Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B4B9AA7740AEAAC1942C6D49BD0C759EECBC0A6F31BE3828958A9A9A763ABB11/0/3135392e31362e3132382e302f31372d3234203d3e20323632393134.roa
File:                     3135392e31362e3132382e302f31372d3234203d3e20323632393134.roa (raw, json)
Hash identifier:          xvd9fxJEleZFo+xGVhMQ08OHN4B6/QwozskQqFX5wbM=
Subject key identifier:   33:13:4D:29:8A:EF:DB:77:84:47:F1:17:EF:5D:C6:B6:B9:F3:E1:52
Certificate issuer:       /CN=D3ECA9E328BAD678A3AD28C9C53518EF9ED06703
Certificate serial:       29676B1EFCD3483B56DCC027DCCC70824F802C1B
Authority key identifier: D3:EC:A9:E3:28:BA:D6:78:A3:AD:28:C9:C5:35:18:EF:9E:D0:67:03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B4B9AA7740AEAAC1942C6D49BD0C759EECBC0A6F31BE3828958A9A9A763ABB11/0/3135392e31362e3132382e302f31372d3234203d3e20323632393134.roa
Signing time:             Mon 20 Apr 2026 21:05:00 +0000
ROA not before:           Mon 20 Apr 2026 21:00:00 +0000
ROA not after:            Mon 19 Apr 2027 21:05:00 +0000
asID:                     262914
IP address blocks:        159.16.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B4B9AA7740AEAAC1942C6D49BD0C759EECBC0A6F31BE3828958A9A9A763ABB11/0/D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B4B9AA7740AEAAC1942C6D49BD0C759EECBC0A6F31BE3828958A9A9A763ABB11/0/D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:67:6b:1e:fc:d3:48:3b:56:dc:c0:27:dc:cc:70:82:4f:80:2c:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3ECA9E328BAD678A3AD28C9C53518EF9ED06703
        Validity
            Not Before: Apr 20 21:00:00 2026 GMT
            Not After : Apr 19 21:05:00 2027 GMT
        Subject: CN=33134D298AEFDB778447F117EF5DC6B6B9F3E152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:64:e6:c4:4a:63:7f:22:28:a9:74:d8:74:a8:
                    46:b1:89:e8:24:70:4e:e1:7d:cd:0a:1c:8c:c3:0c:
                    1d:8e:9f:a3:87:b3:92:b1:5a:57:c3:58:aa:87:30:
                    ec:e2:08:4b:fd:6c:b8:2d:b0:01:8f:f2:69:50:69:
                    c5:40:12:37:c3:36:43:08:42:6f:1a:a4:dd:8e:6b:
                    0b:42:2a:d2:e5:61:e9:31:99:cc:b1:d5:a2:74:85:
                    66:3e:aa:da:11:4d:64:d3:9b:f6:1e:d8:c7:4e:13:
                    85:78:58:97:a7:50:ae:c9:ba:7d:0c:3e:db:b8:ce:
                    57:ac:52:30:be:e5:a6:37:b6:fd:b4:d2:f7:1b:07:
                    2d:ce:9a:96:dc:7f:f9:15:06:2b:1c:ac:b2:8a:56:
                    c4:27:5b:3d:f1:be:38:ec:70:f6:54:0f:63:3d:09:
                    99:29:cf:46:5a:7f:14:b2:10:0d:48:df:67:53:ef:
                    39:57:63:0f:b3:f0:35:88:ab:9b:33:1f:7f:99:47:
                    e3:d2:63:43:25:db:99:7e:c2:48:5b:45:3a:93:3c:
                    89:3e:4d:8a:dc:67:d4:b2:7f:2c:79:41:47:c6:b6:
                    62:ac:66:b6:be:4d:74:90:de:c0:d2:d1:f6:78:83:
                    61:49:a2:d0:7a:d9:fa:a3:f9:9f:37:26:33:8f:12:
                    02:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:13:4D:29:8A:EF:DB:77:84:47:F1:17:EF:5D:C6:B6:B9:F3:E1:52
            X509v3 Authority Key Identifier:
                keyid:D3:EC:A9:E3:28:BA:D6:78:A3:AD:28:C9:C5:35:18:EF:9E:D0:67:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B4B9AA7740AEAAC1942C6D49BD0C759EECBC0A6F31BE3828958A9A9A763ABB11/0/D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B4B9AA7740AEAAC1942C6D49BD0C759EECBC0A6F31BE3828958A9A9A763ABB11/0/3135392e31362e3132382e302f31372d3234203d3e20323632393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.16.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         0b:0d:a7:d8:b0:8c:c8:ab:98:3b:bb:62:87:e6:1a:0e:77:a2:
         25:23:86:22:77:94:ab:b0:9d:52:3f:23:ee:98:64:c9:ef:b1:
         54:9c:d2:b9:37:e9:a8:63:c0:26:3a:49:23:3b:b8:3c:24:d1:
         86:f9:5c:3b:a2:bf:90:75:f9:c8:2b:e5:90:e9:63:3f:cd:c0:
         13:1e:33:b1:ea:c2:2d:32:b4:54:61:d4:85:1c:c5:01:9e:21:
         22:25:ca:91:0d:4e:ae:eb:b4:7e:e2:df:e2:a3:2e:09:90:9e:
         90:f4:2e:cb:b5:a8:be:21:d4:57:90:75:bc:67:d7:27:77:12:
         2c:39:e6:19:f7:3c:d3:bd:e0:10:56:55:1e:ee:5f:5d:b7:04:
         b2:13:b7:08:2b:4e:89:8f:19:19:08:42:a9:2b:16:b9:e9:3c:
         5f:9b:23:4d:8c:62:57:63:08:a7:c9:36:78:dd:57:7a:7f:c8:
         c8:fc:57:39:73:c8:75:86:6f:72:29:a4:09:20:31:f5:3b:11:
         59:4a:4b:7a:af:e9:64:89:5f:26:57:13:bc:75:64:7e:ab:38:
         5d:5b:78:dc:db:34:fa:3b:80:d8:63:c1:f9:cc:2c:73:0e:84:
         15:b6:fb:56:1f:db:1c:ab:dc:e2:64:95:6f:e4:9e:5c:59:f7:
         20:1a:6c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:56:39 2026 by rpki-client