Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e37322e302f32342d3234203d3e20323734303839.roa
File:                     3136382e3234332e37322e302f32342d3234203d3e20323734303839.roa (raw, json)
Hash identifier:          RPtxgfYeMB8F+yaazqeHgg9CKxYFHgpG1qMQghtBSbA=
Subject key identifier:   F4:0A:2E:46:26:A7:45:28:4D:40:93:C8:AD:2E:12:67:5F:B9:E7:6D
Certificate issuer:       /CN=D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA
Certificate serial:       3512F71A141D583A126EC3C116657E456EA59A20
Authority key identifier: D3:50:3D:03:E3:D4:DF:A0:76:7F:6D:FF:3B:A7:1D:D7:B6:23:6A:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e37322e302f32342d3234203d3e20323734303839.roa
Signing time:             Thu 21 May 2026 20:50:00 +0000
ROA not before:           Thu 21 May 2026 20:45:00 +0000
ROA not after:            Thu 20 May 2027 20:50:00 +0000
asID:                     274089
IP address blocks:        168.243.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 11:03:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:12:f7:1a:14:1d:58:3a:12:6e:c3:c1:16:65:7e:45:6e:a5:9a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA
        Validity
            Not Before: May 21 20:45:00 2026 GMT
            Not After : May 20 20:50:00 2027 GMT
        Subject: CN=F40A2E4626A745284D4093C8AD2E12675FB9E76D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:de:cf:11:af:3a:52:ef:81:1c:26:cf:72:60:
                    de:f9:10:1c:a7:2a:06:ca:44:bf:81:86:4c:de:ea:
                    d9:47:0f:d4:51:8b:14:69:4d:3e:dd:70:89:e2:0b:
                    f9:37:16:cf:24:6b:a4:5b:a0:82:e7:6d:e4:a6:a2:
                    10:07:43:f4:f5:9d:e8:12:9b:13:9a:8e:07:0b:79:
                    01:d2:d3:54:5f:29:0f:c7:08:9a:f5:f7:77:fa:dd:
                    5d:30:de:ba:e4:56:94:40:ba:97:c3:db:f3:d4:bd:
                    96:c5:55:22:a5:20:7a:23:49:86:89:8d:3e:3f:cc:
                    6f:ee:e7:cb:9d:ff:48:99:80:ac:ad:17:49:c9:64:
                    30:99:a5:a8:70:e0:30:53:8e:58:4d:38:ac:82:8f:
                    50:cb:4d:50:20:c4:a5:bd:a3:a8:32:0f:af:15:3d:
                    92:4e:11:9a:b4:7f:86:03:24:43:3f:16:64:a5:44:
                    13:50:fa:20:3a:2c:a1:31:bd:ed:11:46:68:f9:39:
                    9b:3f:42:f6:93:5a:fd:c4:80:c1:89:cc:2e:27:f7:
                    d3:a8:7e:31:72:4c:82:c8:3f:15:11:09:9e:d0:52:
                    bc:b0:32:46:68:03:44:c1:8a:4e:d6:81:eb:d7:fc:
                    fe:22:44:45:4e:f2:5a:c8:ef:c6:33:44:48:d8:64:
                    ee:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:0A:2E:46:26:A7:45:28:4D:40:93:C8:AD:2E:12:67:5F:B9:E7:6D
            X509v3 Authority Key Identifier:
                keyid:D3:50:3D:03:E3:D4:DF:A0:76:7F:6D:FF:3B:A7:1D:D7:B6:23:6A:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e37322e302f32342d3234203d3e20323734303839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.243.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:70:ce:64:67:2a:41:d7:27:72:b8:18:27:74:03:71:62:fa:
         30:d6:e6:b7:e9:17:7e:24:7d:67:ec:44:1e:2b:45:0a:b3:ff:
         72:2d:68:9d:8c:8c:e0:3e:72:76:80:b0:f6:97:c2:a8:9a:2d:
         54:e6:e1:8b:63:ac:80:c4:16:3c:f7:8a:89:25:17:d8:78:db:
         74:0a:11:26:18:c8:b2:6b:da:1f:a3:6a:d5:24:e0:c7:50:58:
         9b:06:62:76:37:fe:57:14:48:48:7b:bc:e0:8c:48:be:dc:e3:
         24:40:4d:27:e3:df:8b:ad:79:02:b4:ab:1e:cc:81:a1:78:1a:
         3a:d6:3d:b4:f4:e3:0b:89:6b:03:cc:06:1d:ea:3d:7a:a9:3a:
         58:11:54:d5:3f:fe:2e:39:a6:b3:fe:2f:e9:f9:b4:27:0a:07:
         32:e3:d8:11:bd:06:e7:b5:60:44:7d:af:7e:b7:0f:d9:14:d7:
         79:74:31:ab:6e:98:a5:80:f3:76:e2:67:66:dd:14:63:ef:77:
         9e:19:67:f1:46:eb:34:01:2c:c1:91:f4:bf:e4:32:93:48:13:
         65:23:b0:bd:58:50:d1:48:0e:30:9e:7e:d4:6c:40:98:1a:83:
         c2:60:43:d3:d8:65:b0:38:41:51:98:cd:d0:eb:67:8b:b0:0c:
         01:12:db:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 09:55:10 2026 by rpki-client