Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/3137302e3234342e39312e302f32342d3234203d3e20333934363834.roa
File:                     3137302e3234342e39312e302f32342d3234203d3e20333934363834.roa (raw, json)
Hash identifier:          dZi8nOK08Jc+jAYRbCC2CyB8HCiEQ6gGEaN7ug9JFLM=
Subject key identifier:   DA:43:21:E2:A9:18:B9:FC:73:E9:51:EE:21:CD:14:AF:D4:12:80:67
Certificate issuer:       /CN=CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC
Certificate serial:       328E45ED6A49D64BC7AC0889428A6CFBB1E91F71
Authority key identifier: CE:FF:58:50:7A:F1:A0:6A:EF:DA:67:DD:8D:65:12:5C:36:4A:4D:EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/3137302e3234342e39312e302f32342d3234203d3e20333934363834.roa
Signing time:             Tue 12 May 2026 20:50:00 +0000
ROA not before:           Tue 12 May 2026 20:45:00 +0000
ROA not after:            Tue 11 May 2027 20:50:00 +0000
asID:                     394684
IP address blocks:        170.244.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:8e:45:ed:6a:49:d6:4b:c7:ac:08:89:42:8a:6c:fb:b1:e9:1f:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC
        Validity
            Not Before: May 12 20:45:00 2026 GMT
            Not After : May 11 20:50:00 2027 GMT
        Subject: CN=DA4321E2A918B9FC73E951EE21CD14AFD4128067
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:30:4c:7e:c9:08:d3:13:53:6a:3c:f4:da:25:
                    7c:4e:af:29:0d:4d:ab:87:f5:c2:b3:14:a8:4f:f6:
                    08:e3:c0:51:c9:63:4f:59:31:b8:bb:9b:e9:b0:e2:
                    2b:ec:b2:66:ee:03:32:80:b5:04:fc:f4:cf:87:6f:
                    19:d6:8e:47:7a:04:4d:2a:22:fa:22:09:36:e2:70:
                    94:c4:fe:68:90:e9:8b:5c:16:40:11:04:de:a4:31:
                    8e:87:c6:a1:b2:c0:aa:f0:b9:4e:31:22:0c:b9:e4:
                    f6:d9:ae:99:4d:00:97:c8:8b:66:b6:8d:e1:c8:62:
                    0f:35:d1:8a:d4:56:f6:fa:37:e2:95:2d:71:f4:68:
                    89:ad:9a:56:d8:50:00:1c:c2:d0:fb:de:dd:47:7f:
                    fc:6c:de:d8:99:cd:36:49:31:88:7d:6c:a6:e5:6d:
                    61:d6:97:c7:c3:3e:97:96:0a:a3:0d:7c:65:f7:3d:
                    4b:6f:bd:3f:74:96:6a:93:3b:65:8a:be:d2:d8:77:
                    bf:1d:97:a7:bb:64:3d:57:ec:4b:12:d6:8b:8c:23:
                    50:c2:00:67:57:f5:aa:86:14:f0:e8:c7:15:67:44:
                    00:9f:4d:21:49:dd:e0:f0:b2:09:37:b0:c5:eb:70:
                    c7:12:e0:78:09:87:24:a2:9f:fc:74:83:94:d5:55:
                    b4:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:43:21:E2:A9:18:B9:FC:73:E9:51:EE:21:CD:14:AF:D4:12:80:67
            X509v3 Authority Key Identifier:
                keyid:CE:FF:58:50:7A:F1:A0:6A:EF:DA:67:DD:8D:65:12:5C:36:4A:4D:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/3137302e3234342e39312e302f32342d3234203d3e20333934363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:f4:18:18:da:23:02:77:3c:97:ad:8b:4b:89:ca:ab:5b:d9:
         2d:49:e5:c9:63:56:8a:da:bc:9e:fb:07:7f:bf:6d:e0:2e:f3:
         8d:e6:ce:fc:c3:1f:07:1b:ce:a3:8e:00:25:03:49:71:e5:37:
         b8:91:50:ae:94:30:4a:1e:b3:1e:fe:4c:17:4e:3d:a9:17:d7:
         95:21:00:e2:7f:53:78:68:99:c6:4a:92:3e:24:ad:36:ae:06:
         91:26:20:92:55:60:1e:63:a0:d9:74:e4:51:ea:1d:76:f2:34:
         bf:2b:d9:01:13:e8:18:02:3a:b4:1c:2a:b9:c5:38:d8:07:ae:
         cd:3d:b7:52:0d:11:e4:a6:a2:c6:1c:61:83:5a:a0:b3:a2:15:
         f7:a2:b2:6d:e1:f6:c9:f7:2f:bc:36:16:47:ee:ce:f9:1c:53:
         5d:00:de:43:e9:60:11:5b:b0:47:c0:0e:d9:db:c8:54:ad:a9:
         a5:4e:03:49:de:10:4a:23:85:75:4e:01:29:6a:63:65:d4:b8:
         e4:c2:06:56:7b:d7:41:40:14:fe:da:67:33:c0:be:84:a7:a8:
         42:66:f7:42:1a:d4:db:fd:54:cb:c0:e6:82:5f:8a:15:7d:c4:
         1c:e3:50:b0:4a:d4:9e:5b:da:b9:56:91:b9:9d:61:75:d7:b9:
         e9:a9:fa:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:26:03 2026 by rpki-client