Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B4B9AA7740AEAAC1942C6D49BD0C759EECBC0A6F31BE3828958A9A9A763ABB11/0/3135392e31362e31302e302f32342d3234203d3e20323632393134.roa
File:                     3135392e31362e31302e302f32342d3234203d3e20323632393134.roa (raw, json)
Hash identifier:          14/y4k+l6++gsEsGjGrQiBSLl2T2dpA/7xgUFbZboNw=
Subject key identifier:   34:60:D9:45:2E:30:EF:AD:11:6F:E8:5B:FF:F5:DC:C7:E6:88:93:57
Certificate issuer:       /CN=D3ECA9E328BAD678A3AD28C9C53518EF9ED06703
Certificate serial:       44FBADE8F9F3342ED13369369ABEB9EB704154D7
Authority key identifier: D3:EC:A9:E3:28:BA:D6:78:A3:AD:28:C9:C5:35:18:EF:9E:D0:67:03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B4B9AA7740AEAAC1942C6D49BD0C759EECBC0A6F31BE3828958A9A9A763ABB11/0/3135392e31362e31302e302f32342d3234203d3e20323632393134.roa
Signing time:             Mon 04 May 2026 22:50:00 +0000
ROA not before:           Mon 04 May 2026 22:45:00 +0000
ROA not after:            Mon 03 May 2027 22:50:00 +0000
asID:                     262914
IP address blocks:        159.16.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B4B9AA7740AEAAC1942C6D49BD0C759EECBC0A6F31BE3828958A9A9A763ABB11/0/D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B4B9AA7740AEAAC1942C6D49BD0C759EECBC0A6F31BE3828958A9A9A763ABB11/0/D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:fb:ad:e8:f9:f3:34:2e:d1:33:69:36:9a:be:b9:eb:70:41:54:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3ECA9E328BAD678A3AD28C9C53518EF9ED06703
        Validity
            Not Before: May  4 22:45:00 2026 GMT
            Not After : May  3 22:50:00 2027 GMT
        Subject: CN=3460D9452E30EFAD116FE85BFFF5DCC7E6889357
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3c:54:03:5a:71:0b:e0:ba:6f:51:cb:f5:51:
                    44:92:32:42:a5:a5:1c:91:2f:26:a0:c6:d4:2e:a9:
                    76:67:b2:12:ca:69:f7:6e:0e:e0:51:fe:ce:db:b6:
                    5d:56:d6:c5:4b:62:b8:27:15:01:61:76:ec:72:ad:
                    9c:25:85:28:1e:af:c0:d3:84:06:75:36:69:51:1f:
                    0e:47:1a:11:39:11:24:70:d2:0d:39:5c:a0:42:b5:
                    dc:06:1a:18:4d:96:93:22:a5:02:34:0a:7b:90:b2:
                    59:1b:48:93:bf:53:82:13:df:5d:34:70:b2:82:06:
                    8b:5c:a1:9a:c6:0a:f4:73:35:57:68:1a:40:23:f9:
                    c8:a4:05:fc:b8:f7:91:fd:2b:ed:51:40:5c:29:1e:
                    43:1f:0a:bf:af:29:87:01:e5:80:bb:6b:a7:84:a1:
                    c8:4b:de:f7:b1:74:57:09:18:b1:10:98:fe:52:e2:
                    be:94:85:dc:1c:4a:f6:19:ba:76:d8:cf:65:b2:9f:
                    4c:83:9c:03:f8:db:cc:49:cf:7c:25:df:fc:40:9c:
                    50:06:6c:9c:c4:de:88:b9:b9:c0:d0:00:ea:76:14:
                    88:db:b7:1c:8f:7d:62:97:7b:28:db:92:b1:52:b0:
                    ea:9b:e7:e3:7a:76:dc:29:45:78:94:67:4a:5b:db:
                    7c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:60:D9:45:2E:30:EF:AD:11:6F:E8:5B:FF:F5:DC:C7:E6:88:93:57
            X509v3 Authority Key Identifier:
                keyid:D3:EC:A9:E3:28:BA:D6:78:A3:AD:28:C9:C5:35:18:EF:9E:D0:67:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B4B9AA7740AEAAC1942C6D49BD0C759EECBC0A6F31BE3828958A9A9A763ABB11/0/D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B4B9AA7740AEAAC1942C6D49BD0C759EECBC0A6F31BE3828958A9A9A763ABB11/0/3135392e31362e31302e302f32342d3234203d3e20323632393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.16.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:be:e9:e0:06:f6:8e:b1:8b:dd:40:40:e1:21:44:aa:cd:ff:
         d1:aa:9b:02:50:8e:94:2e:3f:e9:e3:38:cf:e1:04:2d:3f:c5:
         1d:c6:9b:06:04:ea:c4:a9:24:07:74:e3:e1:c9:f5:93:47:b4:
         22:1a:a3:37:00:6e:48:dd:fc:0d:a7:e5:cd:54:f7:4c:ea:68:
         38:35:a9:39:f9:ce:4a:36:f2:fe:3d:08:14:6a:2a:5d:9b:58:
         db:24:2a:10:cf:69:1a:1f:d6:e5:cd:f2:d7:a2:d5:ac:68:45:
         9e:de:6a:24:ed:de:c6:3f:36:c2:95:1c:39:da:aa:c7:30:b9:
         10:33:3a:2a:6c:1f:9e:cf:6d:da:c2:e5:be:66:01:d5:40:48:
         09:bb:79:e8:d8:90:71:91:0a:d0:a3:d2:ce:68:e4:de:68:24:
         9d:59:fb:85:e1:76:73:7d:3a:43:8f:af:31:45:1b:67:95:b1:
         3b:6f:24:12:5b:31:c6:9f:7d:11:66:54:98:2b:5a:2d:70:48:
         39:5f:ce:20:37:17:a3:42:34:82:83:2e:58:b2:3e:4c:20:8f:
         03:58:5a:46:73:47:d5:4c:96:aa:9d:84:74:02:a8:4f:f3:a4:
         2e:f7:aa:5a:1b:93:91:f6:af:63:fd:74:82:30:71:98:6f:4a:
         72:de:e2:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:56:39 2026 by rpki-client