Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/3136382e3137362e3231322e302f32342d3234203d3e203138373437.roa
File:                     3136382e3137362e3231322e302f32342d3234203d3e203138373437.roa (raw, json)
Hash identifier:          Tp2tahtTUdWtYP+eIKxOREwQpys0OUN5RpooNgjMN/k=
Subject key identifier:   5F:B2:42:53:2A:13:0C:FA:8C:33:23:C8:E9:4B:CE:BC:22:06:C2:84
Certificate issuer:       /CN=D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C
Certificate serial:       2939AEF32C706B5C6EA929877768495DC3C5372E
Authority key identifier: D8:0F:DA:40:F8:BB:5C:A1:A7:B1:74:DA:0A:7B:37:6F:BD:FD:CB:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/3136382e3137362e3231322e302f32342d3234203d3e203138373437.roa
Signing time:             Mon 21 Sep 2026 13:05:02 +0000
ROA not before:           Mon 21 Sep 2026 13:00:02 +0000
ROA not after:            Mon 20 Sep 2027 13:05:02 +0000
asID:                     18747
IP address blocks:        168.176.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 02:58:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:39:ae:f3:2c:70:6b:5c:6e:a9:29:87:77:68:49:5d:c3:c5:37:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C
        Validity
            Not Before: Sep 21 13:00:02 2026 GMT
            Not After : Sep 20 13:05:02 2027 GMT
        Subject: CN=5FB242532A130CFA8C3323C8E94BCEBC2206C284
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:80:f4:ea:2b:0e:4a:47:9d:51:bd:56:0b:ec:
                    dc:4c:e8:c8:fc:6a:ba:1d:4d:d5:82:bc:f4:0d:89:
                    68:06:e3:03:ea:79:25:8b:f6:6e:9e:d4:43:66:09:
                    ac:f6:01:c8:8c:5d:56:75:ff:9a:1e:7a:04:01:7f:
                    68:25:da:f8:88:59:17:64:6d:7b:db:bb:04:df:57:
                    be:e9:cf:83:ff:43:1d:40:12:e8:81:d9:f7:17:32:
                    61:16:86:e1:e5:10:19:aa:d5:03:50:55:95:6b:35:
                    c3:2e:e4:28:90:9e:bb:6c:4c:f3:e5:18:d0:53:75:
                    77:d1:3d:39:48:22:83:58:9a:3f:84:fa:c5:6d:18:
                    c9:b6:97:aa:8b:ee:da:80:b2:d7:56:54:67:3e:7b:
                    36:69:ac:27:68:8a:6f:74:27:3f:db:91:61:bf:f9:
                    cb:00:59:f9:3b:af:c2:32:75:f6:ae:5c:cf:68:08:
                    23:3e:2f:5b:e0:00:34:01:c2:e2:e2:01:69:81:3b:
                    ad:32:61:ec:2f:82:c1:b1:e1:db:5a:08:f3:66:41:
                    c8:77:7e:3c:8b:8d:98:62:61:10:a9:e2:5d:85:75:
                    04:ad:b6:85:14:a8:d1:5d:76:cd:68:32:eb:0b:d3:
                    a9:88:82:a3:97:44:42:80:1c:fa:d7:b6:1e:8b:c9:
                    42:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:B2:42:53:2A:13:0C:FA:8C:33:23:C8:E9:4B:CE:BC:22:06:C2:84
            X509v3 Authority Key Identifier:
                keyid:D8:0F:DA:40:F8:BB:5C:A1:A7:B1:74:DA:0A:7B:37:6F:BD:FD:CB:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/3136382e3137362e3231322e302f32342d3234203d3e203138373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.176.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:7b:5b:85:08:f0:d3:67:2e:61:ae:d6:54:df:08:b4:c4:5f:
         bd:e5:b9:6d:c7:f9:fa:2d:37:a7:59:95:18:20:87:a0:21:b8:
         6b:28:88:27:49:67:6f:d8:a8:dc:ce:e8:bf:7b:aa:fa:fe:7d:
         57:7f:af:fb:37:43:90:c8:f3:61:20:47:80:05:0f:42:4c:1a:
         63:51:13:bb:f8:13:4f:54:b4:72:e4:dc:04:3c:3b:9c:34:25:
         7a:f6:50:d6:6e:29:2d:d1:cf:d2:55:0c:aa:f5:f8:d1:20:e4:
         82:6a:f4:73:ed:3b:be:8d:30:0d:c8:6d:29:f6:80:f8:a6:e7:
         e2:9d:21:34:5d:e6:bc:12:e1:09:f2:45:d0:7d:82:f6:02:3e:
         4f:17:74:5c:99:9f:06:14:d6:cc:fd:14:d2:bb:0c:c0:1a:98:
         8d:97:66:20:97:97:ba:fc:62:2c:f9:80:be:89:45:59:c8:7e:
         ca:65:c2:24:0e:3d:3e:ec:3a:ea:be:2c:44:88:07:d7:44:ef:
         46:09:46:94:6c:9f:47:15:d6:3f:6c:9d:b7:85:60:09:54:15:
         40:75:30:03:a6:c0:f6:4d:ad:cd:68:8a:0e:79:65:a0:07:22:
         e2:17:8f:5d:ff:d4:9b:2f:91:da:c2:07:57:e9:e6:00:a4:ae:
         4a:3f:64:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 19:21:45 2026 by rpki-client