Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/77DC0D408A1222C03BF62FE7EB13F2DD959AC2BD351FFAAF1269CB76CE1F8BFB/0/3136382e3139362e3234362e302f32342d3238203d3e20323633383031.roa
File:                     3136382e3139362e3234362e302f32342d3238203d3e20323633383031.roa (raw, json)
Hash identifier:          GnV8aq2YqW1h3BLOPsH3vI+F+I9Yxvsk4XA1TEEH9AI=
Subject key identifier:   47:DD:5E:E8:A4:17:C2:80:9C:F4:04:FE:F2:F0:DD:A4:07:E9:08:A3
Certificate issuer:       /CN=E450DBD4224F12B91D8B103471C79E21494AAABE
Certificate serial:       54C78C247E655A059E114A8773DA41A73ED4A285
Authority key identifier: E4:50:DB:D4:22:4F:12:B9:1D:8B:10:34:71:C7:9E:21:49:4A:AA:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E450DBD4224F12B91D8B103471C79E21494AAABE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/77DC0D408A1222C03BF62FE7EB13F2DD959AC2BD351FFAAF1269CB76CE1F8BFB/0/3136382e3139362e3234362e302f32342d3238203d3e20323633383031.roa
Signing time:             Mon 06 Apr 2026 00:37:35 +0000
ROA not before:           Mon 06 Apr 2026 00:32:35 +0000
ROA not after:            Mon 05 Apr 2027 00:37:35 +0000
asID:                     263801
IP address blocks:        168.196.246.0/24 maxlen: 28
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/77DC0D408A1222C03BF62FE7EB13F2DD959AC2BD351FFAAF1269CB76CE1F8BFB/0/E450DBD4224F12B91D8B103471C79E21494AAABE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/77DC0D408A1222C03BF62FE7EB13F2DD959AC2BD351FFAAF1269CB76CE1F8BFB/0/E450DBD4224F12B91D8B103471C79E21494AAABE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E450DBD4224F12B91D8B103471C79E21494AAABE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 11 Apr 2026 11:40:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:c7:8c:24:7e:65:5a:05:9e:11:4a:87:73:da:41:a7:3e:d4:a2:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E450DBD4224F12B91D8B103471C79E21494AAABE
        Validity
            Not Before: Apr  6 00:32:35 2026 GMT
            Not After : Apr  5 00:37:35 2027 GMT
        Subject: CN=47DD5EE8A417C2809CF404FEF2F0DDA407E908A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:46:df:14:41:55:5f:33:03:ed:9e:91:af:e6:
                    a5:30:cb:d0:74:28:ef:2e:c0:db:fb:0c:ba:74:37:
                    5d:b8:a5:04:32:4a:13:68:68:ed:9d:1d:9c:ea:41:
                    3f:fb:06:0f:ce:ba:e6:09:12:9e:a5:8b:f9:ad:0b:
                    53:df:0b:b4:15:e8:79:df:d5:9d:d0:f7:e8:cd:94:
                    01:f6:bd:08:e0:d7:f9:02:2f:83:9a:99:a9:c8:ea:
                    ea:41:b8:fa:f7:06:ec:4b:d3:83:d5:84:44:ce:cc:
                    16:ab:7d:bc:e7:0b:ad:20:da:4f:01:22:42:c1:d0:
                    53:e0:e3:e9:8e:7e:20:9e:a2:20:a0:7d:1e:9f:a9:
                    af:1c:51:9e:27:95:e0:ee:eb:42:0e:b2:35:0b:42:
                    1c:38:c5:59:7f:da:7e:ab:5b:d3:45:4f:79:37:cb:
                    a8:8e:68:40:6d:2b:ae:66:82:ff:b0:8b:15:d9:1a:
                    c4:10:73:7d:b3:c0:73:db:66:fa:ed:de:05:0a:7d:
                    47:ee:f1:5c:07:f0:15:cb:25:ef:3b:e8:3f:1f:dc:
                    ba:17:c8:01:bc:f9:ee:82:06:73:f9:0d:7a:8f:99:
                    31:cf:f4:6c:0e:32:7b:e2:b9:16:ba:d2:b3:64:4f:
                    6f:ee:d3:86:0a:81:f4:1b:86:a1:95:69:29:ab:ab:
                    9b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:DD:5E:E8:A4:17:C2:80:9C:F4:04:FE:F2:F0:DD:A4:07:E9:08:A3
            X509v3 Authority Key Identifier:
                keyid:E4:50:DB:D4:22:4F:12:B9:1D:8B:10:34:71:C7:9E:21:49:4A:AA:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/77DC0D408A1222C03BF62FE7EB13F2DD959AC2BD351FFAAF1269CB76CE1F8BFB/0/E450DBD4224F12B91D8B103471C79E21494AAABE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E450DBD4224F12B91D8B103471C79E21494AAABE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/77DC0D408A1222C03BF62FE7EB13F2DD959AC2BD351FFAAF1269CB76CE1F8BFB/0/3136382e3139362e3234362e302f32342d3238203d3e20323633383031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:bc:b1:12:ed:81:8f:8b:00:1b:4f:61:ee:a9:de:21:f0:22:
         9a:e3:24:18:9c:bd:a2:65:53:50:60:d3:6e:76:d4:4e:d5:c4:
         23:38:47:dc:cf:69:09:05:ee:58:15:15:a9:f8:a2:d4:3b:a3:
         0b:30:bf:ec:6d:44:7d:2a:02:72:8a:12:f7:fb:1e:18:d9:35:
         75:f1:6d:12:d6:99:a4:d9:68:06:a8:f7:f8:d5:ba:94:e6:96:
         90:3b:e1:ec:62:dc:15:98:9c:7f:09:71:35:a1:a2:f5:20:ea:
         92:7c:4a:9b:a7:19:16:e4:3e:03:4b:0b:65:ca:9e:7e:5c:85:
         70:b8:d5:ea:2e:27:11:fa:1b:cc:cc:9d:8e:fc:a5:a0:62:fe:
         c3:f6:af:91:6d:f5:a0:9b:54:b3:a1:68:ac:5e:83:89:74:87:
         bd:ef:95:00:b5:3b:c6:31:13:88:da:65:31:2a:d7:f4:5f:58:
         25:6c:7d:bf:dd:83:09:ca:87:0a:e6:f9:80:51:d2:88:57:92:
         39:47:94:ce:0d:8a:58:09:6d:b1:ff:3a:07:fe:d0:cd:25:9a:
         c8:f3:69:27:5f:b8:32:8c:9e:81:98:63:9a:44:4b:b9:7f:a3:
         c7:ca:3b:6b:c6:7f:93:e2:9f:6a:bd:19:f8:18:36:40:26:37:
         97:bd:8c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 23:50:41 2026 by rpki-client