Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1E17080BF341711B27BE627D469BC3FEC4C5DD66588222F5E5558083B67A36C8/0/3136382e3139342e3136382e302f32342d3234203d3e20323639383632.roa
File:                     3136382e3139342e3136382e302f32342d3234203d3e20323639383632.roa (raw, json)
Hash identifier:          tToDboCPSELDbJnfCQTBcnnO14yEbR8LJgjLvLz0s0k=
Subject key identifier:   AC:68:F6:0A:D6:C3:FF:54:9F:CD:95:AA:03:55:20:FE:E7:E5:B9:67
Certificate issuer:       /CN=A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD
Certificate serial:       05D70A733349ED96F91C9CEA891CF2C00B9B47C3
Authority key identifier: A5:AD:A8:47:94:7F:FC:AA:F2:9C:2E:41:F2:DE:F2:3F:E8:2B:94:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1E17080BF341711B27BE627D469BC3FEC4C5DD66588222F5E5558083B67A36C8/0/3136382e3139342e3136382e302f32342d3234203d3e20323639383632.roa
Signing time:             Wed 11 Feb 2026 20:00:00 +0000
ROA not before:           Wed 11 Feb 2026 19:55:00 +0000
ROA not after:            Wed 10 Feb 2027 20:00:00 +0000
asID:                     269862
IP address blocks:        168.194.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1E17080BF341711B27BE627D469BC3FEC4C5DD66588222F5E5558083B67A36C8/0/A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1E17080BF341711B27BE627D469BC3FEC4C5DD66588222F5E5558083B67A36C8/0/A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:d7:0a:73:33:49:ed:96:f9:1c:9c:ea:89:1c:f2:c0:0b:9b:47:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD
        Validity
            Not Before: Feb 11 19:55:00 2026 GMT
            Not After : Feb 10 20:00:00 2027 GMT
        Subject: CN=AC68F60AD6C3FF549FCD95AA035520FEE7E5B967
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:5b:1b:1a:31:67:79:10:a7:b9:22:61:b8:0e:
                    dd:33:99:8e:ea:98:33:70:05:06:4c:33:63:3f:15:
                    37:57:84:4b:9a:a4:ee:0a:d1:90:a4:d4:8f:9e:4c:
                    e3:6f:11:13:ed:cb:02:70:79:1c:80:50:02:01:a4:
                    1a:97:f8:d9:36:4d:dc:e2:9a:9d:95:b9:a9:42:7a:
                    9a:d7:07:50:cf:4e:6d:6b:9e:bd:f4:5c:4d:42:2d:
                    ef:47:a4:9a:49:b8:f0:0c:e6:94:6a:b9:ce:4f:0d:
                    f9:98:a4:63:6f:40:3c:77:d3:34:75:6d:bc:6d:38:
                    b8:92:33:a9:91:1c:23:72:a2:d8:4c:41:e0:dd:ec:
                    1c:3d:77:26:3d:f3:87:b4:7f:c8:f9:60:1d:63:c3:
                    3a:33:a3:f6:76:48:aa:e8:f2:1c:04:90:33:53:4c:
                    6d:97:ff:6e:26:7f:c0:25:90:e7:95:47:96:36:6b:
                    5d:d7:ff:ca:42:19:65:b2:02:1b:a1:96:a5:78:14:
                    c8:67:02:26:d3:e3:9e:1c:e7:31:ba:b1:c7:44:c3:
                    29:90:3d:f4:e3:a7:c7:f7:25:93:c2:4a:9e:26:91:
                    d9:2f:ba:0e:a5:19:c1:4e:ca:25:24:1b:91:a4:af:
                    fb:b8:e4:e3:98:04:7d:37:b4:57:f6:18:bd:1f:75:
                    e8:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:68:F6:0A:D6:C3:FF:54:9F:CD:95:AA:03:55:20:FE:E7:E5:B9:67
            X509v3 Authority Key Identifier:
                keyid:A5:AD:A8:47:94:7F:FC:AA:F2:9C:2E:41:F2:DE:F2:3F:E8:2B:94:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1E17080BF341711B27BE627D469BC3FEC4C5DD66588222F5E5558083B67A36C8/0/A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1E17080BF341711B27BE627D469BC3FEC4C5DD66588222F5E5558083B67A36C8/0/3136382e3139342e3136382e302f32342d3234203d3e20323639383632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:20:82:10:c7:58:51:bf:d8:3e:1a:f2:31:05:ab:6b:08:12:
         d4:f2:fa:36:70:16:b5:b2:c9:d0:a0:97:9f:2b:7d:f2:d4:b8:
         3a:b2:92:9c:f7:47:1d:56:40:76:a5:7d:2e:12:38:66:9d:5b:
         e0:c2:84:3e:95:76:c8:18:9f:3a:f2:90:4e:b7:9a:9c:88:59:
         0f:7a:d3:96:f5:d0:d6:c6:dc:ee:a7:c9:bd:9c:a6:5d:23:8a:
         e5:a8:12:73:5f:6b:1c:b2:e1:41:06:c8:4c:d5:c0:89:d1:f4:
         25:c3:3c:06:88:56:67:98:db:74:ba:c0:bf:c7:da:bd:65:b6:
         d3:f2:89:f7:b6:e1:27:9a:94:99:a5:bf:d0:05:d4:bd:97:54:
         e1:6a:30:53:28:d3:b9:15:ee:1a:53:9f:2b:74:24:34:a5:6c:
         63:93:39:62:c5:6a:b4:75:37:71:8d:e3:0c:a0:53:1b:c3:b7:
         12:06:64:f6:e4:ba:f4:80:bc:22:f8:a1:e4:df:38:78:7f:0c:
         a3:1a:f7:0b:11:ff:c3:48:b1:a7:32:78:65:5f:b9:5e:b5:70:
         72:aa:4e:ca:dd:e4:04:c0:9c:a3:cc:1e:f6:ac:5d:a7:c1:78:
         03:fe:27:b6:8f:3b:47:57:2e:c0:cb:61:6a:b2:3c:fd:96:61:
         10:99:09:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 04:42:08 2026 by rpki-client