Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FE46A92A7067D3C86CCAFD0AE9AB56C25164CFEAD6D0A1D473E4D6007FA04EB9/0/3136382e3230352e3138362e302f32342d3234203d3e20323634363932.roa
File:                     3136382e3230352e3138362e302f32342d3234203d3e20323634363932.roa (raw, json)
Hash identifier:          og2jCljDm7CZsUVcVxFrzTk1NzCfHzRisLiexVH6WLY=
Subject key identifier:   3E:7C:A2:83:4F:BA:24:D9:D9:65:08:C2:71:CD:CD:88:7C:E2:0A:E9
Certificate issuer:       /CN=7767E12FC2A8ADE136089C7D9A48E6481098F31E
Certificate serial:       30F94E7D29918C3D2F9CA8D78900BEECD54CC5BC
Authority key identifier: 77:67:E1:2F:C2:A8:AD:E1:36:08:9C:7D:9A:48:E6:48:10:98:F3:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7767E12FC2A8ADE136089C7D9A48E6481098F31E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FE46A92A7067D3C86CCAFD0AE9AB56C25164CFEAD6D0A1D473E4D6007FA04EB9/0/3136382e3230352e3138362e302f32342d3234203d3e20323634363932.roa
Signing time:             Tue 07 Oct 2025 13:35:01 +0000
ROA not before:           Tue 07 Oct 2025 13:30:01 +0000
ROA not after:            Tue 06 Oct 2026 13:35:01 +0000
asID:                     264692
IP address blocks:        168.205.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FE46A92A7067D3C86CCAFD0AE9AB56C25164CFEAD6D0A1D473E4D6007FA04EB9/0/7767E12FC2A8ADE136089C7D9A48E6481098F31E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FE46A92A7067D3C86CCAFD0AE9AB56C25164CFEAD6D0A1D473E4D6007FA04EB9/0/7767E12FC2A8ADE136089C7D9A48E6481098F31E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7767E12FC2A8ADE136089C7D9A48E6481098F31E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:f9:4e:7d:29:91:8c:3d:2f:9c:a8:d7:89:00:be:ec:d5:4c:c5:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7767E12FC2A8ADE136089C7D9A48E6481098F31E
        Validity
            Not Before: Oct  7 13:30:01 2025 GMT
            Not After : Oct  6 13:35:01 2026 GMT
        Subject: CN=3E7CA2834FBA24D9D96508C271CDCD887CE20AE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d1:de:6e:6e:81:43:5b:cd:a9:6f:84:65:6f:
                    5b:2c:35:36:ee:d1:68:72:3d:c9:a4:f3:be:19:06:
                    04:7b:53:46:81:9a:a1:8d:73:ea:82:e7:b6:c4:70:
                    15:ce:4f:c9:be:0a:8a:bf:46:90:54:b3:f1:52:0c:
                    b6:f7:44:a0:de:e0:b0:5a:de:eb:b0:1f:13:29:c9:
                    6c:58:38:d3:a5:6b:e4:a0:4b:c1:25:62:9f:21:10:
                    cd:c8:e4:21:fc:03:d8:a8:e1:c6:2a:77:c7:db:0a:
                    b0:6b:7d:c0:1c:59:f3:77:9a:f7:ad:2b:4f:5b:d4:
                    51:69:82:b3:2b:3e:3d:cc:d1:55:81:fe:d3:18:cc:
                    d7:be:f4:ee:b0:cd:ab:e0:30:8f:44:96:ce:dc:62:
                    fd:3f:f4:4a:81:7f:2d:17:4a:ac:3c:a4:15:06:ee:
                    a3:66:2e:2b:68:f1:de:b9:22:8a:6a:25:84:46:eb:
                    14:b5:81:76:01:92:ef:54:db:de:58:ba:8c:18:46:
                    a1:6d:7b:2d:b9:e1:4b:31:74:ea:66:50:43:46:35:
                    16:20:ec:d7:38:63:11:1b:71:b4:1e:f0:78:50:26:
                    47:9f:80:d5:16:8a:41:28:8c:1b:1c:84:a3:0f:e8:
                    f9:fd:c1:35:8c:cb:fb:53:03:e7:09:6e:fa:f0:74:
                    80:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:7C:A2:83:4F:BA:24:D9:D9:65:08:C2:71:CD:CD:88:7C:E2:0A:E9
            X509v3 Authority Key Identifier:
                keyid:77:67:E1:2F:C2:A8:AD:E1:36:08:9C:7D:9A:48:E6:48:10:98:F3:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FE46A92A7067D3C86CCAFD0AE9AB56C25164CFEAD6D0A1D473E4D6007FA04EB9/0/7767E12FC2A8ADE136089C7D9A48E6481098F31E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7767E12FC2A8ADE136089C7D9A48E6481098F31E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FE46A92A7067D3C86CCAFD0AE9AB56C25164CFEAD6D0A1D473E4D6007FA04EB9/0/3136382e3230352e3138362e302f32342d3234203d3e20323634363932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:29:ff:e9:c8:5b:11:a9:a5:38:14:94:be:42:9f:36:5e:db:
         5e:bf:81:50:31:73:c2:d5:b6:ce:ac:a4:27:e7:83:ea:2e:09:
         ff:c8:67:71:00:d8:dd:39:ca:c9:bd:f9:26:bd:70:2b:11:6d:
         5f:42:0f:30:05:27:4e:c3:c9:16:cd:a8:40:7b:d1:f8:29:5d:
         ed:03:ba:1c:74:51:30:57:47:3c:bc:65:24:4e:93:86:3b:ab:
         f9:99:e5:f2:f5:f9:b6:db:f7:ee:f2:be:fb:8d:09:3a:0a:97:
         5b:57:87:ca:0b:d0:a9:ad:d4:93:66:04:78:6e:b3:81:58:e9:
         74:b6:53:df:e3:ce:20:b9:4d:74:01:03:87:93:ec:b8:ca:3f:
         c5:75:6b:1d:f9:7a:20:0a:c5:00:d0:91:a5:73:01:a5:45:b5:
         a3:00:b7:01:78:78:47:d2:64:18:c8:37:d0:a0:f5:ab:e4:37:
         24:24:ff:1e:09:96:55:d6:f9:1d:d1:4b:24:c5:07:56:6c:c8:
         44:8a:51:db:b5:fa:98:de:11:51:8d:ef:c9:24:0a:99:7e:a2:
         ce:42:3e:1c:0c:70:a3:80:fa:0c:d5:89:df:7e:b9:54:46:4d:
         1b:ef:13:65:40:9d:71:a7:61:c4:39:a9:7b:62:dd:45:3b:f8:
         aa:a2:07:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:32:08 2025 by rpki-client