Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/2CAC622F4D28E95FBA65C5631E69CB7933EFAE4B3BDF881ED4692B60D0CD7077/0/3136382e3233312e3132382e302f31382d3234203d3e20323734313336.roa
File:                     3136382e3233312e3132382e302f31382d3234203d3e20323734313336.roa (raw, json)
Hash identifier:          U/tu3r3MQFADUtLTdA/coaKiUSarhEymsGB4x02cmyU=
Subject key identifier:   26:44:69:2E:80:33:1A:7A:08:70:9F:E8:DF:A5:63:25:E0:03:67:FA
Certificate issuer:       /CN=1C32B7A85986ACEFE7F5E8B3084B3BFA63C5DA35
Certificate serial:       479FE3324E2DA2A07DA02143EB872C602B5A9615
Authority key identifier: 1C:32:B7:A8:59:86:AC:EF:E7:F5:E8:B3:08:4B:3B:FA:63:C5:DA:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1C32B7A85986ACEFE7F5E8B3084B3BFA63C5DA35.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2CAC622F4D28E95FBA65C5631E69CB7933EFAE4B3BDF881ED4692B60D0CD7077/0/3136382e3233312e3132382e302f31382d3234203d3e20323734313336.roa
Signing time:             Fri 07 Aug 2026 02:20:06 +0000
ROA not before:           Fri 07 Aug 2026 02:15:06 +0000
ROA not after:            Fri 06 Aug 2027 02:20:06 +0000
asID:                     274136
IP address blocks:        168.231.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2CAC622F4D28E95FBA65C5631E69CB7933EFAE4B3BDF881ED4692B60D0CD7077/0/1C32B7A85986ACEFE7F5E8B3084B3BFA63C5DA35.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2CAC622F4D28E95FBA65C5631E69CB7933EFAE4B3BDF881ED4692B60D0CD7077/0/1C32B7A85986ACEFE7F5E8B3084B3BFA63C5DA35.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1C32B7A85986ACEFE7F5E8B3084B3BFA63C5DA35.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:9f:e3:32:4e:2d:a2:a0:7d:a0:21:43:eb:87:2c:60:2b:5a:96:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C32B7A85986ACEFE7F5E8B3084B3BFA63C5DA35
        Validity
            Not Before: Aug  7 02:15:06 2026 GMT
            Not After : Aug  6 02:20:06 2027 GMT
        Subject: CN=2644692E80331A7A08709FE8DFA56325E00367FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:b4:7f:3a:e7:ef:86:1f:00:ed:39:ce:df:1c:
                    a6:e4:d8:f9:9e:55:2f:bb:11:74:bc:aa:dd:7f:ed:
                    ea:51:1a:df:21:90:06:d9:4c:4a:32:b3:0e:d2:ae:
                    49:2c:f9:14:ff:5d:cb:6f:ec:96:ed:56:65:42:b7:
                    51:91:75:4c:fe:7b:96:b1:a1:69:18:ac:b5:3a:33:
                    32:d0:bd:32:98:77:63:58:a4:33:94:63:db:81:46:
                    53:f0:27:2d:c9:c7:03:70:42:c9:65:fb:7a:6a:23:
                    54:bd:e2:83:25:16:19:09:31:13:87:fa:5a:0f:9c:
                    8d:c3:2b:da:08:bd:94:fe:f7:5a:9a:70:4d:2b:b4:
                    a2:96:cb:0c:1e:4f:4d:af:4d:d1:01:fa:c6:7b:ad:
                    e1:f8:03:85:d3:bd:05:0e:cb:14:cc:78:90:2c:21:
                    c9:d5:a3:33:45:df:a9:62:2f:db:07:72:33:93:10:
                    64:4c:11:a3:92:af:ea:6c:55:e2:b3:af:5e:cd:69:
                    cf:64:7a:d7:04:1b:42:9b:70:1c:f6:51:6a:d7:b2:
                    fb:c6:3c:18:e8:26:2a:38:b9:92:d6:47:68:da:5d:
                    04:44:22:88:be:26:90:e4:37:cf:11:cb:7c:af:c2:
                    11:d8:9d:c5:7e:6e:8c:62:7c:fd:43:b2:99:a1:c7:
                    f8:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:44:69:2E:80:33:1A:7A:08:70:9F:E8:DF:A5:63:25:E0:03:67:FA
            X509v3 Authority Key Identifier:
                keyid:1C:32:B7:A8:59:86:AC:EF:E7:F5:E8:B3:08:4B:3B:FA:63:C5:DA:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2CAC622F4D28E95FBA65C5631E69CB7933EFAE4B3BDF881ED4692B60D0CD7077/0/1C32B7A85986ACEFE7F5E8B3084B3BFA63C5DA35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1C32B7A85986ACEFE7F5E8B3084B3BFA63C5DA35.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2CAC622F4D28E95FBA65C5631E69CB7933EFAE4B3BDF881ED4692B60D0CD7077/0/3136382e3233312e3132382e302f31382d3234203d3e20323734313336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.231.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         55:49:e4:2f:9d:bf:48:18:f5:97:5f:c5:a1:ce:bb:b2:19:a0:
         ce:7b:83:12:13:8f:de:37:7c:78:46:d6:98:6a:e4:69:ae:b2:
         4e:86:c6:72:d6:24:a8:96:2f:cc:0c:f8:ab:2d:88:3f:16:28:
         1b:4e:1c:31:35:f3:c1:79:42:f8:37:35:28:4d:09:c7:fb:d4:
         d7:ee:53:52:7d:45:7c:1c:9e:76:3e:de:4d:3c:b5:e2:a9:69:
         06:1d:3d:3b:0f:86:51:32:c1:a9:38:4f:79:86:ad:0a:07:55:
         5f:42:c4:69:c2:2f:60:2a:e2:29:5b:16:94:35:e6:8e:91:09:
         ef:70:5f:51:bf:29:35:85:74:4c:8e:62:40:f7:eb:cb:70:a7:
         1a:55:d5:53:e3:35:ea:2c:4b:78:50:7e:eb:ad:79:49:05:f6:
         9b:fb:79:89:13:7d:65:16:cc:90:3d:1e:e8:8f:3c:3e:13:94:
         a2:72:c7:ee:41:75:26:26:05:3c:d8:da:3d:55:c3:29:5a:10:
         aa:7d:3f:58:ca:7b:17:e9:a4:1d:ce:db:4a:cc:0c:2d:f1:79:
         d7:c5:36:f3:26:ca:a9:e8:4d:46:71:86:da:44:dd:8a:c9:67:
         db:e1:6f:f9:a4:61:b0:cb:10:28:6c:e2:3d:51:ed:b9:a2:3e:
         5a:07:c7:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 19:18:32 2026 by rpki-client