Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B4B9AA7740AEAAC1942C6D49BD0C759EECBC0A6F31BE3828958A9A9A763ABB11/0/3135392e31362e352e302f32342d3234203d3e20323632393134.roa
File:                     3135392e31362e352e302f32342d3234203d3e20323632393134.roa (raw, json)
Hash identifier:          JMAggRrISLwdqFwwKUEX9duWiGjj2kLctC1p4QwQDTM=
Subject key identifier:   D6:DD:DA:49:92:7E:6C:EF:1B:9A:64:85:5C:B2:E9:88:FF:63:4E:88
Certificate issuer:       /CN=D3ECA9E328BAD678A3AD28C9C53518EF9ED06703
Certificate serial:       37962892115BB44D4807F86E3D68CA7CA85C888B
Authority key identifier: D3:EC:A9:E3:28:BA:D6:78:A3:AD:28:C9:C5:35:18:EF:9E:D0:67:03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B4B9AA7740AEAAC1942C6D49BD0C759EECBC0A6F31BE3828958A9A9A763ABB11/0/3135392e31362e352e302f32342d3234203d3e20323632393134.roa
Signing time:             Mon 04 May 2026 22:45:00 +0000
ROA not before:           Mon 04 May 2026 22:40:00 +0000
ROA not after:            Mon 03 May 2027 22:45:00 +0000
asID:                     262914
IP address blocks:        159.16.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B4B9AA7740AEAAC1942C6D49BD0C759EECBC0A6F31BE3828958A9A9A763ABB11/0/D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B4B9AA7740AEAAC1942C6D49BD0C759EECBC0A6F31BE3828958A9A9A763ABB11/0/D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:96:28:92:11:5b:b4:4d:48:07:f8:6e:3d:68:ca:7c:a8:5c:88:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3ECA9E328BAD678A3AD28C9C53518EF9ED06703
        Validity
            Not Before: May  4 22:40:00 2026 GMT
            Not After : May  3 22:45:00 2027 GMT
        Subject: CN=D6DDDA49927E6CEF1B9A64855CB2E988FF634E88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ff:fa:e6:63:65:b5:9e:ef:82:12:1f:00:ff:
                    49:d4:cb:d3:e5:75:74:6f:40:40:9a:9a:6b:af:87:
                    39:ff:0d:26:86:bb:d4:d0:6b:24:52:39:85:78:53:
                    bb:02:81:2e:2b:d3:e2:8e:3d:34:77:ef:84:ca:5d:
                    95:24:71:f5:95:f4:fc:9b:b6:15:9c:d9:2b:0d:ce:
                    8e:da:49:db:59:d3:4e:b3:4b:b7:4f:ce:19:ac:43:
                    76:0e:13:48:4f:1e:22:29:98:da:14:6f:4d:ca:e6:
                    f6:84:ae:7c:c8:c5:64:92:71:cd:0c:7e:e2:be:0c:
                    7a:ba:6c:e2:41:6a:8b:6e:68:c2:aa:b7:07:04:65:
                    64:aa:a9:7b:4f:4a:44:b1:88:3c:47:89:2b:8f:19:
                    ff:15:fe:92:b6:d0:21:3a:ea:45:00:df:e5:60:ba:
                    a5:14:29:ba:dd:17:45:c2:f0:0e:82:06:2f:8d:22:
                    d6:94:58:d3:2e:52:a2:3d:36:1c:d9:63:1a:a5:2f:
                    0b:60:8e:d6:b2:20:4d:e1:df:e0:b7:53:68:5f:ae:
                    bd:85:40:c6:1f:a4:46:38:ca:b8:98:16:e7:79:0f:
                    d3:d0:05:72:40:0e:6e:d1:5f:46:b5:1f:f3:c2:0d:
                    b5:d0:03:6e:b4:ce:1b:2d:ca:5c:64:f6:6e:36:45:
                    0f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:DD:DA:49:92:7E:6C:EF:1B:9A:64:85:5C:B2:E9:88:FF:63:4E:88
            X509v3 Authority Key Identifier:
                keyid:D3:EC:A9:E3:28:BA:D6:78:A3:AD:28:C9:C5:35:18:EF:9E:D0:67:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B4B9AA7740AEAAC1942C6D49BD0C759EECBC0A6F31BE3828958A9A9A763ABB11/0/D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B4B9AA7740AEAAC1942C6D49BD0C759EECBC0A6F31BE3828958A9A9A763ABB11/0/3135392e31362e352e302f32342d3234203d3e20323632393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.16.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:d6:4f:43:6a:9d:41:37:09:11:28:93:4a:fb:be:b9:33:d9:
         f1:65:8c:57:2e:3a:2c:dd:54:bd:26:ac:95:dc:cb:59:bf:17:
         53:d1:a8:ee:37:e3:5d:54:06:c7:7f:49:5c:58:25:83:3a:71:
         25:83:08:cd:1f:80:90:b1:7a:2c:56:d7:d5:1b:09:1d:6d:58:
         55:23:1e:6d:0f:16:89:08:20:b4:9c:b2:03:56:c2:b0:2f:f0:
         88:fd:36:31:22:5b:d9:b4:a7:bc:31:dc:41:3d:f6:d9:21:4b:
         db:40:fd:7f:b4:25:b8:bc:dc:67:12:03:5e:1a:aa:78:c3:68:
         62:3c:7c:93:b3:6e:3c:fd:36:5a:ad:b8:85:91:02:2b:8e:6b:
         37:a2:8f:e9:d1:f9:38:0a:49:68:73:c0:f9:85:02:3a:29:90:
         11:89:e1:c1:2e:0d:2d:2d:8c:70:d1:f7:df:0a:2b:f8:0a:45:
         ef:cb:2e:e8:50:2f:b7:6a:6c:71:bd:35:9d:b8:9a:b7:97:ec:
         65:53:93:b7:5e:4c:ac:03:6e:69:12:f9:38:f4:8c:34:f3:d8:
         13:66:b5:f4:fc:f9:92:35:de:c3:25:29:1d:67:42:39:fa:4d:
         3f:dc:da:ac:8e:c9:80:38:53:04:5d:96:69:70:08:2a:d7:00:
         06:83:1e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:56:42 2026 by rpki-client