Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/3136382e3233322e3130332e302f32342d3234203d3e203631343631.roa
File:                     3136382e3233322e3130332e302f32342d3234203d3e203631343631.roa (raw, json)
Hash identifier:          dDvih6Co2KczRYTPJboCaQfV1BfiIUOo6/RGNbSfGTw=
Subject key identifier:   4D:0C:C5:63:D4:53:DD:F8:6C:5E:28:45:29:AC:3B:DE:AC:29:3E:BB
Certificate issuer:       /CN=B137142754DED915D3341628E74A8B91AF0CB76A
Certificate serial:       73DE055C96CEC7ECDDBC273EE6021E9D0279C9AE
Authority key identifier: B1:37:14:27:54:DE:D9:15:D3:34:16:28:E7:4A:8B:91:AF:0C:B7:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/3136382e3233322e3130332e302f32342d3234203d3e203631343631.roa
Signing time:             Fri 03 Apr 2026 14:37:21 +0000
ROA not before:           Fri 03 Apr 2026 14:32:21 +0000
ROA not after:            Fri 02 Apr 2027 14:37:21 +0000
asID:                     61461
IP address blocks:        168.232.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/B137142754DED915D3341628E74A8B91AF0CB76A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/B137142754DED915D3341628E74A8B91AF0CB76A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 12 Apr 2026 05:52:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:de:05:5c:96:ce:c7:ec:dd:bc:27:3e:e6:02:1e:9d:02:79:c9:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B137142754DED915D3341628E74A8B91AF0CB76A
        Validity
            Not Before: Apr  3 14:32:21 2026 GMT
            Not After : Apr  2 14:37:21 2027 GMT
        Subject: CN=4D0CC563D453DDF86C5E284529AC3BDEAC293EBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:de:0d:a9:fd:72:08:cb:08:4d:44:64:e4:8c:
                    d6:08:03:61:4c:02:17:6a:1b:23:14:de:70:4e:da:
                    a4:7a:8e:45:ea:95:3d:3f:ea:4d:bd:90:55:57:65:
                    a7:fc:34:98:d4:ff:24:c9:ee:48:1a:60:14:69:86:
                    70:11:9f:1e:9f:c4:27:09:9e:c5:50:c5:6a:ac:82:
                    33:7b:3e:c2:32:2f:78:3c:ff:30:6d:c4:86:52:22:
                    98:0c:b5:69:bb:50:77:16:0e:dc:ff:ec:85:f3:cf:
                    84:68:14:dd:7b:b4:95:35:00:0e:58:25:bc:0a:1b:
                    c6:a5:d5:53:7a:16:7c:4c:cd:77:15:50:e3:b3:25:
                    7d:5c:35:5f:ff:7a:5f:6d:8d:90:28:c5:99:e7:9f:
                    96:59:74:16:5c:39:b6:99:ed:33:53:0d:80:79:27:
                    9d:c7:9d:c2:e7:8d:13:48:38:31:1f:a0:3b:33:b0:
                    26:c4:f0:be:8d:c3:10:8a:67:6b:85:9c:bc:19:44:
                    f1:b8:3f:3b:53:57:1b:2a:13:dd:13:e3:76:e1:2d:
                    0c:ba:6c:36:26:5b:49:84:6f:58:23:a8:24:fc:d5:
                    dc:05:c2:db:6f:56:16:e5:d1:50:8c:6d:b0:e8:44:
                    17:1d:54:17:13:82:0d:0a:03:a0:5b:19:53:1b:fd:
                    8c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:0C:C5:63:D4:53:DD:F8:6C:5E:28:45:29:AC:3B:DE:AC:29:3E:BB
            X509v3 Authority Key Identifier:
                keyid:B1:37:14:27:54:DE:D9:15:D3:34:16:28:E7:4A:8B:91:AF:0C:B7:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/B137142754DED915D3341628E74A8B91AF0CB76A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/3136382e3233322e3130332e302f32342d3234203d3e203631343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:1c:cc:a3:da:a5:35:12:37:38:bd:9c:20:6a:a5:e4:06:aa:
         89:06:c5:9e:9b:05:28:6b:64:7a:f8:0a:c3:20:ec:f0:ee:5e:
         61:6e:72:af:45:03:a4:20:ae:ed:24:52:23:a6:33:9e:90:a4:
         bc:5e:11:86:d3:a6:65:07:13:53:67:22:70:7c:b3:53:c3:65:
         50:6f:74:16:9d:2e:e2:4e:55:47:8b:48:4d:cf:11:8e:6e:e5:
         80:11:19:50:c3:fc:2c:b5:07:87:fe:4d:2e:ea:38:36:70:a4:
         a5:e4:7f:99:9c:0c:c8:70:ee:09:ae:94:1e:49:aa:1c:66:26:
         4c:7f:2c:51:c3:1b:bd:49:a0:9d:e0:7b:ee:25:6a:fc:05:ce:
         22:d0:ca:6e:75:22:86:17:28:b5:4b:70:db:ec:db:f4:72:e7:
         b5:e6:1a:45:b9:85:e1:5a:39:91:6b:ee:7e:57:35:a1:19:05:
         f3:be:94:36:7a:b3:d9:c9:49:58:e7:28:de:fc:07:14:c9:b5:
         8c:41:f4:f7:9a:bf:83:8d:95:2d:42:e0:a4:fe:8c:be:96:4f:
         9b:f8:f5:2e:88:91:37:cf:8f:67:34:e7:7e:e5:26:20:69:87:
         84:cb:d8:09:c0:97:a8:e8:74:9f:be:55:03:ec:7e:46:07:50:
         06:5b:1d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 06:16:13 2026 by rpki-client