Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DAA6AC625BA95DDD02AAE75BB21A588A2D05CBF3D851C77F67998CC5BC25D626/0/3136382e3139372e3231362e302f32342d3234203d3e20323634373834.roa
File:                     3136382e3139372e3231362e302f32342d3234203d3e20323634373834.roa (raw, json)
Hash identifier:          CYen7kZLDDUtaZTAcb2wQHoaVnO4DCk5hnTDLjA+Nhc=
Subject key identifier:   27:B1:A8:D6:40:AF:25:77:A8:B2:C0:56:04:DE:6F:D7:9C:E0:45:4A
Certificate issuer:       /CN=7328461355B304B789F60508DF555EAC428848F4
Certificate serial:       74741B2BFF1ECEE455E3F9A956AD811FC9F7C452
Authority key identifier: 73:28:46:13:55:B3:04:B7:89:F6:05:08:DF:55:5E:AC:42:88:48:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7328461355B304B789F60508DF555EAC428848F4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DAA6AC625BA95DDD02AAE75BB21A588A2D05CBF3D851C77F67998CC5BC25D626/0/3136382e3139372e3231362e302f32342d3234203d3e20323634373834.roa
Signing time:             Fri 15 May 2026 13:40:01 +0000
ROA not before:           Fri 15 May 2026 13:35:01 +0000
ROA not after:            Fri 14 May 2027 13:40:01 +0000
asID:                     264784
IP address blocks:        168.197.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DAA6AC625BA95DDD02AAE75BB21A588A2D05CBF3D851C77F67998CC5BC25D626/0/7328461355B304B789F60508DF555EAC428848F4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DAA6AC625BA95DDD02AAE75BB21A588A2D05CBF3D851C77F67998CC5BC25D626/0/7328461355B304B789F60508DF555EAC428848F4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7328461355B304B789F60508DF555EAC428848F4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 02 Jun 2026 03:55:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:74:1b:2b:ff:1e:ce:e4:55:e3:f9:a9:56:ad:81:1f:c9:f7:c4:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7328461355B304B789F60508DF555EAC428848F4
        Validity
            Not Before: May 15 13:35:01 2026 GMT
            Not After : May 14 13:40:01 2027 GMT
        Subject: CN=27B1A8D640AF2577A8B2C05604DE6FD79CE0454A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:47:05:57:39:67:b1:7e:fe:c5:13:fc:be:82:
                    be:d6:be:7c:0c:7c:6c:e4:d3:4a:11:c3:13:3b:ac:
                    31:f0:82:de:c3:61:3d:ed:1d:16:51:26:e7:29:b4:
                    3b:a5:7f:67:33:66:7d:ea:61:3f:36:cf:b5:48:6b:
                    36:3f:88:15:c1:5c:ea:a5:2f:ac:36:a3:4c:5b:fe:
                    de:14:41:d6:27:31:b2:10:01:fb:2d:81:07:0d:5f:
                    25:32:1e:bf:1a:57:d1:00:f3:59:1e:73:b2:c0:40:
                    33:80:2f:fb:b8:cc:8e:43:00:dd:7b:4c:42:a8:06:
                    65:1a:60:d7:c5:96:df:2b:ae:13:ff:08:44:42:3d:
                    99:c6:dd:e2:da:32:c2:48:02:6a:c0:03:a9:ee:a4:
                    f8:d9:b2:17:74:1e:2f:77:fa:88:8b:cf:ee:ca:35:
                    58:ee:c1:df:dd:cb:dc:85:d9:e9:b7:72:6a:e4:71:
                    5c:87:8d:54:9a:7b:eb:8d:93:4b:fe:7e:2e:d5:e0:
                    72:75:c8:14:50:6c:8f:10:61:8a:f8:fc:3b:8e:56:
                    31:6f:c2:e9:57:16:43:9e:14:90:f1:48:e8:c0:cd:
                    51:e2:b7:33:d0:16:05:09:25:8c:43:81:53:00:2b:
                    f6:f1:2d:e8:eb:e7:8d:bf:d0:e5:2a:7b:62:9f:17:
                    7e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:B1:A8:D6:40:AF:25:77:A8:B2:C0:56:04:DE:6F:D7:9C:E0:45:4A
            X509v3 Authority Key Identifier:
                keyid:73:28:46:13:55:B3:04:B7:89:F6:05:08:DF:55:5E:AC:42:88:48:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DAA6AC625BA95DDD02AAE75BB21A588A2D05CBF3D851C77F67998CC5BC25D626/0/7328461355B304B789F60508DF555EAC428848F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7328461355B304B789F60508DF555EAC428848F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DAA6AC625BA95DDD02AAE75BB21A588A2D05CBF3D851C77F67998CC5BC25D626/0/3136382e3139372e3231362e302f32342d3234203d3e20323634373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         de:b8:7b:fe:b9:15:95:9e:17:1d:74:93:fd:32:7f:a8:23:3d:
         a9:24:c4:8c:39:e5:ef:f2:a2:1c:1d:87:58:dd:fd:f8:8b:e2:
         12:23:90:1f:49:d4:7c:f9:21:d8:23:84:46:f4:01:c5:7d:a9:
         f1:4b:a3:c5:9b:b3:e6:ba:a6:00:88:92:8c:a9:0f:ec:58:01:
         77:a3:47:98:ee:6d:54:8a:9e:28:41:2b:6b:ca:4c:9a:40:52:
         f5:ef:13:c2:ec:3a:ea:74:82:b7:84:44:8f:10:da:9a:0e:99:
         ba:bc:56:a5:8c:b5:25:39:2e:05:dd:71:8d:3e:9d:c4:6a:46:
         6c:dc:56:78:10:a5:7b:b3:9f:aa:bf:12:e3:82:46:c2:34:33:
         5a:51:f1:9e:27:e0:1b:12:43:13:37:f7:26:06:7a:96:bf:c0:
         04:be:56:e8:0f:d2:49:16:b3:5c:aa:21:25:36:f7:cf:d3:ae:
         25:39:d3:85:06:2e:9a:26:f9:19:1c:3d:b5:86:24:ad:d7:e9:
         a3:7a:6c:9f:4e:48:54:3b:0b:15:b0:68:50:e9:ab:12:0c:1b:
         c4:62:18:1a:a2:9b:17:db:9e:10:b6:8e:61:91:6c:54:77:a1:
         3b:49:88:e8:b9:2e:5d:e3:39:b5:09:ac:9e:fe:fb:45:08:8a:
         b1:fa:fc:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:26:45 2026 by rpki-client