a:
                    d4:28:71:72:43:2b:83:fd:49:5d:e0:f2:b7:15:12:
                    e2:ee:60:90:f9:0c:4a:dc:bd:ec:0d:2e:c8:b2:b7:
                    cd:ff:23:d1:01:07:e1:aa:38:73:0a:ad:cb:2d:b4:
                    33:bf:f6:b2:65:67:48:6e:24:1c:7b:8d:2e:b4:82:
                    e8:a2:8e:45:1b:85:b5:f7:7e:8e:55:81:76:f2:19:
                    3b:e2:02:f0:4f:68:80:5a:eb:df:1c:4c:de:3d:52:
                    83:cd:86:b5:ab:c6:60:82:35:5f:af:07:a3:8d:ea:
                    ad:da:96:f8:7f:76:e9:38:60:cd:3d:71:b3:d9:5f:
                    94:89:5d:60:d7:91:dc:5f:17:cd:d2:9d:60:74:51:
                    9d:ad:e3:53:1d:eb:2e:fc:5b:39:28:db:e9:15:e1:
                    52:40:95:13:6b:63:03:b9:0a:eb:b8:d0:50:be:6a:
                    d8:3c:b9:cd:58:48:66:64:6f:1d:7d:1f:7a:bf:f8:
                    d3:3a:7f:93:85:d8:65:e6:e2:81:8c:84:88:b3:fc:
                    24:9f:2b:34:fa:25:50:af:7c:47:fa:c8:2c:5b:70:
                    7c:98:47:40:3e:40:1b:2d:e5:4f:fd:35:c5:24:60:
                    56:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:D7:A5:DE:51:DF:D9:50:2A:A4:7C:56:4F:0D:62:8F:65:D2:B2:5F
            X509v3 Authority Key Identifier:
                keyid:D8:0F:DA:40:F8:BB:5C:A1:A7:B1:74:DA:0A:7B:37:6F:BD:FD:CB:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/3136382e3137362e39362e302f31392d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.176.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         27:b5:9e:31:f7:07:92:ab:08:fa:e9:ad:71:de:2e:c8:9d:f9:
         61:69:16:06:7f:9a:cc:37:30:35:96:75:3d:ab:8d:29:10:4a:
         03:91:52:5e:aa:f9:d6:5e:98:1d:1a:01:94:ef:9a:cc:c1:ab:
         d9:fc:06:e1:27:ab:92:eb:cb:62:10:47:f8:14:a8:e8:6b:a1:
         fc:d4:a4:2d:5e:99:be:26:3b:10:0a:e2:5d:9b:d4:4e:9f:15:
         f0:55:dd:ff:6a:c5:31:79:c6:fa:f9:37:b7:2c:46:47:cb:50:
         b2:8b:33:d8:c3:5b:30:47:d7:7c:14:6a:f2:bd:de:79:d8:e6:
         0e:79:21:9c:15:28:2f:0c:a5:9b:15:35:9d:6a:0d:38:fa:be:
         8f:7a:72:e4:7f:d8:08:bd:46:c4:9d:8a:5b:93:9e:b1:95:9e:
         d6:59:f9:94:4f:40:7f:14:17:f4:6e:dc:7d:82:b5:e0:96:c3:
         9e:2f:78:4f:52:1b:e7:34:6c:42:2c:f5:9f:7e:3f:96:15:84:
         f8:8d:a6:f8:54:e9:3c:19:65:fc:e8:65:99:95:6d:23:ba:ac:
         5a:76:7c:5c:9b:b7:19:5e:4e:ac:1b:de:65:f2:8e:5f:6d:65:
         5d:68:07:e2:19:02:e9:af:96:d6:09:8d:9f:cc:fe:67:11:9b:
         d9:cb:92:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 22:30:08 2026 by rpki-client