Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e3232302e302f32332d3234203d3e203136353932.roa
File:                     3136382e3234332e3232302e302f32332d3234203d3e203136353932.roa (raw, json)
Hash identifier:          uSoQlVE12QJGFLOHhDQ4sZKg1fwiIxaS/wYKknIczXw=
Subject key identifier:   01:DF:C5:0E:F7:EA:19:45:0B:39:B6:FB:BC:5E:40:84:BD:FA:98:7F
Certificate issuer:       /CN=D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA
Certificate serial:       60B341925C7D603E56D00E42035AF50EF0AF223F
Authority key identifier: D3:50:3D:03:E3:D4:DF:A0:76:7F:6D:FF:3B:A7:1D:D7:B6:23:6A:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e3232302e302f32332d3234203d3e203136353932.roa
Signing time:             Thu 21 May 2026 21:43:37 +0000
ROA not before:           Thu 21 May 2026 21:38:37 +0000
ROA not after:            Thu 20 May 2027 21:43:37 +0000
asID:                     16592
IP address blocks:        168.243.220.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 11:03:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:b3:41:92:5c:7d:60:3e:56:d0:0e:42:03:5a:f5:0e:f0:af:22:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA
        Validity
            Not Before: May 21 21:38:37 2026 GMT
            Not After : May 20 21:43:37 2027 GMT
        Subject: CN=01DFC50EF7EA19450B39B6FBBC5E4084BDFA987F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:41:cc:bf:6b:ab:34:3c:e3:7b:bc:d5:65:74:
                    f3:2e:ca:3e:a2:f6:19:f8:63:4d:ed:ce:36:03:1a:
                    c5:03:a2:a9:69:45:23:2f:a8:6f:70:f7:8c:7c:d5:
                    f3:9c:e6:bd:08:76:d2:9d:5d:44:00:e4:6e:1f:1f:
                    6c:6b:e6:15:b4:f8:ff:84:c6:b7:8d:68:76:8e:7a:
                    a3:a6:b8:8a:d3:e2:d1:f4:52:e2:34:32:a1:b9:8d:
                    15:5b:10:90:66:c9:73:68:64:a6:c4:23:37:bf:cf:
                    37:83:bf:d7:b4:15:4f:49:7c:55:46:87:bc:0b:13:
                    7b:d2:e5:05:59:a3:a8:81:e9:ce:94:10:07:ed:f2:
                    28:f2:e5:be:07:87:6c:6c:24:38:bc:f4:b0:f7:9b:
                    de:c4:af:74:25:24:1c:d8:b8:ec:9f:ac:0d:68:01:
                    be:75:98:7e:e6:52:0c:fc:8f:75:e7:14:e4:21:c6:
                    27:30:e5:89:cf:78:65:5f:ea:16:3a:ed:3b:76:7a:
                    91:8e:21:c7:bf:16:33:db:07:fb:b7:2c:67:00:8c:
                    16:ab:85:27:2a:12:4a:32:f1:b1:1b:78:1b:60:5c:
                    48:2b:2a:c5:84:85:8f:36:14:83:66:24:05:3f:37:
                    2c:87:64:43:fa:04:94:dd:41:68:6a:5e:f0:59:58:
                    d4:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:DF:C5:0E:F7:EA:19:45:0B:39:B6:FB:BC:5E:40:84:BD:FA:98:7F
            X509v3 Authority Key Identifier:
                keyid:D3:50:3D:03:E3:D4:DF:A0:76:7F:6D:FF:3B:A7:1D:D7:B6:23:6A:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e3232302e302f32332d3234203d3e203136353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.243.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a0:5c:ec:7d:64:4f:2e:29:d5:e6:b6:df:ae:91:b7:f1:2b:bf:
         c4:e3:f9:7d:93:33:76:37:62:d9:8e:62:d1:9f:27:b8:17:bd:
         e7:38:b4:85:41:e8:1e:28:2e:4c:99:ff:c7:75:71:c5:05:5d:
         a8:40:05:ec:68:5a:e0:64:89:0c:f8:b5:4a:25:3d:f2:d6:ad:
         f3:c7:33:df:23:93:a3:7a:e6:96:3e:bd:b9:f9:e7:58:0f:bd:
         11:38:da:23:d7:79:d0:db:86:b0:83:37:96:c4:92:47:9f:00:
         02:18:c3:2f:70:bd:59:7d:f4:c8:dd:d4:d1:c6:b0:03:af:a4:
         22:bf:38:e5:e5:7d:20:f7:57:7e:f7:5e:36:8d:a3:af:86:ce:
         a5:b0:3c:73:7c:d2:38:00:72:fc:40:fd:c2:22:d7:88:c0:75:
         f7:59:da:99:23:5b:48:2c:1f:ef:83:30:98:8d:c6:f4:30:de:
         1c:39:e8:fc:aa:06:77:b4:74:35:ad:11:3d:71:10:e6:e2:55:
         cd:f9:4e:dc:7f:c8:3d:cc:93:2e:95:80:24:c3:73:a7:23:ce:
         3b:b4:bd:db:f0:18:82:60:4d:e5:00:cd:a9:d2:a8:d1:54:b3:
         ca:0b:b6:10:65:09:cf:f5:fb:62:87:cf:90:48:54:d8:ec:f7:
         14:3f:4e:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 09:58:57 2026 by rpki-client