Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e3231302e302f32342d3234203d3e203136353932.roa
File:                     3136382e3234332e3231302e302f32342d3234203d3e203136353932.roa (raw, json)
Hash identifier:          WZb5aHjoXzwJfyydNUV2uso8TVjErf3nsBml0XHCWs8=
Subject key identifier:   80:0C:D6:05:7D:F5:0F:B6:5D:4D:9C:7B:E2:58:9C:0C:C7:3D:2F:CE
Certificate issuer:       /CN=D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA
Certificate serial:       54E0A8A1D4988C7B4B0DEBA1A168A741A60A2FE0
Authority key identifier: D3:50:3D:03:E3:D4:DF:A0:76:7F:6D:FF:3B:A7:1D:D7:B6:23:6A:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e3231302e302f32342d3234203d3e203136353932.roa
Signing time:             Thu 21 May 2026 21:43:37 +0000
ROA not before:           Thu 21 May 2026 21:38:37 +0000
ROA not after:            Thu 20 May 2027 21:43:37 +0000
asID:                     16592
IP address blocks:        168.243.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 11:03:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:e0:a8:a1:d4:98:8c:7b:4b:0d:eb:a1:a1:68:a7:41:a6:0a:2f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA
        Validity
            Not Before: May 21 21:38:37 2026 GMT
            Not After : May 20 21:43:37 2027 GMT
        Subject: CN=800CD6057DF50FB65D4D9C7BE2589C0CC73D2FCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:01:06:31:93:82:ab:1c:75:aa:2e:88:e3:a9:
                    fa:4c:dd:4f:f9:55:4b:a5:2d:b5:cf:dd:e9:18:49:
                    8c:16:3e:b9:56:77:88:51:dc:e8:c2:cd:b4:fd:75:
                    90:f7:92:e8:3a:c9:ad:51:da:a4:1b:bb:62:e6:d9:
                    d9:f0:c0:25:e3:5f:40:0e:f0:44:84:1e:82:f1:eb:
                    e4:a5:f2:2d:8a:26:24:f7:7c:81:8b:46:a1:a7:7c:
                    a3:d8:5f:b5:12:72:5b:be:6c:13:a6:10:a8:34:a0:
                    a6:88:42:1d:23:32:c8:b2:3b:5b:3f:9e:74:04:99:
                    f8:4b:47:e2:b3:b2:55:dc:2f:b7:25:23:d0:34:b3:
                    c6:4e:db:59:17:12:5c:cf:7e:8d:b1:ba:44:f5:ec:
                    8e:17:38:39:d2:9c:80:61:d8:3e:fd:96:46:53:b6:
                    d6:ed:d5:60:e3:37:5f:95:3f:06:50:62:f7:38:f9:
                    4c:8a:b1:32:e0:70:a6:14:fa:b3:2e:58:be:23:22:
                    d5:4c:fb:e7:c2:16:dd:cf:af:20:13:8b:40:c0:ee:
                    49:0f:27:96:9b:ef:ed:8e:11:a3:30:3c:c9:22:96:
                    57:db:b0:55:fd:09:53:1f:ee:7d:4a:85:38:15:f2:
                    67:1e:f8:cb:ff:31:15:54:1e:46:bf:fd:63:74:8f:
                    e9:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:0C:D6:05:7D:F5:0F:B6:5D:4D:9C:7B:E2:58:9C:0C:C7:3D:2F:CE
            X509v3 Authority Key Identifier:
                keyid:D3:50:3D:03:E3:D4:DF:A0:76:7F:6D:FF:3B:A7:1D:D7:B6:23:6A:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e3231302e302f32342d3234203d3e203136353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.243.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:66:7e:7f:df:4c:e0:1f:df:7f:62:45:81:42:27:ca:bc:a9:
         90:81:f7:27:75:8a:3f:8a:f3:0e:98:9b:93:f7:53:b5:20:94:
         b5:61:4a:af:25:f2:31:3e:70:c3:1f:bf:43:ad:48:ec:9e:4f:
         c9:00:9f:00:23:8f:ca:b8:8d:6c:8c:d1:2c:e9:cc:58:9a:f4:
         70:59:bd:19:be:5f:aa:8e:49:4f:ba:13:b7:36:4b:07:22:f3:
         43:42:5e:4f:dd:99:82:79:69:dc:1a:31:37:51:b6:1c:ec:68:
         bc:56:22:73:4f:18:d9:e4:75:56:d6:aa:24:61:55:94:95:52:
         f3:f6:0b:c7:c8:df:39:2e:7e:4e:34:6c:cb:87:ce:b9:37:fb:
         b3:0d:18:e3:ed:12:15:32:f4:35:11:2f:e8:39:aa:ad:ec:9e:
         2c:80:59:d2:37:8c:70:e5:ff:38:c9:30:d4:8a:40:98:18:1e:
         cf:1d:0a:87:21:1d:ba:52:8b:50:63:49:7d:7a:b7:5f:50:1d:
         3e:91:3f:48:97:03:a9:95:40:f1:8b:4e:69:ed:df:fc:e9:1c:
         ce:c2:c0:50:7a:24:16:9e:c3:ad:fc:da:d5:c9:78:f0:16:f2:
         e7:6e:22:73:e5:db:f0:54:56:22:7c:53:3c:0b:8b:04:8f:8f:
         f9:d7:0e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 09:59:14 2026 by rpki-client