Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/3137302e3233332e37322e302f32322d3232203d3e203333333932.roa
File:                     3137302e3233332e37322e302f32322d3232203d3e203333333932.roa (raw, json)
Hash identifier:          Xi+q6VlhcYZ1SAS2VogFd/wFidd7tsrjtjkyCq8GqPk=
Subject key identifier:   82:71:3C:C3:22:A6:C5:D5:76:A3:6B:FD:53:10:2C:42:C3:02:BB:53
Certificate issuer:       /CN=9651F1E4B6480D19626E784CA1A8F0ABC94C1487
Certificate serial:       7E1958FDF2E722D14CC70F1EA6A19297E9794837
Authority key identifier: 96:51:F1:E4:B6:48:0D:19:62:6E:78:4C:A1:A8:F0:AB:C9:4C:14:87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/3137302e3233332e37322e302f32322d3232203d3e203333333932.roa
Signing time:             Fri 06 Mar 2026 14:33:09 +0000
ROA not before:           Fri 06 Mar 2026 14:28:09 +0000
ROA not after:            Fri 05 Mar 2027 14:33:09 +0000
asID:                     33392
IP address blocks:        170.233.72.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:19:58:fd:f2:e7:22:d1:4c:c7:0f:1e:a6:a1:92:97:e9:79:48:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9651F1E4B6480D19626E784CA1A8F0ABC94C1487
        Validity
            Not Before: Mar  6 14:28:09 2026 GMT
            Not After : Mar  5 14:33:09 2027 GMT
        Subject: CN=82713CC322A6C5D576A36BFD53102C42C302BB53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b7:17:b0:6f:64:26:51:ca:29:0c:ff:99:b0:
                    b4:bf:1e:51:c1:f0:3a:da:bf:8f:26:52:cb:66:f9:
                    b7:50:9d:c0:42:61:45:fc:9a:d3:59:ed:8e:29:73:
                    50:3d:8c:b6:17:bd:90:e7:08:7f:9a:7b:65:c9:f3:
                    1a:61:be:01:94:66:a3:45:a3:2d:02:64:5e:e5:c6:
                    a5:88:94:15:b5:b8:08:30:2f:6e:e8:8e:41:82:82:
                    0c:8d:85:d4:7c:2e:94:42:a0:16:83:aa:ea:88:a5:
                    68:41:ff:a0:7d:c7:5f:20:66:23:06:81:25:1e:8a:
                    91:b5:78:3b:79:e9:90:7b:65:68:91:b2:68:90:a2:
                    f3:41:0b:2e:1c:36:d4:7b:8c:7c:22:dd:eb:f1:93:
                    de:d1:9a:33:89:e4:1c:85:6a:50:fb:af:0a:c6:49:
                    4d:aa:fd:0d:19:12:91:bd:16:7b:30:6c:18:ee:a7:
                    c8:7e:d1:95:81:b0:37:09:ae:8f:b2:02:b7:7f:88:
                    c0:39:57:13:54:17:f1:d0:4c:e3:19:d8:c9:fe:19:
                    67:79:89:ad:e5:d2:c9:e2:16:6f:59:87:6a:ee:e6:
                    65:2e:45:db:2d:6f:aa:65:75:0e:e3:df:38:3d:9b:
                    7e:b5:6b:72:2f:87:84:92:fa:63:9f:62:c7:16:34:
                    ac:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:71:3C:C3:22:A6:C5:D5:76:A3:6B:FD:53:10:2C:42:C3:02:BB:53
            X509v3 Authority Key Identifier:
                keyid:96:51:F1:E4:B6:48:0D:19:62:6E:78:4C:A1:A8:F0:AB:C9:4C:14:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/3137302e3233332e37322e302f32322d3232203d3e203333333932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a2:06:46:59:6c:5c:98:19:96:ac:e0:29:c4:42:29:76:21:1e:
         e5:95:18:49:22:42:29:0c:24:9b:6b:34:25:df:d7:04:57:7f:
         27:be:31:3d:33:e6:d1:60:69:ec:46:9f:bf:f2:9c:49:6b:01:
         53:df:61:35:bb:45:d4:10:e2:0b:1e:91:31:df:db:7b:12:10:
         8e:e3:27:4f:86:16:3b:7a:f6:8d:9b:95:b5:87:0a:ea:ec:15:
         0f:bf:17:c8:a2:1c:0c:1f:dc:f4:26:7e:d3:d7:31:16:5b:2d:
         03:fc:c0:4c:84:93:ec:55:bf:5e:24:60:9d:57:ab:6a:83:5f:
         1e:cd:b8:7d:c1:1e:b9:f1:9a:2c:fa:4c:b7:6a:69:ad:35:ef:
         5b:66:db:8f:aa:16:ee:3d:96:52:87:e5:a4:84:88:73:fa:1f:
         dd:cd:22:96:49:f7:ff:f1:d0:61:43:e5:9d:2b:40:aa:b8:59:
         96:d0:cb:f6:c7:98:35:ca:b8:48:23:5c:e6:b7:47:7e:ac:b6:
         d1:3e:6d:c1:8d:01:ca:6e:9a:23:aa:3a:fc:f0:5d:20:65:82:
         b2:6c:ab:18:80:bf:86:eb:18:1b:c1:df:94:de:0c:91:f8:4b:
         53:d0:5d:79:6d:e2:2e:93:24:71:a6:0c:f2:85:ac:0a:85:40:
         f3:5c:d5:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 06:48:38 2026 by rpki-client