Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3136382e3139362e3235352e302f32342d3234203d3e203237393736.roa
File:                     3136382e3139362e3235352e302f32342d3234203d3e203237393736.roa (raw, json)
Hash identifier:          GEhEBvNY3Y/UcdjTmxvnGjyeB5ye1vH6XM56Q5XuWFM=
Subject key identifier:   E3:09:7A:54:A6:7D:6A:D9:EF:54:A9:0B:07:1C:45:F0:99:46:F7:6C
Certificate issuer:       /CN=C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39
Certificate serial:       31F22699C7F648055DBB3017B5350B1596C1DD2D
Authority key identifier: C4:E4:73:26:7C:7E:D8:DB:FC:CD:20:9A:C0:9A:1C:A7:B8:4A:7C:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3136382e3139362e3235352e302f32342d3234203d3e203237393736.roa
Signing time:             Fri 31 Oct 2025 18:15:07 +0000
ROA not before:           Fri 31 Oct 2025 18:10:07 +0000
ROA not after:            Fri 30 Oct 2026 18:15:07 +0000
asID:                     27976
IP address blocks:        168.196.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 21:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:f2:26:99:c7:f6:48:05:5d:bb:30:17:b5:35:0b:15:96:c1:dd:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39
        Validity
            Not Before: Oct 31 18:10:07 2025 GMT
            Not After : Oct 30 18:15:07 2026 GMT
        Subject: CN=E3097A54A67D6AD9EF54A90B071C45F09946F76C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:2f:b1:07:10:e5:c6:17:85:46:90:f8:3c:3c:
                    0f:9e:65:ea:b4:24:c7:8d:cf:6e:bd:e6:ba:cd:d3:
                    e5:6f:9e:16:9e:d5:12:c3:3f:76:fb:96:fe:4d:5e:
                    49:ef:95:9a:83:b5:42:bc:42:05:be:ff:94:5d:c7:
                    cb:f9:01:99:e3:28:ac:4c:33:dd:34:f4:19:1a:c0:
                    2f:2a:0f:49:f5:be:d8:94:81:1a:e2:27:52:8a:99:
                    35:ec:79:02:87:7a:fe:90:4a:e9:b5:15:6f:ff:94:
                    3a:ea:8a:d2:b7:3e:2f:7b:87:8c:1a:10:13:34:ef:
                    85:54:10:b2:b9:1f:48:2b:ae:98:75:da:b2:f8:74:
                    db:8a:f4:06:6c:e8:82:cd:39:59:88:b4:07:a2:39:
                    3f:4c:b6:93:e8:d6:ba:14:34:ee:4b:de:f7:ab:24:
                    4c:97:61:d8:0f:c4:1f:40:0a:49:dc:80:d8:5f:14:
                    bc:23:f5:b0:14:d9:97:62:05:97:c8:77:33:eb:31:
                    91:a5:6c:00:85:d7:7c:7a:65:c1:d5:cc:85:92:7a:
                    37:14:68:60:ad:c8:e2:87:34:1a:65:77:95:67:b2:
                    72:1d:df:7d:86:68:b7:c6:d2:0d:19:32:82:a5:66:
                    97:97:8f:7f:0b:32:b2:d2:d9:a1:06:8f:6a:a3:af:
                    d0:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:09:7A:54:A6:7D:6A:D9:EF:54:A9:0B:07:1C:45:F0:99:46:F7:6C
            X509v3 Authority Key Identifier:
                keyid:C4:E4:73:26:7C:7E:D8:DB:FC:CD:20:9A:C0:9A:1C:A7:B8:4A:7C:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3136382e3139362e3235352e302f32342d3234203d3e203237393736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:18:3e:ea:07:39:1d:b9:0f:11:5e:2c:76:91:98:0c:ef:fa:
         79:b3:36:bb:df:1d:dd:21:76:a9:4b:8e:c7:60:84:5b:f9:af:
         f7:a8:bf:40:82:2b:c3:43:98:46:65:0c:ca:a0:11:7c:fc:67:
         be:a9:2d:91:af:8b:ac:f6:17:2f:6f:7c:2f:c5:28:21:df:f0:
         5d:07:f5:40:0e:02:47:77:d3:98:d9:0b:b8:d3:6c:31:58:ef:
         ad:89:48:38:c0:1a:8b:cd:03:ae:01:5d:a2:36:5c:30:06:02:
         07:79:03:ff:4e:5b:13:58:2c:f3:5a:e3:a0:32:af:20:a0:29:
         af:0a:f2:48:2a:08:65:8d:b8:03:2c:1f:34:7e:b5:41:f6:af:
         29:4d:32:37:7b:cc:32:63:47:61:e4:0c:7d:22:f9:46:57:01:
         3e:ee:34:37:c6:f9:6c:4b:32:14:ec:00:68:6c:96:be:76:3e:
         87:eb:e9:d8:54:a3:a3:78:d9:43:9f:1a:b6:e7:0f:c1:3d:d0:
         2b:78:04:51:3a:70:17:cb:0d:dc:69:c9:6f:ee:bd:57:12:b7:
         e7:6a:fb:a1:c0:a2:0e:63:49:64:4c:e4:c4:43:7a:aa:e3:83:
         da:e5:da:52:e9:a0:8e:5a:8b:ac:3d:c8:1b:58:38:5a:27:8f:
         2a:c8:1f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 19:42:27 2025 by rpki-client