Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3137302e3135302e31322e302f32322d3234203d3e203332303938.roa
File:                     3137302e3135302e31322e302f32322d3234203d3e203332303938.roa (raw, json)
Hash identifier:          COlPYrzAo3YjLth7VeluJQmnyDtjePk1LFr2+FEHO6s=
Subject key identifier:   C2:7F:7C:8C:1D:F3:E9:0D:92:C5:A3:FD:F1:02:5D:8C:23:56:D5:DB
Certificate issuer:       /CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
Certificate serial:       1E8DAA8FB0A9A833EC56B5E406A51DA23B27EFC4
Authority key identifier: 0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3137302e3135302e31322e302f32322d3234203d3e203332303938.roa
Signing time:             Thu 24 Sep 2026 05:55:02 +0000
ROA not before:           Thu 24 Sep 2026 05:50:02 +0000
ROA not after:            Thu 23 Sep 2027 05:55:02 +0000
asID:                     32098
IP address blocks:        170.150.12.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl
                          rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 Oct 2026 12:42:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:8d:aa:8f:b0:a9:a8:33:ec:56:b5:e4:06:a5:1d:a2:3b:27:ef:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
        Validity
            Not Before: Sep 24 05:50:02 2026 GMT
            Not After : Sep 23 05:55:02 2027 GMT
        Subject: CN=C27F7C8C1DF3E90D92C5A3FDF1025D8C2356D5DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e4:38:9c:36:09:c9:a0:a6:10:63:e0:a5:ae:
                    f9:18:3f:66:3c:8a:45:29:bf:0b:e3:16:7a:52:52:
                    f8:51:88:fd:aa:29:63:31:0b:5a:a6:ef:59:92:cc:
                    94:51:ee:74:44:a3:c9:9d:3f:8b:48:37:cc:45:f5:
                    12:c0:0c:6b:59:82:9f:bd:7a:a4:e0:8b:3c:d0:fa:
                    54:1e:f1:ec:4e:3e:74:d7:17:f0:af:67:5d:c4:36:
                    a3:91:14:62:d9:06:7e:e4:a4:75:da:1d:9d:23:96:
                    79:6a:42:87:e7:46:ba:5b:19:e0:b2:5b:41:3f:63:
                    df:0c:71:65:20:87:1f:37:51:f5:74:4f:ac:54:66:
                    b2:88:d3:34:fa:6b:40:bd:ae:ae:db:3c:da:08:e3:
                    05:ef:c8:f4:cd:a4:81:bd:53:42:66:c4:ce:6d:6d:
                    c1:86:2e:63:23:8f:ad:18:21:3e:5a:0f:c1:ef:0a:
                    04:3d:97:c7:5d:84:13:3e:a3:e0:fd:d9:35:ce:bb:
                    51:89:70:30:77:9d:74:dd:2d:59:39:8e:e6:8b:b0:
                    17:03:e0:55:b7:f1:a1:ab:af:13:6c:8c:b1:24:66:
                    df:56:8c:76:ef:c6:48:85:81:ad:da:cc:a2:5e:3a:
                    45:3b:35:30:45:9e:01:68:b3:25:d4:d6:80:4a:a7:
                    85:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:7F:7C:8C:1D:F3:E9:0D:92:C5:A3:FD:F1:02:5D:8C:23:56:D5:DB
            X509v3 Authority Key Identifier:
                keyid:0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3137302e3135302e31322e302f32322d3234203d3e203332303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:b1:2e:8e:1a:6f:bf:0c:7b:a8:7f:a1:2a:a4:77:0a:2c:e0:
         01:3e:2d:99:f7:20:86:49:0f:ea:2d:9f:ba:55:04:69:ee:87:
         c2:e6:68:f6:18:86:a6:5a:71:b9:1f:eb:56:67:77:72:09:29:
         83:f1:66:16:7e:dc:81:77:e1:79:b3:24:c1:49:50:85:d5:ca:
         69:34:46:6d:24:ea:53:aa:45:93:e3:94:c7:28:f4:b0:e8:e9:
         9a:38:aa:95:1f:9f:1c:a9:ea:26:ba:00:b3:a8:e9:46:df:6a:
         e0:41:d2:23:55:cb:75:72:c5:8d:60:fe:cc:79:25:52:1d:90:
         58:d0:ad:0a:c0:e1:e1:b6:5c:45:b8:d2:ad:89:07:a7:9c:09:
         1a:f3:85:14:9d:07:97:37:18:47:37:97:38:d1:d4:e0:92:37:
         b8:01:c7:5f:5e:f6:a0:12:7c:a6:ba:c2:ca:bb:c0:8a:d0:47:
         b3:5d:7d:ff:cd:89:f3:5e:dd:f5:c7:57:bf:54:76:d1:0b:e3:
         94:8e:82:9b:99:b3:dd:16:58:83:af:f8:0c:57:bf:e4:3f:ce:
         d4:26:26:2d:71:26:c3:cd:49:f4:46:2e:d1:6c:5a:4f:78:96:
         2e:94:e3:fd:49:cb:0d:7f:fa:21:69:ff:ec:53:59:61:05:3d:
         9c:dc:e2:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 07:46:20 2026 by rpki-client