Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3137302e3234372e3232342e302f32322d3234203d3e203332303938.roa
File:                     3137302e3234372e3232342e302f32322d3234203d3e203332303938.roa (raw, json)
Hash identifier:          GBnJg90yq2hpovIfVwXG0IWKosrml7XjA7h3cgDWHwQ=
Subject key identifier:   EE:5B:F1:7C:8A:0C:2A:E1:B8:44:EC:22:43:BB:66:0A:80:7C:1D:BB
Certificate issuer:       /CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
Certificate serial:       5523E3F5AE6FB008E957636016F42E77A1008A57
Authority key identifier: 0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3137302e3234372e3232342e302f32322d3234203d3e203332303938.roa
Signing time:             Thu 24 Sep 2026 05:55:02 +0000
ROA not before:           Thu 24 Sep 2026 05:50:02 +0000
ROA not after:            Thu 23 Sep 2027 05:55:02 +0000
asID:                     32098
IP address blocks:        170.247.224.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl
                          rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 03:48:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:23:e3:f5:ae:6f:b0:08:e9:57:63:60:16:f4:2e:77:a1:00:8a:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
        Validity
            Not Before: Sep 24 05:50:02 2026 GMT
            Not After : Sep 23 05:55:02 2027 GMT
        Subject: CN=EE5BF17C8A0C2AE1B844EC2243BB660A807C1DBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8a:95:a9:16:b3:95:50:95:56:3f:fd:e0:62:
                    61:50:9d:e0:51:24:72:5a:1b:33:97:21:97:1e:b6:
                    c9:ce:dc:08:d2:d9:98:d0:63:5d:15:d2:5f:8d:42:
                    6a:2a:3d:b8:c3:7d:8f:a4:61:42:b4:e4:7f:2b:fc:
                    ba:d1:b2:d8:99:f7:59:a9:ab:f1:18:6a:1c:8c:a4:
                    90:68:9d:d1:c2:31:79:ae:3b:77:fd:d3:80:94:86:
                    af:c3:9f:87:ec:4f:bf:03:7c:8d:fc:8f:a3:d6:07:
                    36:e1:db:d1:a3:18:63:2e:f6:06:d5:e1:4a:ec:6f:
                    b6:27:10:1c:4c:8e:51:00:98:d3:54:0f:16:37:52:
                    df:a6:11:54:ca:a8:dc:8d:92:3b:0b:a1:df:ca:b0:
                    ed:05:b7:30:ed:4f:63:6b:ba:87:72:83:04:5a:9d:
                    b9:f4:01:90:fe:68:35:2e:f3:ad:6e:d5:80:7e:ec:
                    ba:7d:72:92:53:26:49:db:a0:54:f9:1f:de:7f:5f:
                    96:c3:3e:63:c1:5c:98:13:c8:90:10:7f:ec:7c:0d:
                    04:37:50:46:63:1f:c7:18:0a:87:d0:26:98:cc:b8:
                    65:ea:6f:ac:25:85:78:3e:02:26:af:ff:4d:a0:8a:
                    a3:bd:e7:da:5a:d9:ea:b3:71:01:af:f2:0c:61:08:
                    20:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:5B:F1:7C:8A:0C:2A:E1:B8:44:EC:22:43:BB:66:0A:80:7C:1D:BB
            X509v3 Authority Key Identifier:
                keyid:0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3137302e3234372e3232342e302f32322d3234203d3e203332303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:ca:a8:d4:4a:aa:ca:c8:28:a7:fa:6a:ed:47:99:60:d2:5c:
         c9:bd:ad:a5:75:f5:db:cc:e6:b1:1d:91:34:11:86:d9:ea:ad:
         d4:69:da:16:fb:cd:50:ae:a4:8f:b1:04:26:4c:ff:02:a1:7e:
         9a:24:ca:41:5d:d4:3e:a0:2d:38:72:67:9a:fa:67:6a:52:24:
         a0:ad:4e:66:fc:eb:30:f9:48:a7:a8:a8:1c:fc:8a:55:1b:ff:
         04:d8:45:ad:67:41:87:cb:a5:4c:c4:c2:79:b5:56:f5:d3:c7:
         35:d8:27:97:de:ed:e8:a0:1d:35:2a:86:48:ac:ad:62:83:73:
         f6:e2:59:8d:08:0e:78:f0:19:79:b5:1f:d3:20:b7:2f:d6:28:
         84:8d:42:47:fd:f2:6e:0c:2e:dd:14:ee:28:52:db:96:90:90:
         53:54:28:1d:ad:3d:16:19:3a:f8:fd:49:00:45:24:3e:38:d3:
         c2:b9:66:0d:79:18:0f:52:2e:2b:98:1d:02:95:ea:87:fe:fb:
         ef:60:42:4a:80:3a:9e:8c:af:f6:98:60:29:58:7e:12:bf:f2:
         76:19:76:68:81:b9:98:a0:37:05:97:59:bc:67:75:a5:44:55:
         b2:d0:78:3b:28:d2:22:fc:e1:7f:68:6f:85:2f:43:ae:3a:44:
         b1:96:57:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 19:19:24 2026 by rpki-client