Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/4F3638C8DF693002EB8C051A778FCFE2CE757B735E1CFA668B3F601E7CF617D7/0/3137302e38312e3134372e302f32342d3234203d3e20323732313138.roa
File:                     3137302e38312e3134372e302f32342d3234203d3e20323732313138.roa (raw, json)
Hash identifier:          5/T2XQavTz1CqUBCdaWaGvEkz+PGOEwJDFFU9FLwTRg=
Subject key identifier:   65:D6:7F:80:14:B4:15:27:0B:BC:1B:F8:51:2D:C5:43:0E:55:FA:1A
Certificate issuer:       /CN=4F1AF54C46F29B17E758E9F9463DCF9650C71A8F
Certificate serial:       11C79D31E683F97933A4A265B022197B8B18ED07
Authority key identifier: 4F:1A:F5:4C:46:F2:9B:17:E7:58:E9:F9:46:3D:CF:96:50:C7:1A:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F1AF54C46F29B17E758E9F9463DCF9650C71A8F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4F3638C8DF693002EB8C051A778FCFE2CE757B735E1CFA668B3F601E7CF617D7/0/3137302e38312e3134372e302f32342d3234203d3e20323732313138.roa
Signing time:             Wed 07 Oct 2026 14:38:58 +0000
ROA not before:           Wed 07 Oct 2026 14:33:58 +0000
ROA not after:            Wed 06 Oct 2027 14:38:58 +0000
asID:                     272118
IP address blocks:        170.81.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4F3638C8DF693002EB8C051A778FCFE2CE757B735E1CFA668B3F601E7CF617D7/0/4F1AF54C46F29B17E758E9F9463DCF9650C71A8F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4F3638C8DF693002EB8C051A778FCFE2CE757B735E1CFA668B3F601E7CF617D7/0/4F1AF54C46F29B17E758E9F9463DCF9650C71A8F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F1AF54C46F29B17E758E9F9463DCF9650C71A8F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 06:54:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:c7:9d:31:e6:83:f9:79:33:a4:a2:65:b0:22:19:7b:8b:18:ed:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F1AF54C46F29B17E758E9F9463DCF9650C71A8F
        Validity
            Not Before: Oct  7 14:33:58 2026 GMT
            Not After : Oct  6 14:38:58 2027 GMT
        Subject: CN=65D67F8014B415270BBC1BF8512DC5430E55FA1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:95:26:81:a5:6a:49:61:c4:b9:b9:9a:6e:8b:
                    c3:67:09:99:b4:d8:eb:0c:64:2d:cd:0b:71:f6:4b:
                    64:c3:f4:8c:1a:70:cf:62:ff:72:e2:ec:67:92:4c:
                    e1:83:b2:ad:b7:2e:8c:1b:bf:09:26:fc:1c:54:dc:
                    20:e8:65:a1:6a:40:78:bd:3b:6d:2d:56:36:1c:d1:
                    ca:10:8e:d5:25:6e:56:02:60:6f:75:46:3f:e9:2a:
                    52:ce:59:47:d3:bb:38:09:8e:35:0f:43:28:a2:54:
                    91:09:28:f5:c5:4c:10:89:e3:1e:f7:d9:ab:93:c5:
                    b2:42:64:2e:18:92:36:29:d4:46:97:66:e6:6b:d6:
                    51:fd:dd:2d:77:5d:bc:9b:c4:5a:2f:f0:1d:d0:a2:
                    cf:36:6e:a8:4c:64:f4:a9:6b:30:37:f0:18:be:8c:
                    b9:b0:7b:94:5a:c9:61:57:56:e5:18:f4:a7:fe:35:
                    65:0f:c4:19:dc:90:2e:95:76:9d:be:51:6a:09:de:
                    3a:8c:2f:b3:d5:86:10:f2:86:46:45:13:37:68:f6:
                    2a:a7:4b:44:64:49:6b:e7:12:57:38:e4:ab:e9:a7:
                    5b:3f:25:86:5d:28:8f:c1:69:49:87:87:69:d3:94:
                    d9:0d:ab:07:40:eb:fd:4d:cf:6b:47:a3:6e:18:9e:
                    6d:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:D6:7F:80:14:B4:15:27:0B:BC:1B:F8:51:2D:C5:43:0E:55:FA:1A
            X509v3 Authority Key Identifier:
                keyid:4F:1A:F5:4C:46:F2:9B:17:E7:58:E9:F9:46:3D:CF:96:50:C7:1A:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4F3638C8DF693002EB8C051A778FCFE2CE757B735E1CFA668B3F601E7CF617D7/0/4F1AF54C46F29B17E758E9F9463DCF9650C71A8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F1AF54C46F29B17E758E9F9463DCF9650C71A8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4F3638C8DF693002EB8C051A778FCFE2CE757B735E1CFA668B3F601E7CF617D7/0/3137302e38312e3134372e302f32342d3234203d3e20323732313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:d9:0d:b1:b2:ae:cc:80:17:e2:49:4c:32:f4:c4:c9:4a:bd:
         2f:fe:61:e5:db:20:46:31:f0:1f:fe:83:94:ba:3c:1e:6a:15:
         2b:84:61:7b:ce:1a:70:39:11:54:55:de:cf:72:ed:57:74:3c:
         6d:ca:d6:db:94:50:16:30:34:a2:e3:8f:31:53:20:d3:23:8f:
         d0:cf:01:f6:ff:83:ce:6a:1f:0e:80:86:f5:54:3b:cb:05:33:
         ff:54:71:46:72:5a:1e:9c:03:10:65:3d:5d:42:fe:97:ac:6f:
         94:b9:c3:84:07:10:3d:5d:2f:6d:51:cb:1f:76:30:a3:84:0f:
         d2:f4:36:ba:a8:16:d7:12:06:15:29:ab:5f:60:09:9f:b3:48:
         85:db:59:1d:fe:b6:76:99:93:c2:3e:25:fe:33:1d:d7:98:2a:
         28:5b:07:d5:fe:e6:12:35:82:39:b6:2d:a8:f9:46:8e:82:2f:
         07:2a:4c:81:85:d9:01:ff:06:57:a1:ac:75:76:98:24:86:09:
         f7:42:85:8e:b4:ed:f0:46:21:34:4f:f3:16:46:47:bd:1a:07:
         c7:0f:b6:57:d2:74:9b:cb:59:35:dd:ba:52:9f:0e:9f:c0:13:
         05:e4:7a:6b:e4:ad:2a:d4:83:6b:27:2c:ef:72:69:d8:8c:7c:
         5c:37:20:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 08:45:18 2026 by rpki-client