Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/3138392e35312e3137302e302f32342d3234203d3e20323730313131.roa
File:                     3138392e35312e3137302e302f32342d3234203d3e20323730313131.roa (raw, json)
Hash identifier:          QiToerv8Dzosy2Y26mgabc8CIsAMsRIvxZMdsgS381I=
Subject key identifier:   15:38:E5:2B:21:0C:5E:F6:7B:BF:22:49:C4:C3:5C:8A:08:83:58:49
Certificate issuer:       /CN=C5AF8630C728235D6D2C519F20712CEDAD9E5B6B
Certificate serial:       2C8C5E85FC7C16BA6911E73F218D1BE15C4DAA03
Authority key identifier: C5:AF:86:30:C7:28:23:5D:6D:2C:51:9F:20:71:2C:ED:AD:9E:5B:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/3138392e35312e3137302e302f32342d3234203d3e20323730313131.roa
Signing time:             Sun 22 Mar 2026 01:35:28 +0000
ROA not before:           Sun 22 Mar 2026 01:30:28 +0000
ROA not after:            Sun 21 Mar 2027 01:35:28 +0000
asID:                     270111
IP address blocks:        189.51.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:8c:5e:85:fc:7c:16:ba:69:11:e7:3f:21:8d:1b:e1:5c:4d:aa:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5AF8630C728235D6D2C519F20712CEDAD9E5B6B
        Validity
            Not Before: Mar 22 01:30:28 2026 GMT
            Not After : Mar 21 01:35:28 2027 GMT
        Subject: CN=1538E52B210C5EF67BBF2249C4C35C8A08835849
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ab:ce:5a:ba:39:f5:63:82:52:22:2d:6c:68:
                    9b:88:75:a1:dc:45:d4:04:91:e7:1f:9d:6e:ba:41:
                    a0:5b:a3:b0:d6:e9:c4:7a:cb:82:5b:82:c1:3a:6d:
                    4e:dc:41:59:b4:79:10:31:20:bc:79:f4:24:48:96:
                    a0:0b:42:bd:e5:01:4c:ce:50:72:ca:92:3c:a4:d0:
                    38:70:dd:c8:1f:18:ea:1d:6a:ac:2f:c4:04:6c:d7:
                    eb:42:d9:82:28:eb:c9:74:56:f3:bc:b5:66:5e:a1:
                    be:75:7a:b4:f9:f8:93:2d:01:bd:86:32:ae:72:c1:
                    41:30:42:4f:51:52:42:12:9b:5d:41:e2:1b:94:a1:
                    fb:55:55:ba:62:16:ad:74:bf:43:6f:c1:3a:04:2c:
                    1a:09:a5:ba:ba:59:f0:c4:60:73:4c:2c:2f:ed:b4:
                    0a:e4:ac:01:43:07:8d:a5:72:01:a1:8a:6a:0a:27:
                    3c:97:da:2c:82:47:14:fc:64:e0:c9:1c:62:2f:b5:
                    d5:38:97:93:2b:8b:78:98:61:6a:94:ae:53:f6:db:
                    26:10:05:12:b0:f0:d4:be:dd:b1:c5:dd:82:86:ed:
                    d5:90:62:b7:e4:7e:9b:e8:13:4d:bb:66:2b:9b:93:
                    b6:5a:93:f7:1f:13:72:9e:30:af:8c:50:86:7d:b1:
                    b0:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:38:E5:2B:21:0C:5E:F6:7B:BF:22:49:C4:C3:5C:8A:08:83:58:49
            X509v3 Authority Key Identifier:
                keyid:C5:AF:86:30:C7:28:23:5D:6D:2C:51:9F:20:71:2C:ED:AD:9E:5B:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/3138392e35312e3137302e302f32342d3234203d3e20323730313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:63:1a:de:d3:be:3d:fc:24:68:97:d6:f4:85:5f:31:01:61:
         00:9b:22:1e:b4:a7:0e:17:48:4b:a5:82:67:61:e8:ab:8e:d7:
         48:09:c2:08:dd:3e:90:37:1a:8a:75:ad:b6:67:2e:a5:de:0a:
         18:f9:9e:44:0c:cf:e7:26:2d:ea:40:94:92:a4:33:33:a1:51:
         90:15:11:8d:d8:42:d2:6b:74:e6:c7:80:52:a0:86:16:dd:ab:
         b4:77:8f:c5:e0:67:dc:cd:ff:22:a2:eb:32:5a:3c:a4:2e:7d:
         b1:9f:26:ff:7d:74:de:0e:c8:c2:17:2d:94:e5:f3:fc:ed:bc:
         51:b1:2d:f1:10:f4:a4:a9:6a:fd:f9:f3:40:60:46:0a:f6:64:
         77:4e:12:02:41:ba:06:99:91:cf:2a:44:1e:b2:c3:d0:35:73:
         cf:a4:a8:27:31:75:0a:e0:09:37:f3:59:17:7d:4b:e2:a1:d7:
         2f:8e:28:c6:e2:5c:8f:44:e7:ef:2a:ab:7d:67:eb:e9:a9:75:
         c9:fb:2c:0c:32:e5:cf:f4:4e:67:d9:c2:27:d9:7e:f3:c7:59:
         dc:d3:05:39:59:c7:9f:cd:01:c2:b3:59:90:f5:30:2b:45:cf:
         77:cb:f7:9c:0f:74:e4:a1:74:b8:d0:a2:16:60:6d:8f:c9:b5:
         14:ee:4e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:54:29 2026 by rpki-client