Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/3137302e3233332e37322e302f32322d3232203d3e203336353131.roa
File:                     3137302e3233332e37322e302f32322d3232203d3e203336353131.roa (raw, json)
Hash identifier:          XaJzzxSlZ0/NaI2gER3acbXAJcUqQ97CZzg9S5U6qEE=
Subject key identifier:   F9:1F:D4:51:DF:33:A4:98:36:07:EF:5F:EA:8E:26:0D:88:5F:F1:80
Certificate issuer:       /CN=9651F1E4B6480D19626E784CA1A8F0ABC94C1487
Certificate serial:       312956B0EA21249B15752E21053933D3EB17C732
Authority key identifier: 96:51:F1:E4:B6:48:0D:19:62:6E:78:4C:A1:A8:F0:AB:C9:4C:14:87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/3137302e3233332e37322e302f32322d3232203d3e203336353131.roa
Signing time:             Tue 03 Mar 2026 21:32:42 +0000
ROA not before:           Tue 03 Mar 2026 21:27:42 +0000
ROA not after:            Tue 02 Mar 2027 21:32:42 +0000
asID:                     36511
IP address blocks:        170.233.72.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 02:08:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:29:56:b0:ea:21:24:9b:15:75:2e:21:05:39:33:d3:eb:17:c7:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9651F1E4B6480D19626E784CA1A8F0ABC94C1487
        Validity
            Not Before: Mar  3 21:27:42 2026 GMT
            Not After : Mar  2 21:32:42 2027 GMT
        Subject: CN=F91FD451DF33A4983607EF5FEA8E260D885FF180
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:aa:cd:c5:99:c0:62:e3:78:bf:94:27:3d:f3:
                    67:23:de:1c:d4:8a:10:34:16:7b:4d:4f:26:18:58:
                    8e:7e:52:5f:2f:1f:53:e5:a0:2e:46:36:10:ce:0e:
                    f4:9d:b0:6d:6c:f0:43:3f:51:45:a0:e6:7a:7a:97:
                    84:b2:23:60:b1:ae:9d:96:b2:64:e3:bc:5e:4d:a0:
                    f8:29:d4:bc:a9:70:da:63:7c:90:49:ef:5a:bd:8c:
                    16:0d:87:8b:fd:ba:b4:2b:48:11:36:20:24:e3:27:
                    a7:6d:c9:15:60:43:6a:a2:ff:fc:4f:87:62:95:82:
                    ea:40:a8:a4:c3:bc:2e:32:30:89:e0:4d:ba:2c:d1:
                    a4:5b:8a:0f:0d:c4:76:e4:7b:c7:25:a0:d2:3c:e7:
                    1e:6e:4a:b9:94:5f:04:d7:5c:15:eb:18:db:34:66:
                    ad:32:dc:0f:fb:84:26:21:93:86:c0:cc:08:12:1b:
                    8b:8b:5c:de:d0:48:1f:c0:bd:79:71:57:5c:29:dd:
                    2e:fe:af:de:14:49:8b:bc:e9:80:48:7b:d7:5d:2b:
                    e7:80:7f:97:75:51:50:30:54:92:05:5e:34:f3:98:
                    2a:7b:5a:c1:eb:2f:73:09:f0:6f:7e:16:d6:88:68:
                    ac:cd:d7:87:94:d8:fa:91:73:fc:0f:be:c0:9a:da:
                    43:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:1F:D4:51:DF:33:A4:98:36:07:EF:5F:EA:8E:26:0D:88:5F:F1:80
            X509v3 Authority Key Identifier:
                keyid:96:51:F1:E4:B6:48:0D:19:62:6E:78:4C:A1:A8:F0:AB:C9:4C:14:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/3137302e3233332e37322e302f32322d3232203d3e203336353131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:0a:b9:12:c2:54:ba:bd:25:7b:2e:1b:11:83:01:1e:6c:57:
         65:c1:9a:cb:7e:8e:7a:1d:71:9d:2e:b7:fe:cd:7b:82:26:96:
         c4:5f:92:49:5c:b9:05:f4:e4:41:e4:7b:ac:86:15:c2:87:04:
         ea:76:af:e1:f4:d0:d1:38:1e:2f:3c:34:13:55:a5:7e:64:8c:
         f1:7c:d0:2d:cd:ad:2b:5a:d2:d2:bf:ca:30:87:fc:b4:92:1d:
         a8:a7:a3:f1:b3:14:80:db:fa:51:23:3d:b3:7a:bd:75:8e:0b:
         88:23:65:8f:85:d9:8d:b9:58:ea:9b:02:25:92:d1:08:5b:e7:
         eb:16:50:28:db:5f:46:e5:30:f9:2f:b0:f6:59:06:49:0c:f9:
         b2:7c:fe:7d:4c:8b:af:b0:48:d2:9c:ec:02:e4:75:e0:5a:47:
         ea:a7:e1:67:54:0a:41:ed:5e:8f:da:11:ba:05:70:fb:0b:4a:
         78:78:88:8b:ed:4c:2c:4e:7f:2c:ea:35:0a:83:c7:59:aa:ec:
         a6:d1:22:ac:97:f7:39:e8:fb:1c:0e:cc:7f:ad:32:60:e8:e3:
         56:d3:58:d9:2a:0c:46:59:86:fd:e7:2f:04:eb:d8:9a:00:c3:
         18:69:45:04:d2:93:70:d2:0b:99:55:e4:8d:4a:96:e9:49:5f:
         0f:8c:f1:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:26:23 2026 by rpki-client