Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/7C16B68397C2916C8EEA1B8EDDF9434ABF8A40506C748F02B94B4229884CF039/0/3136382e3232372e3234372e302f32342d3234203d3e20323734313234.roa
File:                     3136382e3232372e3234372e302f32342d3234203d3e20323734313234.roa (raw, json)
Hash identifier:          X6kZrIty9CEnS8L3o434p8uvchP2IxULh6ggAfJfpYA=
Subject key identifier:   2D:59:25:16:75:8F:4E:6B:19:5E:F9:3E:97:8E:9B:C2:73:F0:55:4A
Certificate issuer:       /CN=2179F42C844EB6955296CEE3F9FF6D162F7F9EB7
Certificate serial:       6674E7B73C683B6B42FC37612F5FE57CB4FE3E2B
Authority key identifier: 21:79:F4:2C:84:4E:B6:95:52:96:CE:E3:F9:FF:6D:16:2F:7F:9E:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2179F42C844EB6955296CEE3F9FF6D162F7F9EB7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7C16B68397C2916C8EEA1B8EDDF9434ABF8A40506C748F02B94B4229884CF039/0/3136382e3232372e3234372e302f32342d3234203d3e20323734313234.roa
Signing time:             Tue 01 Sep 2026 14:33:17 +0000
ROA not before:           Tue 01 Sep 2026 14:28:17 +0000
ROA not after:            Tue 31 Aug 2027 14:33:17 +0000
asID:                     274124
IP address blocks:        168.227.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7C16B68397C2916C8EEA1B8EDDF9434ABF8A40506C748F02B94B4229884CF039/0/2179F42C844EB6955296CEE3F9FF6D162F7F9EB7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7C16B68397C2916C8EEA1B8EDDF9434ABF8A40506C748F02B94B4229884CF039/0/2179F42C844EB6955296CEE3F9FF6D162F7F9EB7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2179F42C844EB6955296CEE3F9FF6D162F7F9EB7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:74:e7:b7:3c:68:3b:6b:42:fc:37:61:2f:5f:e5:7c:b4:fe:3e:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2179F42C844EB6955296CEE3F9FF6D162F7F9EB7
        Validity
            Not Before: Sep  1 14:28:17 2026 GMT
            Not After : Aug 31 14:33:17 2027 GMT
        Subject: CN=2D592516758F4E6B195EF93E978E9BC273F0554A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2c:e4:f2:a2:e3:32:f6:68:fd:8b:9a:f4:22:
                    c2:3b:89:54:fe:db:c0:b6:ea:b2:7c:20:c5:9a:86:
                    25:76:92:49:a8:55:b3:1b:91:2e:b7:b6:e1:ea:6f:
                    1d:ff:68:2a:ca:ad:72:8d:62:31:1b:fe:54:0c:35:
                    17:52:0d:c1:04:51:d3:6a:02:ec:81:82:ad:9c:7f:
                    8b:8b:9f:83:93:02:ed:24:4b:7a:1c:a8:d4:98:ff:
                    04:93:66:56:c8:75:ef:b4:63:1e:6d:12:d3:db:29:
                    8d:6b:e6:d0:fb:1b:89:61:19:68:9d:26:09:27:4e:
                    aa:95:9c:29:aa:6e:c0:6c:ce:84:b9:34:d6:80:75:
                    36:88:10:24:04:c0:3b:e2:b8:e0:c0:db:6d:a4:48:
                    36:f6:18:86:26:9c:83:d7:27:ad:ee:43:2f:f7:06:
                    be:ba:47:9e:b1:22:46:0b:6c:fd:76:5b:b1:89:ca:
                    4c:bf:a0:ac:8e:85:63:d9:9b:9a:91:69:05:b1:99:
                    91:61:cb:43:bf:9d:e5:a3:94:fd:fe:7b:87:28:97:
                    50:42:45:d5:de:93:4a:bd:c5:b8:a4:be:dc:31:60:
                    1d:41:fc:2e:d9:dd:ec:40:d6:08:37:e5:db:92:96:
                    e1:b4:0a:cf:b3:3c:43:39:4e:ae:78:c3:ad:ae:67:
                    f5:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:59:25:16:75:8F:4E:6B:19:5E:F9:3E:97:8E:9B:C2:73:F0:55:4A
            X509v3 Authority Key Identifier:
                keyid:21:79:F4:2C:84:4E:B6:95:52:96:CE:E3:F9:FF:6D:16:2F:7F:9E:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7C16B68397C2916C8EEA1B8EDDF9434ABF8A40506C748F02B94B4229884CF039/0/2179F42C844EB6955296CEE3F9FF6D162F7F9EB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2179F42C844EB6955296CEE3F9FF6D162F7F9EB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7C16B68397C2916C8EEA1B8EDDF9434ABF8A40506C748F02B94B4229884CF039/0/3136382e3232372e3234372e302f32342d3234203d3e20323734313234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:b2:5b:71:f2:43:dc:92:6f:60:65:54:af:ab:92:59:4d:21:
         0a:7a:2c:24:43:97:5f:47:72:f6:40:e9:76:64:14:02:90:ad:
         9d:6b:78:f5:f8:4d:23:39:48:bf:33:0e:39:c5:09:98:cc:31:
         6e:ed:a6:fc:fd:89:2f:85:4f:df:d2:97:56:a8:a2:f4:93:59:
         a5:84:ae:14:2a:81:a5:6d:e7:34:2f:06:ce:af:30:68:61:7a:
         82:fb:ba:3f:01:2d:0b:02:81:62:1e:51:30:2e:6f:b2:9a:cd:
         57:cf:65:d4:f1:8c:aa:97:44:7a:b3:df:4f:f9:af:bb:71:d0:
         a0:94:d9:3b:18:24:64:eb:ee:21:11:74:1d:f4:be:e3:91:7c:
         2f:b8:87:ca:bd:27:cf:3c:e8:b7:eb:7b:fa:66:ed:d9:2c:3f:
         1a:01:85:13:9f:d9:8b:48:f2:64:5d:86:be:52:40:c1:55:1a:
         3f:00:29:9d:46:dc:07:2c:d9:04:74:b7:67:7e:18:db:39:eb:
         31:d5:da:a7:38:f6:63:39:3a:02:1f:77:9d:20:68:77:de:03:
         f0:54:39:dc:cf:e5:5c:ca:e5:0c:ac:50:59:c2:38:ad:02:6e:
         c7:c2:da:9e:f1:bf:56:57:7f:ef:e4:ef:7c:b2:e6:ec:5d:d9:
         eb:32:41:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 20:18:09 2026 by rpki-client