Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e36352e302f32342d3234203d3e203238303837.roa
File:                     3136382e3233342e36352e302f32342d3234203d3e203238303837.roa (raw, json)
Hash identifier:          Uz8/vZgkfuZt8o4vChr8WSu0NHvGAVoo8P/d8pzBd20=
Subject key identifier:   7A:60:EB:C3:0D:32:4B:8D:34:04:29:2E:42:58:E3:6A:E8:08:5A:5F
Certificate issuer:       /CN=0D1797043F7F529F13952CEE646AE7365392BBC3
Certificate serial:       06CA43A02E41AAB7E2CDC2D0C0F1CE7E5909BD10
Authority key identifier: 0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e36352e302f32342d3234203d3e203238303837.roa
Signing time:             Thu 20 Aug 2026 01:26:09 +0000
ROA not before:           Thu 20 Aug 2026 01:21:09 +0000
ROA not after:            Thu 19 Aug 2027 01:26:09 +0000
asID:                     28087
IP address blocks:        168.234.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Sep 2026 18:55:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:ca:43:a0:2e:41:aa:b7:e2:cd:c2:d0:c0:f1:ce:7e:59:09:bd:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D1797043F7F529F13952CEE646AE7365392BBC3
        Validity
            Not Before: Aug 20 01:21:09 2026 GMT
            Not After : Aug 19 01:26:09 2027 GMT
        Subject: CN=7A60EBC30D324B8D3404292E4258E36AE8085A5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:88:76:b4:ee:44:5e:f6:ca:df:84:30:ac:c4:
                    84:6d:e5:9f:db:66:17:67:63:12:7e:96:a7:39:28:
                    4a:18:a1:9f:36:bc:9b:87:28:38:de:ec:9b:b2:e4:
                    aa:f5:f1:c5:a0:01:85:80:7a:64:de:aa:cc:da:f5:
                    0a:6e:73:56:33:34:55:be:7d:ca:93:51:30:7d:4b:
                    8e:38:84:99:cf:7d:b5:da:38:a7:b3:26:a6:a5:6e:
                    4f:8f:c2:01:20:2c:9f:2a:6d:45:99:a4:f4:53:53:
                    2c:fb:e7:6e:60:2a:d6:49:c6:7c:fc:a6:39:c4:d3:
                    3a:c6:a5:8e:91:80:9c:d6:b0:c1:99:3a:33:f0:f3:
                    d0:f1:36:73:ea:27:31:4d:b5:1a:a3:66:47:8d:c4:
                    1c:1c:dc:f3:65:e6:05:78:03:d8:91:8f:e2:16:cb:
                    1c:d3:f8:12:95:97:69:2b:5c:31:97:84:d6:7c:e5:
                    32:c1:9b:df:b8:28:b8:69:fe:18:fa:a1:e6:b6:2a:
                    6f:77:bd:a5:cd:23:9e:fe:5b:9b:3e:70:29:64:61:
                    4b:8f:5d:1f:27:38:d7:65:67:fe:93:a8:ae:4e:01:
                    b6:65:2e:db:3d:ae:90:8d:01:d8:a5:0f:05:bf:70:
                    a9:e8:89:a1:a0:73:5e:35:8e:87:c7:15:cb:fa:e0:
                    64:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:60:EB:C3:0D:32:4B:8D:34:04:29:2E:42:58:E3:6A:E8:08:5A:5F
            X509v3 Authority Key Identifier:
                keyid:0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e36352e302f32342d3234203d3e203238303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.234.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:39:a0:5d:82:f0:f2:83:0c:f2:8e:78:2a:1d:76:b0:1f:01:
         8b:bf:38:b4:ec:66:16:9b:a7:9c:ac:c7:00:7f:f9:14:8c:c6:
         7a:92:68:78:50:b8:5f:f8:70:d0:f0:76:2f:fb:cd:95:f6:ce:
         fa:c5:0c:be:9d:53:03:05:7d:c6:34:6f:cf:27:c8:dd:91:0e:
         09:a6:36:73:bb:0b:fd:29:92:a0:87:67:70:8b:fb:f4:2b:ab:
         01:98:a4:25:91:55:c2:8c:bb:1e:36:fc:04:af:cc:20:c6:af:
         fa:cf:69:fa:aa:92:72:06:00:46:e8:44:fe:6c:cf:36:14:5a:
         12:c3:ab:84:64:db:65:5c:52:fd:7c:c6:d9:f3:2b:5e:d6:0c:
         5d:a5:cb:f9:8d:f6:0b:ac:b7:2a:4e:27:27:f3:43:39:22:63:
         fd:93:d4:ce:5e:7b:ab:46:c8:e2:e9:a5:3a:7d:5e:60:45:18:
         05:d3:2b:2c:34:1a:d6:1c:7f:c8:b7:3c:95:65:18:fb:a5:0d:
         24:6c:31:44:d1:c9:be:2b:b9:f5:ea:12:4b:e7:e4:7f:16:95:
         91:17:c7:85:bb:80:cc:30:8a:b2:36:84:2b:8c:11:08:da:fe:
         11:de:00:06:33:30:33:57:82:b5:ad:d0:64:30:27:55:f7:33:
         d8:7d:7f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 01:56:23 2026 by rpki-client