Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/729B01BF1354927E5D5218FEBC08835558C0092CE9C0372D6D616D88A94672CD/0/3137302e3234372e3135322e302f32342d3234203d3e20323635363938.roa
File:                     3137302e3234372e3135322e302f32342d3234203d3e20323635363938.roa (raw, json)
Hash identifier:          EfU26H6s9pGM8ER6UrJZaaY0+sKU0jyJkkRt2EVIiN4=
Subject key identifier:   7E:EF:5F:15:7D:B1:1E:63:D8:C0:70:D8:5B:6E:D1:3C:1A:5E:16:E7
Certificate issuer:       /CN=65C457F2E92F80EBD54D3FC02804D19BC1A7847B
Certificate serial:       70E9F78EEC0946E894BF0AF96D7802E68FC74168
Authority key identifier: 65:C4:57:F2:E9:2F:80:EB:D5:4D:3F:C0:28:04:D1:9B:C1:A7:84:7B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65C457F2E92F80EBD54D3FC02804D19BC1A7847B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/729B01BF1354927E5D5218FEBC08835558C0092CE9C0372D6D616D88A94672CD/0/3137302e3234372e3135322e302f32342d3234203d3e20323635363938.roa
Signing time:             Sat 10 Oct 2026 18:10:00 +0000
ROA not before:           Sat 10 Oct 2026 18:05:00 +0000
ROA not after:            Sat 09 Oct 2027 18:10:00 +0000
asID:                     265698
IP address blocks:        170.247.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/729B01BF1354927E5D5218FEBC08835558C0092CE9C0372D6D616D88A94672CD/0/65C457F2E92F80EBD54D3FC02804D19BC1A7847B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/729B01BF1354927E5D5218FEBC08835558C0092CE9C0372D6D616D88A94672CD/0/65C457F2E92F80EBD54D3FC02804D19BC1A7847B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65C457F2E92F80EBD54D3FC02804D19BC1A7847B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Oct 2026 18:12:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:e9:f7:8e:ec:09:46:e8:94:bf:0a:f9:6d:78:02:e6:8f:c7:41:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65C457F2E92F80EBD54D3FC02804D19BC1A7847B
        Validity
            Not Before: Oct 10 18:05:00 2026 GMT
            Not After : Oct  9 18:10:00 2027 GMT
        Subject: CN=7EEF5F157DB11E63D8C070D85B6ED13C1A5E16E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:16:7a:1c:06:af:fa:8d:85:66:ae:2a:e7:3a:
                    75:f2:99:b8:8f:05:90:6d:21:cc:80:5e:85:5c:60:
                    83:4d:fd:f2:4b:05:8e:fd:9e:51:36:85:a9:e3:e3:
                    cc:a5:2b:eb:e9:da:53:3a:6f:aa:ce:ff:7f:7f:73:
                    76:31:1c:4e:a1:17:54:36:f2:01:b1:a4:41:f5:21:
                    aa:0a:eb:50:54:c8:22:29:07:ba:e6:cf:a6:4c:e5:
                    da:c9:c7:1a:d8:fa:cb:2e:29:12:62:4d:ea:73:8d:
                    b9:56:25:f3:ec:57:e8:ac:65:d8:79:6e:7f:80:74:
                    c8:bf:fe:ad:53:3b:cd:94:02:cd:d2:34:cc:ab:01:
                    1b:13:47:08:c2:22:ad:6f:2b:97:1c:78:58:c6:f6:
                    de:ac:73:2c:48:99:93:e3:c9:20:5b:91:51:f2:d4:
                    4a:2f:9c:ef:d6:fa:f3:cb:41:10:27:d0:94:ee:44:
                    6b:31:e2:2b:7d:5d:21:db:a1:3c:a4:9d:ad:48:ee:
                    a8:fa:ed:99:29:c1:ab:1a:92:0d:4e:8a:9a:13:85:
                    88:7e:a4:dc:b2:ba:3f:42:04:d1:0b:b1:38:88:a2:
                    37:7d:6b:ea:38:2d:34:6c:d9:38:a0:56:cc:a0:53:
                    ee:83:31:e1:7c:a2:4a:33:9b:50:f0:54:3c:d2:a2:
                    b6:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:EF:5F:15:7D:B1:1E:63:D8:C0:70:D8:5B:6E:D1:3C:1A:5E:16:E7
            X509v3 Authority Key Identifier:
                keyid:65:C4:57:F2:E9:2F:80:EB:D5:4D:3F:C0:28:04:D1:9B:C1:A7:84:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/729B01BF1354927E5D5218FEBC08835558C0092CE9C0372D6D616D88A94672CD/0/65C457F2E92F80EBD54D3FC02804D19BC1A7847B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65C457F2E92F80EBD54D3FC02804D19BC1A7847B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/729B01BF1354927E5D5218FEBC08835558C0092CE9C0372D6D616D88A94672CD/0/3137302e3234372e3135322e302f32342d3234203d3e20323635363938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:d2:ab:94:91:b3:75:d5:2f:4f:9a:52:de:ec:56:1f:a8:06:
         3e:4b:a0:85:1b:64:8d:ea:f5:35:27:17:b1:4a:3a:01:0e:b4:
         e5:ef:c5:7a:e7:be:dd:2d:6d:7a:c7:b8:9f:14:60:ea:a5:dc:
         23:79:b1:96:70:d2:c8:be:fc:0d:f1:e6:47:cd:2b:8a:bf:39:
         fa:67:03:49:fc:c2:29:04:4e:78:37:ff:21:80:c5:6c:88:a4:
         a3:c3:ab:d1:bc:92:a5:ec:47:0b:7f:36:78:00:e6:8d:fa:2d:
         32:1d:4f:86:fa:8b:a7:ee:b6:50:6b:25:61:90:31:46:9a:79:
         e5:24:f9:62:28:60:18:07:ca:37:71:4a:82:15:32:c5:3d:cc:
         83:8a:e9:8d:6a:b1:c3:a9:6d:1b:f2:e2:29:14:27:18:ee:48:
         da:a9:66:c6:88:3d:22:c2:4d:86:79:a0:94:6a:67:25:e7:e7:
         a5:91:a3:1a:7e:00:1c:96:b3:87:b5:53:bd:74:fb:f3:76:30:
         36:35:7e:3d:2d:7c:02:3d:49:c4:05:e8:18:29:1b:78:70:f6:
         c7:ed:79:e8:07:0b:b5:70:47:8c:8e:25:13:15:d6:dc:ab:58:
         0b:1c:60:81:21:26:53:48:1a:6d:d8:12:9c:ea:8f:2c:c4:95:
         15:9d:35:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 21:25:51 2026 by rpki-client