Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/10313B9BFDF583AC1AF045F7BA7E553F3B06349333553C0174065CF3F43FBD9D/0/3137302e3233392e3137302e302f32342d3234203d3e20323634383135.roa
File:                     3137302e3233392e3137302e302f32342d3234203d3e20323634383135.roa (raw, json)
Hash identifier:          Fp22qC7EgZCJeIsouM6oinUfoEacNY35p5UVBmOQk9w=
Subject key identifier:   37:D6:48:F2:C5:50:B8:09:96:C0:B0:96:E2:52:7F:79:69:D9:FF:5D
Certificate issuer:       /CN=1BB7D32AA11FED0DB213B2A7234D401D55B02FDE
Certificate serial:       72713C87E95D8699AAEF392F7037658DBC3534A8
Authority key identifier: 1B:B7:D3:2A:A1:1F:ED:0D:B2:13:B2:A7:23:4D:40:1D:55:B0:2F:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1BB7D32AA11FED0DB213B2A7234D401D55B02FDE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/10313B9BFDF583AC1AF045F7BA7E553F3B06349333553C0174065CF3F43FBD9D/0/3137302e3233392e3137302e302f32342d3234203d3e20323634383135.roa
Signing time:             Mon 12 Oct 2026 18:40:05 +0000
ROA not before:           Mon 12 Oct 2026 18:35:05 +0000
ROA not after:            Mon 11 Oct 2027 18:40:05 +0000
asID:                     264815
IP address blocks:        170.239.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/10313B9BFDF583AC1AF045F7BA7E553F3B06349333553C0174065CF3F43FBD9D/0/1BB7D32AA11FED0DB213B2A7234D401D55B02FDE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/10313B9BFDF583AC1AF045F7BA7E553F3B06349333553C0174065CF3F43FBD9D/0/1BB7D32AA11FED0DB213B2A7234D401D55B02FDE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1BB7D32AA11FED0DB213B2A7234D401D55B02FDE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Oct 2026 03:37:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:71:3c:87:e9:5d:86:99:aa:ef:39:2f:70:37:65:8d:bc:35:34:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BB7D32AA11FED0DB213B2A7234D401D55B02FDE
        Validity
            Not Before: Oct 12 18:35:05 2026 GMT
            Not After : Oct 11 18:40:05 2027 GMT
        Subject: CN=37D648F2C550B80996C0B096E2527F7969D9FF5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:94:f4:e8:29:1b:dd:23:6c:46:e2:1f:7d:00:
                    96:29:7a:11:50:d6:99:f6:a4:22:b4:99:9a:75:16:
                    da:30:f7:65:c9:f1:ea:8b:7d:f3:93:a8:1d:61:ac:
                    af:76:26:45:a5:e7:48:15:bd:ec:45:22:6b:eb:b0:
                    fa:ac:ec:db:29:f9:52:d7:52:bf:8f:40:fa:f7:05:
                    0b:cd:49:3b:59:f4:24:14:79:4d:35:2e:6b:70:df:
                    94:a0:0c:67:27:d0:07:6f:be:c6:09:75:66:10:ac:
                    b6:0c:75:1a:d1:08:18:b7:cc:14:76:b7:f5:38:5a:
                    98:3a:72:ac:53:c3:59:44:09:ee:12:a7:36:77:8b:
                    56:63:5c:3e:79:fc:9e:5a:86:2b:4f:03:89:19:f5:
                    50:0a:f5:37:63:5d:3d:ee:45:da:45:79:20:b3:b7:
                    5d:ee:5f:d9:d0:56:a0:68:73:91:0d:88:20:44:69:
                    0c:8e:74:21:98:ab:d7:c1:a3:6f:ab:31:ce:6e:d3:
                    78:1b:81:f6:03:10:3e:ae:b6:fc:bb:e9:31:06:7f:
                    f9:4d:19:53:5c:5d:03:95:87:5b:e4:bc:5c:2d:95:
                    c4:de:fb:ca:f8:a9:9e:ee:40:5f:bc:7d:1a:71:fe:
                    05:37:28:0b:13:85:af:c6:3b:40:18:c1:53:67:40:
                    0b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:D6:48:F2:C5:50:B8:09:96:C0:B0:96:E2:52:7F:79:69:D9:FF:5D
            X509v3 Authority Key Identifier:
                keyid:1B:B7:D3:2A:A1:1F:ED:0D:B2:13:B2:A7:23:4D:40:1D:55:B0:2F:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/10313B9BFDF583AC1AF045F7BA7E553F3B06349333553C0174065CF3F43FBD9D/0/1BB7D32AA11FED0DB213B2A7234D401D55B02FDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1BB7D32AA11FED0DB213B2A7234D401D55B02FDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/10313B9BFDF583AC1AF045F7BA7E553F3B06349333553C0174065CF3F43FBD9D/0/3137302e3233392e3137302e302f32342d3234203d3e20323634383135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:ad:6e:11:f1:16:c2:8d:1e:c0:fd:1f:81:8e:e0:5f:3f:10:
         21:a3:bf:17:47:a2:0e:e5:83:87:f8:d5:0a:51:d0:18:21:aa:
         b7:f6:51:7d:5f:01:55:22:68:38:f3:c5:a6:28:c1:1a:10:e1:
         85:d8:f1:62:e0:df:37:93:fa:86:86:97:8a:0c:9b:83:4d:dc:
         a5:d4:b8:69:b3:96:dd:f7:f0:d6:22:1f:37:44:a5:86:8e:83:
         89:59:e9:36:11:0e:4a:8c:39:3d:7b:18:ce:2c:a4:5e:56:4b:
         a8:c1:c5:8e:bc:13:2e:02:d4:95:b4:30:bb:4c:7b:3b:f9:32:
         63:08:9d:cf:26:98:b2:f3:dd:f4:a0:44:7b:46:71:38:16:88:
         08:06:cd:eb:2e:82:ee:81:32:a1:e6:9b:75:a5:e7:fa:be:f3:
         62:e9:dd:df:18:c7:5a:7e:0b:74:94:7a:a7:d1:38:6e:50:8d:
         6b:26:cb:ac:59:09:75:a7:00:c6:92:bd:37:82:d0:0a:94:2a:
         ef:95:63:0c:e5:8c:33:37:0f:c8:58:52:c2:35:a3:e8:3c:5e:
         91:7f:0c:1c:01:f1:0e:c9:34:66:8a:3a:74:20:9c:44:46:db:
         a6:61:7d:9f:38:79:b8:4e:e7:7a:74:d6:78:98:c0:66:be:35:
         17:b2:df:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 01:55:48 2026 by rpki-client