Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3130362e302f32342d3234203d3e20323633373633.roa
File:                     3136382e3233342e3130362e302f32342d3234203d3e20323633373633.roa (raw, json)
Hash identifier:          nJX4p+1q2et0ayaWqbKa2IaNhTIsEi4+cGKJPpmXlpY=
Subject key identifier:   F3:1C:4E:03:DE:84:D2:C6:92:6E:1F:84:F8:BE:AA:72:35:FD:93:36
Certificate issuer:       /CN=0D1797043F7F529F13952CEE646AE7365392BBC3
Certificate serial:       3412CA46C1364A206C1818D28A671DEED9612609
Authority key identifier: 0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3130362e302f32342d3234203d3e20323633373633.roa
Signing time:             Fri 30 Jan 2026 21:28:28 +0000
ROA not before:           Fri 30 Jan 2026 21:23:28 +0000
ROA not after:            Fri 29 Jan 2027 21:28:28 +0000
asID:                     263763
IP address blocks:        168.234.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 20:58:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:12:ca:46:c1:36:4a:20:6c:18:18:d2:8a:67:1d:ee:d9:61:26:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D1797043F7F529F13952CEE646AE7365392BBC3
        Validity
            Not Before: Jan 30 21:23:28 2026 GMT
            Not After : Jan 29 21:28:28 2027 GMT
        Subject: CN=F31C4E03DE84D2C6926E1F84F8BEAA7235FD9336
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d5:f4:e5:f7:d7:95:92:00:ea:65:7f:13:bd:
                    02:54:21:1f:48:6e:6a:45:16:48:2e:66:9d:08:ef:
                    ee:46:ab:fd:fd:fa:7d:ca:17:78:94:3c:56:31:1d:
                    7a:f9:cb:7a:94:e0:f7:76:ea:3c:bc:a8:52:40:bd:
                    0a:8f:8e:d0:c4:72:bd:ba:6a:5c:dc:e3:bf:0f:49:
                    df:3d:83:1a:b6:21:26:b3:a4:0c:ce:dd:f1:2e:c3:
                    9f:a9:3c:35:43:0f:c8:7d:a9:7b:05:0f:f1:a4:53:
                    f1:0c:3a:8a:11:8f:4d:22:60:ae:ea:1a:dc:a4:da:
                    c1:f5:d3:0e:ec:17:2b:4d:f7:9a:4f:4a:a4:7e:63:
                    4d:d4:47:c1:5a:5c:ac:9a:5b:01:45:61:dc:de:86:
                    31:07:30:e1:54:11:86:04:31:de:73:e5:24:fd:2c:
                    1e:a6:7d:7c:15:f1:d4:75:4b:b4:90:c1:3e:93:64:
                    f2:63:fb:81:71:e1:3a:00:75:ea:59:80:e5:46:72:
                    ba:2e:88:51:cd:00:3e:b0:4d:32:2a:ae:3b:87:7b:
                    01:a1:0e:7a:ee:d1:f4:1a:7c:99:27:7c:9f:aa:d6:
                    f4:27:ac:25:65:e3:17:bf:a0:31:08:b8:29:f6:e7:
                    63:0a:50:4c:d6:f0:8c:97:28:c2:c2:4c:65:ef:19:
                    f5:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:1C:4E:03:DE:84:D2:C6:92:6E:1F:84:F8:BE:AA:72:35:FD:93:36
            X509v3 Authority Key Identifier:
                keyid:0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3130362e302f32342d3234203d3e20323633373633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.234.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:d6:e8:96:69:d3:5a:33:9d:2c:b2:d7:eb:f3:67:e7:09:c2:
         0a:6a:21:83:82:e1:07:da:a0:7b:54:1c:7c:67:23:2c:91:fa:
         e3:bd:9f:53:b7:81:44:32:cf:c7:76:7a:54:ef:04:1d:b4:db:
         a7:01:2b:52:3f:fa:4a:03:1c:f4:a4:27:3f:8c:40:03:53:33:
         eb:19:50:34:ca:8a:b4:7c:4e:f1:65:97:9e:e3:c2:7e:f2:12:
         7e:90:c6:6f:73:45:10:9b:39:b5:e7:eb:16:38:b8:e0:9d:c0:
         0a:d8:cb:ae:cf:96:2a:a7:ea:c5:2f:05:4f:95:6d:12:5e:60:
         4e:ce:df:dc:b9:47:12:3f:ff:1a:49:d6:42:66:83:7d:c6:ca:
         d9:32:54:fc:e6:ba:4e:7f:6e:cc:fa:f2:86:07:1a:ac:81:ed:
         e0:fc:54:4e:a2:43:68:40:39:c2:fb:44:de:a9:6e:4a:61:f4:
         88:00:e6:34:97:64:6b:91:ed:ca:6c:8a:f2:af:0e:4d:5d:85:
         4e:7b:27:d1:fa:1a:10:77:4a:64:fb:30:cf:a0:2c:cb:26:35:
         f8:6e:0c:55:29:92:3f:29:26:4f:58:26:ed:b5:70:0e:62:35:
         d6:30:7f:ef:66:f6:ee:98:6e:6f:4e:d8:08:cf:a1:a6:7d:df:
         3d:5e:3e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:07:26 2026 by rpki-client