Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/09F9E0A0FA6F9AC66A133D8A8EEC5686AF036E3DF09331A90EC1F99B02D94088/0/3137302e3234372e35382e302f32332d3234203d3e20323635363436.roa
File:                     3137302e3234372e35382e302f32332d3234203d3e20323635363436.roa (raw, json)
Hash identifier:          Nv3sVULqBEPI1WNl9KhRfj/rruq0HYrD1TEQo0m31NM=
Subject key identifier:   F0:37:9E:7C:44:F7:E3:B8:CB:F9:66:CA:4F:14:8A:94:FD:DC:2C:76
Certificate issuer:       /CN=125312172ACB5206FC23726C19566C8F6B3F0B99
Certificate serial:       2734B80B96D85BE191691A3FBA5F8EA1B1571307
Authority key identifier: 12:53:12:17:2A:CB:52:06:FC:23:72:6C:19:56:6C:8F:6B:3F:0B:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/125312172ACB5206FC23726C19566C8F6B3F0B99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/09F9E0A0FA6F9AC66A133D8A8EEC5686AF036E3DF09331A90EC1F99B02D94088/0/3137302e3234372e35382e302f32332d3234203d3e20323635363436.roa
Signing time:             Wed 27 May 2026 19:44:25 +0000
ROA not before:           Wed 27 May 2026 19:39:25 +0000
ROA not after:            Wed 26 May 2027 19:44:25 +0000
asID:                     265646
IP address blocks:        170.247.58.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/09F9E0A0FA6F9AC66A133D8A8EEC5686AF036E3DF09331A90EC1F99B02D94088/0/125312172ACB5206FC23726C19566C8F6B3F0B99.crl
                          rsync://repository.lacnic.net/rpki/lacnic/09F9E0A0FA6F9AC66A133D8A8EEC5686AF036E3DF09331A90EC1F99B02D94088/0/125312172ACB5206FC23726C19566C8F6B3F0B99.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/125312172ACB5206FC23726C19566C8F6B3F0B99.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 02 Jun 2026 13:41:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:34:b8:0b:96:d8:5b:e1:91:69:1a:3f:ba:5f:8e:a1:b1:57:13:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=125312172ACB5206FC23726C19566C8F6B3F0B99
        Validity
            Not Before: May 27 19:39:25 2026 GMT
            Not After : May 26 19:44:25 2027 GMT
        Subject: CN=F0379E7C44F7E3B8CBF966CA4F148A94FDDC2C76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3b:5a:5d:23:de:26:6c:71:5d:8c:42:cb:8c:
                    df:64:ec:77:27:7c:31:75:3a:31:e8:64:a8:48:0b:
                    e7:34:86:84:cb:ac:44:85:bc:b8:2b:32:93:1b:f5:
                    4b:11:8d:5a:ef:24:47:c0:c2:f6:e4:94:33:ea:62:
                    79:e1:b1:93:ef:e8:d6:a8:54:1f:53:65:9d:5e:e0:
                    5d:5e:e5:9f:45:63:8f:59:6e:50:90:da:0c:cf:e9:
                    45:1b:0f:19:8b:90:f0:2f:3f:d8:11:19:c1:cd:b0:
                    d6:53:22:24:4b:e1:6b:f2:50:41:c5:52:12:9e:49:
                    f2:e3:10:3d:c3:02:b1:0a:b8:67:68:89:7e:00:d2:
                    c1:e7:23:2b:fb:c2:bb:36:72:c9:a6:de:5a:8b:70:
                    ba:d5:d9:cf:90:a1:ac:50:5c:37:a2:f4:ce:0e:d5:
                    a2:34:6b:2a:78:e1:13:de:a4:c5:9e:f3:bd:16:b9:
                    ba:8b:ad:9c:9e:cd:05:e0:65:d9:1a:61:cb:b5:74:
                    43:6f:d7:4e:02:f0:56:e8:28:cd:34:e5:14:b8:26:
                    49:ed:8b:de:87:8f:58:c3:26:db:a5:50:c9:68:4b:
                    55:5e:e2:8e:e8:bd:01:23:57:7f:e2:27:6d:4e:71:
                    79:57:75:d9:1a:b8:cb:00:cb:65:2b:ea:1f:54:44:
                    ad:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:37:9E:7C:44:F7:E3:B8:CB:F9:66:CA:4F:14:8A:94:FD:DC:2C:76
            X509v3 Authority Key Identifier:
                keyid:12:53:12:17:2A:CB:52:06:FC:23:72:6C:19:56:6C:8F:6B:3F:0B:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/09F9E0A0FA6F9AC66A133D8A8EEC5686AF036E3DF09331A90EC1F99B02D94088/0/125312172ACB5206FC23726C19566C8F6B3F0B99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/125312172ACB5206FC23726C19566C8F6B3F0B99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/09F9E0A0FA6F9AC66A133D8A8EEC5686AF036E3DF09331A90EC1F99B02D94088/0/3137302e3234372e35382e302f32332d3234203d3e20323635363436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         92:d8:9e:1d:f4:48:17:35:41:ca:f4:7f:39:07:09:5c:9f:e1:
         54:50:0d:aa:24:b6:37:5f:90:e8:13:b6:61:6b:c6:32:85:26:
         25:24:6f:b4:6d:e1:2e:2e:f1:98:09:9c:72:ca:cb:3a:73:46:
         48:a0:ee:cd:30:09:80:6c:b8:f6:a6:f6:01:cb:13:7f:c4:95:
         b7:2d:ef:6d:05:4d:92:9e:c2:5a:9c:72:60:fe:49:49:7c:c3:
         43:4c:6c:f4:f9:9b:af:b5:7b:3a:08:44:bb:17:a0:56:ad:a1:
         cc:da:7e:b5:3e:39:37:36:cf:56:9b:6f:dd:f3:88:9d:ef:e6:
         d5:f6:ae:0c:b4:7b:03:78:7b:50:81:b9:0e:12:36:d5:05:93:
         67:e8:33:3b:0b:b4:ac:dd:aa:92:ca:e6:61:ca:c9:22:22:be:
         ae:a0:36:fa:15:20:89:ed:ad:d3:fa:ce:8e:6f:37:cd:5b:35:
         2c:b3:6f:45:38:72:eb:e6:26:2c:32:a3:63:4a:50:32:bf:b5:
         15:ab:13:03:5a:07:25:16:f9:a3:6b:0c:46:45:fc:6f:95:b3:
         61:5d:7c:5c:d5:0f:43:76:6c:14:09:ae:ff:4a:e5:c6:7c:19:
         02:ef:93:df:a2:87:05:1c:28:07:67:f3:0b:d8:81:72:86:c8:
         53:d6:98:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:28:28 2026 by rpki-client