Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/3136382e3137362e39362e302f31392d3234203d3e203138373437.roa
File:                     3136382e3137362e39362e302f31392d3234203d3e203138373437.roa (raw, json)
Hash identifier:          0/ZkbTbOxklTR4eOu0WhnJ8I6GDou/P8KBJd4QXuLMo=
Subject key identifier:   34:33:5A:D4:8C:AB:D9:E7:0A:06:45:FB:E3:51:10:63:E6:EE:9B:3D
Certificate issuer:       /CN=D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C
Certificate serial:       551C915E17E2D5AD5EAE9D94C4DA51D8812CA94B
Authority key identifier: D8:0F:DA:40:F8:BB:5C:A1:A7:B1:74:DA:0A:7B:37:6F:BD:FD:CB:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/3136382e3137362e39362e302f31392d3234203d3e203138373437.roa
Signing time:             Thu 24 Sep 2026 13:00:01 +0000
ROA not before:           Thu 24 Sep 2026 12:55:01 +0000
ROA not after:            Thu 23 Sep 2027 13:00:01 +0000
asID:                     18747
IP address blocks:        168.176.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 Oct 2026 18:27:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:1c:91:5e:17:e2:d5:ad:5e:ae:9d:94:c4:da:51:d8:81:2c:a9:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C
        Validity
            Not Before: Sep 24 12:55:01 2026 GMT
            Not After : Sep 23 13:00:01 2027 GMT
        Subject: CN=34335AD48CABD9E70A0645FBE3511063E6EE9B3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f2:c7:07:ad:82:b2:f1:b8:97:07:59:6d:fc:
                    21:d0:17:ec:cf:07:91:41:b0:3d:07:ee:24:ae:1f:
                    68:cf:9b:1e:74:d6:51:57:5a:4c:c1:01:f7:07:6c:
                    d8:76:63:6d:fc:c4:9f:e4:d8:92:3b:a1:1e:40:fd:
                    db:59:1d:c8:42:56:c9:ea:96:23:f8:f5:6b:88:7d:
                    15:8f:1c:bb:8f:8f:d1:ba:03:ac:17:b2:fa:8c:0d:
                    d9:29:4b:d3:14:0e:07:38:ee:55:52:cd:01:64:ed:
                    71:09:19:d4:49:c5:0f:1b:7a:34:f8:61:7a:2e:99:
                    b7:99:dd:ba:a8:92:74:09:8c:82:23:40:cd:b4:86:
                    28:7e:dd:54:4b:d1:89:83:7f:d0:d3:c8:94:a9:20:
                    c8:cd:9d:f9:02:aa:ef:59:4f:18:bc:92:4c:73:c5:
                    ce:45:9c:08:9c:ab:7c:03:a3:70:f1:54:18:8e:f6:
                    67:fc:1b:d4:c1:c7:b2:85:af:e4:b3:78:31:c6:9e:
                    23:e7:47:a5:32:a3:da:78:82:ea:13:e6:e1:94:ee:
                    bb:1b:9b:49:0f:c0:23:ed:61:15:66:b1:1b:5d:6a:
                    65:49:e5:19:3f:a6:39:ca:20:5b:47:05:54:26:24:
                    60:0f:ca:58:16:e7:d2:a0:7e:ef:bc:ce:f6:27:94:
                    7c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:33:5A:D4:8C:AB:D9:E7:0A:06:45:FB:E3:51:10:63:E6:EE:9B:3D
            X509v3 Authority Key Identifier:
                keyid:D8:0F:DA:40:F8:BB:5C:A1:A7:B1:74:DA:0A:7B:37:6F:BD:FD:CB:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/3136382e3137362e39362e302f31392d3234203d3e203138373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.176.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         be:df:0d:9d:54:0c:9b:4d:16:dc:4b:03:23:f3:c5:f7:44:31:
         84:91:6c:d3:c2:11:9b:b2:e3:3f:f3:cb:d0:b7:75:e9:9e:a6:
         c1:34:11:fd:e0:07:32:50:0d:d7:e4:1f:d3:3d:d6:11:9c:9a:
         9c:c3:f8:16:ab:7a:93:7e:ff:3b:d6:d4:e6:1f:85:a6:20:7a:
         fe:ce:72:f1:96:d8:20:23:0e:71:fc:55:e6:74:9d:f7:28:d4:
         94:7a:80:95:6f:c5:5e:8a:5c:75:d3:73:18:fa:fb:65:04:c4:
         b8:8d:bb:51:20:2c:83:ec:83:58:67:ff:5a:90:91:40:b3:b8:
         5f:97:a3:12:93:65:18:ed:f7:f3:ea:df:30:d3:b1:31:5a:f3:
         35:a6:b1:58:d3:df:c3:25:28:0f:10:b9:a8:d8:db:4a:a3:69:
         67:df:ad:ee:1d:fa:1d:39:90:68:a0:70:59:0b:65:b2:b9:c8:
         df:77:56:78:08:b3:1f:a0:97:43:c2:2b:66:19:ae:29:42:56:
         97:0c:4d:c5:4d:61:92:96:d5:60:6b:b4:7e:df:a4:b1:90:f4:
         73:25:01:bd:fa:4f:d6:16:85:eb:f1:50:37:77:09:01:97:fc:
         28:00:60:b1:99:2e:26:fe:48:33:64:08:a7:b2:cd:c4:13:7e:
         95:2c:68:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 10:40:42 2026 by rpki-client