Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e36372e302f32342d3234203d3e203238303837.roa
File:                     3136382e3233342e36372e302f32342d3234203d3e203238303837.roa (raw, json)
Hash identifier:          L5j4Z/GwWcCrAdniLCP4bJNYUL6JqA8kUnEm8SXtac0=
Subject key identifier:   17:92:C6:54:A0:26:30:C7:10:D8:63:1F:8C:EB:8B:6E:3A:D8:92:65
Certificate issuer:       /CN=0D1797043F7F529F13952CEE646AE7365392BBC3
Certificate serial:       5740AB9EC29063887809952A926F563EA9E067C0
Authority key identifier: 0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e36372e302f32342d3234203d3e203238303837.roa
Signing time:             Thu 20 Aug 2026 01:26:09 +0000
ROA not before:           Thu 20 Aug 2026 01:21:09 +0000
ROA not after:            Thu 19 Aug 2027 01:26:09 +0000
asID:                     28087
IP address blocks:        168.234.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Sep 2026 18:55:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:40:ab:9e:c2:90:63:88:78:09:95:2a:92:6f:56:3e:a9:e0:67:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D1797043F7F529F13952CEE646AE7365392BBC3
        Validity
            Not Before: Aug 20 01:21:09 2026 GMT
            Not After : Aug 19 01:26:09 2027 GMT
        Subject: CN=1792C654A02630C710D8631F8CEB8B6E3AD89265
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ff:81:66:84:4e:df:1a:4c:2c:98:d8:36:ec:
                    8b:bc:e9:16:7f:aa:09:cd:1e:85:5e:af:3c:0d:50:
                    b7:97:77:af:51:d1:03:66:41:26:ea:90:4b:a2:98:
                    03:b4:01:90:92:1c:f2:3f:6f:2c:eb:2a:f0:69:01:
                    95:23:9d:f8:51:cc:51:06:76:a0:91:74:30:23:15:
                    83:20:68:77:ba:f4:7c:80:f4:f0:d1:71:00:4c:fa:
                    e1:89:b5:20:f0:f8:5a:ee:08:75:bc:52:31:85:be:
                    1c:88:ac:8b:b6:36:8a:b6:d8:0f:da:10:0d:2d:b5:
                    1d:bb:39:99:38:28:67:62:bf:db:4f:f4:d1:42:87:
                    bc:79:ec:3a:a9:dc:d2:cd:ee:3a:3b:7b:d0:06:7b:
                    f7:cc:e1:81:88:37:b3:bf:98:8d:50:a6:d1:06:3c:
                    09:c7:f0:a8:2d:eb:44:e4:ef:02:7c:02:9b:2c:a7:
                    41:80:c0:c7:f5:d2:59:30:2e:f7:f9:fb:6c:a1:3c:
                    06:fe:53:13:ba:c1:d1:ef:a8:ec:56:e2:af:05:ce:
                    1d:47:44:9d:92:d0:cb:99:ca:86:7b:de:45:31:82:
                    fb:c7:56:ed:87:21:5d:82:8e:11:d9:f6:2e:61:11:
                    36:6d:c7:40:82:6b:3d:2a:81:a1:f5:27:a3:b4:8b:
                    a3:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:92:C6:54:A0:26:30:C7:10:D8:63:1F:8C:EB:8B:6E:3A:D8:92:65
            X509v3 Authority Key Identifier:
                keyid:0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e36372e302f32342d3234203d3e203238303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.234.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:13:98:e3:64:d0:dc:1f:86:ff:43:0f:3a:6d:05:a0:05:f0:
         7c:a9:c4:41:8d:01:1e:c3:db:3f:28:ac:a7:da:0e:f5:f2:99:
         2b:f1:79:11:66:34:2b:59:51:74:90:a3:ef:ac:47:fe:b8:8a:
         24:17:4f:99:de:2e:93:93:74:7a:48:f2:09:5f:de:19:c5:3c:
         1e:18:6d:66:2e:7c:ec:0a:ec:c2:88:09:62:4e:77:6d:d4:9d:
         42:a5:99:5f:b3:b9:ae:40:26:2a:73:61:33:11:bd:fe:ee:2a:
         c6:9a:dc:0c:ce:cf:0a:96:a7:82:e7:0d:08:c3:4b:4c:cd:40:
         f1:11:71:86:8f:da:f7:43:f7:79:b0:89:74:54:d9:6c:f8:5c:
         c4:0f:81:e0:c4:d5:16:e0:df:24:94:0e:f4:9a:4e:be:ee:a3:
         86:79:31:ef:54:01:74:67:bc:06:0a:49:66:49:c2:2b:af:c5:
         4c:4f:31:30:f8:8f:56:08:35:3e:e5:b4:e6:77:a4:ed:54:1b:
         0c:ff:83:39:b0:b0:4b:e8:13:85:fb:28:f1:fd:d7:10:2c:33:
         a1:fe:cc:56:84:11:3b:f0:9c:8d:02:1f:36:f8:fa:b3:0f:17:
         35:d6:f8:cb:54:5f:24:99:d2:b9:b5:ae:02:bf:aa:48:44:8c:
         7d:a5:ac:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 01:56:43 2026 by rpki-client