Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/8B2255952CCCB336A1C605906B6D0A1C0D47BC3AE20E478E0002EBF13B67DA13/0/3136382e3136352e35302e302f32342d3234203d3e203232363136.roa
File:                     3136382e3136352e35302e302f32342d3234203d3e203232363136.roa (raw, json)
Hash identifier:          6npT1QLYkqAXcV1cLW16C8wjK7iiU6dh6DscRrrLDBQ=
Subject key identifier:   25:96:D5:A7:63:FA:7A:D8:BD:C8:91:BA:9D:8C:CA:10:23:71:05:18
Certificate issuer:       /CN=388100C5698FF05104556FA0A6B8ED1181F3EA07
Certificate serial:       421B9E1CA80EC349110AE3FBF80FB2F777DB8871
Authority key identifier: 38:81:00:C5:69:8F:F0:51:04:55:6F:A0:A6:B8:ED:11:81:F3:EA:07
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/388100C5698FF05104556FA0A6B8ED1181F3EA07.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8B2255952CCCB336A1C605906B6D0A1C0D47BC3AE20E478E0002EBF13B67DA13/0/3136382e3136352e35302e302f32342d3234203d3e203232363136.roa
Signing time:             Fri 02 Oct 2026 21:05:00 +0000
ROA not before:           Fri 02 Oct 2026 21:00:00 +0000
ROA not after:            Fri 01 Oct 2027 21:05:00 +0000
asID:                     22616
IP address blocks:        168.165.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8B2255952CCCB336A1C605906B6D0A1C0D47BC3AE20E478E0002EBF13B67DA13/0/388100C5698FF05104556FA0A6B8ED1181F3EA07.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8B2255952CCCB336A1C605906B6D0A1C0D47BC3AE20E478E0002EBF13B67DA13/0/388100C5698FF05104556FA0A6B8ED1181F3EA07.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/388100C5698FF05104556FA0A6B8ED1181F3EA07.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Oct 2026 17:26:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:1b:9e:1c:a8:0e:c3:49:11:0a:e3:fb:f8:0f:b2:f7:77:db:88:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=388100C5698FF05104556FA0A6B8ED1181F3EA07
        Validity
            Not Before: Oct  2 21:00:00 2026 GMT
            Not After : Oct  1 21:05:00 2027 GMT
        Subject: CN=2596D5A763FA7AD8BDC891BA9D8CCA1023710518
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fa:51:fc:4e:3d:bd:dd:a2:23:07:ab:e8:dc:
                    7c:a1:d4:78:07:f1:d8:08:b9:1c:e8:25:83:d8:51:
                    55:7f:13:c6:b2:1e:d5:3d:50:c8:29:e5:6e:6c:05:
                    36:7c:50:2d:f9:2d:27:6a:72:2a:33:dd:ce:d2:74:
                    80:c3:9b:62:45:d6:15:95:c4:de:72:54:79:fb:b6:
                    9c:d3:a9:b1:f6:8e:15:e7:33:42:c6:0b:64:80:71:
                    a0:8d:c9:02:c5:6c:23:fa:f4:45:1d:f8:45:04:de:
                    af:2b:d5:77:0a:e3:c7:c0:44:3d:96:fa:0d:82:83:
                    82:a0:dd:cf:d1:44:83:dd:f9:89:d2:36:c2:43:fd:
                    e9:bf:59:f1:21:33:6b:d3:ba:5f:8d:e4:a3:56:83:
                    b0:5b:06:4e:b7:f3:2c:f9:2e:fa:82:6c:4a:3c:97:
                    88:d1:46:88:38:99:02:0d:90:c2:7b:cc:88:77:f1:
                    1b:23:e2:f5:3c:0a:10:78:ab:8a:03:c4:27:2b:24:
                    6f:68:5b:9c:d9:7f:68:e4:34:d7:9f:c0:fe:a0:01:
                    f0:de:52:26:6e:d3:5c:d5:f2:3e:e5:12:bc:2a:e5:
                    dd:24:4d:83:a6:3f:18:88:ea:69:df:58:f3:e3:af:
                    f9:d5:23:2e:58:88:31:46:7a:cf:90:e5:7d:07:6c:
                    6b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:96:D5:A7:63:FA:7A:D8:BD:C8:91:BA:9D:8C:CA:10:23:71:05:18
            X509v3 Authority Key Identifier:
                keyid:38:81:00:C5:69:8F:F0:51:04:55:6F:A0:A6:B8:ED:11:81:F3:EA:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8B2255952CCCB336A1C605906B6D0A1C0D47BC3AE20E478E0002EBF13B67DA13/0/388100C5698FF05104556FA0A6B8ED1181F3EA07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/388100C5698FF05104556FA0A6B8ED1181F3EA07.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8B2255952CCCB336A1C605906B6D0A1C0D47BC3AE20E478E0002EBF13B67DA13/0/3136382e3136352e35302e302f32342d3234203d3e203232363136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.165.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:b7:7d:2e:5f:de:35:3c:1e:ff:cc:37:77:0c:10:bf:df:d4:
         89:58:2a:7e:f2:a7:03:10:5e:25:93:f3:aa:75:67:42:57:3e:
         1a:f8:e8:c1:7b:a5:00:b2:63:53:5d:c3:09:f1:f2:b3:ad:0b:
         d9:3c:d1:4a:5a:37:df:0d:11:76:01:c2:16:8c:b3:a2:ca:4d:
         0d:58:56:9d:07:ba:6f:7d:ec:76:03:1a:94:9d:4c:95:64:2e:
         54:0c:93:71:80:af:5f:7b:73:7f:a2:b5:21:d2:a0:7f:f8:24:
         4f:b4:5b:06:21:a3:b6:b2:e8:80:49:f6:16:0f:d0:73:e3:f0:
         b3:e7:99:e9:0f:65:d2:d6:f1:d7:e3:80:da:69:09:11:a7:bb:
         81:0d:68:9e:95:d3:c0:f4:c9:84:ac:82:6b:54:05:e3:cc:22:
         3c:8a:fd:3e:7d:5b:92:e6:a4:83:cd:74:a3:3e:bb:a6:b2:87:
         e8:67:7f:45:73:a7:5e:1f:7f:6c:52:14:57:72:e1:f6:11:d2:
         25:68:be:db:c5:13:b6:88:15:a6:4d:ab:ad:75:9e:48:0b:85:
         f3:06:0c:19:be:34:1a:db:c2:4e:3d:9f:3b:b9:75:5b:8d:67:
         8d:c5:1e:59:0d:6c:c5:48:7d:95:3a:c9:e6:92:f4:2f:f8:92:
         0f:a6:c4:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:45:47 2026 by rpki-client