Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1DBE8E18C7C12166E5A5B419992FDB681468283F6582FBD40ECA629F8259681A/0/3137302e38332e35322e302f32322d3234203d3e20323634383439.roa
File:                     3137302e38332e35322e302f32322d3234203d3e20323634383439.roa (raw, json)
Hash identifier:          Zy/vJ+f1irGuefcLGJzMHs8tjRxZGHjJvUBuA/xtkrc=
Subject key identifier:   A9:FE:2F:36:D7:B1:5C:2D:24:DB:3E:2E:4D:A7:69:57:30:C6:DE:66
Certificate issuer:       /CN=E7A633C6583ABCC4A2BBB8969F30316E9F5EFF2F
Certificate serial:       5E099E6383EC9DF5296DE3CF7C4D98D7730E98EF
Authority key identifier: E7:A6:33:C6:58:3A:BC:C4:A2:BB:B8:96:9F:30:31:6E:9F:5E:FF:2F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7A633C6583ABCC4A2BBB8969F30316E9F5EFF2F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1DBE8E18C7C12166E5A5B419992FDB681468283F6582FBD40ECA629F8259681A/0/3137302e38332e35322e302f32322d3234203d3e20323634383439.roa
Signing time:             Tue 06 Jan 2026 19:27:08 +0000
ROA not before:           Tue 06 Jan 2026 19:22:08 +0000
ROA not after:            Tue 05 Jan 2027 19:27:08 +0000
asID:                     264849
IP address blocks:        170.83.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1DBE8E18C7C12166E5A5B419992FDB681468283F6582FBD40ECA629F8259681A/0/E7A633C6583ABCC4A2BBB8969F30316E9F5EFF2F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1DBE8E18C7C12166E5A5B419992FDB681468283F6582FBD40ECA629F8259681A/0/E7A633C6583ABCC4A2BBB8969F30316E9F5EFF2F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7A633C6583ABCC4A2BBB8969F30316E9F5EFF2F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Feb 2026 22:16:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:09:9e:63:83:ec:9d:f5:29:6d:e3:cf:7c:4d:98:d7:73:0e:98:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7A633C6583ABCC4A2BBB8969F30316E9F5EFF2F
        Validity
            Not Before: Jan  6 19:22:08 2026 GMT
            Not After : Jan  5 19:27:08 2027 GMT
        Subject: CN=A9FE2F36D7B15C2D24DB3E2E4DA7695730C6DE66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e3:18:83:8a:24:e7:68:ad:c5:03:5f:cf:4a:
                    cb:63:6f:57:6c:3f:82:19:bb:64:f1:30:e2:e1:e6:
                    31:43:cf:3d:82:12:75:1c:35:88:ba:ce:5f:67:5b:
                    a7:ce:57:a5:e1:29:ca:78:23:7b:09:9a:30:30:e1:
                    28:99:4d:e0:fa:e6:d7:59:64:e8:c7:57:06:fc:2f:
                    96:7c:6b:67:ad:c7:b9:70:ee:93:86:25:8f:5f:40:
                    c2:43:6b:fe:de:72:94:5d:d9:c3:0c:d4:08:ff:33:
                    f4:2c:51:d1:26:e6:ea:56:7e:14:91:0b:de:ea:61:
                    b8:90:71:74:8b:01:9e:0f:e9:71:cc:ec:da:67:c9:
                    2a:4a:1d:0b:19:91:63:a9:cf:76:29:f0:73:ea:05:
                    44:8b:53:a6:2a:19:82:18:f3:92:3d:ec:ed:e3:f6:
                    92:85:7d:74:be:e0:fc:b6:5f:6e:2d:80:08:84:f2:
                    72:c9:b9:e0:42:e4:13:67:e7:45:1a:c4:10:6c:ac:
                    c4:62:21:4b:f9:bf:dc:27:cf:bd:15:81:5f:22:52:
                    24:2f:f1:de:83:e0:4f:5e:d2:cf:67:33:9b:60:15:
                    92:5f:65:c2:80:c1:4e:a3:e2:14:a0:50:b5:4a:dd:
                    98:0a:ed:17:71:46:92:8b:84:da:db:c7:8d:56:1c:
                    c1:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:FE:2F:36:D7:B1:5C:2D:24:DB:3E:2E:4D:A7:69:57:30:C6:DE:66
            X509v3 Authority Key Identifier:
                keyid:E7:A6:33:C6:58:3A:BC:C4:A2:BB:B8:96:9F:30:31:6E:9F:5E:FF:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1DBE8E18C7C12166E5A5B419992FDB681468283F6582FBD40ECA629F8259681A/0/E7A633C6583ABCC4A2BBB8969F30316E9F5EFF2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7A633C6583ABCC4A2BBB8969F30316E9F5EFF2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1DBE8E18C7C12166E5A5B419992FDB681468283F6582FBD40ECA629F8259681A/0/3137302e38332e35322e302f32322d3234203d3e20323634383439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:bd:9f:b5:52:51:05:e6:50:e9:11:0b:df:fc:60:13:9a:01:
         85:42:3d:07:59:8d:e8:95:92:05:24:4f:b7:19:36:55:49:53:
         af:b2:1e:03:0b:3b:2e:78:3a:2d:37:5e:85:7c:a1:f4:39:6f:
         06:0f:ec:ab:35:f2:f7:4a:ae:85:25:99:43:3e:6b:af:ab:6a:
         48:58:68:5d:8b:49:db:6b:6a:b7:e0:0e:7b:f9:91:05:3f:1d:
         13:d5:aa:28:e3:8d:e1:6d:30:17:57:e4:d8:94:f5:04:c1:a8:
         bd:ad:db:39:60:f1:16:2e:33:f9:4c:82:a0:26:2a:04:a6:5e:
         1c:ee:8d:4d:89:ad:38:02:01:e2:04:51:fe:fa:e0:70:79:6a:
         70:02:47:c9:2a:a3:13:1c:18:69:94:a1:41:14:43:4d:6d:55:
         b2:f5:b9:84:31:de:59:91:d1:a0:2b:ca:be:28:0b:3c:e0:59:
         40:52:54:89:c5:70:5c:e0:66:7e:78:9b:76:75:0f:27:08:ff:
         0f:93:4c:0b:4a:30:2d:96:6f:04:20:b1:65:ba:d8:50:87:68:
         d9:b8:2c:b4:df:51:fa:cf:d7:ec:88:3a:3b:4b:b6:4f:80:01:
         57:9c:3f:09:14:00:31:36:7b:d0:55:46:4b:de:e9:9b:d0:8d:
         96:3b:96:7a
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUXgmeY4PsnfUpbePPfE2Y13MOmO8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTdBNjMzQzY1ODNBQkNDNEEyQkJCODk2OUYzMDMxNkU5
RjVFRkYyRjAeFw0yNjAxMDYxOTIyMDhaFw0yNzAxMDUxOTI3MDhaMDMxMTAvBgNV
BAMTKEE5RkUyRjM2RDdCMTVDMkQyNERCM0UyRTREQTc2OTU3MzBDNkRFNjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC4xiDiiTnaK3FA1/PSstjb1ds
P4IZu2TxMOLh5jFDzz2CEnUcNYi6zl9nW6fOV6XhKcp4I3sJmjAw4SiZTeD65tdZ
ZOjHVwb8L5Z8a2etx7lw7pOGJY9fQMJDa/7ecpRd2cMM1Aj/M/QsUdEm5upWfhSR
C97qYbiQcXSLAZ4P6XHM7NpnySpKHQsZkWOpz3Yp8HPqBUSLU6YqGYIY85I97O3j
9pKFfXS+4Py2X24tgAiE8nLJueBC5BNn50UaxBBsrMRiIUv5v9wnz70VgV8iUiQv
8d6D4E9e0s9nM5tgFZJfZcKAwU6j4hSgULVK3ZgK7RdxRpKLhNrbx41WHMFjAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUqf4vNtexXC0k2z4uTadpVzDG3mYwHwYDVR0j
BBgwFoAU56Yzxlg6vMSiu7iWnzAxbp9e/y8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xREJFOEUxOEM3QzEyMTY2RTVBNUI0MTk5OTJGREI2ODE0
NjgyODNGNjU4MkZCRDQwRUNBNjI5RjgyNTk2ODFBLzAvRTdBNjMzQzY1ODNBQkND
NEEyQkJCODk2OUYzMDMxNkU5RjVFRkYyRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FN0E2MzNDNjU4M0FCQ0M0QTJC
QkI4OTY5RjMwMzE2RTlGNUVGRjJGLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMURCRThFMThDN0MxMjE2NkU1QTVCNDE5OTkyRkRCNjgxNDY4MjgzRjY1
ODJGQkQ0MEVDQTYyOUY4MjU5NjgxQS8wLzMxMzczMDJlMzgzMzJlMzUzMjJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzNDM4MzQzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAqpTNDAN
BgkqhkiG9w0BAQsFAAOCAQEAVr2ftVJRBeZQ6REL3/xgE5oBhUI9B1mN6JWSBSRP
txk2VUlTr7IeAws7Lng6LTdehXyh9DlvBg/sqzXy90quhSWZQz5rr6tqSFhoXYtJ
22tqt+AOe/mRBT8dE9WqKOON4W0wF1fk2JT1BMGova3bOWDxFi4z+UyCoCYqBKZe
HO6NTYmtOAIB4gRR/vrgcHlqcAJHySqjExwYaZShQRRDTW1VsvW5hDHeWZHRoCvK
vigLPOBZQFJUicVwXOBmfnibdnUPJwj/D5NMC0owLZZvBCCxZbrYUIdo2bgstN9R
+s/X7Ig6O0u2T4ABV5w/CRQAMTZ70FVGS97pm9CNljuWeg==
-----END CERTIFICATE-----
Generated at Wed Feb 18 23:02:32 2026 by rpki-client