Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/10313B9BFDF583AC1AF045F7BA7E553F3B06349333553C0174065CF3F43FBD9D/0/3137302e3233392e3137312e302f32342d3234203d3e20323634383135.roa
File:                     3137302e3233392e3137312e302f32342d3234203d3e20323634383135.roa (raw, json)
Hash identifier:          UfCbhKnWQy+1HWcjjpDuPWBbH5DLw15F6Q3S2C38j7g=
Subject key identifier:   FC:A6:31:F6:0B:DC:57:19:3A:39:04:CC:21:0C:EA:54:00:90:C2:71
Certificate issuer:       /CN=1BB7D32AA11FED0DB213B2A7234D401D55B02FDE
Certificate serial:       19A53992B4B587338600DDE03A49CA6318298C65
Authority key identifier: 1B:B7:D3:2A:A1:1F:ED:0D:B2:13:B2:A7:23:4D:40:1D:55:B0:2F:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1BB7D32AA11FED0DB213B2A7234D401D55B02FDE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/10313B9BFDF583AC1AF045F7BA7E553F3B06349333553C0174065CF3F43FBD9D/0/3137302e3233392e3137312e302f32342d3234203d3e20323634383135.roa
Signing time:             Mon 12 Oct 2026 18:40:04 +0000
ROA not before:           Mon 12 Oct 2026 18:35:04 +0000
ROA not after:            Mon 11 Oct 2027 18:40:04 +0000
asID:                     264815
IP address blocks:        170.239.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/10313B9BFDF583AC1AF045F7BA7E553F3B06349333553C0174065CF3F43FBD9D/0/1BB7D32AA11FED0DB213B2A7234D401D55B02FDE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/10313B9BFDF583AC1AF045F7BA7E553F3B06349333553C0174065CF3F43FBD9D/0/1BB7D32AA11FED0DB213B2A7234D401D55B02FDE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1BB7D32AA11FED0DB213B2A7234D401D55B02FDE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 09:25:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:a5:39:92:b4:b5:87:33:86:00:dd:e0:3a:49:ca:63:18:29:8c:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BB7D32AA11FED0DB213B2A7234D401D55B02FDE
        Validity
            Not Before: Oct 12 18:35:04 2026 GMT
            Not After : Oct 11 18:40:04 2027 GMT
        Subject: CN=FCA631F60BDC57193A3904CC210CEA540090C271
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:5f:7d:a3:af:69:00:f5:61:0a:70:c7:72:c7:
                    36:e2:2d:19:4b:1d:b2:c4:da:98:c0:c0:d9:1c:cc:
                    53:73:e2:24:8e:aa:58:93:7a:83:63:69:62:c1:1b:
                    fd:49:31:3d:70:bc:d7:d4:bf:92:6a:bf:22:97:1f:
                    bf:60:86:d9:03:a9:83:2d:6c:e8:9e:ce:03:8a:25:
                    8c:18:d1:04:a9:af:02:cb:89:30:06:84:49:b9:eb:
                    b7:ce:a1:46:36:19:a2:6f:84:90:2f:93:73:9f:26:
                    bc:43:96:03:4e:2a:92:90:02:ed:60:44:66:0f:42:
                    65:56:06:b3:ec:3f:4b:37:fb:44:34:43:d7:de:96:
                    9d:a1:f9:21:6c:b5:41:df:3a:4b:76:fa:d1:12:39:
                    39:00:33:b0:f5:30:76:89:11:76:72:ad:0b:a9:b5:
                    01:b0:ce:0a:9e:11:7d:40:53:86:ab:f5:a7:ae:68:
                    d2:92:22:6f:d2:47:62:46:12:26:29:d3:80:e9:9f:
                    15:c6:6a:31:51:be:bf:45:ed:d5:e7:53:f4:24:76:
                    a4:8c:5f:1f:8a:22:a0:f4:5d:ae:ed:31:7d:c8:d5:
                    88:ad:59:ae:9e:a7:4a:de:41:3f:7a:62:79:0d:d9:
                    e7:68:83:fd:fb:a4:ff:7a:0e:5d:f6:3e:13:82:93:
                    65:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:A6:31:F6:0B:DC:57:19:3A:39:04:CC:21:0C:EA:54:00:90:C2:71
            X509v3 Authority Key Identifier:
                keyid:1B:B7:D3:2A:A1:1F:ED:0D:B2:13:B2:A7:23:4D:40:1D:55:B0:2F:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/10313B9BFDF583AC1AF045F7BA7E553F3B06349333553C0174065CF3F43FBD9D/0/1BB7D32AA11FED0DB213B2A7234D401D55B02FDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1BB7D32AA11FED0DB213B2A7234D401D55B02FDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/10313B9BFDF583AC1AF045F7BA7E553F3B06349333553C0174065CF3F43FBD9D/0/3137302e3233392e3137312e302f32342d3234203d3e20323634383135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:25:2f:c9:0f:c0:71:17:c8:98:01:49:22:b2:60:96:90:11:
         a0:87:40:2b:30:a7:90:ae:88:5f:f5:47:59:e5:16:8d:02:bc:
         04:4b:80:e6:a3:1f:29:bc:68:ae:50:a3:b9:e2:38:fb:ce:b1:
         5a:55:24:e1:59:39:83:b7:41:48:5d:81:78:d2:0b:89:56:89:
         c9:ab:1f:af:fb:17:18:33:4d:c7:13:49:00:19:af:31:6e:f4:
         8c:e9:79:2f:d0:0d:81:ce:98:ed:ba:84:a3:3b:34:5b:a4:ce:
         dc:79:cb:8e:c5:72:37:7d:b2:a4:f6:1d:a6:ed:6c:8c:ac:96:
         c7:1a:e8:af:c6:dd:cd:45:36:42:ee:27:b0:db:2c:70:96:db:
         df:9a:10:93:1f:b6:7d:7c:cd:34:3e:f9:1c:f6:b7:8e:0b:5b:
         2b:ce:36:ab:b0:b9:b4:e1:b6:d8:86:bb:d8:be:35:61:a5:d9:
         28:1c:36:58:b1:d2:88:01:05:dd:8a:bf:9a:3b:b8:94:c9:a0:
         36:71:3f:84:ba:37:de:07:5c:58:da:7d:2b:aa:a9:a2:aa:5a:
         44:46:d9:3a:34:b4:7e:88:b0:97:e7:22:48:f9:c4:eb:f3:d1:
         2b:fc:82:37:c5:05:af:6e:21:eb:c6:9f:6e:ce:6f:38:62:4c:
         3a:86:47:0c
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUGaU5krS1hzOGAN3gOknKYxgpjGUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUJCN0QzMkFBMTFGRUQwREIyMTNCMkE3MjM0RDQwMUQ1
NUIwMkZERTAeFw0yNjEwMTIxODM1MDRaFw0yNzEwMTExODQwMDRaMDMxMTAvBgNV
BAMTKEZDQTYzMUY2MEJEQzU3MTkzQTM5MDRDQzIxMENFQTU0MDA5MEMyNzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZX32jr2kA9WEKcMdyxzbiLRlL
HbLE2pjAwNkczFNz4iSOqliTeoNjaWLBG/1JMT1wvNfUv5JqvyKXH79ghtkDqYMt
bOiezgOKJYwY0QSprwLLiTAGhEm567fOoUY2GaJvhJAvk3OfJrxDlgNOKpKQAu1g
RGYPQmVWBrPsP0s3+0Q0Q9felp2h+SFstUHfOkt2+tESOTkAM7D1MHaJEXZyrQup
tQGwzgqeEX1AU4ar9aeuaNKSIm/SR2JGEiYp04DpnxXGajFRvr9F7dXnU/QkdqSM
Xx+KIqD0Xa7tMX3I1YitWa6ep0reQT96YnkN2edog/37pP96Dl32PhOCk2UlAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQU/KYx9gvcVxk6OQTMIQzqVACQwnEwHwYDVR0j
BBgwFoAUG7fTKqEf7Q2yE7KnI01AHVWwL94wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xMDMxM0I5QkZERjU4M0FDMUFGMDQ1RjdCQTdFNTUzRjNC
MDYzNDkzMzM1NTNDMDE3NDA2NUNGM0Y0M0ZCRDlELzAvMUJCN0QzMkFBMTFGRUQw
REIyMTNCMkE3MjM0RDQwMUQ1NUIwMkZERS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xQkI3RDMyQUExMUZFRDBEQjIx
M0IyQTcyMzRENDAxRDU1QjAyRkRFLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTAzMTNCOUJGREY1ODNBQzFBRjA0NUY3QkE3RTU1M0YzQjA2MzQ5MzMz
NTUzQzAxNzQwNjVDRjNGNDNGQkQ5RC8wLzMxMzczMDJlMzIzMzM5MmUzMTM3MzEy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzQzODMxMzUucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACq
76swDQYJKoZIhvcNAQELBQADggEBALAlL8kPwHEXyJgBSSKyYJaQEaCHQCswp5Cu
iF/1R1nlFo0CvARLgOajHym8aK5Qo7niOPvOsVpVJOFZOYO3QUhdgXjSC4lWicmr
H6/7FxgzTccTSQAZrzFu9IzpeS/QDYHOmO26hKM7NFukztx5y47Fcjd9sqT2Habt
bIyslsca6K/G3c1FNkLuJ7DbLHCW29+aEJMftn18zTQ++Rz2t44LWyvONquwubTh
ttiGu9i+NWGl2SgcNlix0ogBBd2Kv5o7uJTJoDZxP4S6N94HXFjafSuqqaKqWkRG
2To0tH6IsJfnIkj5xOvz0Sv8gjfFBa9uIevGn27ObzhiTDqGRww=
-----END CERTIFICATE-----
Generated at Wed Oct 14 09:49:57 2026 by rpki-client