Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C61F4D8E318209841A7C3F556C9B3ADA6D33B229018202AAB1CAFA46B60B8770/0/3137302e3135302e3136302e302f32322d3234203d3e203232393038.roa
File:                     3137302e3135302e3136302e302f32322d3234203d3e203232393038.roa (raw, json)
Hash identifier:          75kbkYYaPAz7tHF36e+9nl8YLGNKWwifNSmnyu10z/U=
Subject key identifier:   04:EE:CA:91:78:9F:EA:D3:D2:A5:4D:AF:F0:E8:8C:9A:13:4A:8F:BE
Certificate issuer:       /CN=49F51DA6C4B18E80CACE58916331C212E02860C4
Certificate serial:       1862373E5B7A39482216EAC0A764BD95F4FB9609
Authority key identifier: 49:F5:1D:A6:C4:B1:8E:80:CA:CE:58:91:63:31:C2:12:E0:28:60:C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49F51DA6C4B18E80CACE58916331C212E02860C4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C61F4D8E318209841A7C3F556C9B3ADA6D33B229018202AAB1CAFA46B60B8770/0/3137302e3135302e3136302e302f32322d3234203d3e203232393038.roa
Signing time:             Tue 07 Jul 2026 19:50:00 +0000
ROA not before:           Tue 07 Jul 2026 19:45:00 +0000
ROA not after:            Tue 06 Jul 2027 19:50:00 +0000
asID:                     22908
IP address blocks:        170.150.160.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C61F4D8E318209841A7C3F556C9B3ADA6D33B229018202AAB1CAFA46B60B8770/0/49F51DA6C4B18E80CACE58916331C212E02860C4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C61F4D8E318209841A7C3F556C9B3ADA6D33B229018202AAB1CAFA46B60B8770/0/49F51DA6C4B18E80CACE58916331C212E02860C4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49F51DA6C4B18E80CACE58916331C212E02860C4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:62:37:3e:5b:7a:39:48:22:16:ea:c0:a7:64:bd:95:f4:fb:96:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49F51DA6C4B18E80CACE58916331C212E02860C4
        Validity
            Not Before: Jul  7 19:45:00 2026 GMT
            Not After : Jul  6 19:50:00 2027 GMT
        Subject: CN=04EECA91789FEAD3D2A54DAFF0E88C9A134A8FBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5e:bf:1b:da:ff:a9:1e:ca:fc:a2:70:29:df:
                    da:91:ec:47:cc:2b:e6:a2:47:e4:3d:f5:24:11:6c:
                    2b:82:9a:d5:74:07:d0:c5:30:88:73:5a:44:38:1c:
                    d8:c6:cc:c0:aa:60:5b:eb:bf:0d:5c:c3:a5:4d:cf:
                    76:46:94:48:53:bd:d4:95:df:98:ed:9a:ab:8f:a8:
                    92:f3:ec:62:95:98:f8:52:46:80:62:da:96:e8:17:
                    07:68:72:72:c0:57:e2:41:55:39:1d:1c:4c:9a:4c:
                    20:05:46:8c:6a:58:10:a0:11:12:98:97:d4:84:e3:
                    f9:f4:e4:d8:0e:4c:4e:25:27:ae:0d:eb:15:bd:7b:
                    07:63:7e:98:a1:ea:ad:0a:20:40:29:dc:9f:2e:19:
                    ce:0f:35:4a:cf:a2:5e:fe:0f:cb:24:22:c0:86:96:
                    53:d3:3f:b1:74:f3:35:b4:f1:0a:bd:7a:30:b2:f0:
                    c4:a8:69:3f:7a:c0:02:48:5f:59:40:5a:7f:5f:e1:
                    c5:56:7e:e0:8f:f6:14:a7:3b:4c:2e:8a:c7:33:07:
                    ed:68:69:c7:71:e6:54:30:aa:46:91:e3:93:95:81:
                    62:5f:68:2e:02:ce:6b:6d:56:e2:ea:ab:db:95:d4:
                    e2:07:c2:af:5e:09:9a:68:9d:0c:72:05:44:76:3a:
                    f7:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:EE:CA:91:78:9F:EA:D3:D2:A5:4D:AF:F0:E8:8C:9A:13:4A:8F:BE
            X509v3 Authority Key Identifier:
                keyid:49:F5:1D:A6:C4:B1:8E:80:CA:CE:58:91:63:31:C2:12:E0:28:60:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C61F4D8E318209841A7C3F556C9B3ADA6D33B229018202AAB1CAFA46B60B8770/0/49F51DA6C4B18E80CACE58916331C212E02860C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49F51DA6C4B18E80CACE58916331C212E02860C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C61F4D8E318209841A7C3F556C9B3ADA6D33B229018202AAB1CAFA46B60B8770/0/3137302e3135302e3136302e302f32322d3234203d3e203232393038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7d:61:0e:39:b0:6e:0e:a7:45:de:bd:01:ca:cc:fa:73:1f:a7:
         eb:d0:8b:08:96:4d:04:36:26:84:b9:59:ae:a2:8e:e3:25:1d:
         0e:6f:df:d8:85:28:b7:33:d9:62:30:a8:e5:84:00:06:a8:52:
         c6:c1:8f:33:19:1b:f4:72:f9:c9:49:73:ae:5f:ea:e7:ce:f6:
         37:93:91:25:e6:6c:40:b1:02:15:c9:ac:35:29:f7:de:08:2a:
         9e:e7:fe:cb:69:12:b5:6c:64:44:69:4f:ee:b6:d0:27:c8:4e:
         bf:4f:57:f8:b7:61:22:dd:39:e2:b6:72:89:c3:75:05:72:92:
         7e:0d:f2:52:e7:a4:e0:21:20:01:3c:c1:8a:4e:d4:e2:72:1f:
         75:5f:91:74:b8:c3:4b:3b:a6:39:53:26:58:ae:18:8c:90:cc:
         00:d6:75:24:50:aa:e3:00:ed:58:96:72:e1:02:d5:3b:2c:dc:
         c8:1e:15:42:c7:e8:ae:d4:59:53:f0:e8:0b:da:c5:58:bf:54:
         67:85:ea:e3:12:89:19:84:ad:7a:23:74:a9:3b:d5:70:c0:90:
         2a:c9:19:ff:a8:9f:39:c5:50:53:33:e0:ec:40:37:e4:4a:f1:
         d5:3a:e1:6f:f5:37:4d:2e:87:47:ae:f4:88:c9:8b:84:6b:10:
         af:27:93:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:54:27 2026 by rpki-client