Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E74586C5CF7D8384EB451796F4BDBB838E26209A1C87865F396EAEF86FA1BE9D/0/3137302e3235342e3230342e302f32322d3232203d3e2030.roa
File:                     3137302e3235342e3230342e302f32322d3232203d3e2030.roa (raw, json)
Hash identifier:          LsvEOlp9oG6rdIsa8dYCtBHS0EOh+277Vz4HAcvm4IQ=
Subject key identifier:   2B:EA:F5:10:90:CA:22:40:CC:2C:E9:11:85:B1:92:79:98:4F:78:A4
Certificate issuer:       /CN=4C1381453502913CB38DA6219251958EE6E0F09E
Certificate serial:       2C8316E87D962C91D8B1EF0829D40F9B4E3FE68D
Authority key identifier: 4C:13:81:45:35:02:91:3C:B3:8D:A6:21:92:51:95:8E:E6:E0:F0:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C1381453502913CB38DA6219251958EE6E0F09E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E74586C5CF7D8384EB451796F4BDBB838E26209A1C87865F396EAEF86FA1BE9D/0/3137302e3235342e3230342e302f32322d3232203d3e2030.roa
Signing time:             Mon 20 Jul 2026 16:15:00 +0000
ROA not before:           Mon 20 Jul 2026 16:10:00 +0000
ROA not after:            Mon 19 Jul 2027 16:15:00 +0000
asID:                     0
IP address blocks:        170.254.204.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E74586C5CF7D8384EB451796F4BDBB838E26209A1C87865F396EAEF86FA1BE9D/0/4C1381453502913CB38DA6219251958EE6E0F09E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E74586C5CF7D8384EB451796F4BDBB838E26209A1C87865F396EAEF86FA1BE9D/0/4C1381453502913CB38DA6219251958EE6E0F09E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C1381453502913CB38DA6219251958EE6E0F09E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:83:16:e8:7d:96:2c:91:d8:b1:ef:08:29:d4:0f:9b:4e:3f:e6:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C1381453502913CB38DA6219251958EE6E0F09E
        Validity
            Not Before: Jul 20 16:10:00 2026 GMT
            Not After : Jul 19 16:15:00 2027 GMT
        Subject: CN=2BEAF51090CA2240CC2CE91185B19279984F78A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:29:d7:41:22:5c:37:8f:3c:73:3c:8e:31:db:
                    c2:40:04:79:d0:6b:65:8d:32:11:f6:79:b9:db:40:
                    57:63:8e:51:c4:bc:ee:ba:3d:8e:10:18:17:af:e0:
                    0d:7c:67:de:63:24:f2:91:4c:4b:b9:c3:29:26:84:
                    ef:4e:30:95:4f:26:4f:b8:e6:7e:43:a2:c6:99:0d:
                    2e:0e:35:af:15:ee:94:27:9c:53:76:6a:ee:01:6b:
                    8f:2d:97:41:22:28:a5:e0:b0:9c:72:79:df:d4:f9:
                    df:12:b1:f8:35:30:dd:9f:16:69:9a:b2:1f:81:88:
                    a3:01:28:2c:62:38:4d:9c:db:cb:49:98:b8:00:9e:
                    23:fb:14:c5:b2:de:2c:00:e4:42:59:df:80:e3:9f:
                    82:10:ff:79:c4:32:e0:a7:e5:54:d7:4d:fd:9c:65:
                    d7:84:73:92:c3:59:10:c7:34:d2:bc:f2:35:a8:cf:
                    39:d0:a5:91:12:79:81:93:2f:a0:0f:31:28:67:7c:
                    99:75:48:74:02:59:66:cb:45:9c:77:01:71:55:e9:
                    d2:33:b5:44:80:cb:90:f8:58:3b:e0:9c:87:01:64:
                    31:be:25:1f:e0:41:de:cd:38:da:d8:f4:d2:4d:a0:
                    39:13:6f:f7:c4:6f:27:cf:8e:04:24:cb:7e:b3:ac:
                    13:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:EA:F5:10:90:CA:22:40:CC:2C:E9:11:85:B1:92:79:98:4F:78:A4
            X509v3 Authority Key Identifier:
                keyid:4C:13:81:45:35:02:91:3C:B3:8D:A6:21:92:51:95:8E:E6:E0:F0:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E74586C5CF7D8384EB451796F4BDBB838E26209A1C87865F396EAEF86FA1BE9D/0/4C1381453502913CB38DA6219251958EE6E0F09E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C1381453502913CB38DA6219251958EE6E0F09E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E74586C5CF7D8384EB451796F4BDBB838E26209A1C87865F396EAEF86FA1BE9D/0/3137302e3235342e3230342e302f32322d3232203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ac:6b:d1:10:39:86:94:3c:8b:ad:c7:61:06:9e:6b:03:a7:bc:
         76:6a:4a:42:38:6c:0a:0e:8f:a9:29:a8:f8:c5:0a:9c:e5:9e:
         d8:80:a6:57:f9:55:5b:5d:d4:8a:7a:03:b1:49:d7:51:dd:e2:
         09:4f:cc:af:83:4b:51:ec:5e:3c:cf:ac:83:8b:f5:25:f0:9e:
         f7:c6:fa:ef:0b:6f:dc:c6:74:67:24:60:1d:e7:7f:3f:86:8f:
         49:37:df:c9:93:1d:c4:9e:4b:5f:10:f6:4f:a4:c8:e3:d8:e7:
         1b:94:58:6b:97:e1:9c:56:97:71:14:fe:7d:dd:7c:d2:69:31:
         78:69:aa:8c:61:a7:94:7c:40:9f:31:ea:93:f4:a4:55:35:ed:
         5d:bb:19:10:f4:20:08:55:38:a2:25:4f:40:6d:90:a8:b7:57:
         d8:d8:0e:18:6b:5d:57:a2:2b:ea:48:55:5b:9d:45:6e:0e:69:
         8b:33:18:1f:59:c1:98:48:a2:ec:32:6a:20:fd:ba:7b:f7:a2:
         47:ea:10:92:4f:62:48:bd:b1:12:48:40:38:04:d4:26:15:27:
         f1:c6:a7:8d:9f:f8:85:4b:86:9b:e0:0f:fd:d8:d7:2c:03:52:
         d5:35:bc:20:5b:a7:cb:d9:fa:69:d0:76:92:a9:30:d4:9a:2b:
         eb:80:6b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:09:28 2026 by rpki-client