Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1CBC116A832FA16607D675C75F67E3004970455413F3D5B6DFC6CE424C8164C8/0/3137372e3132382e3131322e302f32322d3234203d3e20323639393838.roa
File:                     3137372e3132382e3131322e302f32322d3234203d3e20323639393838.roa (raw, json)
Hash identifier:          FKuwReaDjMmk+IP65OiPrwIGn6h0bTEVtsZB67tT2D0=
Subject key identifier:   AA:BB:76:7B:80:4E:DA:98:EF:33:54:36:BA:B8:6F:4D:25:ED:AD:B5
Certificate issuer:       /CN=33AE83F4491BEA105F85ED2DA938440613250424
Certificate serial:       1D7AFF48A21EB69A8D5BB49601D639EF1AA80A8D
Authority key identifier: 33:AE:83:F4:49:1B:EA:10:5F:85:ED:2D:A9:38:44:06:13:25:04:24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/33AE83F4491BEA105F85ED2DA938440613250424.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1CBC116A832FA16607D675C75F67E3004970455413F3D5B6DFC6CE424C8164C8/0/3137372e3132382e3131322e302f32322d3234203d3e20323639393838.roa
Signing time:             Mon 30 Mar 2026 17:36:38 +0000
ROA not before:           Mon 30 Mar 2026 17:31:38 +0000
ROA not after:            Mon 29 Mar 2027 17:36:38 +0000
asID:                     269988
IP address blocks:        177.128.112.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1CBC116A832FA16607D675C75F67E3004970455413F3D5B6DFC6CE424C8164C8/0/33AE83F4491BEA105F85ED2DA938440613250424.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1CBC116A832FA16607D675C75F67E3004970455413F3D5B6DFC6CE424C8164C8/0/33AE83F4491BEA105F85ED2DA938440613250424.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/33AE83F4491BEA105F85ED2DA938440613250424.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 17:31:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:7a:ff:48:a2:1e:b6:9a:8d:5b:b4:96:01:d6:39:ef:1a:a8:0a:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33AE83F4491BEA105F85ED2DA938440613250424
        Validity
            Not Before: Mar 30 17:31:38 2026 GMT
            Not After : Mar 29 17:36:38 2027 GMT
        Subject: CN=AABB767B804EDA98EF335436BAB86F4D25EDADB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a1:a9:9c:83:93:9d:36:54:57:0a:6d:90:39:
                    0b:c4:04:ee:3c:6f:45:1f:92:2e:fb:f2:a2:6e:2d:
                    70:9e:ec:4e:c5:51:13:1b:86:64:d4:b3:25:b7:b6:
                    a5:b8:60:7a:ba:c6:51:54:53:a3:14:c8:bd:89:31:
                    2d:71:ba:ae:09:50:1f:60:97:39:7d:4d:a8:e0:08:
                    5e:a3:26:b8:6c:06:06:14:cb:9e:25:88:06:8d:f1:
                    9d:21:e2:3e:3f:e3:8d:ca:c1:6b:70:06:f4:e4:88:
                    bd:43:dd:ae:e0:74:12:d9:2a:07:85:57:cc:98:40:
                    20:d7:d8:4a:75:2e:5f:7b:6a:4c:03:94:a8:96:f0:
                    56:87:74:6d:81:20:48:53:d8:61:c0:55:88:b3:96:
                    a4:9d:ce:2f:f5:73:61:5a:6d:30:44:0e:af:37:7a:
                    b9:ad:91:d2:85:e9:c2:56:c7:c8:f2:d6:a5:d6:50:
                    00:46:2d:6b:1a:37:6d:d1:62:91:ec:a1:d7:04:b3:
                    be:5c:84:66:23:44:b6:f6:cc:e6:69:6f:49:55:ce:
                    aa:ca:30:37:ac:f4:aa:6f:b5:75:09:77:88:21:c0:
                    50:19:fb:f6:ea:dd:f8:50:a1:f6:4a:4d:bb:9d:36:
                    69:6c:b5:c2:de:3f:2a:a0:a8:c5:54:1f:9c:af:68:
                    03:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:BB:76:7B:80:4E:DA:98:EF:33:54:36:BA:B8:6F:4D:25:ED:AD:B5
            X509v3 Authority Key Identifier:
                keyid:33:AE:83:F4:49:1B:EA:10:5F:85:ED:2D:A9:38:44:06:13:25:04:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1CBC116A832FA16607D675C75F67E3004970455413F3D5B6DFC6CE424C8164C8/0/33AE83F4491BEA105F85ED2DA938440613250424.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/33AE83F4491BEA105F85ED2DA938440613250424.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1CBC116A832FA16607D675C75F67E3004970455413F3D5B6DFC6CE424C8164C8/0/3137372e3132382e3131322e302f32322d3234203d3e20323639393838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:77:d7:3a:bf:4b:28:9c:77:f2:ac:47:82:f1:05:78:bc:6c:
         f2:22:04:b9:be:04:bc:19:ca:e0:9f:52:2c:0d:0d:0d:4b:fe:
         37:3f:bb:f1:bb:c5:0b:96:12:fa:99:b2:79:bf:07:92:45:fe:
         45:ca:98:58:d7:16:4d:ef:2c:ce:17:fa:4b:b9:86:38:f6:08:
         8a:af:9e:4c:96:54:22:96:63:f5:0f:26:bc:48:6b:7e:7e:01:
         ca:28:f4:3f:ec:4b:bd:f0:9a:e4:45:d6:ed:12:b0:91:f9:cc:
         e6:85:7c:ec:fc:89:4b:e2:86:63:b2:9d:ab:af:ea:e5:5f:9c:
         bc:10:19:d2:f3:34:89:fc:8f:f5:8c:87:f8:85:ae:2a:8b:a3:
         e4:8a:87:a1:04:5d:da:b5:4a:3e:b8:64:a6:cc:ab:1d:f3:d1:
         95:e2:41:68:ad:1b:20:7b:81:d2:10:41:e5:ad:dd:f0:54:74:
         ff:cc:c0:c4:57:80:23:4d:fe:7d:9e:f6:89:0e:66:e7:27:11:
         9e:bc:b0:6c:3a:a9:d9:f7:25:11:5f:50:45:c2:bd:ce:54:f4:
         a0:7c:2d:ef:71:88:b9:b0:9b:7e:0d:75:0b:e7:f3:f5:6c:ba:
         72:69:f1:a1:55:b2:a9:c7:5e:d2:3d:0d:3b:d7:c9:83:87:4f:
         9c:56:09:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 15 07:11:01 2026 by rpki-client