Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/09F9E0A0FA6F9AC66A133D8A8EEC5686AF036E3DF09331A90EC1F99B02D94088/0/3137302e3234372e35362e302f32322d3234203d3e20323635363436.roa
File:                     3137302e3234372e35362e302f32322d3234203d3e20323635363436.roa (raw, json)
Hash identifier:          vHBO1W3+C556Ttko3PqVyBUFmAxUsxE3Iu4/7yMGt0s=
Subject key identifier:   4B:48:C5:CC:6A:A0:B9:3C:63:74:AE:D6:99:5B:4C:33:BC:6A:74:63
Certificate issuer:       /CN=125312172ACB5206FC23726C19566C8F6B3F0B99
Certificate serial:       283621E5CD6344F35447FD475B0D42158742E057
Authority key identifier: 12:53:12:17:2A:CB:52:06:FC:23:72:6C:19:56:6C:8F:6B:3F:0B:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/125312172ACB5206FC23726C19566C8F6B3F0B99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/09F9E0A0FA6F9AC66A133D8A8EEC5686AF036E3DF09331A90EC1F99B02D94088/0/3137302e3234372e35362e302f32322d3234203d3e20323635363436.roa
Signing time:             Wed 27 May 2026 20:44:25 +0000
ROA not before:           Wed 27 May 2026 20:39:25 +0000
ROA not after:            Wed 26 May 2027 20:44:25 +0000
asID:                     265646
IP address blocks:        170.247.56.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/09F9E0A0FA6F9AC66A133D8A8EEC5686AF036E3DF09331A90EC1F99B02D94088/0/125312172ACB5206FC23726C19566C8F6B3F0B99.crl
                          rsync://repository.lacnic.net/rpki/lacnic/09F9E0A0FA6F9AC66A133D8A8EEC5686AF036E3DF09331A90EC1F99B02D94088/0/125312172ACB5206FC23726C19566C8F6B3F0B99.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/125312172ACB5206FC23726C19566C8F6B3F0B99.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 02 Jun 2026 13:41:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:36:21:e5:cd:63:44:f3:54:47:fd:47:5b:0d:42:15:87:42:e0:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=125312172ACB5206FC23726C19566C8F6B3F0B99
        Validity
            Not Before: May 27 20:39:25 2026 GMT
            Not After : May 26 20:44:25 2027 GMT
        Subject: CN=4B48C5CC6AA0B93C6374AED6995B4C33BC6A7463
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:18:39:53:84:d6:bd:39:2d:8b:45:9e:d2:f0:
                    6e:89:8c:f3:1c:ab:0e:d7:06:53:fd:38:cc:90:f9:
                    c2:56:e5:a3:c4:5a:7c:75:9e:5b:d8:0b:41:20:2c:
                    0a:98:39:b5:32:7b:fd:08:36:fc:a6:a4:67:4c:3c:
                    fe:ac:4c:66:a9:3a:4d:f8:82:33:64:f3:58:7e:86:
                    6a:82:58:ab:a7:7b:c2:32:8a:ca:7d:85:82:3d:ca:
                    6d:58:f0:ec:5b:b8:cd:86:ae:09:78:ed:46:84:06:
                    1d:d9:53:d4:d7:fb:e9:ab:e3:93:dc:01:b9:a9:46:
                    51:47:2a:b5:79:0d:85:a1:f7:de:54:74:a4:ac:38:
                    3d:64:ce:b3:4b:66:81:fd:12:d5:1b:a2:2d:46:a9:
                    06:19:e8:cb:da:26:db:19:e6:ce:74:07:56:a3:62:
                    d0:a7:b2:06:eb:0d:67:b4:60:70:52:5d:38:ea:17:
                    3b:5f:cb:9c:ff:e0:d7:60:9e:e7:1d:df:ec:43:bf:
                    de:1b:e3:38:39:48:f2:e4:86:e6:9c:d1:43:6f:bd:
                    7d:86:af:db:04:65:37:63:7a:74:09:c5:ee:dd:5e:
                    7e:c2:5c:35:bd:26:ea:d1:db:d0:f0:5f:46:f6:4f:
                    3d:6b:20:a6:d6:17:26:84:a3:04:9f:80:5a:5b:a9:
                    39:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:48:C5:CC:6A:A0:B9:3C:63:74:AE:D6:99:5B:4C:33:BC:6A:74:63
            X509v3 Authority Key Identifier:
                keyid:12:53:12:17:2A:CB:52:06:FC:23:72:6C:19:56:6C:8F:6B:3F:0B:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/09F9E0A0FA6F9AC66A133D8A8EEC5686AF036E3DF09331A90EC1F99B02D94088/0/125312172ACB5206FC23726C19566C8F6B3F0B99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/125312172ACB5206FC23726C19566C8F6B3F0B99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/09F9E0A0FA6F9AC66A133D8A8EEC5686AF036E3DF09331A90EC1F99B02D94088/0/3137302e3234372e35362e302f32322d3234203d3e20323635363436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:7e:1a:50:3d:1e:c1:1f:29:7d:3b:0f:f3:da:31:a2:d6:0c:
         2e:9c:16:e3:0b:37:60:b7:26:7e:24:20:ca:8d:46:c2:51:57:
         a9:75:45:01:c5:71:c5:ba:81:fa:2a:7f:93:a3:c3:4a:9e:46:
         0e:a2:78:0e:71:a9:24:82:ca:6f:79:c5:15:89:42:4a:74:39:
         c3:79:14:f9:2a:ab:e5:63:fa:9f:20:89:57:fb:79:8f:64:c0:
         31:79:e0:6d:59:e1:0b:f2:c6:9b:26:61:7f:b2:31:08:0a:74:
         c9:5a:d4:9a:12:e3:55:a9:35:3d:39:1c:ba:43:37:87:9d:d4:
         af:70:8c:80:f0:07:a8:51:08:a6:15:92:d2:d6:ee:f6:b0:b4:
         60:11:36:b7:c2:e4:1a:8d:3e:bb:56:17:5b:2a:ee:6e:65:38:
         1f:33:be:21:48:0e:d0:6c:96:20:39:10:8c:e9:af:1d:45:fa:
         4a:db:6b:ed:14:0f:cc:7f:81:d3:08:ed:fb:36:43:7b:25:88:
         41:35:b2:da:dd:66:65:d2:84:41:c3:3a:d1:61:44:f0:02:f4:
         5c:ae:56:5e:0e:b2:2e:bf:10:6c:80:11:b9:c2:63:62:6c:d1:
         b2:ca:3d:c4:4f:09:3d:1c:b4:11:b4:0f:71:e9:50:6c:b2:40:
         01:71:f1:f4
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUKDYh5c1jRPNUR/1HWw1CFYdC4FcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTI1MzEyMTcyQUNCNTIwNkZDMjM3MjZDMTk1NjZDOEY2
QjNGMEI5OTAeFw0yNjA1MjcyMDM5MjVaFw0yNzA1MjYyMDQ0MjVaMDMxMTAvBgNV
BAMTKDRCNDhDNUNDNkFBMEI5M0M2Mzc0QUVENjk5NUI0QzMzQkM2QTc0NjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxGDlThNa9OS2LRZ7S8G6JjPMc
qw7XBlP9OMyQ+cJW5aPEWnx1nlvYC0EgLAqYObUye/0INvympGdMPP6sTGapOk34
gjNk81h+hmqCWKune8Iyisp9hYI9ym1Y8OxbuM2Grgl47UaEBh3ZU9TX++mr45Pc
AbmpRlFHKrV5DYWh995UdKSsOD1kzrNLZoH9EtUboi1GqQYZ6MvaJtsZ5s50B1aj
YtCnsgbrDWe0YHBSXTjqFztfy5z/4Ndgnucd3+xDv94b4zg5SPLkhuac0UNvvX2G
r9sEZTdjenQJxe7dXn7CXDW9JurR29DwX0b2Tz1rIKbWFyaEowSfgFpbqTm1AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUS0jFzGqguTxjdK7WmVtMM7xqdGMwHwYDVR0j
BBgwFoAUElMSFyrLUgb8I3JsGVZsj2s/C5kwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wOUY5RTBBMEZBNkY5QUM2NkExMzNEOEE4RUVDNTY4NkFG
MDM2RTNERjA5MzMxQTkwRUMxRjk5QjAyRDk0MDg4LzAvMTI1MzEyMTcyQUNCNTIw
NkZDMjM3MjZDMTk1NjZDOEY2QjNGMEI5OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xMjUzMTIxNzJBQ0I1MjA2RkMy
MzcyNkMxOTU2NkM4RjZCM0YwQjk5LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDlGOUUwQTBGQTZGOUFDNjZBMTMzRDhBOEVFQzU2ODZBRjAzNkUzREYw
OTMzMUE5MEVDMUY5OUIwMkQ5NDA4OC8wLzMxMzczMDJlMzIzNDM3MmUzNTM2MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM1MzYzNDM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqvc4
MA0GCSqGSIb3DQEBCwUAA4IBAQBHfhpQPR7BHyl9Ow/z2jGi1gwunBbjCzdgtyZ+
JCDKjUbCUVepdUUBxXHFuoH6Kn+To8NKnkYOongOcakkgspvecUViUJKdDnDeRT5
KqvlY/qfIIlX+3mPZMAxeeBtWeEL8sabJmF/sjEICnTJWtSaEuNVqTU9ORy6QzeH
ndSvcIyA8AeoUQimFZLS1u72sLRgETa3wuQajT67VhdbKu5uZTgfM74hSA7QbJYg
ORCM6a8dRfpK22vtFA/Mf4HTCO37NkN7JYhBNbLa3WZl0oRBwzrRYUTwAvRcrlZe
DrIuvxBsgBG5wmNibNGyyj3ETwk9HLQRtA9x6VBsskABcfH0
-----END CERTIFICATE-----
Generated at Fri May 29 22:28:27 2026 by rpki-client