Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C61F4D8E318209841A7C3F556C9B3ADA6D33B229018202AAB1CAFA46B60B8770/0/3137302e3234342e3132302e302f32322d3234203d3e203232393038.roa
File:                     3137302e3234342e3132302e302f32322d3234203d3e203232393038.roa (raw, json)
Hash identifier:          tukGWRR2LVrCmAXxh1qK/xLBCrrJFPA2zQX0Cv6QOKQ=
Subject key identifier:   5C:ED:D2:7B:7B:C1:2C:77:59:DD:22:E1:66:4A:C0:C4:07:7F:7E:A3
Certificate issuer:       /CN=49F51DA6C4B18E80CACE58916331C212E02860C4
Certificate serial:       093F16BAC8E1E1E250E43F3FBDE738360CA1E44F
Authority key identifier: 49:F5:1D:A6:C4:B1:8E:80:CA:CE:58:91:63:31:C2:12:E0:28:60:C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49F51DA6C4B18E80CACE58916331C212E02860C4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C61F4D8E318209841A7C3F556C9B3ADA6D33B229018202AAB1CAFA46B60B8770/0/3137302e3234342e3132302e302f32322d3234203d3e203232393038.roa
Signing time:             Tue 07 Jul 2026 19:55:00 +0000
ROA not before:           Tue 07 Jul 2026 19:50:00 +0000
ROA not after:            Tue 06 Jul 2027 19:55:00 +0000
asID:                     22908
IP address blocks:        170.244.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C61F4D8E318209841A7C3F556C9B3ADA6D33B229018202AAB1CAFA46B60B8770/0/49F51DA6C4B18E80CACE58916331C212E02860C4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C61F4D8E318209841A7C3F556C9B3ADA6D33B229018202AAB1CAFA46B60B8770/0/49F51DA6C4B18E80CACE58916331C212E02860C4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49F51DA6C4B18E80CACE58916331C212E02860C4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:3f:16:ba:c8:e1:e1:e2:50:e4:3f:3f:bd:e7:38:36:0c:a1:e4:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49F51DA6C4B18E80CACE58916331C212E02860C4
        Validity
            Not Before: Jul  7 19:50:00 2026 GMT
            Not After : Jul  6 19:55:00 2027 GMT
        Subject: CN=5CEDD27B7BC12C7759DD22E1664AC0C4077F7EA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c7:0d:80:fa:bb:e4:87:7a:45:53:45:77:4f:
                    e6:48:4c:b1:01:c2:bd:76:e8:32:93:8c:ed:ca:5c:
                    1b:d4:02:ad:68:cc:73:3f:8e:c8:b1:9d:c0:09:56:
                    4d:c9:b5:22:0c:4f:f2:36:a2:63:8c:39:3b:03:b5:
                    38:6e:a4:31:e8:bf:3d:5f:e0:a3:52:78:3d:a3:19:
                    c4:6f:a7:f9:20:5b:ef:b2:08:ec:c2:ee:ae:b9:a6:
                    fa:f6:3e:00:cf:13:3b:6c:ab:1f:25:cf:30:c0:87:
                    1c:85:3f:93:af:da:fd:5d:a8:5a:40:ee:46:27:1b:
                    25:8b:ea:eb:fc:aa:82:a6:c2:d6:75:4e:a0:29:bf:
                    0a:de:f1:56:0c:5d:c9:f9:0c:75:f4:88:85:21:19:
                    96:c8:18:9e:34:5a:df:3d:eb:46:40:04:d4:02:b4:
                    76:9f:80:e4:75:08:a4:bb:69:14:e7:18:1f:52:1d:
                    f0:1d:bf:5d:08:0e:5c:33:9f:5a:bf:f2:a4:8e:1b:
                    d9:52:1e:39:b8:72:03:b3:d8:b2:00:f2:df:98:92:
                    1b:a7:fc:db:4d:3c:f9:96:13:63:5b:e6:f5:e9:eb:
                    2a:43:86:b8:fb:7c:39:7e:8d:a1:cc:4b:6e:a5:91:
                    e4:77:9a:41:e7:07:10:0c:5e:23:11:5c:e9:e6:1b:
                    f0:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:ED:D2:7B:7B:C1:2C:77:59:DD:22:E1:66:4A:C0:C4:07:7F:7E:A3
            X509v3 Authority Key Identifier:
                keyid:49:F5:1D:A6:C4:B1:8E:80:CA:CE:58:91:63:31:C2:12:E0:28:60:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C61F4D8E318209841A7C3F556C9B3ADA6D33B229018202AAB1CAFA46B60B8770/0/49F51DA6C4B18E80CACE58916331C212E02860C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49F51DA6C4B18E80CACE58916331C212E02860C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C61F4D8E318209841A7C3F556C9B3ADA6D33B229018202AAB1CAFA46B60B8770/0/3137302e3234342e3132302e302f32322d3234203d3e203232393038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9a:a2:9c:dd:a3:0f:71:61:2c:b9:ee:fe:8e:e6:bc:8b:71:24:
         fd:3c:db:fb:60:6d:5f:24:52:f5:2d:bf:fa:fd:7a:36:5f:2a:
         b5:b1:02:86:ab:d7:67:b8:2a:d7:d6:d4:fb:72:bc:54:9f:62:
         c1:73:c7:75:45:6c:37:9d:10:a4:92:d0:1a:50:f2:52:67:e5:
         23:ce:23:15:28:bc:8a:25:b3:71:76:11:f3:50:e8:98:38:e0:
         97:9a:52:8e:b3:5d:18:2f:25:f9:77:fd:2d:12:0c:bd:9b:68:
         f2:bf:18:82:7b:ac:20:24:30:89:70:9c:b0:e8:b8:f6:4f:11:
         3d:23:23:cb:c9:9e:2d:03:79:a3:28:4e:5c:f4:31:bc:e6:3c:
         0e:be:69:e4:5a:9a:ff:e8:c0:a6:f2:d9:07:8f:98:e4:57:4f:
         f3:bd:84:9f:a3:68:47:3f:d1:79:5d:93:f9:c1:13:82:54:ed:
         9c:e5:01:79:f1:fd:d6:81:64:71:be:5e:8e:3b:b6:e6:73:02:
         60:00:a4:f5:13:78:79:4b:35:71:52:0c:28:e4:bf:8c:87:1b:
         cd:21:3d:a3:6f:0b:63:55:24:d5:ab:3c:55:68:f3:9e:47:5e:
         01:59:7e:a8:6b:9a:e6:cb:c4:7a:69:1f:76:36:e6:d5:26:87:
         72:13:ea:bc
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUCT8Wusjh4eJQ5D8/vec4Ngyh5E8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDlGNTFEQTZDNEIxOEU4MENBQ0U1ODkxNjMzMUMyMTJF
MDI4NjBDNDAeFw0yNjA3MDcxOTUwMDBaFw0yNzA3MDYxOTU1MDBaMDMxMTAvBgNV
BAMTKDVDRUREMjdCN0JDMTJDNzc1OUREMjJFMTY2NEFDMEM0MDc3RjdFQTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHxw2A+rvkh3pFU0V3T+ZITLEB
wr126DKTjO3KXBvUAq1ozHM/jsixncAJVk3JtSIMT/I2omOMOTsDtThupDHovz1f
4KNSeD2jGcRvp/kgW++yCOzC7q65pvr2PgDPEztsqx8lzzDAhxyFP5Ov2v1dqFpA
7kYnGyWL6uv8qoKmwtZ1TqApvwre8VYMXcn5DHX0iIUhGZbIGJ40Wt8960ZABNQC
tHafgOR1CKS7aRTnGB9SHfAdv10IDlwzn1q/8qSOG9lSHjm4cgOz2LIA8t+Ykhun
/NtNPPmWE2Nb5vXp6ypDhrj7fDl+jaHMS26lkeR3mkHnBxAMXiMRXOnmG/ApAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUXO3Se3vBLHdZ3SLhZkrAxAd/fqMwHwYDVR0j
BBgwFoAUSfUdpsSxjoDKzliRYzHCEuAoYMQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DNjFGNEQ4RTMxODIwOTg0MUE3QzNGNTU2QzlCM0FEQTZE
MzNCMjI5MDE4MjAyQUFCMUNBRkE0NkI2MEI4NzcwLzAvNDlGNTFEQTZDNEIxOEU4
MENBQ0U1ODkxNjMzMUMyMTJFMDI4NjBDNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80OUY1MURBNkM0QjE4RTgwQ0FD
RTU4OTE2MzMxQzIxMkUwMjg2MEM0LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzYxRjREOEUzMTgyMDk4NDFBN0MzRjU1NkM5QjNBREE2RDMzQjIyOTAx
ODIwMkFBQjFDQUZBNDZCNjBCODc3MC8wLzMxMzczMDJlMzIzNDM0MmUzMTMyMzAy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjMyMzkzMDM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqvR4
MA0GCSqGSIb3DQEBCwUAA4IBAQCaopzdow9xYSy57v6O5ryLcST9PNv7YG1fJFL1
Lb/6/Xo2Xyq1sQKGq9dnuCrX1tT7crxUn2LBc8d1RWw3nRCkktAaUPJSZ+UjziMV
KLyKJbNxdhHzUOiYOOCXmlKOs10YLyX5d/0tEgy9m2jyvxiCe6wgJDCJcJyw6Lj2
TxE9IyPLyZ4tA3mjKE5c9DG85jwOvmnkWpr/6MCm8tkHj5jkV0/zvYSfo2hHP9F5
XZP5wROCVO2c5QF58f3WgWRxvl6OO7bmcwJgAKT1E3h5SzVxUgwo5L+MhxvNIT2j
bwtjVSTVqzxVaPOeR14BWX6oa5rmy8R6aR92NubVJodyE+q8
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:54:33 2026 by rpki-client