Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9FA6A3AE16FAD49EE0052D88B28E20E2034E40E4491CF429488BB336D6571A60/0/3137372e39332e3134322e302f32342d3234203d3e20323730313630.roa
File:                     3137372e39332e3134322e302f32342d3234203d3e20323730313630.roa (raw, json)
Hash identifier:          Rfz624WBsa6/lh8HLhlDozEcNEOUxhexGM4LvumlUDc=
Subject key identifier:   6C:3C:5C:FE:59:51:5A:FA:26:A2:A1:97:76:D2:A4:05:76:BD:60:ED
Certificate issuer:       /CN=B4E0934934FFEC12162EAFD5716D0AF920DC63AD
Certificate serial:       52B0BA8B069479A0346586F0C168ED36729980CE
Authority key identifier: B4:E0:93:49:34:FF:EC:12:16:2E:AF:D5:71:6D:0A:F9:20:DC:63:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B4E0934934FFEC12162EAFD5716D0AF920DC63AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9FA6A3AE16FAD49EE0052D88B28E20E2034E40E4491CF429488BB336D6571A60/0/3137372e39332e3134322e302f32342d3234203d3e20323730313630.roa
Signing time:             Wed 06 May 2026 02:41:28 +0000
ROA not before:           Wed 06 May 2026 02:36:28 +0000
ROA not after:            Wed 05 May 2027 02:41:28 +0000
asID:                     270160
IP address blocks:        177.93.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9FA6A3AE16FAD49EE0052D88B28E20E2034E40E4491CF429488BB336D6571A60/0/B4E0934934FFEC12162EAFD5716D0AF920DC63AD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9FA6A3AE16FAD49EE0052D88B28E20E2034E40E4491CF429488BB336D6571A60/0/B4E0934934FFEC12162EAFD5716D0AF920DC63AD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B4E0934934FFEC12162EAFD5716D0AF920DC63AD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 01:23:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:b0:ba:8b:06:94:79:a0:34:65:86:f0:c1:68:ed:36:72:99:80:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4E0934934FFEC12162EAFD5716D0AF920DC63AD
        Validity
            Not Before: May  6 02:36:28 2026 GMT
            Not After : May  5 02:41:28 2027 GMT
        Subject: CN=6C3C5CFE59515AFA26A2A19776D2A40576BD60ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ae:6d:c5:2b:74:5f:28:80:fd:1a:c2:7e:59:
                    b0:2f:67:05:55:91:b2:dd:89:36:f9:dc:90:5b:49:
                    64:5c:99:43:db:a6:3f:28:8b:7a:2f:37:93:9a:84:
                    fb:25:e6:01:82:75:3e:86:f7:10:06:79:5d:98:55:
                    20:d1:a1:b0:8f:70:6a:cb:b5:e9:87:34:97:bc:97:
                    73:53:9a:ad:a6:2f:dd:c2:f1:30:97:98:7c:41:b9:
                    a1:71:92:0c:36:8d:14:ff:92:f8:c1:09:6c:cb:66:
                    c7:bd:7e:be:ca:98:a1:a7:d0:04:9f:79:90:fa:8c:
                    45:a7:f2:5b:9f:04:f5:2b:56:fb:50:f7:e5:1d:7b:
                    a9:15:b3:8b:de:46:6e:a5:1a:79:63:c9:ef:3a:02:
                    30:62:98:de:c7:13:20:c1:96:a2:fd:f2:74:08:00:
                    b7:5b:cd:8d:7f:93:0f:8b:63:3b:58:29:2b:cc:5f:
                    1a:25:3c:5c:ef:5b:f4:69:52:14:cb:64:c6:29:a0:
                    46:7f:34:23:1d:e8:b4:b6:57:22:d9:c7:49:68:a6:
                    2c:a8:e0:fd:da:b0:d7:97:32:69:f7:df:27:e1:c6:
                    8f:a1:9f:85:78:6f:0d:ce:79:5d:8e:18:85:d6:bd:
                    9f:52:3b:14:36:92:65:29:b1:0e:20:2c:83:23:e5:
                    bb:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:3C:5C:FE:59:51:5A:FA:26:A2:A1:97:76:D2:A4:05:76:BD:60:ED
            X509v3 Authority Key Identifier:
                keyid:B4:E0:93:49:34:FF:EC:12:16:2E:AF:D5:71:6D:0A:F9:20:DC:63:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9FA6A3AE16FAD49EE0052D88B28E20E2034E40E4491CF429488BB336D6571A60/0/B4E0934934FFEC12162EAFD5716D0AF920DC63AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B4E0934934FFEC12162EAFD5716D0AF920DC63AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9FA6A3AE16FAD49EE0052D88B28E20E2034E40E4491CF429488BB336D6571A60/0/3137372e39332e3134322e302f32342d3234203d3e20323730313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.93.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:20:59:d4:1c:04:3c:a5:9a:24:26:aa:c9:03:96:2c:5d:d9:
         7c:6f:26:bc:ce:f1:b3:88:a2:8d:62:e5:0b:39:df:5b:f9:b1:
         e0:45:df:eb:aa:94:74:7f:d9:20:f0:8f:1c:05:2e:21:0d:aa:
         8c:3d:bc:9e:b8:b3:8b:26:b1:48:99:28:7e:31:8f:fa:e4:50:
         82:a2:99:ef:95:99:98:e6:5d:2f:47:7b:f5:92:8d:88:44:03:
         21:bf:68:2a:9b:22:2c:16:cf:bb:a5:b0:1c:59:0b:49:ec:15:
         6b:59:a0:66:03:d4:ca:05:1b:6c:d7:73:8f:85:2b:ca:79:65:
         1b:f8:67:8d:ec:bb:79:0f:8c:4c:bd:e2:87:d4:20:8d:e9:5d:
         16:99:7a:a5:a8:93:35:9c:7d:8f:0a:99:c1:d3:23:e6:16:bb:
         c9:ed:69:3b:32:ce:2d:db:4b:74:02:3c:c2:7b:c9:86:4e:82:
         b0:b1:9c:0d:6f:4e:35:b1:6d:12:49:67:b8:64:a2:ca:1d:fd:
         2f:ad:00:e6:3d:d5:a6:3e:e3:f3:c3:09:5e:ed:72:02:97:2b:
         3f:de:a1:6e:47:65:b6:6d:7b:25:6e:77:3c:ec:92:9a:35:d6:
         65:db:32:2e:b3:5f:18:12:28:7f:69:c6:2e:a7:7c:8d:e5:1f:
         e7:5e:cb:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:08:43 2026 by rpki-client