Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/3138392e35312e3136392e302f32342d3234203d3e20323730313131.roa
File:                     3138392e35312e3136392e302f32342d3234203d3e20323730313131.roa (raw, json)
Hash identifier:          iN4wwyUpmAvEQqNra2qp2P+WKNjlU68lla4aIgPog/c=
Subject key identifier:   07:DC:4A:66:18:C4:16:C8:06:5F:93:9E:12:8F:34:D7:32:52:29:98
Certificate issuer:       /CN=C5AF8630C728235D6D2C519F20712CEDAD9E5B6B
Certificate serial:       0E2AB63405B3C5D6DF06CF925A832846A6E3C8EA
Authority key identifier: C5:AF:86:30:C7:28:23:5D:6D:2C:51:9F:20:71:2C:ED:AD:9E:5B:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/3138392e35312e3136392e302f32342d3234203d3e20323730313131.roa
Signing time:             Sun 22 Mar 2026 01:35:28 +0000
ROA not before:           Sun 22 Mar 2026 01:30:28 +0000
ROA not after:            Sun 21 Mar 2027 01:35:28 +0000
asID:                     270111
IP address blocks:        189.51.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:2a:b6:34:05:b3:c5:d6:df:06:cf:92:5a:83:28:46:a6:e3:c8:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5AF8630C728235D6D2C519F20712CEDAD9E5B6B
        Validity
            Not Before: Mar 22 01:30:28 2026 GMT
            Not After : Mar 21 01:35:28 2027 GMT
        Subject: CN=07DC4A6618C416C8065F939E128F34D732522998
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:56:21:87:e5:f0:18:7c:ff:3e:6b:17:42:a8:
                    64:64:73:10:15:62:73:cf:a4:a6:7b:c4:c2:01:8c:
                    73:e1:91:1e:71:ba:55:12:4b:05:04:21:bc:77:46:
                    dc:1d:c4:f6:c2:35:28:41:12:2b:f3:24:63:8a:e2:
                    98:b8:64:d5:32:70:eb:22:8f:2c:17:21:60:67:33:
                    9a:27:ab:a7:c5:bc:3e:8d:40:b2:d1:f7:3a:41:71:
                    09:95:1f:90:fb:0e:f0:82:97:8a:a2:df:61:a3:f0:
                    9c:f8:1f:7e:a5:6f:7a:3f:54:dd:e7:a0:be:56:a2:
                    7b:77:66:54:44:20:44:5b:8e:95:e3:f3:96:a5:be:
                    09:9a:48:49:f5:ac:9c:e7:eb:94:d3:9c:5b:9b:2f:
                    7b:e3:15:61:3a:d7:4f:9f:0a:41:22:fd:1a:b1:86:
                    b3:a6:ac:0d:65:34:cb:e6:25:a0:99:61:ec:f2:bf:
                    60:50:60:7f:dd:33:c3:6b:ae:80:2d:ed:d9:6e:af:
                    e4:43:70:1e:a4:e0:65:06:e4:69:c0:9c:d2:ef:c9:
                    79:6f:c7:2a:56:d0:0d:75:36:2b:c6:32:bc:e6:a8:
                    8e:4c:c7:9a:37:ff:ad:d3:09:ec:87:d1:97:78:97:
                    32:ad:9b:a3:09:69:3a:44:06:f3:9f:96:90:20:31:
                    f7:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:DC:4A:66:18:C4:16:C8:06:5F:93:9E:12:8F:34:D7:32:52:29:98
            X509v3 Authority Key Identifier:
                keyid:C5:AF:86:30:C7:28:23:5D:6D:2C:51:9F:20:71:2C:ED:AD:9E:5B:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/3138392e35312e3136392e302f32342d3234203d3e20323730313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:cb:82:59:66:cc:69:a0:71:7a:74:ba:3a:4a:d8:72:e6:0c:
         c5:ab:8c:8b:17:21:a1:05:14:f0:88:ee:0a:c0:ac:03:90:d2:
         a6:1e:fc:8c:af:e4:68:27:0e:7e:24:16:a9:cb:25:10:6a:25:
         bd:ac:b1:48:cb:0d:2c:8a:04:74:5c:a1:30:28:f1:5b:ec:f9:
         25:0d:9a:93:a7:a5:20:97:dd:65:26:75:11:d4:83:f5:8b:de:
         84:66:35:82:f9:4b:19:31:bc:7b:1d:2c:4f:cb:81:60:f5:c2:
         d1:ac:25:ed:6b:53:99:ed:5a:a0:78:25:fa:46:c2:64:e1:9a:
         15:d0:17:56:b1:bf:28:32:a8:ac:71:fc:9e:e7:96:b2:cf:94:
         88:80:bd:a3:f8:f7:25:09:78:49:0d:0b:9d:e6:f9:02:db:6c:
         38:8d:69:84:f1:5f:d8:09:da:9d:13:9f:8b:fe:0c:0d:0c:81:
         60:39:1a:43:a0:a1:4f:34:76:41:82:d6:44:1f:0b:6a:e0:6f:
         29:1d:e5:dd:d4:2a:53:24:7e:b4:a7:40:82:34:f7:1d:ba:03:
         88:06:82:48:c9:90:51:b8:c1:fa:12:8c:55:fb:c4:e5:13:50:
         cb:7b:38:2a:97:88:fc:22:75:d1:4a:d5:dc:60:6b:53:3a:2d:
         6f:94:90:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:54:27 2026 by rpki-client