Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B4B9AA7740AEAAC1942C6D49BD0C759EECBC0A6F31BE3828958A9A9A763ABB11/0/3135392e31362e302e302f31362d3136203d3e20323632393134.roa
File:                     3135392e31362e302e302f31362d3136203d3e20323632393134.roa (raw, json)
Hash identifier:          NwXrnJ/EDR4r5wiGfgaoYMcbdpq25YU1uNvjYTD2mHs=
Subject key identifier:   04:AB:6C:40:0E:F8:47:10:09:15:78:A5:9F:3D:70:7A:52:02:E5:4B
Certificate issuer:       /CN=D3ECA9E328BAD678A3AD28C9C53518EF9ED06703
Certificate serial:       3CB3C6C393ACBF5ABC9AD1CEF267BF4DCC3AF617
Authority key identifier: D3:EC:A9:E3:28:BA:D6:78:A3:AD:28:C9:C5:35:18:EF:9E:D0:67:03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B4B9AA7740AEAAC1942C6D49BD0C759EECBC0A6F31BE3828958A9A9A763ABB11/0/3135392e31362e302e302f31362d3136203d3e20323632393134.roa
Signing time:             Mon 04 May 2026 22:45:00 +0000
ROA not before:           Mon 04 May 2026 22:40:00 +0000
ROA not after:            Mon 03 May 2027 22:45:00 +0000
asID:                     262914
IP address blocks:        159.16.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B4B9AA7740AEAAC1942C6D49BD0C759EECBC0A6F31BE3828958A9A9A763ABB11/0/D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B4B9AA7740AEAAC1942C6D49BD0C759EECBC0A6F31BE3828958A9A9A763ABB11/0/D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:b3:c6:c3:93:ac:bf:5a:bc:9a:d1:ce:f2:67:bf:4d:cc:3a:f6:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3ECA9E328BAD678A3AD28C9C53518EF9ED06703
        Validity
            Not Before: May  4 22:40:00 2026 GMT
            Not After : May  3 22:45:00 2027 GMT
        Subject: CN=04AB6C400EF84710091578A59F3D707A5202E54B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:83:e2:0f:61:78:4d:44:d9:d1:23:85:12:ae:
                    92:80:c9:5a:89:7f:41:f3:c8:85:9e:a8:3b:68:55:
                    13:8c:cc:b6:8e:da:25:7d:4d:a9:f5:3b:09:f8:b7:
                    bb:05:cb:9e:fa:37:96:44:05:d8:bc:08:65:11:3d:
                    54:21:4e:52:49:3b:2d:24:49:7f:9f:e5:14:41:a6:
                    d1:d6:5f:62:97:44:7c:26:ad:9d:b1:54:24:39:d4:
                    de:b4:26:9d:b5:e8:d7:eb:8e:1d:b6:48:ec:e6:3b:
                    a9:55:52:85:20:53:ed:87:e4:4b:bd:eb:6c:70:6a:
                    95:4f:bc:e1:bc:8a:b4:83:d2:30:c7:bf:d8:54:90:
                    8e:ca:b3:53:14:56:7b:16:6e:de:b2:ee:48:56:87:
                    6f:5b:68:90:95:54:8e:96:ba:02:96:32:b8:99:5a:
                    2b:2c:c1:ad:61:1f:de:e6:16:58:e7:28:38:54:e2:
                    45:46:df:96:d0:cf:b4:ca:2f:d1:10:b2:d7:96:11:
                    9d:11:e3:21:25:7d:4f:68:c6:3c:0b:43:51:23:b0:
                    01:01:54:5a:3c:8e:67:5a:47:18:8a:05:5d:3b:1f:
                    13:2b:04:b0:49:db:24:50:61:d2:f5:83:87:74:46:
                    93:ec:55:cc:d6:56:20:ba:47:75:ef:ec:11:22:9c:
                    f0:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:AB:6C:40:0E:F8:47:10:09:15:78:A5:9F:3D:70:7A:52:02:E5:4B
            X509v3 Authority Key Identifier:
                keyid:D3:EC:A9:E3:28:BA:D6:78:A3:AD:28:C9:C5:35:18:EF:9E:D0:67:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B4B9AA7740AEAAC1942C6D49BD0C759EECBC0A6F31BE3828958A9A9A763ABB11/0/D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B4B9AA7740AEAAC1942C6D49BD0C759EECBC0A6F31BE3828958A9A9A763ABB11/0/3135392e31362e302e302f31362d3136203d3e20323632393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.16.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         8c:3c:1f:24:10:7d:62:7e:77:75:c5:0e:a3:f5:f5:00:52:37:
         fd:1a:00:d1:f4:23:ea:62:6b:e6:c6:b8:97:43:f4:cd:c5:b4:
         cf:81:a1:5d:97:bd:e4:7f:6f:42:97:05:e6:53:4e:a2:69:ed:
         b0:39:3e:1d:71:5b:d0:76:15:cb:b4:61:dd:2a:21:6e:70:b2:
         96:83:4b:13:c0:5c:94:b7:89:8b:88:d3:dd:5b:72:6d:c8:bc:
         45:1c:8d:f8:27:47:aa:96:82:15:0d:7b:e5:a8:75:b6:a7:3c:
         06:f9:f9:fe:c5:e7:ba:9a:48:5f:79:14:ac:69:44:b6:45:c7:
         14:ee:9d:69:60:94:e1:6a:7d:b8:b0:5d:28:41:12:02:53:3f:
         9a:e5:bf:a4:f3:d4:c5:61:b0:11:2e:43:52:6b:46:a1:8b:2a:
         cd:86:a6:c9:b7:8a:bb:f0:a0:b0:d1:d2:bf:31:64:82:68:f7:
         19:24:72:74:9b:4a:60:48:31:6f:22:17:58:87:40:fa:53:b9:
         c3:0d:63:85:97:eb:83:ee:bf:09:63:53:90:cf:e6:71:47:6a:
         d4:65:d9:a4:d0:e4:ec:f3:96:64:86:58:19:a9:9f:ac:a8:75:
         b8:f8:c4:33:82:a3:23:f2:b3:38:36:d1:08:d4:82:7f:b6:f5:
         f3:72:95:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:56:44 2026 by rpki-client