Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FE46A92A7067D3C86CCAFD0AE9AB56C25164CFEAD6D0A1D473E4D6007FA04EB9/0/3136382e3230352e3138342e302f32322d3232203d3e20323634363932.roa
File:                     3136382e3230352e3138342e302f32322d3232203d3e20323634363932.roa (raw, json)
Hash identifier:          4UP2c11jRJGONmDb5V+ks4Oe+nlxLxQJMImkxH4JM/0=
Subject key identifier:   ED:52:5A:21:FE:FF:A0:BE:69:43:F0:AD:68:90:55:65:6D:D7:0C:10
Certificate issuer:       /CN=7767E12FC2A8ADE136089C7D9A48E6481098F31E
Certificate serial:       51A9F3F65C06FAC427E633FB62EA9766ED3303F3
Authority key identifier: 77:67:E1:2F:C2:A8:AD:E1:36:08:9C:7D:9A:48:E6:48:10:98:F3:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7767E12FC2A8ADE136089C7D9A48E6481098F31E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FE46A92A7067D3C86CCAFD0AE9AB56C25164CFEAD6D0A1D473E4D6007FA04EB9/0/3136382e3230352e3138342e302f32322d3232203d3e20323634363932.roa
Signing time:             Tue 07 Oct 2025 13:40:00 +0000
ROA not before:           Tue 07 Oct 2025 13:35:00 +0000
ROA not after:            Tue 06 Oct 2026 13:40:00 +0000
asID:                     264692
IP address blocks:        168.205.184.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FE46A92A7067D3C86CCAFD0AE9AB56C25164CFEAD6D0A1D473E4D6007FA04EB9/0/7767E12FC2A8ADE136089C7D9A48E6481098F31E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FE46A92A7067D3C86CCAFD0AE9AB56C25164CFEAD6D0A1D473E4D6007FA04EB9/0/7767E12FC2A8ADE136089C7D9A48E6481098F31E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7767E12FC2A8ADE136089C7D9A48E6481098F31E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:a9:f3:f6:5c:06:fa:c4:27:e6:33:fb:62:ea:97:66:ed:33:03:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7767E12FC2A8ADE136089C7D9A48E6481098F31E
        Validity
            Not Before: Oct  7 13:35:00 2025 GMT
            Not After : Oct  6 13:40:00 2026 GMT
        Subject: CN=ED525A21FEFFA0BE6943F0AD689055656DD70C10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:3b:48:9c:eb:09:5a:c8:6f:bd:0e:b6:be:a5:
                    77:69:cc:13:d3:1c:de:35:53:bd:b1:29:05:25:d6:
                    09:ee:7b:33:c4:bf:8d:2c:71:7c:bb:20:0b:f1:24:
                    61:a8:e1:77:a6:e8:6d:1b:a9:08:18:46:21:f6:aa:
                    6b:a7:65:8d:5c:33:03:35:bc:5c:69:ac:a3:02:16:
                    ff:3c:43:62:3e:ac:da:d6:62:73:32:2c:f1:6f:d0:
                    75:ae:09:b1:16:6b:83:4d:74:f5:cb:64:f4:97:74:
                    b3:41:07:6a:df:50:3a:f0:d4:47:d4:af:2c:56:0c:
                    c6:23:f9:27:e8:78:e6:66:84:e7:51:dd:95:85:f8:
                    79:34:fa:1f:f6:64:b1:9d:54:68:1c:c4:1c:54:d4:
                    98:65:9b:26:51:b1:27:10:e5:d8:85:fd:bd:e7:ed:
                    6d:7a:30:51:30:82:cf:f6:d6:a8:a2:f8:7f:f0:5e:
                    50:f8:70:b1:97:d7:a0:73:a4:fe:e6:5f:f1:06:33:
                    b0:a4:27:39:9c:98:53:a6:25:df:b2:1e:18:ba:0a:
                    9f:01:bf:bd:0a:59:d7:d5:d4:05:16:95:95:58:51:
                    ad:1a:fb:1f:18:2f:e8:7b:da:0f:ee:7d:c6:fc:df:
                    9a:92:f2:99:e9:75:04:12:db:1a:dc:6f:1b:5f:8e:
                    ce:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:52:5A:21:FE:FF:A0:BE:69:43:F0:AD:68:90:55:65:6D:D7:0C:10
            X509v3 Authority Key Identifier:
                keyid:77:67:E1:2F:C2:A8:AD:E1:36:08:9C:7D:9A:48:E6:48:10:98:F3:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FE46A92A7067D3C86CCAFD0AE9AB56C25164CFEAD6D0A1D473E4D6007FA04EB9/0/7767E12FC2A8ADE136089C7D9A48E6481098F31E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7767E12FC2A8ADE136089C7D9A48E6481098F31E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FE46A92A7067D3C86CCAFD0AE9AB56C25164CFEAD6D0A1D473E4D6007FA04EB9/0/3136382e3230352e3138342e302f32322d3232203d3e20323634363932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:7e:d0:42:34:f6:c6:c1:06:62:ee:48:93:b2:67:35:ab:43:
         6f:44:83:6b:c5:38:35:a0:23:4e:f9:bb:b8:3d:09:ce:70:30:
         55:3b:31:27:7f:cc:67:f6:3b:4b:ae:ab:fe:fa:6e:23:23:f5:
         38:56:58:73:47:c9:27:d6:70:bb:3d:0a:ce:82:2f:2a:12:3b:
         80:c8:95:fa:a8:a3:f2:cb:9d:4c:e4:05:0e:f7:29:99:24:eb:
         46:eb:92:7a:8b:1c:1e:3e:c5:77:2c:80:44:f0:6f:21:46:d2:
         e3:1a:0f:b0:e2:d9:d2:d8:13:d6:1f:82:9f:e7:a6:89:7c:ce:
         00:66:5c:9d:12:82:0b:ad:44:52:61:37:c7:4c:1c:3d:2d:75:
         3b:6a:e6:0f:56:d7:a4:4f:70:ec:fb:7e:8c:91:6f:de:b8:8a:
         8f:37:ae:93:0b:7f:00:06:a2:b0:78:f9:35:ca:a8:4d:e7:11:
         19:b5:25:9b:2e:b7:db:2a:6e:83:35:9c:50:27:a8:e1:36:c8:
         1f:69:1b:b6:89:05:04:c0:f6:ee:6c:97:f0:e1:55:21:48:5c:
         e1:09:6d:82:f6:35:35:14:65:84:7a:6b:eb:b3:13:6d:6d:e6:
         64:60:9c:b6:b9:59:5a:39:b2:59:bb:6d:c3:23:18:c5:7e:c3:
         14:d4:f0:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:27:52 2025 by rpki-client