Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C61F4D8E318209841A7C3F556C9B3ADA6D33B229018202AAB1CAFA46B60B8770/0/3137302e3234342e3132302e302f32322d3234203d3e203232303131.roa
File:                     3137302e3234342e3132302e302f32322d3234203d3e203232303131.roa (raw, json)
Hash identifier:          cs1YZHiOy4yi6vYbMM8mEtf2HdraL08AyGL+NYACC/s=
Subject key identifier:   DB:53:46:FC:06:C3:F0:AF:F4:90:0C:FF:A4:FA:E6:D8:CE:11:58:8C
Certificate issuer:       /CN=49F51DA6C4B18E80CACE58916331C212E02860C4
Certificate serial:       75F994F698FDD8838AB62E250F5FADAAA866666A
Authority key identifier: 49:F5:1D:A6:C4:B1:8E:80:CA:CE:58:91:63:31:C2:12:E0:28:60:C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49F51DA6C4B18E80CACE58916331C212E02860C4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C61F4D8E318209841A7C3F556C9B3ADA6D33B229018202AAB1CAFA46B60B8770/0/3137302e3234342e3132302e302f32322d3234203d3e203232303131.roa
Signing time:             Tue 07 Jul 2026 19:55:01 +0000
ROA not before:           Tue 07 Jul 2026 19:50:01 +0000
ROA not after:            Tue 06 Jul 2027 19:55:01 +0000
asID:                     22011
IP address blocks:        170.244.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C61F4D8E318209841A7C3F556C9B3ADA6D33B229018202AAB1CAFA46B60B8770/0/49F51DA6C4B18E80CACE58916331C212E02860C4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C61F4D8E318209841A7C3F556C9B3ADA6D33B229018202AAB1CAFA46B60B8770/0/49F51DA6C4B18E80CACE58916331C212E02860C4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49F51DA6C4B18E80CACE58916331C212E02860C4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:f9:94:f6:98:fd:d8:83:8a:b6:2e:25:0f:5f:ad:aa:a8:66:66:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49F51DA6C4B18E80CACE58916331C212E02860C4
        Validity
            Not Before: Jul  7 19:50:01 2026 GMT
            Not After : Jul  6 19:55:01 2027 GMT
        Subject: CN=DB5346FC06C3F0AFF4900CFFA4FAE6D8CE11588C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:af:19:07:9d:ae:1f:89:af:28:e5:48:bc:90:
                    05:fd:22:68:68:3b:bd:95:b8:67:c0:c4:aa:05:41:
                    30:c1:cf:6f:01:83:98:26:70:ef:7c:43:90:5b:80:
                    c4:10:be:49:6c:73:81:e7:ff:ed:57:35:a7:3b:e1:
                    e8:a0:63:c1:f5:fc:27:fe:73:75:b2:ab:37:0a:aa:
                    30:93:85:f4:50:34:60:87:20:82:69:0e:d7:9b:eb:
                    98:e2:7d:9a:27:7a:7b:80:c7:56:49:06:2e:c2:d3:
                    b4:2c:35:ff:e0:35:0e:80:e3:be:16:fc:90:0b:95:
                    a9:eb:8e:1f:26:fd:77:d5:98:04:e0:33:7d:d4:c7:
                    ef:37:66:ad:c9:0c:80:d7:3a:bf:42:b3:f4:f0:b7:
                    4c:6d:8c:33:e7:a7:65:42:c0:04:6f:85:d9:6d:65:
                    6c:20:de:dd:5c:aa:8a:c0:af:10:6e:f9:28:d9:07:
                    b3:f3:d6:7e:77:09:a2:03:0d:a8:c7:68:04:72:e5:
                    48:7c:7e:6b:be:70:e0:ee:02:2c:7a:5e:e9:0e:dc:
                    30:cb:3d:2f:72:02:96:ea:39:eb:77:c1:50:73:00:
                    4d:49:98:66:bc:13:c3:01:c5:2f:fc:1f:47:46:b5:
                    a0:07:bf:6b:96:f6:f9:f1:fb:2a:eb:61:46:07:86:
                    ee:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:53:46:FC:06:C3:F0:AF:F4:90:0C:FF:A4:FA:E6:D8:CE:11:58:8C
            X509v3 Authority Key Identifier:
                keyid:49:F5:1D:A6:C4:B1:8E:80:CA:CE:58:91:63:31:C2:12:E0:28:60:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C61F4D8E318209841A7C3F556C9B3ADA6D33B229018202AAB1CAFA46B60B8770/0/49F51DA6C4B18E80CACE58916331C212E02860C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49F51DA6C4B18E80CACE58916331C212E02860C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C61F4D8E318209841A7C3F556C9B3ADA6D33B229018202AAB1CAFA46B60B8770/0/3137302e3234342e3132302e302f32322d3234203d3e203232303131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:2d:7f:49:59:25:80:cc:fd:21:9b:25:58:e1:d2:4b:fe:05:
         c7:18:1a:9d:49:7b:af:27:54:7e:ed:29:c0:b5:02:12:c2:86:
         5b:26:da:60:98:52:cd:56:8a:1c:a6:89:8d:25:b4:1a:02:56:
         c2:a4:20:7f:48:7c:42:f7:d9:ca:d1:60:04:f4:b4:b6:20:6a:
         d3:9f:4e:b4:53:d5:db:66:e8:85:a9:bc:d0:05:70:05:57:ed:
         03:bc:de:99:99:cd:31:68:8d:96:db:13:10:95:d9:c9:39:bc:
         a0:17:29:d5:43:20:38:fa:81:c8:bc:0b:4e:ec:fb:67:02:2d:
         b4:0f:cb:3e:f1:ea:9f:48:8f:fe:ab:63:a2:05:e3:5f:99:a5:
         95:44:df:df:eb:db:00:d2:2a:98:43:47:a8:f7:0a:7e:8e:be:
         08:fd:f3:4d:61:6d:33:28:3d:dc:b7:cf:ca:fb:13:4a:80:f2:
         77:7e:ef:e9:66:ef:d4:bf:74:1b:8d:a6:9a:3c:e6:05:e0:e6:
         f9:85:92:ce:38:8c:26:93:9c:d3:b3:d8:31:54:0b:89:6f:15:
         9a:ec:f5:82:69:2a:64:39:12:29:c0:db:50:21:a4:88:75:86:
         30:25:08:83:3d:fd:95:00:6f:c7:cc:e4:97:14:50:5f:92:24:
         38:28:ba:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:37:54 2026 by rpki-client