Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F3B720031C90A5B979E3D45AF9ECAAAED732F1B8B1CE90CE68917F173D88D3D1/0/3137302e3234342e3132342e302f32322d3234203d3e203232303131.roa
File:                     3137302e3234342e3132342e302f32322d3234203d3e203232303131.roa (raw, json)
Hash identifier:          QN/OHOib9IDF2szkIq1KOv103Xd4bESviyKT0xrdbkM=
Subject key identifier:   F5:4C:D1:82:7D:A7:BB:B5:AE:69:72:D8:DE:E8:04:0B:35:7B:18:12
Certificate issuer:       /CN=EED9740A57556413451C3DB2C7E611BB32EB036C
Certificate serial:       21DD7EC461E7B5713A1F45FF6941220E41544664
Authority key identifier: EE:D9:74:0A:57:55:64:13:45:1C:3D:B2:C7:E6:11:BB:32:EB:03:6C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EED9740A57556413451C3DB2C7E611BB32EB036C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F3B720031C90A5B979E3D45AF9ECAAAED732F1B8B1CE90CE68917F173D88D3D1/0/3137302e3234342e3132342e302f32322d3234203d3e203232303131.roa
Signing time:             Fri 10 Jul 2026 18:30:02 +0000
ROA not before:           Fri 10 Jul 2026 18:25:02 +0000
ROA not after:            Fri 09 Jul 2027 18:30:02 +0000
asID:                     22011
IP address blocks:        170.244.124.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F3B720031C90A5B979E3D45AF9ECAAAED732F1B8B1CE90CE68917F173D88D3D1/0/EED9740A57556413451C3DB2C7E611BB32EB036C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F3B720031C90A5B979E3D45AF9ECAAAED732F1B8B1CE90CE68917F173D88D3D1/0/EED9740A57556413451C3DB2C7E611BB32EB036C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EED9740A57556413451C3DB2C7E611BB32EB036C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Jul 2026 23:40:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:dd:7e:c4:61:e7:b5:71:3a:1f:45:ff:69:41:22:0e:41:54:46:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EED9740A57556413451C3DB2C7E611BB32EB036C
        Validity
            Not Before: Jul 10 18:25:02 2026 GMT
            Not After : Jul  9 18:30:02 2027 GMT
        Subject: CN=F54CD1827DA7BBB5AE6972D8DEE8040B357B1812
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e8:64:8b:1c:0f:c2:f7:ef:1d:be:ca:34:cb:
                    de:a6:7b:0c:72:f0:23:75:78:fa:95:52:ef:2b:c6:
                    0c:ec:b0:4a:e3:d0:f0:d6:4f:1a:ef:73:52:bd:6d:
                    15:78:16:a0:48:64:a9:4e:98:62:3e:d5:f5:22:e9:
                    36:83:ea:23:d6:0c:19:49:d4:2e:eb:d9:41:53:e3:
                    12:16:bd:f4:ca:2a:30:d5:46:82:fd:71:06:67:d1:
                    52:da:27:e2:96:e8:e3:97:68:06:df:05:ce:15:58:
                    7a:1c:b0:c0:fb:d2:2f:d0:b2:7b:ce:e1:86:86:63:
                    ff:58:9c:7b:52:d0:29:f6:57:68:5c:1d:9b:f0:cd:
                    d2:ee:5c:b3:eb:c0:52:30:c2:7d:ea:e3:e8:3b:25:
                    50:19:65:33:db:3e:a8:2a:eb:82:a8:d7:7d:f2:83:
                    1d:67:68:62:13:33:e5:9b:a5:11:a9:36:bb:92:bb:
                    d3:9c:1f:96:e6:ec:75:86:7f:84:4a:f8:f7:1a:e2:
                    96:da:a1:4f:5e:f3:33:90:2f:2c:ff:c4:b6:1a:14:
                    9f:a0:36:2a:26:9a:80:b0:42:01:0b:80:69:58:89:
                    04:46:8a:c2:8a:a4:36:f5:18:bc:1f:6d:50:02:01:
                    6a:24:6e:2d:26:c1:1a:82:dc:d6:da:3b:90:78:91:
                    af:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:4C:D1:82:7D:A7:BB:B5:AE:69:72:D8:DE:E8:04:0B:35:7B:18:12
            X509v3 Authority Key Identifier:
                keyid:EE:D9:74:0A:57:55:64:13:45:1C:3D:B2:C7:E6:11:BB:32:EB:03:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F3B720031C90A5B979E3D45AF9ECAAAED732F1B8B1CE90CE68917F173D88D3D1/0/EED9740A57556413451C3DB2C7E611BB32EB036C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EED9740A57556413451C3DB2C7E611BB32EB036C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F3B720031C90A5B979E3D45AF9ECAAAED732F1B8B1CE90CE68917F173D88D3D1/0/3137302e3234342e3132342e302f32322d3234203d3e203232303131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         12:2a:a3:a8:17:3c:0a:ff:a3:5a:2f:e6:64:60:6c:4f:ef:ef:
         62:22:8d:38:6a:11:c1:e8:dc:84:5b:0d:51:e1:c2:df:a3:67:
         df:0f:ef:d0:ca:02:62:93:43:c6:43:f3:c3:1b:80:0f:63:97:
         b8:f4:ba:0b:76:5f:5c:16:18:24:a7:74:da:5d:58:b9:da:bd:
         df:ca:f4:10:5f:a7:ce:7d:6f:0d:9e:b4:68:8c:e8:34:9f:83:
         86:bd:c7:f5:1f:4c:8e:ae:85:7e:97:8b:92:7d:32:fc:34:9a:
         bd:20:11:e4:18:e4:b5:08:84:68:9e:d9:03:c2:5d:e8:74:6a:
         36:bc:da:6e:9a:d0:f4:ce:18:da:55:b3:2e:9f:bb:9f:b7:64:
         62:58:07:f7:ca:a7:12:8b:c2:29:39:25:1a:02:16:42:ff:f6:
         91:b5:7d:61:76:10:f9:5f:1c:c8:d2:bc:7e:e0:5e:09:ac:e9:
         21:c1:56:a5:54:67:3e:72:5f:c2:10:bc:7b:c3:21:31:48:1b:
         d0:08:ff:db:a4:2f:fc:4e:ed:fe:8a:7b:96:f2:f2:48:27:6f:
         cf:15:63:55:17:ca:15:ec:41:13:d3:74:8c:5b:ce:96:0a:6f:
         b7:41:7a:74:80:bb:02:bb:fa:15:a3:f0:5e:4a:fd:94:46:96:
         4c:d8:ef:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 15:54:10 2026 by rpki-client