Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e37392e302f32342d3234203d3e20323732303237.roa
File:                     3136382e3234332e37392e302f32342d3234203d3e20323732303237.roa (raw, json)
Hash identifier:          zyxY4Qo0NHvdXqBrOiZlY5oC2RRorPwAeqCafuKr1gg=
Subject key identifier:   2A:35:B5:A6:68:1C:74:ED:D1:C2:6D:F9:2E:AB:66:8E:BB:C9:A3:F8
Certificate issuer:       /CN=D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA
Certificate serial:       61EAE583A4185FBA2AEA47CEAB53D531AF0C0992
Authority key identifier: D3:50:3D:03:E3:D4:DF:A0:76:7F:6D:FF:3B:A7:1D:D7:B6:23:6A:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e37392e302f32342d3234203d3e20323732303237.roa
Signing time:             Wed 16 Sep 2026 18:35:54 +0000
ROA not before:           Wed 16 Sep 2026 18:30:54 +0000
ROA not after:            Wed 15 Sep 2027 18:35:54 +0000
asID:                     272027
IP address blocks:        168.243.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 09:25:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:ea:e5:83:a4:18:5f:ba:2a:ea:47:ce:ab:53:d5:31:af:0c:09:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA
        Validity
            Not Before: Sep 16 18:30:54 2026 GMT
            Not After : Sep 15 18:35:54 2027 GMT
        Subject: CN=2A35B5A6681C74EDD1C26DF92EAB668EBBC9A3F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f5:c5:39:be:90:87:65:e9:aa:27:17:43:80:
                    54:30:91:9a:7b:87:4b:1e:20:05:ae:f8:18:78:e1:
                    a4:38:61:33:87:ce:78:ff:2b:07:92:39:2d:bb:e4:
                    0a:6e:c2:5a:f1:21:65:f0:b3:f2:23:a5:36:63:6f:
                    e2:df:f8:99:99:d7:68:3c:da:38:1c:4e:e8:e1:7c:
                    dc:51:19:51:e3:cd:8a:60:0b:16:c5:db:73:47:8e:
                    f3:08:2a:9d:37:d0:43:d3:2c:1a:5e:e0:8a:cb:51:
                    98:28:53:00:07:7f:32:ab:3b:85:71:9d:ca:3f:0e:
                    08:59:3a:08:21:48:d4:44:ca:c4:1c:27:85:6f:b0:
                    c8:3b:c6:9b:dd:6f:de:f2:ef:90:a1:8f:bd:90:36:
                    2f:7f:65:40:f1:c6:0b:00:b1:49:7a:20:58:d7:74:
                    e6:52:ac:39:d3:33:47:b2:fb:d5:32:9b:80:ee:a6:
                    74:3f:29:d5:42:bd:a4:96:f2:e5:c0:26:fe:07:45:
                    e1:16:70:ec:3d:fe:d9:24:79:18:73:b3:30:2f:f1:
                    8f:1b:27:17:7e:8c:05:9c:f8:7b:73:05:d4:2c:cc:
                    5c:9b:43:cd:43:3f:fc:24:3a:0c:26:3e:c5:a1:27:
                    db:1c:3c:4a:c5:19:fa:b7:c9:16:e5:98:03:a1:ae:
                    0e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:35:B5:A6:68:1C:74:ED:D1:C2:6D:F9:2E:AB:66:8E:BB:C9:A3:F8
            X509v3 Authority Key Identifier:
                keyid:D3:50:3D:03:E3:D4:DF:A0:76:7F:6D:FF:3B:A7:1D:D7:B6:23:6A:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e37392e302f32342d3234203d3e20323732303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.243.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:93:be:f2:f0:91:03:32:dd:ec:63:21:86:42:26:1c:ce:48:
         64:0f:40:17:b2:f3:86:6f:0f:f7:2a:55:6e:ed:20:df:35:23:
         70:7c:de:db:10:4a:f1:93:73:71:a5:e1:02:0f:5c:8d:89:4d:
         58:eb:bc:f4:86:21:38:5a:9b:12:c0:13:61:47:8a:a5:78:97:
         00:7b:9d:d4:8d:c7:23:f8:0b:ec:5e:a0:c3:22:1a:62:3c:6f:
         de:f7:03:ab:90:0d:49:f9:09:17:2b:ff:73:14:79:31:ca:09:
         f8:e2:05:4c:ae:0f:8a:60:ac:e2:e1:20:0b:9d:e3:16:67:b8:
         d3:15:d9:f6:f3:8b:03:7d:c2:e1:05:85:00:5f:a1:52:24:14:
         8a:1f:8e:6f:b5:bc:b5:5c:74:7d:a3:0b:2f:c4:33:c1:c7:71:
         0d:27:5a:d8:f9:80:22:b1:be:5d:fd:02:de:f6:d2:d5:a9:5d:
         2c:b1:ca:68:d0:ff:04:48:23:3b:37:c7:01:34:48:29:4a:fb:
         5e:a4:d5:c8:a4:30:66:aa:ad:af:47:33:65:71:58:94:07:a5:
         af:26:21:c0:19:4d:54:ba:a4:45:14:05:24:d0:7d:62:32:7a:
         4a:54:df:f8:11:18:6d:57:a7:51:76:44:da:32:77:c0:b0:27:
         25:c0:bf:dc
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUYerlg6QYX7oq6kfOq1PVMa8MCZIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM1MDNEMDNFM0Q0REZBMDc2N0Y2REZGM0JBNzFERDdC
NjIzNkFGQTAeFw0yNjA5MTYxODMwNTRaFw0yNzA5MTUxODM1NTRaMDMxMTAvBgNV
BAMTKDJBMzVCNUE2NjgxQzc0RUREMUMyNkRGOTJFQUI2NjhFQkJDOUEzRjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCW9cU5vpCHZemqJxdDgFQwkZp7
h0seIAWu+Bh44aQ4YTOHznj/KweSOS275ApuwlrxIWXws/IjpTZjb+Lf+JmZ12g8
2jgcTujhfNxRGVHjzYpgCxbF23NHjvMIKp030EPTLBpe4IrLUZgoUwAHfzKrO4Vx
nco/DghZOgghSNREysQcJ4VvsMg7xpvdb97y75Chj72QNi9/ZUDxxgsAsUl6IFjX
dOZSrDnTM0ey+9Uym4DupnQ/KdVCvaSW8uXAJv4HReEWcOw9/tkkeRhzszAv8Y8b
Jxd+jAWc+HtzBdQszFybQ81DP/wkOgwmPsWhJ9scPErFGfq3yRblmAOhrg7zAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUKjW1pmgcdO3Rwm35LqtmjrvJo/gwHwYDVR0j
BBgwFoAU01A9A+PU36B2f23/O6cd17YjavowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wQkIwNzFEOTZEOEZCRTJBODY5OTA5MDVEQzE3RTE5OTM3
MEE1NzA1MjM2QTAwMDY1RDY4NTYzRkFBREI4NUU2LzAvRDM1MDNEMDNFM0Q0REZB
MDc2N0Y2REZGM0JBNzFERDdCNjIzNkFGQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EMzUwM0QwM0UzRDRERkEwNzY3
RjZERkYzQkE3MUREN0I2MjM2QUZBLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMEJCMDcxRDk2RDhGQkUyQTg2OTkwOTA1REMxN0UxOTkzNzBBNTcwNTIz
NkEwMDA2NUQ2ODU2M0ZBQURCODVFNi8wLzMxMzYzODJlMzIzNDMzMmUzNzM5MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMyMzAzMjM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqPNP
MA0GCSqGSIb3DQEBCwUAA4IBAQA3k77y8JEDMt3sYyGGQiYczkhkD0AXsvOGbw/3
KlVu7SDfNSNwfN7bEErxk3NxpeECD1yNiU1Y67z0hiE4WpsSwBNhR4qleJcAe53U
jccj+AvsXqDDIhpiPG/e9wOrkA1J+QkXK/9zFHkxygn44gVMrg+KYKzi4SALneMW
Z7jTFdn284sDfcLhBYUAX6FSJBSKH45vtby1XHR9owsvxDPBx3ENJ1rY+YAisb5d
/QLe9tLVqV0sscpo0P8ESCM7N8cBNEgpSvtepNXIpDBmqq2vRzNlcViUB6WvJiHA
GU1UuqRFFAUk0H1iMnpKVN/4ERhtV6dRdkTaMnfAsCclwL/c
-----END CERTIFICATE-----
Generated at Wed Oct 14 10:18:57 2026 by rpki-client