Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/3138392e35312e3137312e302f32342d3234203d3e20323730313131.roa
File:                     3138392e35312e3137312e302f32342d3234203d3e20323730313131.roa (raw, json)
Hash identifier:          YbEnKisdtawQw4tMXgtTIouAQQD9Gj/tMwgDwNjxU3c=
Subject key identifier:   EB:7E:DD:7C:A5:65:54:F0:B5:AE:17:D6:4E:A6:BB:E9:BD:15:7B:E1
Certificate issuer:       /CN=C5AF8630C728235D6D2C519F20712CEDAD9E5B6B
Certificate serial:       181908F1046F33416BC40ED42EA260FD4F6158E0
Authority key identifier: C5:AF:86:30:C7:28:23:5D:6D:2C:51:9F:20:71:2C:ED:AD:9E:5B:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/3138392e35312e3137312e302f32342d3234203d3e20323730313131.roa
Signing time:             Sun 22 Mar 2026 01:35:27 +0000
ROA not before:           Sun 22 Mar 2026 01:30:27 +0000
ROA not after:            Sun 21 Mar 2027 01:35:27 +0000
asID:                     270111
IP address blocks:        189.51.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:19:08:f1:04:6f:33:41:6b:c4:0e:d4:2e:a2:60:fd:4f:61:58:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5AF8630C728235D6D2C519F20712CEDAD9E5B6B
        Validity
            Not Before: Mar 22 01:30:27 2026 GMT
            Not After : Mar 21 01:35:27 2027 GMT
        Subject: CN=EB7EDD7CA56554F0B5AE17D64EA6BBE9BD157BE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:69:e5:7e:d8:aa:34:46:2a:cc:b4:52:5a:af:
                    77:81:e1:d4:12:07:ec:05:be:6b:71:14:ad:0d:68:
                    3a:99:a5:81:ba:75:0f:ff:07:bc:8d:c0:2a:79:83:
                    81:ea:9e:84:a2:2b:3e:15:1c:4c:dd:dd:f7:63:13:
                    7e:fb:d0:ec:05:99:e3:a7:a4:8b:77:86:8a:ae:3c:
                    f4:c7:49:d3:cc:c0:87:dc:f1:37:b4:6f:ab:d3:5a:
                    51:26:c8:0c:9a:e4:c2:5b:a4:c2:ee:fb:40:68:a5:
                    ca:de:fa:58:a8:95:dd:c0:fb:ec:aa:14:cf:de:7a:
                    74:74:83:b6:9c:d9:1f:ba:d6:4a:cd:fa:72:a2:6e:
                    33:5c:dc:f7:8c:d7:fb:ed:39:0b:72:b1:14:f7:5c:
                    09:28:0a:a9:f5:d5:40:ac:ae:b6:f6:f3:f8:9d:c2:
                    2c:65:b0:1a:59:15:e5:7a:93:93:cc:80:64:f2:e8:
                    c9:f9:c3:83:48:e4:f1:a4:e2:f4:0a:f4:a7:df:13:
                    ba:c5:10:16:ea:b0:40:07:87:94:67:a0:ff:f2:3e:
                    b0:f0:b5:72:3c:64:d4:5c:e0:2d:f0:c7:5f:3e:1c:
                    51:6c:de:dc:a9:ff:d0:d2:be:74:2a:9f:ae:30:de:
                    e9:07:38:d0:38:90:0f:c0:47:12:dd:c2:a4:85:24:
                    8c:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:7E:DD:7C:A5:65:54:F0:B5:AE:17:D6:4E:A6:BB:E9:BD:15:7B:E1
            X509v3 Authority Key Identifier:
                keyid:C5:AF:86:30:C7:28:23:5D:6D:2C:51:9F:20:71:2C:ED:AD:9E:5B:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/3138392e35312e3137312e302f32342d3234203d3e20323730313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:e2:81:73:7f:fb:30:63:30:e2:31:34:14:3f:79:b1:3f:2e:
         e0:e4:08:c2:00:f3:00:8d:4f:82:b7:78:0c:c3:a2:f5:10:69:
         6f:be:70:80:26:fb:74:7d:b0:32:aa:19:12:98:5e:c5:4c:db:
         ed:c1:0a:77:3e:54:b8:56:00:5f:67:34:26:97:4b:f8:26:54:
         76:ff:52:58:a8:50:e2:69:6c:36:5d:96:54:31:c7:77:6e:fa:
         9b:fb:f0:29:0d:b2:56:50:80:26:9c:db:b9:f6:a0:ef:f8:6f:
         d2:c1:25:f9:03:a7:ea:bd:18:f5:57:8e:68:c1:1e:e5:dc:e5:
         5f:b9:25:95:7f:f9:2c:05:f7:a4:8d:10:bf:28:ff:1e:06:0c:
         33:27:03:18:55:5e:a3:b9:bf:dd:70:3d:1c:bc:c9:43:98:98:
         77:18:52:26:f8:d5:3d:49:45:d1:a0:65:54:77:73:0b:34:ae:
         e5:85:d6:19:d8:bb:b4:16:62:ad:63:80:da:99:01:21:fd:3a:
         00:1d:4a:3d:3e:01:c3:3f:2c:00:35:aa:62:aa:44:dd:cf:55:
         1a:44:3e:71:bb:0c:58:ab:b3:75:cb:ad:7f:06:c3:77:7a:86:
         7d:51:4b:d5:27:11:eb:3f:a0:8f:a4:ec:84:a9:bf:0e:af:1c:
         32:ed:77:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:51:04 2026 by rpki-client