Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2CAC622F4D28E95FBA65C5631E69CB7933EFAE4B3BDF881ED4692B60D0CD7077/0/3136382e3233312e3132382e302f31382d3234203d3e20323734313336.roa
File:                     3136382e3233312e3132382e302f31382d3234203d3e20323734313336.roa (raw, json)
Hash identifier:          3Zh9Qrude1h5pMDQhgrk5fmQBh63Fost3lkqJPdno50=
Subject key identifier:   A7:7F:24:79:D8:2E:DE:DC:AD:54:03:CC:D1:E8:6C:13:D3:4D:9B:02
Certificate issuer:       /CN=1C32B7A85986ACEFE7F5E8B3084B3BFA63C5DA35
Certificate serial:       2215060F7148267DE5155A38371C7139AFC80E69
Authority key identifier: 1C:32:B7:A8:59:86:AC:EF:E7:F5:E8:B3:08:4B:3B:FA:63:C5:DA:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1C32B7A85986ACEFE7F5E8B3084B3BFA63C5DA35.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2CAC622F4D28E95FBA65C5631E69CB7933EFAE4B3BDF881ED4692B60D0CD7077/0/3136382e3233312e3132382e302f31382d3234203d3e20323734313336.roa
Signing time:             Fri 05 Sep 2025 01:30:00 +0000
ROA not before:           Fri 05 Sep 2025 01:25:00 +0000
ROA not after:            Fri 04 Sep 2026 01:30:00 +0000
asID:                     274136
IP address blocks:        168.231.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2CAC622F4D28E95FBA65C5631E69CB7933EFAE4B3BDF881ED4692B60D0CD7077/0/1C32B7A85986ACEFE7F5E8B3084B3BFA63C5DA35.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2CAC622F4D28E95FBA65C5631E69CB7933EFAE4B3BDF881ED4692B60D0CD7077/0/1C32B7A85986ACEFE7F5E8B3084B3BFA63C5DA35.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1C32B7A85986ACEFE7F5E8B3084B3BFA63C5DA35.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Sep 2025 23:39:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:15:06:0f:71:48:26:7d:e5:15:5a:38:37:1c:71:39:af:c8:0e:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C32B7A85986ACEFE7F5E8B3084B3BFA63C5DA35
        Validity
            Not Before: Sep  5 01:25:00 2025 GMT
            Not After : Sep  4 01:30:00 2026 GMT
        Subject: CN=A77F2479D82EDEDCAD5403CCD1E86C13D34D9B02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:da:3b:30:88:9f:2a:1d:dd:06:c9:f3:d1:a2:
                    b7:9c:09:e5:ce:0a:0b:2d:68:4e:73:d2:8e:bb:1d:
                    2d:c2:60:65:7f:b8:65:d0:7c:dd:1e:ce:c9:b0:ab:
                    db:b2:04:84:5a:18:6e:48:95:b0:b7:a7:d9:f8:bb:
                    7f:34:92:e1:77:45:e5:1f:3e:51:27:4f:23:6d:ae:
                    48:81:a7:06:a5:ff:e9:fa:0c:19:23:ac:8c:0d:ba:
                    dd:6b:8f:75:e8:96:0a:87:77:fc:62:6e:07:1c:63:
                    ff:72:ff:68:54:ac:91:06:28:ed:12:fd:87:0d:0b:
                    f0:3e:6b:23:f8:75:c5:8a:28:2d:4d:c6:2d:a1:ff:
                    db:bb:3f:e6:19:b0:2a:75:e2:43:de:5e:bb:24:6a:
                    71:df:1d:9c:ab:19:37:97:f3:74:a6:dd:d3:e7:c2:
                    a9:bf:6d:55:17:53:94:63:be:02:65:48:d9:13:3f:
                    7a:c3:02:e5:1d:70:5f:a2:e9:ea:9b:c7:c9:65:22:
                    c3:24:02:3c:02:9b:70:56:4a:92:ad:40:89:ac:d0:
                    02:dd:f3:bf:30:c0:e6:8a:c1:b9:14:8d:32:d6:85:
                    90:18:f2:87:22:45:47:a6:11:53:3d:45:c7:86:59:
                    bc:0d:55:3b:5b:64:a0:19:c8:c3:00:78:12:ff:2e:
                    98:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:7F:24:79:D8:2E:DE:DC:AD:54:03:CC:D1:E8:6C:13:D3:4D:9B:02
            X509v3 Authority Key Identifier:
                keyid:1C:32:B7:A8:59:86:AC:EF:E7:F5:E8:B3:08:4B:3B:FA:63:C5:DA:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2CAC622F4D28E95FBA65C5631E69CB7933EFAE4B3BDF881ED4692B60D0CD7077/0/1C32B7A85986ACEFE7F5E8B3084B3BFA63C5DA35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1C32B7A85986ACEFE7F5E8B3084B3BFA63C5DA35.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2CAC622F4D28E95FBA65C5631E69CB7933EFAE4B3BDF881ED4692B60D0CD7077/0/3136382e3233312e3132382e302f31382d3234203d3e20323734313336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.231.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         12:24:50:33:5c:3f:73:72:d4:36:a8:18:5e:03:40:d6:0c:14:
         8d:bf:2e:a5:1b:5f:09:92:98:a1:04:8e:5f:85:ce:6a:62:c7:
         84:7d:04:df:32:d4:3b:df:ce:e0:0f:1f:44:49:e6:10:bf:f2:
         12:3a:2a:aa:5b:84:4f:69:d4:ef:e4:11:8b:3a:78:eb:d3:ba:
         49:cd:73:6e:88:2a:26:a1:88:41:a5:aa:2c:68:11:c0:69:38:
         7b:14:6d:0d:8a:a6:34:f7:eb:e8:df:88:6b:d1:45:95:7d:03:
         1f:16:9b:3f:2b:d2:1f:a9:6f:bb:40:9e:0a:a2:84:d5:25:9e:
         f1:ed:23:d3:28:b3:ea:86:02:81:52:c6:5d:a4:87:7a:d6:c3:
         1e:0d:6c:73:ca:4a:36:5c:23:d4:0f:62:70:58:8a:d9:9b:13:
         79:05:22:dc:73:44:58:c7:bc:3c:11:80:4f:1e:ac:62:0e:c2:
         65:57:dd:e7:36:98:10:da:cb:56:d6:2f:9a:b4:83:f3:da:82:
         94:67:28:a4:e8:a1:21:80:f5:3b:25:19:65:0c:58:85:1e:6f:
         fc:b5:83:0c:09:fc:f6:a0:9a:52:b0:7f:40:57:83:72:d3:51:
         8b:dc:73:19:77:b4:a9:62:9e:a7:21:36:9f:dc:89:44:ee:2b:
         03:65:09:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 18:40:14 2025 by rpki-client