Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e36342e302f32342d3234203d3e203238303837.roa
File:                     3136382e3233342e36342e302f32342d3234203d3e203238303837.roa (raw, json)
Hash identifier:          gaab2pBye07lm+MLCpMhX9R//x0pVS9vM7HPglLXkII=
Subject key identifier:   5A:A9:78:D8:B8:79:C1:E2:63:C6:7C:37:AB:21:DD:5B:06:09:A9:E3
Certificate issuer:       /CN=0D1797043F7F529F13952CEE646AE7365392BBC3
Certificate serial:       5D551F96ADC31352763E940BE4AE84001AD94E4E
Authority key identifier: 0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e36342e302f32342d3234203d3e203238303837.roa
Signing time:             Thu 20 Aug 2026 01:26:09 +0000
ROA not before:           Thu 20 Aug 2026 01:21:09 +0000
ROA not after:            Thu 19 Aug 2027 01:26:09 +0000
asID:                     28087
IP address blocks:        168.234.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Sep 2026 18:55:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:55:1f:96:ad:c3:13:52:76:3e:94:0b:e4:ae:84:00:1a:d9:4e:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D1797043F7F529F13952CEE646AE7365392BBC3
        Validity
            Not Before: Aug 20 01:21:09 2026 GMT
            Not After : Aug 19 01:26:09 2027 GMT
        Subject: CN=5AA978D8B879C1E263C67C37AB21DD5B0609A9E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:71:25:0b:81:2b:6d:ef:99:7f:6b:ab:e9:33:
                    02:33:2f:e6:32:d8:41:71:e0:e9:32:0c:c2:ed:c6:
                    1b:39:bd:aa:6d:1f:7e:7e:ab:ae:ac:82:36:46:49:
                    91:1c:b4:b1:66:b8:b1:c0:39:d0:ec:6c:ae:10:4b:
                    75:d1:a8:b9:b5:8d:60:b0:bf:eb:d6:e6:42:07:b3:
                    11:d3:59:1f:74:30:0a:22:84:88:b9:36:78:b1:fd:
                    ac:32:2b:03:97:2c:09:18:6f:3c:f1:ec:bc:91:b6:
                    ca:6f:b6:9d:08:f0:76:ba:df:59:fe:1f:15:f0:2a:
                    0b:3d:21:a6:fe:25:04:de:1f:60:d2:d1:1d:52:64:
                    0d:51:f4:85:cd:35:fb:0e:bb:84:a5:6b:18:6c:a3:
                    f8:5c:3a:22:61:b1:20:f0:12:34:ae:75:52:60:d1:
                    1e:6e:e0:e7:8a:37:e3:ac:3a:1e:b0:1e:bf:18:92:
                    2d:67:2d:28:98:05:6e:e6:c1:b6:70:38:4a:9e:18:
                    c0:cc:17:e7:0b:8e:54:12:00:87:7a:27:56:be:9b:
                    62:5a:94:fb:96:da:55:76:a7:fa:2d:81:1c:2a:0c:
                    c8:07:ea:63:96:35:13:0d:aa:57:27:a4:2b:99:52:
                    c2:84:f2:e3:3a:3b:16:bd:0a:61:dd:c9:ac:c3:10:
                    52:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:A9:78:D8:B8:79:C1:E2:63:C6:7C:37:AB:21:DD:5B:06:09:A9:E3
            X509v3 Authority Key Identifier:
                keyid:0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e36342e302f32342d3234203d3e203238303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.234.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:a9:cb:4a:46:75:92:71:02:64:c8:ac:a9:36:9d:ca:50:4d:
         2e:55:26:78:cf:19:5c:13:e7:b9:4f:07:61:fd:7c:40:b5:5a:
         ae:2f:b5:2d:04:60:2f:ab:94:6b:65:56:3f:f1:84:ee:58:47:
         a8:d6:d4:2b:78:2a:be:10:5c:46:6c:3e:b4:0a:52:8b:44:dc:
         43:4f:38:31:4f:f5:8b:d6:d5:fc:91:cd:6a:0d:58:b4:b2:53:
         a1:fe:df:16:13:af:e6:4b:88:1d:90:75:60:48:f6:9b:72:25:
         67:ce:66:d7:ab:4d:b0:34:e6:c3:ab:9b:c3:5b:3a:f9:46:9a:
         3d:ca:d1:ce:f1:45:80:d3:13:57:71:e8:90:b5:a7:79:90:c2:
         e0:9d:fc:6b:44:bf:48:d4:1a:37:4e:13:31:03:fa:da:70:13:
         18:de:84:21:e3:04:8a:70:3e:58:4b:00:cd:3c:8d:db:38:48:
         51:bc:58:aa:d9:cb:4c:17:70:4f:e0:14:88:87:ec:00:a1:2b:
         1e:2f:20:ba:96:c0:64:d1:b9:0c:cd:71:0f:05:40:44:3a:5d:
         ad:c2:16:ba:3f:c6:7d:7b:75:01:76:11:d9:40:13:fe:5f:c3:
         e1:04:83:18:e5:70:df:f4:e6:50:78:65:ed:3d:61:a5:2b:55:
         e0:a9:ce:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 01:56:46 2026 by rpki-client