Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3DBFA546559EED721228136CCC045DF7B5CEF9846B4845F524250BB65E772EED/0/3137302e3233382e36342e302f32332d3233203d3e203237393531.roa
File:                     3137302e3233382e36342e302f32332d3233203d3e203237393531.roa (raw, json)
Hash identifier:          bobaVhWNNiOy2jKv41ydOezuWRdrkuD/mVJZ/kfY5qI=
Subject key identifier:   D0:CB:8D:96:84:79:99:82:7F:B6:EF:15:7B:E5:31:4B:6B:8D:65:DE
Certificate issuer:       /CN=CC121F7A2F5847D63452275EE667C5A03D867975
Certificate serial:       5AC685C32D390C88C63BD4B3EAEEB4D3B366EAE7
Authority key identifier: CC:12:1F:7A:2F:58:47:D6:34:52:27:5E:E6:67:C5:A0:3D:86:79:75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC121F7A2F5847D63452275EE667C5A03D867975.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3DBFA546559EED721228136CCC045DF7B5CEF9846B4845F524250BB65E772EED/0/3137302e3233382e36342e302f32332d3233203d3e203237393531.roa
Signing time:             Thu 26 Mar 2026 19:45:00 +0000
ROA not before:           Thu 26 Mar 2026 19:40:00 +0000
ROA not after:            Thu 25 Mar 2027 19:45:00 +0000
asID:                     27951
IP address blocks:        170.238.64.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3DBFA546559EED721228136CCC045DF7B5CEF9846B4845F524250BB65E772EED/0/CC121F7A2F5847D63452275EE667C5A03D867975.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3DBFA546559EED721228136CCC045DF7B5CEF9846B4845F524250BB65E772EED/0/CC121F7A2F5847D63452275EE667C5A03D867975.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC121F7A2F5847D63452275EE667C5A03D867975.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:c6:85:c3:2d:39:0c:88:c6:3b:d4:b3:ea:ee:b4:d3:b3:66:ea:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC121F7A2F5847D63452275EE667C5A03D867975
        Validity
            Not Before: Mar 26 19:40:00 2026 GMT
            Not After : Mar 25 19:45:00 2027 GMT
        Subject: CN=D0CB8D96847999827FB6EF157BE5314B6B8D65DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6c:2c:ef:97:d8:19:1c:a2:a1:24:69:ca:c9:
                    45:20:d7:90:d6:d3:77:4a:82:c0:f2:55:52:25:37:
                    0e:92:47:ec:c1:ea:fe:7c:90:87:0c:de:6a:d8:0c:
                    2b:e9:c8:1e:5a:70:99:02:fd:9d:6d:9c:46:32:2d:
                    e3:8a:42:61:d7:6d:6e:33:bb:1e:5a:08:ef:6a:8e:
                    16:d6:c6:d2:dd:84:e6:96:46:c3:24:77:a8:ff:4c:
                    44:e1:a7:80:04:7a:40:5a:18:d8:c7:2e:b2:3a:7f:
                    5e:16:d5:5e:d5:c5:20:52:44:cd:94:b6:97:b3:fb:
                    96:12:5c:73:d8:ea:f5:fe:bd:ff:c7:7f:a8:e7:ff:
                    72:00:eb:3f:2e:df:21:ba:02:b1:20:94:ae:9d:70:
                    b0:f6:ce:48:63:1f:22:0b:7f:b6:71:f0:e9:6c:8b:
                    7b:62:bb:8d:71:e4:aa:80:97:87:2e:af:58:6d:b0:
                    a5:d8:e9:dc:bc:54:0b:09:be:d9:67:1f:d6:15:e8:
                    89:c0:16:d1:91:08:6f:25:c3:11:af:29:d0:2f:0e:
                    f9:bc:38:5e:84:13:b9:a2:0e:89:ce:e1:74:8b:3d:
                    9d:dd:3c:ea:77:1b:91:da:fc:f9:64:f7:b1:38:cd:
                    73:d0:4b:66:4d:80:00:82:ad:e0:5f:ab:7a:22:86:
                    d0:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:CB:8D:96:84:79:99:82:7F:B6:EF:15:7B:E5:31:4B:6B:8D:65:DE
            X509v3 Authority Key Identifier:
                keyid:CC:12:1F:7A:2F:58:47:D6:34:52:27:5E:E6:67:C5:A0:3D:86:79:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3DBFA546559EED721228136CCC045DF7B5CEF9846B4845F524250BB65E772EED/0/CC121F7A2F5847D63452275EE667C5A03D867975.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC121F7A2F5847D63452275EE667C5A03D867975.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3DBFA546559EED721228136CCC045DF7B5CEF9846B4845F524250BB65E772EED/0/3137302e3233382e36342e302f32332d3233203d3e203237393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         91:b2:78:88:f8:2d:24:89:21:96:7c:d5:70:f4:d6:9f:7c:89:
         3b:97:6e:98:17:89:a5:5c:c9:4b:1b:90:98:53:fb:df:4f:28:
         87:6d:50:76:8e:26:a5:e4:71:6a:ff:5b:d2:ef:24:4e:5b:32:
         1f:65:a0:8c:85:d8:c9:1d:f0:6a:98:b0:d7:5b:46:bf:e4:2e:
         06:ef:8d:00:5d:e0:aa:61:2b:08:b3:db:f2:43:83:97:d6:de:
         f2:9a:90:06:6d:49:bc:14:a5:53:47:cd:96:d2:b9:46:3a:c2:
         57:10:46:a2:96:a8:9b:fd:2a:08:05:c2:2d:d2:32:00:4d:78:
         a5:8a:6f:6d:f1:f9:95:8d:63:f8:d9:5f:4f:c6:80:e8:94:0b:
         87:17:8b:5c:5b:11:a4:79:38:12:af:5b:ad:1f:01:56:20:50:
         18:63:37:a9:37:69:b9:df:48:b1:02:a0:81:d5:83:6a:1d:01:
         2c:f6:d4:2e:ac:57:03:46:af:99:3e:e6:c4:32:33:47:c1:6b:
         9c:1a:86:2c:68:eb:9a:12:7a:32:a4:d5:23:f2:fd:44:99:ed:
         28:75:58:43:ba:28:58:7f:c2:f5:eb:f4:bd:54:b9:a8:b9:5b:
         37:ef:34:63:4b:50:99:23:42:84:68:80:20:5c:d8:53:f1:9d:
         7e:2c:87:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 05:40:06 2026 by rpki-client