Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1B9232AFF2E971B25C95F250E1505267BA59A201D925002F0592E632B93BA0D5/0/3137302e3233382e32342e302f32342d3238203d3e20323633323133.roa
File:                     3137302e3233382e32342e302f32342d3238203d3e20323633323133.roa (raw, json)
Hash identifier:          Y2roXrlPEOGKRLCbGopDFwSySVKIYfNOFrJnQQzLnJo=
Subject key identifier:   12:E9:9A:43:84:20:30:29:A5:1D:78:F9:83:66:65:2C:ED:1A:DD:5C
Certificate issuer:       /CN=458171C5D6460C9703DA35750CA300C351658A39
Certificate serial:       796A4CECB2D1A2179D7BFF684240E61520904D5B
Authority key identifier: 45:81:71:C5:D6:46:0C:97:03:DA:35:75:0C:A3:00:C3:51:65:8A:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/458171C5D6460C9703DA35750CA300C351658A39.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1B9232AFF2E971B25C95F250E1505267BA59A201D925002F0592E632B93BA0D5/0/3137302e3233382e32342e302f32342d3238203d3e20323633323133.roa
Signing time:             Fri 15 May 2026 21:10:00 +0000
ROA not before:           Fri 15 May 2026 21:05:00 +0000
ROA not after:            Fri 14 May 2027 21:10:00 +0000
asID:                     263213
IP address blocks:        170.238.24.0/24 maxlen: 28
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1B9232AFF2E971B25C95F250E1505267BA59A201D925002F0592E632B93BA0D5/0/458171C5D6460C9703DA35750CA300C351658A39.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1B9232AFF2E971B25C95F250E1505267BA59A201D925002F0592E632B93BA0D5/0/458171C5D6460C9703DA35750CA300C351658A39.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/458171C5D6460C9703DA35750CA300C351658A39.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:6a:4c:ec:b2:d1:a2:17:9d:7b:ff:68:42:40:e6:15:20:90:4d:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458171C5D6460C9703DA35750CA300C351658A39
        Validity
            Not Before: May 15 21:05:00 2026 GMT
            Not After : May 14 21:10:00 2027 GMT
        Subject: CN=12E99A4384203029A51D78F98366652CED1ADD5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5e:76:70:95:6e:da:70:71:f5:b8:8c:ed:39:
                    8a:d5:fc:bd:3d:59:a8:ed:61:e3:c5:23:3f:d2:35:
                    3b:33:d7:99:89:00:49:c9:aa:f4:ab:0d:b0:35:60:
                    bb:29:eb:24:10:a4:11:e4:0b:03:9d:02:69:b6:af:
                    17:56:57:21:8a:16:cb:91:8a:db:18:3b:41:01:66:
                    d2:7a:42:7c:2a:df:54:d4:20:4f:64:23:c1:1b:45:
                    47:2b:b9:03:a6:28:eb:c9:91:aa:bf:bd:6e:df:bb:
                    08:f7:72:1a:0d:de:90:ed:79:d2:e5:84:fe:41:8d:
                    eb:6c:da:5a:7c:18:5a:da:d0:fe:f9:c8:81:d9:5e:
                    2f:1b:1b:00:a9:d1:e8:9c:da:32:48:06:9e:73:1f:
                    41:17:cf:3a:2a:2a:b8:24:1f:0e:68:55:48:6b:32:
                    6d:62:bf:5f:a5:b9:d1:77:af:f9:44:95:f2:a7:7c:
                    d8:2b:20:31:ef:c2:89:a9:19:c6:af:a1:c5:21:31:
                    bc:6c:10:14:59:ea:b8:34:51:81:e7:8b:3c:c4:36:
                    fc:93:ce:d6:61:93:41:70:f7:d6:a8:72:84:f0:56:
                    70:c5:d1:a3:43:fc:56:9c:6e:35:65:86:f1:92:e8:
                    13:e2:ea:28:10:6e:37:f7:ad:33:f7:10:55:df:a7:
                    f1:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:E9:9A:43:84:20:30:29:A5:1D:78:F9:83:66:65:2C:ED:1A:DD:5C
            X509v3 Authority Key Identifier:
                keyid:45:81:71:C5:D6:46:0C:97:03:DA:35:75:0C:A3:00:C3:51:65:8A:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1B9232AFF2E971B25C95F250E1505267BA59A201D925002F0592E632B93BA0D5/0/458171C5D6460C9703DA35750CA300C351658A39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/458171C5D6460C9703DA35750CA300C351658A39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1B9232AFF2E971B25C95F250E1505267BA59A201D925002F0592E632B93BA0D5/0/3137302e3233382e32342e302f32342d3238203d3e20323633323133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:28:06:8e:c5:e7:21:ec:4f:94:71:e6:2f:2a:77:cb:49:0b:
         80:c1:ee:4e:fa:50:5b:55:52:b8:b1:3a:24:3d:c1:8b:93:15:
         63:b8:1f:e4:ec:a5:13:14:f3:6a:84:dd:e4:f6:66:37:10:fc:
         55:13:70:0e:ad:36:56:a9:a6:fa:02:1a:0c:3a:fc:ab:e5:9c:
         7f:1e:ed:2f:47:98:80:2b:1c:4b:7d:21:8d:18:14:41:8a:3c:
         82:ce:1f:19:6b:6e:e6:b5:bb:86:77:34:82:53:52:a4:26:1e:
         f6:7f:f6:e4:cd:31:07:b0:49:5b:1b:b6:c7:8c:f7:a1:27:86:
         59:4a:ea:08:f9:4a:a9:7f:d7:ca:4a:c1:0e:d3:07:61:28:63:
         1b:c4:f0:47:7c:60:8f:11:ee:61:d0:e2:54:4e:f2:f1:5a:23:
         3b:22:f3:2f:e5:0a:a6:fc:78:92:af:43:71:24:5e:b4:7e:d2:
         c9:ab:40:b7:76:44:d6:a4:5b:23:23:99:3c:61:c8:db:0d:d8:
         b4:c1:d5:c0:1d:c6:6f:aa:b3:78:4a:cc:80:b7:01:ce:f1:f8:
         7f:23:56:ba:16:80:de:6f:29:5c:f2:e5:f9:ce:54:9d:e5:90:
         47:7b:c2:9d:e3:5f:d9:8c:a6:d6:58:cf:c7:da:df:36:a4:81:
         7c:e6:8c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 12:03:58 2026 by rpki-client