Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FE46A92A7067D3C86CCAFD0AE9AB56C25164CFEAD6D0A1D473E4D6007FA04EB9/0/3136382e3230352e3138352e302f32342d3234203d3e20323634363932.roa
File:                     3136382e3230352e3138352e302f32342d3234203d3e20323634363932.roa (raw, json)
Hash identifier:          /oYLHVmJXcEfp6VcYc4JsNwmimmGX3C6oDF9NNx3k3w=
Subject key identifier:   6D:C7:57:29:2D:F8:CE:10:84:85:7C:65:E2:06:22:45:6F:47:D2:A9
Certificate issuer:       /CN=7767E12FC2A8ADE136089C7D9A48E6481098F31E
Certificate serial:       0CE02DCAEF3B8F088FE3278E165AE4A536B6CFE7
Authority key identifier: 77:67:E1:2F:C2:A8:AD:E1:36:08:9C:7D:9A:48:E6:48:10:98:F3:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7767E12FC2A8ADE136089C7D9A48E6481098F31E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FE46A92A7067D3C86CCAFD0AE9AB56C25164CFEAD6D0A1D473E4D6007FA04EB9/0/3136382e3230352e3138352e302f32342d3234203d3e20323634363932.roa
Signing time:             Tue 07 Oct 2025 13:35:01 +0000
ROA not before:           Tue 07 Oct 2025 13:30:01 +0000
ROA not after:            Tue 06 Oct 2026 13:35:01 +0000
asID:                     264692
IP address blocks:        168.205.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FE46A92A7067D3C86CCAFD0AE9AB56C25164CFEAD6D0A1D473E4D6007FA04EB9/0/7767E12FC2A8ADE136089C7D9A48E6481098F31E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FE46A92A7067D3C86CCAFD0AE9AB56C25164CFEAD6D0A1D473E4D6007FA04EB9/0/7767E12FC2A8ADE136089C7D9A48E6481098F31E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7767E12FC2A8ADE136089C7D9A48E6481098F31E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:e0:2d:ca:ef:3b:8f:08:8f:e3:27:8e:16:5a:e4:a5:36:b6:cf:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7767E12FC2A8ADE136089C7D9A48E6481098F31E
        Validity
            Not Before: Oct  7 13:30:01 2025 GMT
            Not After : Oct  6 13:35:01 2026 GMT
        Subject: CN=6DC757292DF8CE1084857C65E20622456F47D2A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e2:89:c1:d2:56:2d:bb:89:6e:2f:85:7e:5b:
                    ac:5d:e2:95:3d:22:9b:9a:53:43:15:6b:7b:70:60:
                    13:87:de:14:40:64:92:2a:5e:f7:1a:0c:72:f4:f0:
                    c1:20:e2:17:6b:23:5b:1e:9b:68:dd:dd:d5:a8:0b:
                    88:4c:bd:76:31:c0:cd:bc:cf:ec:05:e5:37:f2:8e:
                    1f:a3:cf:94:cd:5d:08:96:62:d4:63:1d:91:c3:46:
                    0b:d2:9c:7a:5e:94:60:d4:40:8d:a4:4e:2c:a0:0f:
                    4f:d9:20:eb:ff:3d:c9:aa:f5:f6:4f:5f:3b:b3:d5:
                    14:1c:2b:5c:2a:ac:61:54:bf:e7:f8:5b:26:a7:6c:
                    a3:f3:ae:48:20:80:ff:ef:cd:2b:8a:3a:d5:d4:da:
                    70:d8:c4:b8:b8:5e:60:3e:a3:22:38:5c:1d:f6:f9:
                    f8:d4:cc:bf:2e:4a:47:17:e9:3d:9a:4e:7b:e5:b7:
                    8b:ce:59:7a:e1:3f:b9:14:cd:8f:dc:b0:27:69:d4:
                    e8:8e:f9:82:a6:d6:c3:4f:6c:5f:50:af:15:6c:60:
                    86:90:1a:13:e3:ca:81:01:a8:02:bd:76:98:42:fc:
                    e8:bf:51:0e:c1:b1:27:46:db:11:d5:7c:03:2e:69:
                    46:36:e8:4f:02:e3:e2:8a:a2:fc:f0:3b:30:fb:c1:
                    38:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:C7:57:29:2D:F8:CE:10:84:85:7C:65:E2:06:22:45:6F:47:D2:A9
            X509v3 Authority Key Identifier:
                keyid:77:67:E1:2F:C2:A8:AD:E1:36:08:9C:7D:9A:48:E6:48:10:98:F3:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FE46A92A7067D3C86CCAFD0AE9AB56C25164CFEAD6D0A1D473E4D6007FA04EB9/0/7767E12FC2A8ADE136089C7D9A48E6481098F31E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7767E12FC2A8ADE136089C7D9A48E6481098F31E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FE46A92A7067D3C86CCAFD0AE9AB56C25164CFEAD6D0A1D473E4D6007FA04EB9/0/3136382e3230352e3138352e302f32342d3234203d3e20323634363932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:a9:24:cf:6f:67:6b:c6:ef:bd:ac:82:41:11:20:68:3a:55:
         29:95:31:3b:ad:8d:0a:52:a7:e4:59:b7:ee:a3:15:26:9d:67:
         80:55:73:f7:3d:a9:37:a1:e3:9d:07:51:72:26:9b:85:49:04:
         e5:72:f7:24:39:8b:c1:2e:da:28:94:70:59:84:c3:41:54:62:
         86:3d:93:51:0a:2a:90:8c:e6:9f:9c:78:1a:a2:c2:9d:75:fb:
         50:94:48:8d:57:74:52:da:49:2b:5d:a5:12:89:ff:79:ba:14:
         fa:8d:7a:5b:df:03:3e:a6:66:f4:0f:01:5e:cf:12:39:e2:33:
         82:b3:8b:bc:6f:a9:44:d1:76:1e:ac:4f:7a:3a:ff:7c:f9:73:
         b1:6a:56:7e:eb:99:dc:e6:4e:cf:cd:d2:df:01:68:2c:be:8a:
         d8:36:64:28:ae:78:43:38:b8:b2:57:70:b5:ec:33:5a:b4:d6:
         27:67:7d:3f:0a:fc:5e:78:78:3e:dc:3b:8a:d0:78:ab:1b:87:
         ee:b1:ae:1b:72:52:a4:02:0e:03:f3:24:ac:46:81:f9:91:75:
         26:8e:99:e4:01:45:09:57:de:d7:0e:be:62:ff:86:c1:c1:6f:
         31:dd:a9:a5:7d:b2:3a:22:cb:a0:da:35:5c:7c:83:4f:f9:93:
         69:2f:80:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:31:23 2025 by rpki-client