Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e32382e302f32322d3234203d3e203236363137.roa
File:                     3136382e3234332e32382e302f32322d3234203d3e203236363137.roa (raw, json)
Hash identifier:          G0TA8sQgoNXwzXGHJ62S30cx/3LzdhaaphLjQ2HQRgA=
Subject key identifier:   73:FB:38:8D:35:25:0D:61:8C:F9:D0:97:4E:7E:C5:6D:BE:53:7A:96
Certificate issuer:       /CN=D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA
Certificate serial:       6EA26141990CDE589AA1624BA646B38D05F9CE59
Authority key identifier: D3:50:3D:03:E3:D4:DF:A0:76:7F:6D:FF:3B:A7:1D:D7:B6:23:6A:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e32382e302f32322d3234203d3e203236363137.roa
Signing time:             Tue 20 Oct 2026 19:42:08 +0000
ROA not before:           Tue 20 Oct 2026 19:37:08 +0000
ROA not after:            Tue 19 Oct 2027 19:42:08 +0000
asID:                     26617
IP address blocks:        168.243.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 31 Oct 2026 13:47:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:a2:61:41:99:0c:de:58:9a:a1:62:4b:a6:46:b3:8d:05:f9:ce:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA
        Validity
            Not Before: Oct 20 19:37:08 2026 GMT
            Not After : Oct 19 19:42:08 2027 GMT
        Subject: CN=73FB388D35250D618CF9D0974E7EC56DBE537A96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:32:26:c8:ba:e3:28:7d:80:a8:dc:12:44:3a:
                    1b:9f:6b:dc:e8:4d:ea:f3:5d:54:78:19:73:6d:3c:
                    f6:85:03:5b:8f:1b:ad:82:48:61:ca:09:dd:c1:0f:
                    32:ae:73:99:92:4e:88:e7:cb:af:12:9c:d8:17:6a:
                    a1:65:a7:11:cd:fd:48:d6:ad:0c:24:08:30:fa:4e:
                    62:80:9a:e7:f8:45:5e:ff:03:83:8c:8e:bc:3b:33:
                    5b:70:a0:75:65:5c:b4:fa:0c:7e:48:a2:cd:8a:c3:
                    c7:3c:ea:13:b2:bf:a5:9c:3d:77:97:83:ac:73:e3:
                    1f:92:c0:f9:8b:42:76:2e:80:d4:d1:0f:a9:47:aa:
                    86:d3:de:fa:ab:00:16:6a:67:df:2a:cf:1b:f5:20:
                    11:ef:86:1f:44:52:d7:a7:7f:d6:1a:a7:45:c9:b1:
                    4e:35:fb:86:91:85:44:3e:fc:0b:60:b5:bc:a5:23:
                    ac:84:27:66:b0:d9:b1:be:bf:30:04:b2:40:59:30:
                    a7:df:35:cf:f4:af:da:ff:e0:50:0b:cf:0c:b8:8d:
                    6d:ec:5c:55:19:25:aa:e0:90:86:9a:a0:73:01:18:
                    04:c2:9d:a2:64:23:b5:25:d2:e4:ca:7d:8d:30:ec:
                    3a:89:ab:80:94:02:a5:d2:14:6e:fd:f7:45:b9:5d:
                    ae:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:FB:38:8D:35:25:0D:61:8C:F9:D0:97:4E:7E:C5:6D:BE:53:7A:96
            X509v3 Authority Key Identifier:
                keyid:D3:50:3D:03:E3:D4:DF:A0:76:7F:6D:FF:3B:A7:1D:D7:B6:23:6A:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e32382e302f32322d3234203d3e203236363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.243.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:93:03:3d:ab:2b:e8:5b:d9:06:7f:d2:7e:9c:d3:0d:7a:85:
         d5:b9:a4:fa:d0:51:8c:57:be:c6:bc:75:e0:f0:c2:3b:ea:f7:
         49:0b:1c:8e:e0:a6:77:6a:d0:7a:f5:bd:20:a0:c2:f0:da:5e:
         a2:61:af:5a:25:12:cc:dc:f5:75:3b:de:c7:5b:4d:b0:03:9a:
         ad:ac:2a:3c:a8:de:e5:09:8c:56:fc:a2:31:fe:0b:9d:14:8d:
         6d:ee:01:7c:d4:64:55:3a:d5:dd:81:40:ca:38:11:86:63:c2:
         8b:e8:e2:47:b2:b9:78:c9:31:b7:5c:37:97:6a:1c:57:b2:45:
         ab:60:e7:d7:2f:c0:2a:1d:97:8f:67:c5:e7:d1:52:f2:e8:e1:
         61:99:30:86:d8:1e:b9:48:c1:5a:9d:55:09:f5:67:1f:53:d7:
         1c:c7:1e:17:97:78:d1:ef:8a:2f:79:86:21:98:9f:3b:44:b8:
         cb:d2:23:58:c4:2f:27:0a:b3:f2:55:42:ca:40:7a:ec:30:d7:
         e3:ca:3f:e3:4f:f6:50:19:03:be:7b:90:f0:90:27:ee:84:37:
         e8:51:ab:0d:57:5c:a3:73:af:e4:c4:81:a4:33:8c:86:20:7b:
         49:5d:aa:75:12:00:ba:2e:3a:36:80:48:40:ea:99:3f:cb:3f:
         de:2a:f8:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 13:00:42 2026 by rpki-client