Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A511D681E72F9D814F7BD8FC39D1FED7EA3F94AB704F688C8C38F1A51732BDC/0/3136302e3233382e3138342e302f32332d3233203d3e20323635373238.roa
File:                     3136302e3233382e3138342e302f32332d3233203d3e20323635373238.roa (raw, json)
Hash identifier:          DDqqbJ1U5LziLXzFMQMaFx+y8XS4ixTZCxbIvlOaFFg=
Subject key identifier:   4C:05:6D:04:17:E3:46:F2:E0:36:8F:7E:6D:2F:BA:56:3A:8E:3B:35
Certificate issuer:       /CN=B7E1ABEC010ABB9AF463BF22B16C561B5C2C4444
Certificate serial:       2756320A6C4F6A986DE52A8EAEFFF4837BD501E5
Authority key identifier: B7:E1:AB:EC:01:0A:BB:9A:F4:63:BF:22:B1:6C:56:1B:5C:2C:44:44
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B7E1ABEC010ABB9AF463BF22B16C561B5C2C4444.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A511D681E72F9D814F7BD8FC39D1FED7EA3F94AB704F688C8C38F1A51732BDC/0/3136302e3233382e3138342e302f32332d3233203d3e20323635373238.roa
Signing time:             Fri 03 Apr 2026 21:37:28 +0000
ROA not before:           Fri 03 Apr 2026 21:32:28 +0000
ROA not after:            Fri 02 Apr 2027 21:37:28 +0000
asID:                     265728
IP address blocks:        160.238.184.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A511D681E72F9D814F7BD8FC39D1FED7EA3F94AB704F688C8C38F1A51732BDC/0/B7E1ABEC010ABB9AF463BF22B16C561B5C2C4444.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A511D681E72F9D814F7BD8FC39D1FED7EA3F94AB704F688C8C38F1A51732BDC/0/B7E1ABEC010ABB9AF463BF22B16C561B5C2C4444.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B7E1ABEC010ABB9AF463BF22B16C561B5C2C4444.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 11 Apr 2026 23:05:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:56:32:0a:6c:4f:6a:98:6d:e5:2a:8e:ae:ff:f4:83:7b:d5:01:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7E1ABEC010ABB9AF463BF22B16C561B5C2C4444
        Validity
            Not Before: Apr  3 21:32:28 2026 GMT
            Not After : Apr  2 21:37:28 2027 GMT
        Subject: CN=4C056D0417E346F2E0368F7E6D2FBA563A8E3B35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:40:67:12:cb:99:cb:95:1f:10:b3:ad:28:c1:
                    a7:5d:fb:b9:d2:5d:e1:d1:73:59:0c:ba:3d:cb:2c:
                    6c:06:36:6c:7e:77:f6:06:1a:54:70:c5:ce:79:17:
                    cb:5d:f5:4d:d5:13:f7:9e:0b:50:a7:ed:66:55:7c:
                    6a:68:c2:e3:ea:09:42:de:04:72:45:73:9e:d9:31:
                    fe:bc:19:1d:28:b2:bc:e0:01:21:a3:4c:3a:24:4f:
                    ce:60:86:b4:58:81:d1:de:44:e6:0e:6a:66:af:ca:
                    c8:2a:89:7c:00:69:3c:68:05:06:cb:37:86:27:0a:
                    a2:38:a1:bb:d1:6e:8f:5d:19:4a:e0:40:53:1a:db:
                    5d:43:8a:50:af:a6:d2:83:35:b7:47:c8:4f:8d:5a:
                    3a:ae:f7:76:ff:79:b7:ad:a8:b2:dc:5c:ee:80:5b:
                    1e:80:d5:bc:87:b8:1a:99:e7:14:13:4a:37:ff:3c:
                    5e:e5:ad:ca:4a:1b:c2:ee:5c:03:ee:6b:d3:9e:95:
                    4b:e2:18:bc:b0:23:ca:8f:12:22:fd:5f:8d:81:6f:
                    a6:98:f2:f3:8a:13:b0:74:4f:e2:1c:88:f6:39:51:
                    46:c5:1f:6c:b2:41:9b:67:47:5b:62:08:60:1e:c9:
                    aa:01:31:ee:dc:64:c8:d3:5d:11:73:e8:9e:6b:77:
                    98:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:05:6D:04:17:E3:46:F2:E0:36:8F:7E:6D:2F:BA:56:3A:8E:3B:35
            X509v3 Authority Key Identifier:
                keyid:B7:E1:AB:EC:01:0A:BB:9A:F4:63:BF:22:B1:6C:56:1B:5C:2C:44:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A511D681E72F9D814F7BD8FC39D1FED7EA3F94AB704F688C8C38F1A51732BDC/0/B7E1ABEC010ABB9AF463BF22B16C561B5C2C4444.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B7E1ABEC010ABB9AF463BF22B16C561B5C2C4444.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A511D681E72F9D814F7BD8FC39D1FED7EA3F94AB704F688C8C38F1A51732BDC/0/3136302e3233382e3138342e302f32332d3233203d3e20323635373238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         08:ed:db:75:24:7d:29:c5:74:df:59:fd:5d:d2:cf:46:23:79:
         8e:82:25:4d:9e:0b:77:76:3f:be:3c:6f:2d:ed:00:6a:b0:dc:
         b8:ff:d7:74:2d:2f:83:06:1b:61:68:c0:5c:61:69:09:ed:a8:
         2a:5b:3e:07:48:e0:dd:bb:f2:25:b7:1d:7e:c9:e2:dc:00:a2:
         e0:10:f3:d9:d2:85:ba:4e:a7:07:6f:c9:10:09:4b:a9:67:c1:
         58:45:b4:36:22:10:49:a1:71:9f:bb:ff:50:50:1b:32:b9:79:
         1d:02:91:61:69:69:9a:d1:ee:6e:c7:98:06:ea:42:04:6e:a4:
         52:0c:83:d4:e8:0e:a0:a6:14:c1:55:74:3b:5e:75:e9:f3:d5:
         09:72:ad:ff:bf:27:bd:00:3d:70:3d:19:72:56:bb:23:48:f6:
         14:71:f3:4d:2a:cd:72:8b:4e:70:7e:1d:17:b6:a4:77:b0:a0:
         68:f1:17:a7:7f:3d:b2:2b:23:2f:4e:8c:1b:55:54:c8:02:3f:
         ea:4e:72:a8:0f:35:48:07:96:72:53:3c:94:12:67:63:a9:87:
         a8:90:66:d6:5c:93:fc:c1:c4:80:1d:b3:0a:c0:09:93:e1:90:
         ca:22:f4:7a:e3:bf:9c:d5:95:eb:a8:cd:27:20:da:48:d7:60:
         6b:13:11:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 06:21:38 2026 by rpki-client