Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E08D933682F688ED8C36D0FC1F34B68315053D3F371F684B9A387A5FA6709F17/0/3137302e3235342e33302e302f32342d3234203d3e20323634373436.roa
File:                     3137302e3235342e33302e302f32342d3234203d3e20323634373436.roa (raw, json)
Hash identifier:          Yf/CCD08BiS7XouaAeCDQemuoyiQOnxxAARMjrGXMkk=
Subject key identifier:   F9:3B:63:DA:05:E1:C1:E2:30:78:50:1E:C7:17:64:99:1F:D6:7D:F6
Certificate issuer:       /CN=DF4F03C5770C7BA39912813367B5E868005CCD99
Certificate serial:       3BCC5137AD332BCF91E6FBC6D54642C98A8AE4F8
Authority key identifier: DF:4F:03:C5:77:0C:7B:A3:99:12:81:33:67:B5:E8:68:00:5C:CD:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DF4F03C5770C7BA39912813367B5E868005CCD99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E08D933682F688ED8C36D0FC1F34B68315053D3F371F684B9A387A5FA6709F17/0/3137302e3235342e33302e302f32342d3234203d3e20323634373436.roa
Signing time:             Tue 06 Jan 2026 20:55:43 +0000
ROA not before:           Tue 06 Jan 2026 20:50:43 +0000
ROA not after:            Tue 05 Jan 2027 20:55:43 +0000
asID:                     264746
IP address blocks:        170.254.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E08D933682F688ED8C36D0FC1F34B68315053D3F371F684B9A387A5FA6709F17/0/DF4F03C5770C7BA39912813367B5E868005CCD99.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E08D933682F688ED8C36D0FC1F34B68315053D3F371F684B9A387A5FA6709F17/0/DF4F03C5770C7BA39912813367B5E868005CCD99.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DF4F03C5770C7BA39912813367B5E868005CCD99.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 16:24:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:cc:51:37:ad:33:2b:cf:91:e6:fb:c6:d5:46:42:c9:8a:8a:e4:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF4F03C5770C7BA39912813367B5E868005CCD99
        Validity
            Not Before: Jan  6 20:50:43 2026 GMT
            Not After : Jan  5 20:55:43 2027 GMT
        Subject: CN=F93B63DA05E1C1E23078501EC71764991FD67DF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:51:a2:2d:1d:10:e5:32:62:8f:e3:6c:81:27:
                    be:a2:d6:04:fb:93:f5:26:2c:bb:32:69:7f:54:3e:
                    e1:ac:17:84:73:d0:b5:2b:ad:15:cd:00:dd:29:44:
                    b4:5c:c8:6e:0f:11:50:c4:d4:02:74:5a:84:50:76:
                    25:e3:59:55:6d:f4:db:5e:f8:3c:bf:04:db:3d:a1:
                    cc:3e:91:04:d4:fe:bf:5f:15:44:64:9f:1e:aa:d2:
                    b7:d8:75:b8:73:12:5b:9c:c8:ec:ae:61:35:54:a1:
                    02:35:5e:3b:da:9d:02:11:a0:bd:e7:87:c1:ce:77:
                    c3:cf:3e:77:b1:40:68:fc:ca:35:33:51:54:f0:61:
                    f9:a0:24:0c:36:fd:6c:ef:93:16:0d:d2:af:75:72:
                    79:16:e5:b6:0c:dd:cd:a8:b0:47:1c:4d:e3:0c:59:
                    83:23:49:81:2f:59:45:c3:38:4c:5d:6e:47:aa:a9:
                    7a:d7:1e:7b:90:d7:5c:a7:b0:9f:50:1d:cb:14:24:
                    c2:dc:2b:82:ea:06:a3:11:f0:36:eb:66:a7:88:28:
                    a8:7c:77:fa:27:48:85:a3:bf:50:75:79:90:e9:d4:
                    ca:b7:3b:65:7e:08:15:ce:5f:28:55:7c:1e:38:de:
                    39:ea:9e:44:4a:25:3b:26:16:d8:ad:9a:ee:36:7c:
                    94:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:3B:63:DA:05:E1:C1:E2:30:78:50:1E:C7:17:64:99:1F:D6:7D:F6
            X509v3 Authority Key Identifier:
                keyid:DF:4F:03:C5:77:0C:7B:A3:99:12:81:33:67:B5:E8:68:00:5C:CD:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E08D933682F688ED8C36D0FC1F34B68315053D3F371F684B9A387A5FA6709F17/0/DF4F03C5770C7BA39912813367B5E868005CCD99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DF4F03C5770C7BA39912813367B5E868005CCD99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E08D933682F688ED8C36D0FC1F34B68315053D3F371F684B9A387A5FA6709F17/0/3137302e3235342e33302e302f32342d3234203d3e20323634373436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:ce:51:16:89:4b:65:27:24:dd:3d:f5:10:85:a3:8d:0b:0f:
         8a:4e:5b:e5:65:1f:05:f0:4e:c5:db:b0:fc:d1:fc:5b:84:a0:
         73:c9:30:e2:07:45:7a:45:bc:a5:fe:80:ec:22:04:d7:2b:9b:
         90:df:39:d8:4d:57:b2:24:37:c8:66:bc:60:ff:4a:ea:a1:3d:
         f4:0d:7a:16:7a:7a:4d:66:e2:3b:5e:27:98:17:c2:a9:19:70:
         9b:9f:97:de:ea:8f:16:f1:04:23:e3:74:d4:ca:a7:65:52:a5:
         93:13:1c:7d:e6:7f:ef:b4:32:96:1c:96:f1:d4:78:e4:cc:2d:
         89:be:4c:a0:f1:84:fe:d2:62:e9:94:cd:5f:59:f2:10:9b:75:
         31:16:7a:3f:ad:f6:fd:26:b8:2b:d4:27:69:47:19:de:bd:f6:
         9f:c5:8d:4f:8a:04:e7:e4:65:3d:89:29:c0:ab:98:52:2f:ef:
         6b:b9:6a:95:ce:c9:d6:24:03:75:c9:13:f0:56:cf:eb:9b:38:
         43:82:87:6f:23:53:6d:0d:29:c8:fa:6c:d5:c4:65:f5:f3:04:
         6a:6d:c2:ff:85:35:36:ce:a2:d3:d5:32:b6:8a:11:dc:72:18:
         f9:55:a5:a4:94:6a:2f:84:00:25:3c:1f:74:c8:eb:9f:af:72:
         3f:01:49:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:05:52 2026 by rpki-client