Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3136382e3139362e3235322e302f32322d3232203d3e203237393736.roa
File:                     3136382e3139362e3235322e302f32322d3232203d3e203237393736.roa (raw, json)
Hash identifier:          wi/K6XFzYOmFcJF/rkP5rQC89fjkh6e7tONC7Wmtd2o=
Subject key identifier:   1C:7F:04:C1:A6:B0:C9:0C:3A:58:A0:1B:1F:6A:C5:9D:6C:FE:7C:6A
Certificate issuer:       /CN=C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39
Certificate serial:       534844E8DC50BFFFA1D770B19E7525E85D6D1CCD
Authority key identifier: C4:E4:73:26:7C:7E:D8:DB:FC:CD:20:9A:C0:9A:1C:A7:B8:4A:7C:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3136382e3139362e3235322e302f32322d3232203d3e203237393736.roa
Signing time:             Fri 31 Oct 2025 18:15:01 +0000
ROA not before:           Fri 31 Oct 2025 18:10:01 +0000
ROA not after:            Fri 30 Oct 2026 18:15:01 +0000
asID:                     27976
IP address blocks:        168.196.252.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 21:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:48:44:e8:dc:50:bf:ff:a1:d7:70:b1:9e:75:25:e8:5d:6d:1c:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39
        Validity
            Not Before: Oct 31 18:10:01 2025 GMT
            Not After : Oct 30 18:15:01 2026 GMT
        Subject: CN=1C7F04C1A6B0C90C3A58A01B1F6AC59D6CFE7C6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c0:8a:94:3b:9a:76:b2:04:bb:e6:13:95:e2:
                    a4:a2:2a:bb:59:6a:4e:2d:aa:15:e9:75:f9:b7:bd:
                    b2:fe:f5:77:3a:7c:19:5c:6b:cf:59:9c:60:ec:ee:
                    dd:14:91:22:82:7e:14:80:95:ad:94:b6:94:64:0e:
                    c4:b4:64:4d:65:17:17:de:45:43:f3:12:dc:b6:cd:
                    2c:07:0c:f1:6e:bf:21:4f:88:74:c2:33:bc:b6:96:
                    ab:e5:72:e3:d7:da:41:89:33:b2:73:85:97:ad:ce:
                    a1:87:d0:50:2b:b9:cb:ad:03:ba:d0:08:85:99:e8:
                    b4:5b:98:11:68:e4:66:5f:c3:a6:9a:25:53:b5:04:
                    15:6d:7b:d3:9b:1d:c7:77:f4:1f:e5:25:68:bc:78:
                    fb:53:1b:ad:36:e6:82:54:dd:3d:3e:e1:03:50:5a:
                    cd:1b:6c:40:a8:e1:e1:14:02:1f:22:ce:3f:e1:a2:
                    ef:9b:7c:82:f3:c4:0d:41:ee:b9:25:2f:46:ae:70:
                    85:a2:cd:45:2f:32:8c:2f:32:0f:86:69:d9:1a:8e:
                    e9:ec:7c:c2:c0:8f:f9:0a:05:25:4e:f9:fc:1b:aa:
                    c8:68:67:43:6d:8f:9c:c2:8f:e7:6f:02:a6:21:34:
                    4a:b6:17:96:80:5c:14:fc:f5:32:39:fb:5d:5a:4a:
                    df:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:7F:04:C1:A6:B0:C9:0C:3A:58:A0:1B:1F:6A:C5:9D:6C:FE:7C:6A
            X509v3 Authority Key Identifier:
                keyid:C4:E4:73:26:7C:7E:D8:DB:FC:CD:20:9A:C0:9A:1C:A7:B8:4A:7C:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3136382e3139362e3235322e302f32322d3232203d3e203237393736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a5:2f:3d:f6:39:1b:f4:3b:bb:32:a0:be:7f:16:3c:0c:5d:df:
         ce:b5:cd:b2:fd:03:58:29:53:88:49:b2:25:82:f4:77:dd:83:
         b4:1b:14:50:7b:98:db:1f:a9:d6:22:22:4d:3e:dd:1f:83:2d:
         22:56:57:95:34:8d:97:20:2e:aa:b5:ad:ee:ea:97:9a:73:ae:
         c3:ed:74:c7:b5:20:46:82:78:20:1e:65:ff:e1:4f:dc:33:af:
         44:76:b5:30:95:7d:8b:c7:b5:89:84:ac:ca:7e:1a:6d:9f:88:
         7d:7f:21:3d:b7:88:35:06:73:e9:c4:be:88:11:bc:82:a9:b0:
         45:7b:da:3e:dc:c5:69:70:0a:37:b4:17:15:ad:d4:9a:b2:7e:
         e1:5d:ee:89:b2:d4:11:68:40:a3:a2:76:ee:d4:51:5b:c5:da:
         12:5b:2d:c6:03:23:16:7b:c4:a7:a3:61:1f:45:f6:54:ce:79:
         1d:e9:1e:b3:85:8a:1a:9e:35:57:67:79:b9:5d:d1:f6:3d:38:
         4b:12:a0:d5:1e:d6:43:9c:fc:f8:2f:e4:8e:0a:6f:06:20:0b:
         9b:b7:14:15:bd:c3:dc:5f:47:92:4b:fd:0c:21:3f:6e:59:54:
         83:13:cb:e4:45:88:39:0e:1a:de:a7:41:da:2f:68:0c:1e:3c:
         ab:cc:b4:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 19:40:41 2025 by rpki-client