Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3136382e3139362e3235342e302f32342d3234203d3e203237393736.roa
File:                     3136382e3139362e3235342e302f32342d3234203d3e203237393736.roa (raw, json)
Hash identifier:          /Q/S4qBMUKN6Po1Wb1sSNFdOXJQLZ8VLaTnD2dFUcrM=
Subject key identifier:   38:6B:61:B2:44:9A:64:0E:53:D3:78:40:4E:3F:6E:97:F8:16:4E:C7
Certificate issuer:       /CN=C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39
Certificate serial:       7F1E322F6AB0ED73A768E3C122F03E2689FC584F
Authority key identifier: C4:E4:73:26:7C:7E:D8:DB:FC:CD:20:9A:C0:9A:1C:A7:B8:4A:7C:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3136382e3139362e3235342e302f32342d3234203d3e203237393736.roa
Signing time:             Fri 31 Oct 2025 18:15:07 +0000
ROA not before:           Fri 31 Oct 2025 18:10:07 +0000
ROA not after:            Fri 30 Oct 2026 18:15:07 +0000
asID:                     27976
IP address blocks:        168.196.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 21:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:1e:32:2f:6a:b0:ed:73:a7:68:e3:c1:22:f0:3e:26:89:fc:58:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39
        Validity
            Not Before: Oct 31 18:10:07 2025 GMT
            Not After : Oct 30 18:15:07 2026 GMT
        Subject: CN=386B61B2449A640E53D378404E3F6E97F8164EC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:35:0b:1b:73:db:88:37:ed:d4:c6:7c:f2:b1:
                    45:c9:a3:9b:64:45:d6:a5:fa:3e:46:e8:d3:ba:eb:
                    80:63:9c:4a:1c:79:2d:4b:2e:4a:41:26:d7:56:34:
                    53:c4:0a:4c:29:ab:c1:aa:9d:68:15:be:c9:27:93:
                    9a:c9:37:20:4d:88:8f:f2:0a:93:54:d6:62:b0:a9:
                    91:57:13:da:5d:e7:0c:a3:33:a0:a3:31:c8:db:88:
                    1d:2e:5e:8c:a0:33:b1:a8:e4:2e:9f:11:73:24:cd:
                    b9:7f:c8:d7:c3:8b:28:ac:34:2f:cb:b8:a7:31:9e:
                    b0:50:2a:12:97:da:d3:c8:12:15:e5:33:c6:b8:e1:
                    d4:49:e5:99:fb:44:be:b5:f2:9f:c7:8b:7c:cc:94:
                    27:35:e3:01:0e:f1:40:e4:96:ea:ee:ac:fa:a8:43:
                    54:d5:21:93:3e:2c:48:a7:06:7b:f1:2b:31:da:9f:
                    b8:60:56:75:d2:50:14:08:bf:30:13:78:b1:92:76:
                    44:56:df:ee:5d:10:03:da:08:b9:0c:45:55:ee:c6:
                    9f:ba:65:19:6e:39:93:bb:b8:bf:10:57:f7:00:94:
                    d0:3b:59:25:99:ff:26:44:af:34:c5:0c:b1:eb:9d:
                    aa:f9:f1:4e:4c:10:8b:09:6b:ef:f5:b5:0e:c5:78:
                    14:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:6B:61:B2:44:9A:64:0E:53:D3:78:40:4E:3F:6E:97:F8:16:4E:C7
            X509v3 Authority Key Identifier:
                keyid:C4:E4:73:26:7C:7E:D8:DB:FC:CD:20:9A:C0:9A:1C:A7:B8:4A:7C:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3136382e3139362e3235342e302f32342d3234203d3e203237393736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:f4:fc:7e:53:7d:34:96:08:20:c5:f7:8a:7c:54:97:43:55:
         22:8a:af:e4:2e:1c:f1:c4:b9:61:97:d4:96:03:7c:40:e2:90:
         53:10:53:b9:32:29:ca:bf:9c:43:ec:86:48:d5:e8:da:ac:cd:
         d2:32:3c:1d:fb:c4:ed:2b:22:46:cf:8e:ef:6f:f9:0e:0a:97:
         78:c6:81:a3:f9:8d:07:d3:6b:7e:47:4c:3d:28:9f:a3:9f:58:
         41:8a:00:62:ab:0c:c9:ff:bf:63:af:3a:b3:61:b2:fe:63:15:
         5c:bc:6b:43:03:db:ef:5b:20:b0:69:95:64:41:63:ee:a7:20:
         10:8c:e5:88:c4:c1:04:df:a9:f8:96:21:eb:94:8e:ac:70:89:
         80:70:2b:f5:1e:8c:7a:d5:2a:d8:6b:7d:57:0d:48:0a:e9:f0:
         e1:9e:31:8a:20:62:00:dd:b7:61:d4:cc:49:9f:bc:28:46:1b:
         6c:57:3a:b6:91:0a:51:66:8b:05:6d:6f:a3:df:b1:b6:cf:ec:
         5e:28:fd:fb:62:11:cc:e2:c0:45:70:aa:f7:fc:73:44:05:55:
         94:6e:1c:49:07:83:11:e3:6f:52:ba:26:25:59:41:5d:0a:c1:
         c7:cd:00:06:27:ca:6a:f3:75:b6:33:f2:b6:ed:64:3a:e6:61:
         23:02:07:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 19:41:59 2025 by rpki-client