Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e37372e302f32342d3234203d3e20323731393638.roa
File:                     3136382e3234332e37372e302f32342d3234203d3e20323731393638.roa (raw, json)
Hash identifier:          1h+baDENR4OH8+D/z8i0/8QtJJhxceHfFYRW+XGu19I=
Subject key identifier:   52:A9:85:45:AB:B1:AD:04:2E:F4:D7:2D:6B:91:64:74:4F:96:27:E4
Certificate issuer:       /CN=D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA
Certificate serial:       4C783C6B81B2643C7F6F6FD93DC1828B1A512BDA
Authority key identifier: D3:50:3D:03:E3:D4:DF:A0:76:7F:6D:FF:3B:A7:1D:D7:B6:23:6A:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e37372e302f32342d3234203d3e20323731393638.roa
Signing time:             Thu 07 Aug 2025 16:55:00 +0000
ROA not before:           Thu 07 Aug 2025 16:50:00 +0000
ROA not after:            Thu 06 Aug 2026 16:55:00 +0000
asID:                     271968
IP address blocks:        168.243.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 15 Aug 2025 13:48:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:78:3c:6b:81:b2:64:3c:7f:6f:6f:d9:3d:c1:82:8b:1a:51:2b:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA
        Validity
            Not Before: Aug  7 16:50:00 2025 GMT
            Not After : Aug  6 16:55:00 2026 GMT
        Subject: CN=52A98545ABB1AD042EF4D72D6B9164744F9627E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9e:08:98:87:d7:65:b2:b8:1f:14:99:c5:1b:
                    45:8b:27:71:40:3b:26:71:31:20:93:27:b2:4e:a0:
                    9f:c1:59:a4:5d:50:a2:1a:ed:7e:d1:85:a5:e0:08:
                    9a:73:d3:4e:8a:5a:7b:8a:f3:60:8e:4f:7b:03:32:
                    e9:ea:94:55:a8:04:36:47:8c:2f:d3:22:81:7f:20:
                    47:a8:dc:55:2c:88:62:6b:79:6f:e2:93:11:9b:dc:
                    22:84:0e:87:ca:52:ce:6e:7e:12:8f:ef:09:46:5e:
                    1f:c5:76:b4:bd:ad:23:48:e7:c3:89:fb:2d:eb:85:
                    1b:01:24:34:9d:a0:13:63:a5:00:3a:02:68:0d:12:
                    81:a9:86:dc:d2:8c:20:3f:01:aa:15:e5:5a:69:7e:
                    3b:3a:4c:c2:e7:2a:15:42:c6:84:9a:aa:76:98:04:
                    14:67:16:46:4e:0c:ae:f6:0d:fa:51:fc:ce:3e:7a:
                    d3:24:76:0c:d3:bb:39:86:22:bc:94:f2:76:f4:95:
                    c1:8b:81:50:ed:4a:5c:de:4f:73:9c:fe:5c:50:f0:
                    87:cb:52:21:cf:f9:07:e0:ef:b4:2c:24:9b:5d:ca:
                    b9:eb:8c:48:82:ad:98:85:b3:52:69:a6:8c:be:b3:
                    63:0b:3f:b5:7b:4b:fc:4a:db:c2:0c:4e:f0:96:d2:
                    2c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:A9:85:45:AB:B1:AD:04:2E:F4:D7:2D:6B:91:64:74:4F:96:27:E4
            X509v3 Authority Key Identifier:
                keyid:D3:50:3D:03:E3:D4:DF:A0:76:7F:6D:FF:3B:A7:1D:D7:B6:23:6A:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e37372e302f32342d3234203d3e20323731393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.243.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:87:55:dc:be:e8:cb:3b:ab:b0:65:b8:59:3b:c3:28:5d:5f:
         76:3b:ee:74:7a:45:29:60:ef:8d:a0:a4:fb:d5:99:ee:b3:f0:
         26:89:f5:93:9a:c8:cf:73:c1:07:79:74:9c:b3:b8:97:d2:4c:
         4b:d9:00:77:98:05:0e:2b:8b:f1:82:fd:f3:98:22:f7:cf:05:
         46:81:ec:0f:e2:fa:72:4f:51:41:6e:ef:33:f6:0a:32:08:0b:
         1b:80:fb:12:03:f6:33:80:14:40:16:1b:54:8b:9e:56:4d:71:
         4d:15:8b:25:13:88:49:72:62:f9:41:9a:35:f7:b0:85:24:11:
         ec:55:31:83:e2:84:31:f6:88:a1:9f:e6:92:66:7b:03:6c:e1:
         c4:82:a6:9f:93:9c:61:c3:72:8c:62:73:fa:ac:b1:2b:f2:30:
         4c:e8:23:10:39:03:39:eb:48:97:03:5f:ad:b1:3d:e0:5a:45:
         e2:a6:86:1c:86:d1:44:82:c9:26:1e:2d:e1:4a:85:58:95:1d:
         06:aa:43:0f:e3:b3:f8:09:c9:92:c2:fa:a1:71:6f:bb:80:41:
         ec:f0:e5:69:40:df:d9:7c:47:91:27:3a:e9:37:49:fa:f5:b2:
         61:d7:b6:bc:67:6d:51:7f:68:b8:f9:b4:a3:af:11:10:db:cd:
         aa:86:03:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:48:08 2025 by rpki-client