Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D932B69CBE34140327D3802970BFFFBE9112C0C84B4AD58C28D44E1578550061/0/3137302e3235342e322e302f32332d3234203d3e20323639393830.roa
File:                     3137302e3235342e322e302f32332d3234203d3e20323639393830.roa (raw, json)
Hash identifier:          P0nlra9dilfEJycQDMunIugA/6f+UTUgDo0m1rh86Jg=
Subject key identifier:   C0:BB:C1:D6:DB:DA:9F:5F:66:B5:18:EE:A7:EB:DA:3B:AD:2B:20:46
Certificate issuer:       /CN=B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C
Certificate serial:       5141E4C3FCC972CB2107099A9CA08BE8021BFABB
Authority key identifier: B1:9D:CD:B6:4E:50:6E:AC:5C:80:E9:A6:A0:E2:2F:0D:F2:5D:72:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D932B69CBE34140327D3802970BFFFBE9112C0C84B4AD58C28D44E1578550061/0/3137302e3235342e322e302f32332d3234203d3e20323639393830.roa
Signing time:             Tue 05 May 2026 14:41:16 +0000
ROA not before:           Tue 05 May 2026 14:36:16 +0000
ROA not after:            Tue 04 May 2027 14:41:16 +0000
asID:                     269980
IP address blocks:        170.254.2.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D932B69CBE34140327D3802970BFFFBE9112C0C84B4AD58C28D44E1578550061/0/B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D932B69CBE34140327D3802970BFFFBE9112C0C84B4AD58C28D44E1578550061/0/B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 16 May 2026 17:18:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:41:e4:c3:fc:c9:72:cb:21:07:09:9a:9c:a0:8b:e8:02:1b:fa:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C
        Validity
            Not Before: May  5 14:36:16 2026 GMT
            Not After : May  4 14:41:16 2027 GMT
        Subject: CN=C0BBC1D6DBDA9F5F66B518EEA7EBDA3BAD2B2046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7c:71:a9:af:50:3a:e6:77:4c:2c:20:47:7c:
                    42:44:d9:a7:f2:3c:8c:13:60:db:1e:0a:84:4a:b3:
                    61:b2:25:6e:5e:c7:14:ef:88:07:03:94:c4:25:cf:
                    73:a8:e8:64:ad:a2:2e:4c:70:6f:d2:cf:66:29:9c:
                    f3:1a:70:0b:47:c9:24:91:3e:b5:c5:d7:9e:d6:1b:
                    39:a7:5d:39:ae:c6:10:a0:45:da:3b:dc:04:65:2a:
                    1c:4f:a4:b7:ea:1f:3b:a1:b0:13:2f:7f:b4:1d:12:
                    ee:c5:22:c5:3a:56:12:7b:65:6a:92:3c:c6:bc:87:
                    54:c9:07:0e:48:8a:ca:8f:ed:f1:a3:b4:22:25:4c:
                    b5:27:0f:2a:b9:35:c3:8e:19:9f:13:c0:78:7e:d3:
                    bf:0b:1e:d1:28:a9:f6:6a:83:1e:a7:f6:e4:65:44:
                    e7:d8:46:f9:cb:ee:f5:82:95:5c:eb:f3:dc:ae:90:
                    8f:f7:c5:59:9e:86:97:2b:86:69:22:02:cd:50:64:
                    5c:63:1c:af:c3:d1:48:de:27:76:ec:a9:cb:7e:c2:
                    9e:ee:05:e1:6f:d3:a6:bf:77:14:5e:eb:65:ab:fd:
                    f9:d4:0a:16:ab:c2:2b:d2:e1:c7:e0:f7:cf:67:ea:
                    60:be:9d:1d:49:91:9c:50:ef:f4:ed:5d:89:ef:71:
                    36:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:BB:C1:D6:DB:DA:9F:5F:66:B5:18:EE:A7:EB:DA:3B:AD:2B:20:46
            X509v3 Authority Key Identifier:
                keyid:B1:9D:CD:B6:4E:50:6E:AC:5C:80:E9:A6:A0:E2:2F:0D:F2:5D:72:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D932B69CBE34140327D3802970BFFFBE9112C0C84B4AD58C28D44E1578550061/0/B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D932B69CBE34140327D3802970BFFFBE9112C0C84B4AD58C28D44E1578550061/0/3137302e3235342e322e302f32332d3234203d3e20323639393830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b6:2d:07:38:28:dc:3b:df:46:5f:e9:a8:20:21:65:c8:9f:19:
         74:03:58:a6:aa:ef:a5:e2:c7:2e:8a:21:06:30:cb:e9:7f:d5:
         17:aa:01:8b:96:32:0d:fc:9a:29:46:dd:bd:5a:8f:6d:10:41:
         88:5f:13:ae:aa:d3:0c:a1:dc:9a:93:e6:09:7b:c0:01:84:95:
         23:5d:91:de:0a:b6:64:1a:38:c2:9d:97:d2:f8:3f:54:c7:a4:
         79:88:af:3e:6b:5a:2c:bf:24:b5:7e:e8:ee:83:53:a5:9c:c8:
         46:f4:23:38:bf:76:6d:50:2d:6e:2f:87:8f:dd:d3:cf:8e:9e:
         92:24:72:2f:6f:61:40:37:66:63:f9:7f:34:07:05:9e:f9:86:
         42:f0:51:cc:d5:22:3b:f5:2e:1e:37:90:bf:3f:d5:86:fa:36:
         13:62:52:77:61:c1:d2:65:93:19:c4:66:5d:b0:db:fa:5b:36:
         92:16:b4:52:64:01:24:2b:85:57:c0:ec:cb:df:10:4e:93:c5:
         e6:07:7c:43:a5:40:bd:3d:57:43:60:63:19:76:cd:e9:bc:75:
         83:af:22:3b:8c:5c:b6:30:f9:0c:89:6f:ba:d6:62:f7:b9:18:
         18:67:4d:9f:75:e5:97:2f:4c:ea:6a:60:81:fd:4e:d3:9c:ae:
         f9:63:86:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:40:19 2026 by rpki-client