Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B4B9AA7740AEAAC1942C6D49BD0C759EECBC0A6F31BE3828958A9A9A763ABB11/0/3135392e31362e342e302f32342d3234203d3e20323732333233.roa
File:                     3135392e31362e342e302f32342d3234203d3e20323732333233.roa (raw, json)
Hash identifier:          GKRropQw5/QDh7YEI18zrotI0x9hgFE293oS9U/czRQ=
Subject key identifier:   07:70:86:59:DE:D7:28:65:DC:48:BE:3E:90:B5:84:7B:EC:7E:A1:F8
Certificate issuer:       /CN=D3ECA9E328BAD678A3AD28C9C53518EF9ED06703
Certificate serial:       74A759B30D490C6109ADF474358FE1CF85BD0614
Authority key identifier: D3:EC:A9:E3:28:BA:D6:78:A3:AD:28:C9:C5:35:18:EF:9E:D0:67:03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B4B9AA7740AEAAC1942C6D49BD0C759EECBC0A6F31BE3828958A9A9A763ABB11/0/3135392e31362e342e302f32342d3234203d3e20323732333233.roa
Signing time:             Fri 22 May 2026 17:43:42 +0000
ROA not before:           Fri 22 May 2026 17:38:42 +0000
ROA not after:            Fri 21 May 2027 17:43:42 +0000
asID:                     272323
IP address blocks:        159.16.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B4B9AA7740AEAAC1942C6D49BD0C759EECBC0A6F31BE3828958A9A9A763ABB11/0/D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B4B9AA7740AEAAC1942C6D49BD0C759EECBC0A6F31BE3828958A9A9A763ABB11/0/D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 02 Jun 2026 13:41:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:a7:59:b3:0d:49:0c:61:09:ad:f4:74:35:8f:e1:cf:85:bd:06:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3ECA9E328BAD678A3AD28C9C53518EF9ED06703
        Validity
            Not Before: May 22 17:38:42 2026 GMT
            Not After : May 21 17:43:42 2027 GMT
        Subject: CN=07708659DED72865DC48BE3E90B5847BEC7EA1F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6c:25:3c:99:46:10:3e:f4:8a:c3:69:a7:79:
                    ce:18:c0:e3:79:04:9c:7a:62:13:25:a1:e9:4e:ac:
                    7a:06:fd:2e:97:97:46:b1:ec:60:74:81:ac:5e:b1:
                    5a:ac:8b:8a:d6:44:5c:7b:8c:5a:1c:8e:4b:10:80:
                    23:cc:61:70:2c:fa:d5:03:9c:95:ad:f8:dd:40:d5:
                    f4:03:6d:b1:94:48:78:54:eb:8b:ba:05:6b:f9:b0:
                    a6:62:de:78:2a:b5:f6:be:8e:1f:66:ed:5a:9e:21:
                    24:ab:73:24:fc:8b:55:b0:5d:bd:ca:d0:9d:7f:78:
                    07:69:97:29:5d:5d:16:35:1a:84:f7:fa:e5:64:07:
                    78:cf:1b:92:aa:49:62:30:a1:65:f7:1f:2c:e1:c0:
                    96:f2:41:85:48:8c:5a:19:89:bc:8b:6d:e9:2e:5d:
                    bc:49:cf:98:bd:f7:79:f0:68:fe:51:78:d0:db:d3:
                    b3:8b:0f:88:1e:31:bb:cd:3e:26:d8:8c:f0:5c:91:
                    0b:78:2b:47:fe:c9:aa:1b:ef:87:59:10:c6:95:92:
                    21:0d:34:8f:0d:63:e2:69:7e:48:04:e6:fe:11:75:
                    93:5f:1a:fa:30:b9:b3:a6:73:21:8a:98:7b:ba:9d:
                    e9:86:48:68:9f:32:92:d3:2c:c7:22:d7:75:67:f2:
                    1d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:70:86:59:DE:D7:28:65:DC:48:BE:3E:90:B5:84:7B:EC:7E:A1:F8
            X509v3 Authority Key Identifier:
                keyid:D3:EC:A9:E3:28:BA:D6:78:A3:AD:28:C9:C5:35:18:EF:9E:D0:67:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B4B9AA7740AEAAC1942C6D49BD0C759EECBC0A6F31BE3828958A9A9A763ABB11/0/D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B4B9AA7740AEAAC1942C6D49BD0C759EECBC0A6F31BE3828958A9A9A763ABB11/0/3135392e31362e342e302f32342d3234203d3e20323732333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.16.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:9c:5e:97:97:83:6b:f6:d1:c3:76:00:66:02:4b:d2:3e:da:
         0e:38:6e:2e:29:0a:b3:5b:d0:a3:2e:78:99:99:f7:1d:a1:7d:
         77:c7:2d:da:0b:f8:61:87:54:48:97:a9:82:14:c6:de:40:0d:
         f9:89:fa:37:03:9b:46:42:f9:5b:b3:ab:cc:60:7a:2b:35:85:
         15:6e:46:8a:b0:34:48:11:d0:5e:02:58:1c:d3:33:78:0a:92:
         4d:ff:9e:c2:02:4b:3a:b9:8d:d8:5a:a7:b0:1a:b0:df:39:09:
         5c:14:37:9e:25:5c:5f:90:c9:37:76:8b:b7:63:fd:11:74:5e:
         4b:b3:c9:90:5e:f3:9a:5b:36:ba:e1:32:10:7e:db:49:a8:02:
         f9:68:2b:7a:0d:fc:95:58:ee:44:74:32:b2:ac:ad:5f:1f:29:
         40:0a:ee:3e:40:ec:9f:7a:60:39:72:5a:80:67:22:20:de:91:
         3f:4a:93:2b:74:a2:09:e9:e5:52:08:36:cb:74:39:ca:8e:ae:
         a9:12:ad:a1:9e:c0:ce:1c:41:f6:f9:49:af:a0:89:91:4b:be:
         17:c0:b2:11:4c:36:56:fb:b7:db:a3:03:95:3c:dc:04:a6:8a:
         23:f1:70:34:8c:90:94:81:aa:aa:b7:a7:f9:da:52:cb:d1:d7:
         02:82:d3:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 03:14:27 2026 by rpki-client