Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e37382e302f32342d3234203d3e20323731393638.roa
File:                     3136382e3234332e37382e302f32342d3234203d3e20323731393638.roa (raw, json)
Hash identifier:          ztc8k/ziIjFf8tQ93Kdj0nDppbx3oNNMDxQ0jbcwUxs=
Subject key identifier:   8B:4E:CA:48:6D:2A:8B:6B:2C:D7:C6:44:7F:F0:4A:D0:C2:60:D8:78
Certificate issuer:       /CN=D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA
Certificate serial:       723F675F248B40DD521F811DF7A71ED1D2EDB779
Authority key identifier: D3:50:3D:03:E3:D4:DF:A0:76:7F:6D:FF:3B:A7:1D:D7:B6:23:6A:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e37382e302f32342d3234203d3e20323731393638.roa
Signing time:             Fri 08 Aug 2025 01:20:00 +0000
ROA not before:           Fri 08 Aug 2025 01:15:00 +0000
ROA not after:            Fri 07 Aug 2026 01:20:00 +0000
asID:                     271968
IP address blocks:        168.243.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 15 Aug 2025 13:48:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:3f:67:5f:24:8b:40:dd:52:1f:81:1d:f7:a7:1e:d1:d2:ed:b7:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA
        Validity
            Not Before: Aug  8 01:15:00 2025 GMT
            Not After : Aug  7 01:20:00 2026 GMT
        Subject: CN=8B4ECA486D2A8B6B2CD7C6447FF04AD0C260D878
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a9:34:86:ad:d2:d6:ae:c2:59:9b:74:d8:68:
                    82:9b:80:f9:b5:55:1a:60:89:ab:b3:aa:65:90:2d:
                    42:cb:86:cd:29:a0:fe:4e:db:ff:4d:a7:11:00:b2:
                    9d:5d:ab:d6:ad:8d:5c:be:43:8f:5a:c3:ad:56:f2:
                    67:59:04:92:b1:33:c9:2c:7a:ed:00:29:4b:8c:66:
                    a1:94:27:d8:7c:db:cb:4d:37:a1:a1:24:87:15:ac:
                    e7:be:c6:b1:04:85:31:92:ae:47:50:fd:c2:df:f0:
                    6f:b8:70:c3:68:27:d3:b7:17:88:c6:d9:0f:38:21:
                    c0:dd:49:5e:42:39:38:1b:7f:d1:c8:4f:31:b3:03:
                    8d:02:30:ed:23:1c:99:42:9e:89:ea:83:21:3a:53:
                    6a:23:ef:2b:05:33:02:93:83:ee:11:5b:c3:aa:f9:
                    c4:b6:a9:aa:59:c1:8c:04:3e:6b:07:f4:37:9e:ce:
                    29:6d:2c:e4:6d:61:9e:fa:ca:ce:26:25:e5:7b:b4:
                    b4:1c:7a:36:2c:d8:fb:ce:17:42:97:c4:8a:86:d8:
                    35:6d:13:f3:b9:0f:60:64:7b:e7:f4:22:dc:ca:11:
                    fa:29:97:13:54:04:1a:c7:eb:14:89:4b:e5:93:87:
                    35:37:e8:6f:eb:09:e5:4a:68:8e:65:8c:46:ec:72:
                    7c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:4E:CA:48:6D:2A:8B:6B:2C:D7:C6:44:7F:F0:4A:D0:C2:60:D8:78
            X509v3 Authority Key Identifier:
                keyid:D3:50:3D:03:E3:D4:DF:A0:76:7F:6D:FF:3B:A7:1D:D7:B6:23:6A:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e37382e302f32342d3234203d3e20323731393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.243.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:3c:e8:8a:b5:32:44:b2:5d:5b:3d:6a:5a:5a:2f:bf:bc:4d:
         52:95:6b:7e:38:90:a2:5a:59:1c:45:16:b9:03:4a:0f:90:ee:
         2a:1e:2a:9d:20:b2:4d:e9:41:67:21:55:a0:48:f5:cc:f8:f2:
         d4:69:2a:5b:e2:91:38:5b:66:0d:86:51:4c:48:08:8c:2e:ca:
         5a:57:79:eb:3a:06:1c:0e:19:cc:27:83:50:56:20:0c:21:13:
         7c:16:f0:3a:24:c1:55:d3:27:03:47:5a:b7:c0:42:4b:74:fd:
         b8:90:81:24:03:bd:2e:06:32:b0:7b:70:5e:f6:5d:af:78:1c:
         d8:01:b5:17:99:d1:f4:de:93:d5:3d:61:2c:62:a6:62:4e:62:
         3a:f7:4d:be:ee:de:9d:f8:38:dc:67:ab:7f:5f:ec:69:bb:1a:
         7c:f6:25:93:1b:57:c6:d9:0b:e7:22:57:6e:69:be:9b:96:a2:
         b6:d2:ba:2a:97:7f:bc:8e:7b:21:f1:54:5e:fb:97:0b:b5:48:
         da:87:86:65:0d:ab:ed:4b:cd:97:ca:a1:63:b7:9e:a7:8b:51:
         c8:35:73:d1:aa:17:8d:c3:ec:b4:bb:fd:46:cd:22:cc:45:d2:
         f1:ae:1a:be:de:4f:27:a8:5e:9c:3d:35:75:31:f5:7d:57:ad:
         e7:8d:68:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:47:14 2025 by rpki-client