Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3130362e302f32342d3234203d3e203238303439.roa
File:                     3136382e3233342e3130362e302f32342d3234203d3e203238303439.roa (raw, json)
Hash identifier:          wyM9ZK+0TcTGkjdkn9d4kpiQ/3wOVJooWrDLuyb8728=
Subject key identifier:   89:01:61:12:17:44:B5:64:83:2D:AA:25:BC:CE:EE:46:A0:DE:03:63
Certificate issuer:       /CN=0D1797043F7F529F13952CEE646AE7365392BBC3
Certificate serial:       44665E3A0975C8B250726EC2FB75BBCDF9672A15
Authority key identifier: 0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3130362e302f32342d3234203d3e203238303439.roa
Signing time:             Wed 21 Oct 2026 14:55:00 +0000
ROA not before:           Wed 21 Oct 2026 14:50:00 +0000
ROA not after:            Wed 20 Oct 2027 14:55:00 +0000
asID:                     28049
IP address blocks:        168.234.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 09:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:66:5e:3a:09:75:c8:b2:50:72:6e:c2:fb:75:bb:cd:f9:67:2a:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D1797043F7F529F13952CEE646AE7365392BBC3
        Validity
            Not Before: Oct 21 14:50:00 2026 GMT
            Not After : Oct 20 14:55:00 2027 GMT
        Subject: CN=890161121744B564832DAA25BCCEEE46A0DE0363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:e0:69:4a:df:30:9e:c1:95:0a:e1:0a:25:31:
                    ff:85:c6:17:20:90:73:71:d5:52:21:2e:5e:7d:a1:
                    d3:79:90:6a:d7:52:dc:98:50:55:63:78:54:de:a3:
                    a6:e9:a0:21:91:a7:9c:17:c2:39:f0:37:1a:f9:5b:
                    8c:fd:79:c3:f9:4c:85:95:dc:b6:db:50:22:d8:df:
                    28:bc:b5:0e:f2:59:89:62:3f:02:71:8b:2a:37:f5:
                    87:ad:ed:ae:d3:21:da:17:e9:a3:01:e0:9a:8e:18:
                    5d:4d:c2:70:4a:9c:f3:f5:8b:f2:e6:1c:63:5d:62:
                    88:c0:e4:e3:9e:cd:e9:f8:15:2e:b0:69:87:36:8f:
                    40:3f:2b:13:e0:25:9c:85:cd:ad:58:ca:d8:de:6c:
                    f9:ef:09:a5:38:99:09:9d:1b:5c:3d:c7:f1:b5:34:
                    e8:87:c6:8c:15:a4:f9:09:bc:10:8e:3d:41:78:09:
                    c7:bf:d4:dd:a9:ca:de:86:6b:0c:b3:fd:aa:ee:70:
                    e5:1b:e4:d9:1a:5d:f3:3b:b4:d2:79:4c:1e:48:d7:
                    a2:80:bb:0e:fd:66:e1:96:f2:b9:a3:70:e9:1d:9c:
                    5d:5e:23:90:9f:44:84:9b:d3:2e:2b:d3:db:46:2d:
                    97:30:d0:27:fb:a2:3c:89:0c:3c:97:ab:30:ca:17:
                    e8:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:01:61:12:17:44:B5:64:83:2D:AA:25:BC:CE:EE:46:A0:DE:03:63
            X509v3 Authority Key Identifier:
                keyid:0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3130362e302f32342d3234203d3e203238303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.234.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:63:1f:c2:1f:45:b1:c0:e0:48:f6:3e:93:8b:3c:b5:de:24:
         64:ce:8b:75:c6:bd:f9:60:63:c4:05:67:ce:08:3c:9d:90:39:
         f6:08:28:02:59:15:70:16:46:86:e5:f0:08:f6:5a:05:a2:a4:
         fd:0c:58:5c:ab:c4:7b:fc:68:8c:34:bf:7e:98:ff:53:39:70:
         f6:0f:4c:9c:0c:1f:c4:f9:68:53:aa:de:c4:4e:1f:f7:b4:25:
         18:0f:67:86:43:bd:c4:21:14:a4:46:54:3f:95:90:f2:5e:16:
         4b:ba:ab:06:cb:f7:bf:e1:04:5a:2e:d1:e9:8f:65:64:d7:fc:
         3c:7e:78:eb:47:1a:be:33:58:60:2c:4b:f6:be:57:08:d2:32:
         d8:97:64:af:44:58:bb:d0:88:6e:d0:d8:7b:5c:f8:05:39:17:
         0b:35:2b:06:c1:f9:81:00:9a:14:41:05:db:bd:27:b8:61:9d:
         de:f7:20:b0:4f:87:9f:c0:18:8b:9b:d1:2f:0e:d3:08:a9:c3:
         fe:e6:7e:e7:62:76:35:e5:e3:00:ea:65:c9:61:3c:7e:e6:10:
         40:cd:33:cb:91:ad:53:fc:38:56:96:00:b6:8d:86:84:64:fc:
         3c:8c:6b:1c:93:de:e3:34:92:cb:2f:1c:dc:03:2d:c0:d8:08:
         f4:d8:a4:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 05:49:20 2026 by rpki-client