Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/FE46A92A7067D3C86CCAFD0AE9AB56C25164CFEAD6D0A1D473E4D6007FA04EB9/0/3136382e3230352e3138342e302f32332d3233203d3e20323634363932.roa
File:                     3136382e3230352e3138342e302f32332d3233203d3e20323634363932.roa (raw, json)
Hash identifier:          ic2CHnLLgZjqrVQsjE1/CqcA85bE5Z7AuI40AVjfI3Q=
Subject key identifier:   D1:8A:0D:B6:12:49:23:ED:EB:43:8B:F4:64:29:4F:49:90:1E:AE:3A
Certificate issuer:       /CN=7767E12FC2A8ADE136089C7D9A48E6481098F31E
Certificate serial:       6C108ABC0C46760015194476DEA898B3A054DC37
Authority key identifier: 77:67:E1:2F:C2:A8:AD:E1:36:08:9C:7D:9A:48:E6:48:10:98:F3:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7767E12FC2A8ADE136089C7D9A48E6481098F31E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FE46A92A7067D3C86CCAFD0AE9AB56C25164CFEAD6D0A1D473E4D6007FA04EB9/0/3136382e3230352e3138342e302f32332d3233203d3e20323634363932.roa
Signing time:             Tue 08 Sep 2026 14:34:32 +0000
ROA not before:           Tue 08 Sep 2026 14:29:32 +0000
ROA not after:            Tue 07 Sep 2027 14:34:32 +0000
asID:                     264692
IP address blocks:        168.205.184.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FE46A92A7067D3C86CCAFD0AE9AB56C25164CFEAD6D0A1D473E4D6007FA04EB9/0/7767E12FC2A8ADE136089C7D9A48E6481098F31E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FE46A92A7067D3C86CCAFD0AE9AB56C25164CFEAD6D0A1D473E4D6007FA04EB9/0/7767E12FC2A8ADE136089C7D9A48E6481098F31E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7767E12FC2A8ADE136089C7D9A48E6481098F31E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:10:8a:bc:0c:46:76:00:15:19:44:76:de:a8:98:b3:a0:54:dc:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7767E12FC2A8ADE136089C7D9A48E6481098F31E
        Validity
            Not Before: Sep  8 14:29:32 2026 GMT
            Not After : Sep  7 14:34:32 2027 GMT
        Subject: CN=D18A0DB6124923EDEB438BF464294F49901EAE3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:34:b9:f6:cc:61:ff:a0:eb:13:dd:01:35:43:
                    04:2e:ec:05:e4:0d:d1:54:39:a7:c5:50:ea:1e:d0:
                    6f:9b:34:cd:74:b1:9c:1d:1a:2f:0f:19:db:ac:75:
                    e9:74:48:5a:28:ec:f0:f1:22:8a:3f:9e:be:83:27:
                    1b:44:6c:6e:10:b7:8b:6f:27:42:c4:b8:30:51:82:
                    86:d5:12:b3:8c:09:d4:61:31:cd:a6:2a:82:ef:97:
                    9f:ff:b1:2e:f5:2e:eb:00:69:0a:9a:b5:09:65:a2:
                    a6:07:55:84:88:64:93:40:3e:c7:0e:c9:88:0d:44:
                    7c:ef:af:18:8a:31:23:6d:5f:ef:03:e5:80:65:c2:
                    f8:7a:18:65:56:81:bc:b0:ac:a6:fb:d6:82:21:5e:
                    1f:d1:04:66:51:2c:eb:17:59:f7:ff:e3:52:02:61:
                    35:c3:44:96:95:fd:c0:e1:da:a4:cd:0c:c3:47:60:
                    5c:e1:75:0a:d4:5a:34:5d:93:47:75:a4:63:43:20:
                    13:c8:01:0c:ec:c0:06:a5:31:01:eb:09:9b:e9:ae:
                    e4:41:e6:64:78:29:69:00:7f:7e:07:46:8a:36:1c:
                    2c:1e:81:af:4f:05:90:a5:a9:3e:bb:bd:ef:fc:8f:
                    17:7f:d8:fc:7f:3c:74:71:6b:28:3d:29:f2:5a:f8:
                    ba:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:8A:0D:B6:12:49:23:ED:EB:43:8B:F4:64:29:4F:49:90:1E:AE:3A
            X509v3 Authority Key Identifier:
                keyid:77:67:E1:2F:C2:A8:AD:E1:36:08:9C:7D:9A:48:E6:48:10:98:F3:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FE46A92A7067D3C86CCAFD0AE9AB56C25164CFEAD6D0A1D473E4D6007FA04EB9/0/7767E12FC2A8ADE136089C7D9A48E6481098F31E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7767E12FC2A8ADE136089C7D9A48E6481098F31E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FE46A92A7067D3C86CCAFD0AE9AB56C25164CFEAD6D0A1D473E4D6007FA04EB9/0/3136382e3230352e3138342e302f32332d3233203d3e20323634363932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9d:c1:7e:88:ec:27:b0:ac:8f:4f:a1:88:6b:e1:c6:0d:6f:81:
         2b:f1:59:a3:f0:58:e1:48:a0:08:10:8e:73:0d:30:c9:31:71:
         d1:c2:97:a6:f6:e6:54:a6:76:de:c8:05:92:bd:21:b2:ee:ad:
         87:f8:35:a9:ec:ed:88:88:e6:bb:ce:e0:be:be:0d:5c:e6:17:
         5d:4e:bf:71:57:9d:1f:79:bc:3a:43:7e:1a:38:78:d4:37:54:
         7b:ca:45:60:ea:5a:23:29:a3:cd:6a:41:4e:31:31:1d:10:96:
         c7:5a:4c:79:77:26:42:75:70:f1:a1:87:82:2b:f5:66:9e:52:
         5c:e4:48:02:24:3a:42:53:d8:ad:15:1d:0b:d8:02:1c:38:47:
         dd:00:c6:46:52:5d:de:34:b1:09:55:7c:e1:37:91:9a:03:c4:
         5e:0f:33:2e:a5:1c:30:0e:60:fc:a7:52:06:56:64:3e:8c:31:
         01:1e:f9:d1:ec:96:5f:81:84:3b:f2:a3:75:98:87:c2:58:16:
         b1:aa:62:e3:f7:d2:50:44:4f:60:44:e0:0d:44:96:43:c7:94:
         fd:9b:0e:7a:30:c2:78:39:e4:7c:13:97:b9:dc:20:f1:70:5d:
         04:cf:6b:c7:f8:fc:f2:5f:ef:57:13:c0:61:fd:0d:44:d7:d4:
         df:b5:0f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 22:29:42 2026 by rpki-client