Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3137302e3135302e33302e302f32342d3234203d3e203532333632.roa
File:                     3137302e3135302e33302e302f32342d3234203d3e203532333632.roa (raw, json)
Hash identifier:          DDr4DlxpAfJNY8Y4Ue2nsMonYPmbEazhYF4xr3Eg2Nc=
Subject key identifier:   97:5B:16:A5:62:90:95:AB:0A:1D:5B:24:6A:A3:93:9A:E1:5F:84:06
Certificate issuer:       /CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
Certificate serial:       3A677CEDC72C5FEF528D0A287887D5856030D20A
Authority key identifier: 4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3137302e3135302e33302e302f32342d3234203d3e203532333632.roa
Signing time:             Tue 17 Mar 2026 22:50:00 +0000
ROA not before:           Tue 17 Mar 2026 22:45:00 +0000
ROA not after:            Tue 16 Mar 2027 22:50:00 +0000
asID:                     52362
IP address blocks:        170.150.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:67:7c:ed:c7:2c:5f:ef:52:8d:0a:28:78:87:d5:85:60:30:d2:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
        Validity
            Not Before: Mar 17 22:45:00 2026 GMT
            Not After : Mar 16 22:50:00 2027 GMT
        Subject: CN=975B16A5629095AB0A1D5B246AA3939AE15F8406
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:00:99:46:c7:bc:81:0c:76:d4:a6:ca:cc:a9:
                    e6:68:a4:62:d9:7b:a6:fa:3b:a6:c9:f9:79:d0:07:
                    4e:88:68:ef:2f:0f:b4:75:0f:d6:80:54:14:05:7e:
                    ab:0a:a0:5e:4a:fd:0a:77:76:44:c9:a7:a6:f4:3a:
                    77:2b:ca:2f:ce:8b:11:34:a5:87:a3:94:2a:26:1f:
                    9a:49:18:18:2b:68:dd:92:e0:66:56:69:e7:0a:38:
                    f0:33:be:49:26:14:da:71:f7:95:66:12:9c:49:47:
                    69:9d:87:39:fb:d8:c1:9a:b8:f2:63:00:d1:df:6c:
                    e8:d9:d7:f4:22:bd:fc:10:26:84:f2:86:35:15:3b:
                    20:e7:a0:62:82:17:72:74:42:8e:4b:d7:db:37:d4:
                    9c:16:71:e6:a8:d3:ca:7b:b6:11:dd:69:17:5f:21:
                    c5:58:a0:82:7c:f3:9c:24:06:76:2f:11:40:d0:fc:
                    bc:c3:75:6b:96:48:95:44:60:44:ab:f4:35:41:e2:
                    8c:f4:1d:56:1d:67:8e:dd:31:a9:b0:00:61:c0:fc:
                    a4:30:3f:19:6a:22:05:06:69:e8:04:16:12:b0:6b:
                    43:80:50:ab:cc:ce:9e:bc:f7:f8:c7:30:ec:de:3c:
                    08:3d:2c:60:af:d7:2b:b2:e6:02:90:3c:92:de:39:
                    79:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:5B:16:A5:62:90:95:AB:0A:1D:5B:24:6A:A3:93:9A:E1:5F:84:06
            X509v3 Authority Key Identifier:
                keyid:4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3137302e3135302e33302e302f32342d3234203d3e203532333632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:68:f3:ec:48:ca:f7:18:b5:ce:73:1b:40:d8:bb:6b:c2:a1:
         f2:db:bb:e8:82:f5:80:46:d0:d8:0a:02:08:5b:ad:94:ad:01:
         a1:e7:06:6a:e7:39:32:7f:64:5b:c2:c1:19:c2:38:64:cf:03:
         3b:72:7b:c9:b8:c0:f0:7c:f6:55:5b:5a:44:66:c0:72:f7:de:
         4f:7c:52:7d:47:0b:60:32:32:80:ea:39:81:fa:76:72:fb:81:
         f4:19:ad:b5:59:f7:ef:a9:75:29:31:23:0a:82:97:f4:cb:13:
         76:6c:99:79:50:aa:93:31:30:c7:0d:e8:62:79:f1:f8:cb:dc:
         bd:bf:0d:ef:5c:14:55:ec:cd:dc:64:a4:a4:32:07:2b:93:71:
         4b:2b:13:86:2a:c5:36:86:3c:f7:c4:97:b5:6f:40:cb:c9:ad:
         ce:a5:3f:e2:50:70:de:48:cc:1b:cb:1d:e9:a6:b6:f1:b4:9d:
         53:85:ed:92:18:f6:ba:de:d8:c9:e9:82:08:ad:5d:90:0f:21:
         bc:16:0a:f6:8c:38:86:8b:ce:8b:96:12:88:61:de:2f:de:52:
         f7:c0:e8:e0:f7:3f:7e:72:3c:72:bc:a8:f1:61:1c:1f:e7:c6:
         6d:f6:4d:b5:36:81:7d:a9:c1:2f:fa:63:88:ff:a3:b6:b2:dd:
         f9:21:4c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:34:11 2026 by rpki-client