Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e36322e302f32332d3234203d3e20323632313636.roa
File:                     3136382e3233342e36322e302f32332d3234203d3e20323632313636.roa (raw, json)
Hash identifier:          LejLH/NkGOu2GYlhPrFXbKeeF/Al5dUWi6Yh6TpsCdY=
Subject key identifier:   27:5B:F4:8B:8C:AC:DC:CA:07:3D:4B:69:9B:E5:02:32:38:55:8E:8A
Certificate issuer:       /CN=0D1797043F7F529F13952CEE646AE7365392BBC3
Certificate serial:       6B1E2AD9FE778E0E909CEB7A19377C5E5AF690B5
Authority key identifier: 0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e36322e302f32332d3234203d3e20323632313636.roa
Signing time:             Tue 20 Oct 2026 15:42:06 +0000
ROA not before:           Tue 20 Oct 2026 15:37:06 +0000
ROA not after:            Tue 19 Oct 2027 15:42:06 +0000
asID:                     262166
IP address blocks:        168.234.62.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 30 Oct 2026 02:50:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:1e:2a:d9:fe:77:8e:0e:90:9c:eb:7a:19:37:7c:5e:5a:f6:90:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D1797043F7F529F13952CEE646AE7365392BBC3
        Validity
            Not Before: Oct 20 15:37:06 2026 GMT
            Not After : Oct 19 15:42:06 2027 GMT
        Subject: CN=275BF48B8CACDCCA073D4B699BE5023238558E8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:28:f1:64:d5:32:12:48:b5:e4:85:8c:90:92:
                    86:3b:ca:db:1a:c1:a6:f5:ee:3e:23:27:a4:5d:5f:
                    18:43:ae:79:4f:cc:56:3f:bf:b2:c2:4d:1b:79:26:
                    d3:ef:6e:44:ae:1f:59:77:ff:71:f3:10:b1:34:d2:
                    0c:57:b7:81:da:62:c2:77:81:d6:d9:24:33:b4:da:
                    e9:0f:18:2e:a6:d3:f6:60:36:50:3f:2c:49:ae:76:
                    87:ea:58:6e:b3:34:b2:27:48:3e:24:62:d8:15:84:
                    3e:86:23:36:9f:bc:df:ea:e2:01:92:11:e7:66:7d:
                    33:97:2b:13:fd:0b:da:b5:76:a2:a4:e3:5f:3c:d7:
                    e3:8f:c5:73:c8:b1:93:57:3a:1a:1e:d5:0f:a5:46:
                    f7:c0:b0:78:39:cc:67:62:90:37:f3:15:89:31:75:
                    79:9c:b8:07:50:df:9e:d6:85:49:ac:21:84:8c:8b:
                    b0:28:a2:b9:51:a4:c3:75:76:55:d0:78:72:c6:90:
                    97:78:25:ff:d4:1b:eb:25:01:f4:1f:2c:d3:0e:74:
                    bd:91:a2:59:0f:b5:2b:5f:32:81:af:1a:cf:3e:b9:
                    b4:5b:2a:8e:c4:8f:20:8e:4a:43:1c:f9:62:d9:db:
                    69:64:3c:91:a2:90:22:0d:c7:51:13:c2:bc:31:e9:
                    03:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:5B:F4:8B:8C:AC:DC:CA:07:3D:4B:69:9B:E5:02:32:38:55:8E:8A
            X509v3 Authority Key Identifier:
                keyid:0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e36322e302f32332d3234203d3e20323632313636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.234.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         71:b7:7b:66:d1:f0:14:80:f8:32:31:6f:c1:cb:e3:9c:e2:2b:
         9c:38:e2:d1:fc:fc:14:27:9e:e1:01:d5:b5:0e:e8:a5:83:33:
         fc:7c:48:ed:b5:c4:fe:99:3d:fc:49:6b:a6:52:fd:60:49:a0:
         9e:c7:a9:e3:b7:42:6b:e7:25:79:bd:e7:27:7a:6b:66:82:55:
         ff:5a:14:be:6b:8c:8e:7b:b9:af:b6:c7:bf:87:f3:a0:61:ac:
         99:dd:40:fd:96:15:7b:2e:1f:2e:16:a2:db:28:7c:31:84:92:
         f0:93:95:60:82:35:25:93:32:72:66:2d:f4:c0:04:e1:0c:c5:
         9b:53:1b:ad:56:b1:3a:3f:72:37:ff:4a:83:85:f1:33:cd:9d:
         0e:31:a7:85:77:bd:92:bc:97:b3:b9:49:61:07:e5:37:fd:5e:
         d3:d6:2f:f2:72:81:c5:ab:94:81:f5:10:6c:03:69:d7:20:c2:
         fb:6a:fe:ba:08:4e:e1:72:57:a0:70:81:0a:a4:79:e9:01:42:
         40:04:83:e3:13:ae:b5:84:cd:7c:46:01:da:dd:3f:ab:ac:c9:
         0c:24:9b:9c:cb:f3:28:c8:17:20:6c:c9:0f:6f:05:84:dd:33:
         25:76:65:dc:91:ce:c3:c6:9e:70:c0:db:b7:27:02:ad:68:d1:
         8d:db:96:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 14:19:05 2026 by rpki-client