Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e3137312e302f32342d3234203d3e203236363137.roa
File:                     3136382e3234332e3137312e302f32342d3234203d3e203236363137.roa (raw, json)
Hash identifier:          /5kVYUJT+hRE+oTdkAn8Sz9MIWrVYP78Yj4mgZ9XMdw=
Subject key identifier:   2C:53:B2:7B:52:A0:99:9C:4D:8A:F8:76:2B:42:E4:F2:FE:A8:AC:20
Certificate issuer:       /CN=D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA
Certificate serial:       4163619647B291A149FEA832E05BF4B123D22570
Authority key identifier: D3:50:3D:03:E3:D4:DF:A0:76:7F:6D:FF:3B:A7:1D:D7:B6:23:6A:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e3137312e302f32342d3234203d3e203236363137.roa
Signing time:             Fri 22 May 2026 17:43:46 +0000
ROA not before:           Fri 22 May 2026 17:38:46 +0000
ROA not after:            Fri 21 May 2027 17:43:46 +0000
asID:                     26617
IP address blocks:        168.243.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 11:03:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:63:61:96:47:b2:91:a1:49:fe:a8:32:e0:5b:f4:b1:23:d2:25:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA
        Validity
            Not Before: May 22 17:38:46 2026 GMT
            Not After : May 21 17:43:46 2027 GMT
        Subject: CN=2C53B27B52A0999C4D8AF8762B42E4F2FEA8AC20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:da:4f:cf:38:b9:1c:4e:d8:7e:50:ba:64:1f:
                    c0:90:03:c3:51:b4:a2:f4:40:79:1f:5f:1a:97:ed:
                    d6:0f:93:58:a3:f5:d2:af:75:b1:c1:f8:47:a9:48:
                    01:60:91:a9:75:ed:7e:fd:a6:81:77:7c:e0:5d:fc:
                    a1:29:4d:dd:6d:02:22:b5:ac:d0:02:96:b0:a9:5b:
                    25:55:01:d4:ab:69:92:66:2b:67:dd:f9:2d:0f:c5:
                    29:3a:21:37:a4:33:bd:25:7e:4a:01:82:df:1c:bf:
                    17:96:71:ac:27:93:99:ed:7c:99:74:d4:5f:a1:b1:
                    44:84:8d:36:f7:5d:28:7d:4a:01:6f:41:67:b9:6d:
                    fe:29:40:59:93:19:98:47:e6:fc:b5:d7:eb:84:85:
                    10:5f:6c:c0:80:1e:2b:29:40:b3:2c:50:1e:16:28:
                    5f:79:ac:4c:19:9f:45:ea:93:32:75:0f:d0:3c:e1:
                    1d:85:8e:57:64:e3:ac:b7:3a:87:16:9b:c7:f3:70:
                    67:62:fd:83:b2:3d:6d:1b:bb:e5:5e:ac:4f:db:f9:
                    01:13:cb:a8:9b:1c:fa:3d:c6:68:f9:93:af:f0:dd:
                    2d:cb:fc:95:e4:df:b4:fa:f3:74:df:6b:39:a4:4e:
                    17:86:64:42:46:40:81:0f:b8:a3:fa:16:11:f9:db:
                    a6:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:53:B2:7B:52:A0:99:9C:4D:8A:F8:76:2B:42:E4:F2:FE:A8:AC:20
            X509v3 Authority Key Identifier:
                keyid:D3:50:3D:03:E3:D4:DF:A0:76:7F:6D:FF:3B:A7:1D:D7:B6:23:6A:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e3137312e302f32342d3234203d3e203236363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.243.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:ca:0d:b7:7a:77:39:85:83:1d:2b:a0:f4:66:4a:ca:63:aa:
         41:3e:7a:2f:92:ed:f3:39:c6:74:4f:c0:0e:2a:6b:b2:dc:f4:
         3f:e0:74:7c:96:05:57:4c:05:38:7c:56:2b:b2:dc:ee:4a:70:
         b7:d4:79:c7:f2:6b:ba:58:60:e6:d8:33:a6:ad:cc:2c:7f:55:
         cb:16:b9:8c:d1:0e:5d:61:84:de:80:cf:97:d0:04:8f:c7:7a:
         55:bb:0f:e2:d9:76:c3:a4:34:b6:cd:2e:79:6a:f1:3b:ae:74:
         79:d3:f2:40:a4:04:32:a7:f0:19:29:6b:de:a8:f7:8c:c2:c8:
         2f:03:57:f6:20:95:be:51:d3:9d:84:04:10:2f:78:80:97:51:
         49:9c:d4:61:8d:9f:94:5b:0b:a6:ee:38:e4:d0:35:8d:2a:73:
         80:ac:18:08:a4:12:a3:cf:15:e8:b6:7f:0b:98:b4:c5:2e:f9:
         5a:a4:6a:d4:56:db:05:7b:72:bd:23:0f:9b:ef:57:57:06:1c:
         3f:ee:db:f3:62:bb:92:b2:ce:58:03:e7:57:6c:a4:14:23:83:
         57:72:e7:cf:93:01:19:d7:a8:52:5e:4b:1e:12:80:60:f7:2d:
         5d:99:c1:3d:f4:42:0a:e0:c5:21:3d:5c:c8:55:10:c1:68:db:
         76:30:44:95
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUQWNhlkeykaFJ/qgy4Fv0sSPSJXAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM1MDNEMDNFM0Q0REZBMDc2N0Y2REZGM0JBNzFERDdC
NjIzNkFGQTAeFw0yNjA1MjIxNzM4NDZaFw0yNzA1MjExNzQzNDZaMDMxMTAvBgNV
BAMTKDJDNTNCMjdCNTJBMDk5OUM0RDhBRjg3NjJCNDJFNEYyRkVBOEFDMjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+2k/POLkcTth+ULpkH8CQA8NR
tKL0QHkfXxqX7dYPk1ij9dKvdbHB+EepSAFgkal17X79poF3fOBd/KEpTd1tAiK1
rNAClrCpWyVVAdSraZJmK2fd+S0PxSk6ITekM70lfkoBgt8cvxeWcawnk5ntfJl0
1F+hsUSEjTb3XSh9SgFvQWe5bf4pQFmTGZhH5vy11+uEhRBfbMCAHispQLMsUB4W
KF95rEwZn0XqkzJ1D9A84R2Fjldk46y3OocWm8fzcGdi/YOyPW0bu+VerE/b+QET
y6ibHPo9xmj5k6/w3S3L/JXk37T683TfazmkTheGZEJGQIEPuKP6FhH526ahAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQULFOye1KgmZxNivh2K0Lk8v6orCAwHwYDVR0j
BBgwFoAU01A9A+PU36B2f23/O6cd17YjavowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wQkIwNzFEOTZEOEZCRTJBODY5OTA5MDVEQzE3RTE5OTM3
MEE1NzA1MjM2QTAwMDY1RDY4NTYzRkFBREI4NUU2LzAvRDM1MDNEMDNFM0Q0REZB
MDc2N0Y2REZGM0JBNzFERDdCNjIzNkFGQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EMzUwM0QwM0UzRDRERkEwNzY3
RjZERkYzQkE3MUREN0I2MjM2QUZBLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMEJCMDcxRDk2RDhGQkUyQTg2OTkwOTA1REMxN0UxOTkzNzBBNTcwNTIz
NkEwMDA2NUQ2ODU2M0ZBQURCODVFNi8wLzMxMzYzODJlMzIzNDMzMmUzMTM3MzEy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzYzMTM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqPOr
MA0GCSqGSIb3DQEBCwUAA4IBAQCdyg23enc5hYMdK6D0ZkrKY6pBPnovku3zOcZ0
T8AOKmuy3PQ/4HR8lgVXTAU4fFYrstzuSnC31HnH8mu6WGDm2DOmrcwsf1XLFrmM
0Q5dYYTegM+X0ASPx3pVuw/i2XbDpDS2zS55avE7rnR50/JApAQyp/AZKWveqPeM
wsgvA1f2IJW+UdOdhAQQL3iAl1FJnNRhjZ+UWwum7jjk0DWNKnOArBgIpBKjzxXo
tn8LmLTFLvlapGrUVtsFe3K9Iw+b71dXBhw/7tvzYruSss5YA+dXbKQUI4NXcufP
kwEZ16hSXkseEoBg9y1dmcE99EIK4MUhPVzIVRDBaNt2MESV
-----END CERTIFICATE-----
Generated at Thu Jun 11 09:58:41 2026 by rpki-client