Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e3230362e302f32332d3234203d3e203136353932.roa
File:                     3136382e3234332e3230362e302f32332d3234203d3e203136353932.roa (raw, json)
Hash identifier:          cWeE5WBdS4EPWrzt0QL59BF7wXNmNWLf45rAikxeBkU=
Subject key identifier:   AF:55:43:D9:03:ED:81:53:47:3C:2F:8E:85:E5:D6:7B:E7:91:EA:72
Certificate issuer:       /CN=D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA
Certificate serial:       4FF5D4B791A968457D54326FB44B1D1B555A827D
Authority key identifier: D3:50:3D:03:E3:D4:DF:A0:76:7F:6D:FF:3B:A7:1D:D7:B6:23:6A:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e3230362e302f32332d3234203d3e203136353932.roa
Signing time:             Thu 21 May 2026 21:43:38 +0000
ROA not before:           Thu 21 May 2026 21:38:38 +0000
ROA not after:            Thu 20 May 2027 21:43:38 +0000
asID:                     16592
IP address blocks:        168.243.206.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 11:03:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:f5:d4:b7:91:a9:68:45:7d:54:32:6f:b4:4b:1d:1b:55:5a:82:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA
        Validity
            Not Before: May 21 21:38:38 2026 GMT
            Not After : May 20 21:43:38 2027 GMT
        Subject: CN=AF5543D903ED8153473C2F8E85E5D67BE791EA72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:88:07:5c:b3:9b:f2:74:a1:37:df:ce:4a:83:
                    bf:21:91:03:fe:55:0c:93:d9:62:b6:e2:6e:db:72:
                    47:ec:bc:3e:f8:d9:58:e5:c1:a9:06:7f:b4:12:2a:
                    33:b6:cb:e1:25:99:7a:5a:b4:39:94:83:8a:e2:19:
                    c2:a3:70:4b:e6:30:57:a5:9c:94:e0:41:a1:fb:f2:
                    51:07:f5:4d:62:af:27:5d:e2:cb:67:e6:cb:b3:0f:
                    22:ad:eb:35:4b:cc:68:ed:e7:aa:cb:d4:bb:d5:dc:
                    b7:02:5c:5f:3f:dd:98:7d:d8:41:1c:71:22:20:56:
                    87:c1:f7:72:a9:50:a2:d3:b6:dd:7d:4b:84:ee:17:
                    de:a4:2b:1a:5a:14:9c:61:c3:e2:04:1b:ce:4c:45:
                    f4:47:e3:7b:f1:09:d7:fd:81:ee:7b:dd:66:57:2c:
                    a4:f1:e7:5b:d5:35:2c:a0:42:ad:00:ca:83:83:05:
                    d0:6a:04:56:b4:a7:00:33:2c:13:41:ee:53:58:76:
                    e1:55:b1:41:82:8f:ad:8d:ae:98:78:ab:9b:c8:5d:
                    f6:af:50:a6:2d:93:fb:4f:e2:3f:d5:b0:08:b6:fc:
                    aa:98:dc:c1:a0:9b:36:6b:4e:b2:f3:c3:3b:dc:73:
                    f4:a9:ed:be:c6:1a:ba:0b:28:4e:41:00:f9:eb:0c:
                    61:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:55:43:D9:03:ED:81:53:47:3C:2F:8E:85:E5:D6:7B:E7:91:EA:72
            X509v3 Authority Key Identifier:
                keyid:D3:50:3D:03:E3:D4:DF:A0:76:7F:6D:FF:3B:A7:1D:D7:B6:23:6A:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e3230362e302f32332d3234203d3e203136353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.243.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2e:d0:50:a6:a9:be:d7:c9:2a:25:99:6e:7e:a0:fb:7f:53:da:
         5c:e9:f4:1e:06:bc:2c:6e:44:93:7c:17:fe:5d:5d:94:73:f5:
         9a:c3:ff:e5:25:b8:93:6e:6f:8e:a2:a8:db:68:1f:b9:8b:bd:
         d0:fb:00:fb:6d:e4:9a:c1:e3:01:57:00:44:11:34:d7:bf:51:
         9e:6a:10:c5:f0:14:93:14:8f:f9:7d:a8:85:3f:8b:21:f2:7c:
         8b:cd:97:f1:66:1d:1b:be:7c:6e:e5:21:59:42:f7:4f:2d:11:
         81:db:9c:64:b0:68:0d:d0:ba:04:07:c7:12:5b:8f:3e:2b:c4:
         df:73:8b:55:94:96:02:09:65:ef:20:e9:18:c2:65:c3:ab:d8:
         0f:cc:a0:76:84:8c:bf:f5:34:45:fc:4e:53:80:ff:b4:29:07:
         3e:9c:0f:61:96:d8:d9:14:ba:b8:65:6a:4f:7a:20:3e:bb:e5:
         6c:77:6a:a2:de:1d:9c:27:b3:da:80:96:a4:9e:39:82:66:e2:
         28:60:c0:a5:7d:2f:d0:74:83:e9:0e:aa:08:56:57:44:fb:9d:
         69:57:4b:48:27:0d:cf:8d:92:d1:d6:93:48:0b:db:14:80:22:
         64:4d:00:e9:58:95:2d:90:e1:03:32:c3:18:e0:91:9b:de:41:
         3a:58:14:ad
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUT/XUt5GpaEV9VDJvtEsdG1Vagn0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM1MDNEMDNFM0Q0REZBMDc2N0Y2REZGM0JBNzFERDdC
NjIzNkFGQTAeFw0yNjA1MjEyMTM4MzhaFw0yNzA1MjAyMTQzMzhaMDMxMTAvBgNV
BAMTKEFGNTU0M0Q5MDNFRDgxNTM0NzNDMkY4RTg1RTVENjdCRTc5MUVBNzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8iAdcs5vydKE3385Kg78hkQP+
VQyT2WK24m7bckfsvD742VjlwakGf7QSKjO2y+ElmXpatDmUg4riGcKjcEvmMFel
nJTgQaH78lEH9U1irydd4stn5suzDyKt6zVLzGjt56rL1LvV3LcCXF8/3Zh92EEc
cSIgVofB93KpUKLTtt19S4TuF96kKxpaFJxhw+IEG85MRfRH43vxCdf9ge573WZX
LKTx51vVNSygQq0AyoODBdBqBFa0pwAzLBNB7lNYduFVsUGCj62Nrph4q5vIXfav
UKYtk/tP4j/VsAi2/KqY3MGgmzZrTrLzwzvcc/Sp7b7GGroLKE5BAPnrDGE7AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUr1VD2QPtgVNHPC+OheXWe+eR6nIwHwYDVR0j
BBgwFoAU01A9A+PU36B2f23/O6cd17YjavowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wQkIwNzFEOTZEOEZCRTJBODY5OTA5MDVEQzE3RTE5OTM3
MEE1NzA1MjM2QTAwMDY1RDY4NTYzRkFBREI4NUU2LzAvRDM1MDNEMDNFM0Q0REZB
MDc2N0Y2REZGM0JBNzFERDdCNjIzNkFGQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EMzUwM0QwM0UzRDRERkEwNzY3
RjZERkYzQkE3MUREN0I2MjM2QUZBLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMEJCMDcxRDk2RDhGQkUyQTg2OTkwOTA1REMxN0UxOTkzNzBBNTcwNTIz
NkEwMDA2NUQ2ODU2M0ZBQURCODVFNi8wLzMxMzYzODJlMzIzNDMzMmUzMjMwMzYy
ZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMTM2MzUzOTMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqPPO
MA0GCSqGSIb3DQEBCwUAA4IBAQAu0FCmqb7XySolmW5+oPt/U9pc6fQeBrwsbkST
fBf+XV2Uc/Waw//lJbiTbm+OoqjbaB+5i73Q+wD7beSaweMBVwBEETTXv1GeahDF
8BSTFI/5faiFP4sh8nyLzZfxZh0bvnxu5SFZQvdPLRGB25xksGgN0LoEB8cSW48+
K8Tfc4tVlJYCCWXvIOkYwmXDq9gPzKB2hIy/9TRF/E5TgP+0KQc+nA9hltjZFLq4
ZWpPeiA+u+Vsd2qi3h2cJ7PagJaknjmCZuIoYMClfS/QdIPpDqoIVldE+51pV0tI
Jw3PjZLR1pNIC9sUgCJkTQDpWJUtkOEDMsMY4JGb3kE6WBSt
-----END CERTIFICATE-----
Generated at Thu Jun 11 11:12:14 2026 by rpki-client