Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3231392e302f32342d3234203d3e20323632313636.roa
File:                     3136382e3233342e3231392e302f32342d3234203d3e20323632313636.roa (raw, json)
Hash identifier:          jeanBDfwM1fsa+ts/VxMxaV6OumEDCqtAU7quGl5HWY=
Subject key identifier:   BB:CB:1A:B0:7F:F7:1D:20:00:83:5F:1F:A1:64:A4:00:E9:FF:44:4E
Certificate issuer:       /CN=0D1797043F7F529F13952CEE646AE7365392BBC3
Certificate serial:       56B11226456C2C3C7564965B97ACC696C7A50866
Authority key identifier: 0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3231392e302f32342d3234203d3e20323632313636.roa
Signing time:             Tue 20 Oct 2026 15:42:06 +0000
ROA not before:           Tue 20 Oct 2026 15:37:06 +0000
ROA not after:            Tue 19 Oct 2027 15:42:06 +0000
asID:                     262166
IP address blocks:        168.234.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 09:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:b1:12:26:45:6c:2c:3c:75:64:96:5b:97:ac:c6:96:c7:a5:08:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D1797043F7F529F13952CEE646AE7365392BBC3
        Validity
            Not Before: Oct 20 15:37:06 2026 GMT
            Not After : Oct 19 15:42:06 2027 GMT
        Subject: CN=BBCB1AB07FF71D2000835F1FA164A400E9FF444E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e1:be:50:56:f5:e1:fc:71:c9:b0:0f:67:92:
                    09:3f:48:ac:65:83:b8:85:e3:f1:09:40:df:ae:54:
                    02:04:36:eb:d9:77:b6:75:04:12:45:ab:c3:f2:3e:
                    cf:6c:e6:c1:eb:a0:63:10:13:45:06:63:ad:a7:f6:
                    41:28:bc:96:b2:9c:63:13:af:cc:cd:d3:02:cf:1b:
                    f7:cc:2d:ed:74:5c:dd:1e:f1:7e:4e:0e:40:35:03:
                    af:0a:7b:78:47:19:76:54:52:d2:45:55:56:b9:1c:
                    a9:41:a7:da:85:67:de:8d:d0:a3:1a:68:22:fa:e3:
                    29:6c:4d:1a:6d:52:58:1d:04:02:be:5c:23:32:6c:
                    5b:4d:7e:05:d6:01:aa:f9:b1:ac:f2:41:78:e4:15:
                    0b:bb:84:b9:04:e0:74:35:ca:69:8f:9e:0d:98:dd:
                    e1:9a:14:df:4a:ee:b2:f1:e5:83:a3:6a:e8:e8:a4:
                    00:b2:94:62:c1:07:a4:31:3f:27:e2:e0:c0:7a:a4:
                    07:0f:92:b4:23:cb:2f:16:b3:3f:86:46:18:0d:15:
                    b1:ea:c0:b4:53:77:9d:74:45:d4:b1:3d:19:00:1c:
                    52:84:54:11:08:b0:05:24:f9:74:ca:73:2a:5e:e7:
                    1e:e1:12:1e:47:ee:7b:cd:25:0f:34:87:7f:06:ef:
                    82:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:CB:1A:B0:7F:F7:1D:20:00:83:5F:1F:A1:64:A4:00:E9:FF:44:4E
            X509v3 Authority Key Identifier:
                keyid:0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3231392e302f32342d3234203d3e20323632313636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.234.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:1b:5c:c3:8b:d5:3a:fe:5a:72:52:a5:08:65:39:a2:9a:82:
         84:d9:51:0f:39:55:6b:d2:45:f1:19:91:f0:c0:1a:a3:8a:eb:
         40:d9:ff:37:f9:37:0a:dc:a8:b6:3c:ab:df:fd:a7:67:e2:de:
         ad:54:a9:ea:29:af:ac:7e:da:04:d0:a3:46:88:20:d7:65:c4:
         0b:49:a5:91:d8:1a:35:56:ab:05:68:7a:80:41:31:99:db:64:
         7a:ab:78:9c:54:ca:36:d8:1f:98:a9:89:39:ca:49:c5:da:9c:
         de:9b:0d:d9:f3:97:8e:ed:32:2a:af:ee:40:5b:87:3b:ac:37:
         8a:ca:0d:f9:89:df:05:eb:38:dd:9c:f3:ca:4d:03:e1:43:c9:
         01:c8:87:30:c6:ce:16:cb:e1:01:f2:7b:28:30:d3:a2:6e:0c:
         87:95:bd:dc:eb:55:cb:b5:e0:66:76:31:ff:ee:3c:9d:ba:7c:
         06:f5:04:d2:4b:0c:74:99:81:de:a3:76:a3:73:42:91:35:f0:
         4e:e5:64:70:be:0b:51:7f:96:ad:97:66:d8:92:e8:cf:bd:6b:
         3e:c5:fe:2a:3a:ca:c1:20:1d:9c:00:f6:37:1f:42:a1:ca:f1:
         58:3d:a1:60:1c:a3:cf:ee:66:f5:51:08:65:ed:72:db:84:7e:
         27:6f:87:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 16:40:43 2026 by rpki-client