Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/3137302e302e382e302f32342d3234203d3e20323730303838.roa
File:                     3137302e302e382e302f32342d3234203d3e20323730303838.roa (raw, json)
Hash identifier:          Yo5HIE1AKTXAOec6L5hTIEClm530Wvtw5RkIIxijink=
Subject key identifier:   E6:03:D5:9B:9A:C9:FE:95:5D:52:FB:06:DB:7F:1B:14:D3:06:7B:35
Certificate issuer:       /CN=08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D
Certificate serial:       284D6762601B159C0346FE10F320D2A1B52136FF
Authority key identifier: 08:AA:2E:4D:3C:7C:DF:96:26:D3:31:AC:D3:8D:17:19:F3:D4:A7:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/3137302e302e382e302f32342d3234203d3e20323730303838.roa
Signing time:             Tue 30 Jun 2026 01:50:00 +0000
ROA not before:           Tue 30 Jun 2026 01:45:00 +0000
ROA not after:            Tue 29 Jun 2027 01:50:00 +0000
asID:                     270088
IP address blocks:        170.0.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 00:56:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:4d:67:62:60:1b:15:9c:03:46:fe:10:f3:20:d2:a1:b5:21:36:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D
        Validity
            Not Before: Jun 30 01:45:00 2026 GMT
            Not After : Jun 29 01:50:00 2027 GMT
        Subject: CN=E603D59B9AC9FE955D52FB06DB7F1B14D3067B35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:29:63:db:ed:d4:06:6a:db:a2:9c:94:b5:98:
                    ae:c8:cc:d6:2f:9b:85:02:e8:b2:81:36:74:32:71:
                    28:a8:d1:b7:16:7d:98:a5:0a:9d:21:19:21:0f:24:
                    91:9b:f9:c5:91:7c:e1:bb:1b:87:42:7c:c0:fb:01:
                    34:ae:ba:66:15:b5:9c:18:c1:6d:82:f2:f9:ff:f1:
                    89:b1:70:72:09:e1:90:36:02:19:76:7f:a0:63:44:
                    2f:ef:ee:9f:95:37:25:0d:a3:b8:68:f4:92:85:59:
                    6a:29:ec:a6:15:62:36:6f:47:15:aa:8b:11:ea:f1:
                    ea:24:4a:b8:01:d5:af:6b:86:8f:35:1b:e3:03:23:
                    cc:6f:9f:fe:b3:c5:36:0e:0c:43:5a:49:8a:3f:c5:
                    b2:96:af:d6:eb:fc:b2:8d:12:b7:0c:08:5b:fc:c0:
                    eb:d1:67:a4:dd:fd:25:93:ed:0d:24:8e:0d:0f:85:
                    bc:21:3f:ef:0e:cb:56:89:d6:b2:6b:bf:1a:f1:5b:
                    28:ea:88:78:eb:a0:04:23:c5:ab:0f:d3:93:79:0b:
                    6f:55:6d:47:53:59:2a:bb:80:50:ac:b0:18:73:01:
                    d8:8b:b7:df:32:af:c2:07:63:00:a7:aa:0b:0b:f0:
                    21:79:94:e9:e5:52:2f:7a:5b:56:0e:60:be:45:d2:
                    f7:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:03:D5:9B:9A:C9:FE:95:5D:52:FB:06:DB:7F:1B:14:D3:06:7B:35
            X509v3 Authority Key Identifier:
                keyid:08:AA:2E:4D:3C:7C:DF:96:26:D3:31:AC:D3:8D:17:19:F3:D4:A7:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/3137302e302e382e302f32342d3234203d3e20323730303838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:76:91:56:da:3d:0f:56:4e:92:19:8a:dc:1a:ce:a2:11:bb:
         45:25:4e:a5:39:07:c0:51:2a:e6:ca:23:a5:51:ef:4a:aa:6d:
         bf:29:73:71:5e:c6:42:35:8e:71:35:fe:dc:ad:5f:f1:3b:52:
         9a:42:89:ab:4e:b8:44:b1:e2:0d:d3:e7:c1:a3:51:b0:1e:bb:
         6b:cf:1b:80:9b:fc:b3:c1:a6:84:95:8d:32:4d:23:e6:43:db:
         a2:9d:ab:f0:5f:8d:1d:2e:41:7a:b2:8e:0b:ad:57:1e:95:21:
         12:0b:9a:e7:14:7c:99:60:68:32:ca:82:b3:9f:5b:f6:38:94:
         9f:62:cb:87:e2:7f:a3:55:1a:e1:92:06:0e:4e:e6:dc:1b:ea:
         54:2c:76:1f:c7:23:a6:0e:41:ac:5f:43:92:93:61:63:3e:31:
         9e:b3:b3:e4:ec:f1:6a:2e:66:9a:52:7e:8a:4a:d2:23:37:9f:
         aa:e6:3e:b4:73:18:0a:2f:9b:7e:06:d9:24:1c:bb:f2:c1:c1:
         a7:a6:62:6a:5a:c1:70:fd:25:b2:d1:89:f9:85:64:c2:28:f3:
         7a:34:d7:59:f8:0e:d4:0b:98:35:75:3f:c2:30:78:80:81:34:
         51:58:99:97:47:f7:09:eb:17:8f:78:3a:34:55:54:e4:de:71:
         5e:ae:ae:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:00:09 2026 by rpki-client