Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C3C0CCC1A94CF82247D2FA8301F49A7549B34C0715B7E100C99CEBA265513C72/0/3137302e3233382e382e302f32322d3234203d3e203532343635.roa
File:                     3137302e3233382e382e302f32322d3234203d3e203532343635.roa (raw, json)
Hash identifier:          A8qvuNcAElt6Su6qU8yBDC1QXdwFo2WEVYfXbkotMEE=
Subject key identifier:   82:61:DE:DF:D6:83:86:D4:B2:E7:B7:31:47:9D:C7:24:09:E0:9D:03
Certificate issuer:       /CN=4E987EE11A4D8C39E36727363E117EC929A11A78
Certificate serial:       6C9C1B6C14528400DBEBAEAC9B2789E1F0391680
Authority key identifier: 4E:98:7E:E1:1A:4D:8C:39:E3:67:27:36:3E:11:7E:C9:29:A1:1A:78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4E987EE11A4D8C39E36727363E117EC929A11A78.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C3C0CCC1A94CF82247D2FA8301F49A7549B34C0715B7E100C99CEBA265513C72/0/3137302e3233382e382e302f32322d3234203d3e203532343635.roa
Signing time:             Mon 04 May 2026 12:40:50 +0000
ROA not before:           Mon 04 May 2026 12:35:50 +0000
ROA not after:            Mon 03 May 2027 12:40:50 +0000
asID:                     52465
IP address blocks:        170.238.8.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C3C0CCC1A94CF82247D2FA8301F49A7549B34C0715B7E100C99CEBA265513C72/0/4E987EE11A4D8C39E36727363E117EC929A11A78.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C3C0CCC1A94CF82247D2FA8301F49A7549B34C0715B7E100C99CEBA265513C72/0/4E987EE11A4D8C39E36727363E117EC929A11A78.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4E987EE11A4D8C39E36727363E117EC929A11A78.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 01:13:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:9c:1b:6c:14:52:84:00:db:eb:ae:ac:9b:27:89:e1:f0:39:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E987EE11A4D8C39E36727363E117EC929A11A78
        Validity
            Not Before: May  4 12:35:50 2026 GMT
            Not After : May  3 12:40:50 2027 GMT
        Subject: CN=8261DEDFD68386D4B2E7B731479DC72409E09D03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b3:1d:62:8c:e6:6f:4d:32:22:97:16:cc:16:
                    64:f1:5a:7b:a6:83:c0:d0:1d:a8:cf:0e:a5:51:37:
                    5f:92:4b:dd:e9:de:4e:8b:9d:ac:83:cb:0f:77:6d:
                    ae:f7:fd:cb:b3:41:d6:7f:95:b1:0c:7e:fb:8b:33:
                    dd:f3:8b:0d:a7:b6:1a:08:ef:a8:29:a1:f3:66:fe:
                    48:e6:2a:ff:ed:bb:50:ab:88:24:f4:d9:be:cf:b7:
                    e5:b1:b5:5d:44:d8:07:4f:30:5a:ed:29:fc:1c:62:
                    c7:14:23:9b:35:28:90:35:c7:0a:1c:0f:41:ad:56:
                    41:69:d9:15:ec:e3:ec:71:9c:9f:f6:46:6d:44:4e:
                    61:f8:27:97:d2:0f:ec:4b:01:1d:a8:e6:07:ba:af:
                    dc:b7:e9:60:8a:e7:b4:23:0b:9e:a9:90:f2:fc:be:
                    aa:fe:72:18:90:4e:9c:1d:8e:97:10:64:0c:f3:3a:
                    36:03:7d:c5:e9:0e:7d:e6:0b:b0:3d:e4:0b:43:f3:
                    22:f1:73:8a:bf:77:94:c4:b0:ea:fb:6e:50:28:26:
                    0f:c9:92:e2:78:c6:f6:17:63:9c:1f:ee:4a:11:f9:
                    ce:88:09:67:8c:b8:5b:ad:21:d6:78:e0:d6:57:ee:
                    fc:13:9c:f5:03:be:65:34:94:4b:73:f2:20:7e:8e:
                    10:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:61:DE:DF:D6:83:86:D4:B2:E7:B7:31:47:9D:C7:24:09:E0:9D:03
            X509v3 Authority Key Identifier:
                keyid:4E:98:7E:E1:1A:4D:8C:39:E3:67:27:36:3E:11:7E:C9:29:A1:1A:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C3C0CCC1A94CF82247D2FA8301F49A7549B34C0715B7E100C99CEBA265513C72/0/4E987EE11A4D8C39E36727363E117EC929A11A78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4E987EE11A4D8C39E36727363E117EC929A11A78.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C3C0CCC1A94CF82247D2FA8301F49A7549B34C0715B7E100C99CEBA265513C72/0/3137302e3233382e382e302f32322d3234203d3e203532343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:1e:8a:e9:e4:b4:46:81:8c:e3:5f:ca:bc:c0:07:6a:80:0f:
         2f:90:68:35:1c:e4:97:d2:bf:bb:e5:b0:b2:14:75:7f:13:92:
         b7:10:99:92:91:c4:38:e2:75:74:18:ce:a6:10:e9:77:04:58:
         54:b1:f4:9f:9a:c5:cf:3a:97:04:91:7c:45:fe:04:cf:c6:6b:
         a7:b4:97:67:f6:a2:f1:86:37:75:d6:8a:a0:7c:f2:2b:1d:5a:
         87:fd:0f:b2:94:77:7f:0d:1e:80:6c:19:c5:4a:88:fb:3e:65:
         6f:08:0c:4d:b0:f7:e8:03:d9:f0:48:a7:9b:e5:0d:76:b2:bf:
         80:36:58:a4:c8:84:c5:2d:b2:aa:21:96:7b:44:2b:c4:49:49:
         52:49:7a:9c:8d:59:30:69:d8:62:8f:d9:d3:6a:79:fe:e7:b5:
         c6:f2:7a:9b:fb:a6:fb:f4:05:f1:a4:23:94:69:2f:d9:0a:bc:
         fe:c5:50:e8:25:e4:7d:06:69:8b:9d:0f:6f:fc:c9:45:34:b0:
         12:9b:5e:63:23:7b:64:06:eb:24:b4:4d:82:94:d7:e7:32:fc:
         8e:78:38:9a:9c:2f:79:4d:0f:f3:07:0b:62:8f:85:24:b9:34:
         7d:1e:e8:49:69:40:18:d3:a5:ed:8e:ca:d5:4c:10:a6:7d:89:
         75:f1:3f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:46:25 2026 by rpki-client