Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/286A91BA89AF978CCE2BB0FA7581486B216EA959BDF3E8E24B7EDCFF177D5193/0/3137302e3233312e3232382e302f32322d3234203d3e203134313738.roa
File:                     3137302e3233312e3232382e302f32322d3234203d3e203134313738.roa (raw, json)
Hash identifier:          vT1RKuxDrk8uJPPP3N56riSVbrERJe+ivT6puXuaI+o=
Subject key identifier:   5D:BD:1F:25:08:C3:2B:CC:70:A2:72:2F:31:34:8A:BF:56:25:84:4C
Certificate issuer:       /CN=7B516BC52FDBEAD0CF80516E1794A01BEFD23DDD
Certificate serial:       6AFEA8C24DF04856D6B816F3685AA293D1130456
Authority key identifier: 7B:51:6B:C5:2F:DB:EA:D0:CF:80:51:6E:17:94:A0:1B:EF:D2:3D:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B516BC52FDBEAD0CF80516E1794A01BEFD23DDD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/286A91BA89AF978CCE2BB0FA7581486B216EA959BDF3E8E24B7EDCFF177D5193/0/3137302e3233312e3232382e302f32322d3234203d3e203134313738.roa
Signing time:             Thu 10 Sep 2026 07:20:01 +0000
ROA not before:           Thu 10 Sep 2026 07:15:01 +0000
ROA not after:            Thu 09 Sep 2027 07:20:01 +0000
asID:                     14178
IP address blocks:        170.231.228.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/286A91BA89AF978CCE2BB0FA7581486B216EA959BDF3E8E24B7EDCFF177D5193/0/7B516BC52FDBEAD0CF80516E1794A01BEFD23DDD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/286A91BA89AF978CCE2BB0FA7581486B216EA959BDF3E8E24B7EDCFF177D5193/0/7B516BC52FDBEAD0CF80516E1794A01BEFD23DDD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B516BC52FDBEAD0CF80516E1794A01BEFD23DDD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:fe:a8:c2:4d:f0:48:56:d6:b8:16:f3:68:5a:a2:93:d1:13:04:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B516BC52FDBEAD0CF80516E1794A01BEFD23DDD
        Validity
            Not Before: Sep 10 07:15:01 2026 GMT
            Not After : Sep  9 07:20:01 2027 GMT
        Subject: CN=5DBD1F2508C32BCC70A2722F31348ABF5625844C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:b8:15:b3:81:63:3a:9c:d6:3e:80:1c:94:b9:
                    23:b2:e1:99:a8:31:95:35:e7:23:31:01:07:4c:1d:
                    e6:5d:cb:3f:ce:49:c8:00:ef:6a:ad:11:28:a5:8c:
                    82:83:ed:ef:7e:0d:47:cb:12:ee:2a:a4:61:d4:a3:
                    d9:3a:7b:ef:7a:09:51:d9:e3:76:bf:32:13:34:13:
                    5f:71:50:b9:17:9d:32:76:ad:99:e5:50:c0:54:45:
                    9f:89:c6:13:14:de:63:e3:93:46:f8:11:c6:a5:81:
                    a7:bd:c4:be:b5:28:a3:ea:2f:bf:81:d9:b3:09:91:
                    0e:6f:7b:c4:be:ff:23:b8:c9:16:3d:81:e8:0b:a6:
                    8d:7c:81:e1:a2:49:0a:25:db:84:a3:ed:0d:ad:0c:
                    d7:e7:ef:d8:f0:d3:9e:da:4a:92:32:44:5d:b3:b2:
                    7b:66:3d:e7:a5:5a:f4:54:0e:11:bc:63:4e:c3:d6:
                    22:c5:3d:46:61:0c:cc:a3:52:df:9b:b9:38:b8:1e:
                    17:8d:7c:fd:70:69:dd:df:87:ff:3d:11:d4:ea:77:
                    69:99:80:b0:ae:5e:8b:e2:ab:d6:ec:14:28:cf:a9:
                    84:eb:d5:7e:41:a3:a6:62:0b:d7:60:32:64:85:e6:
                    9b:8f:fd:4d:98:0e:cd:66:19:ac:e8:0f:ce:88:96:
                    63:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:BD:1F:25:08:C3:2B:CC:70:A2:72:2F:31:34:8A:BF:56:25:84:4C
            X509v3 Authority Key Identifier:
                keyid:7B:51:6B:C5:2F:DB:EA:D0:CF:80:51:6E:17:94:A0:1B:EF:D2:3D:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/286A91BA89AF978CCE2BB0FA7581486B216EA959BDF3E8E24B7EDCFF177D5193/0/7B516BC52FDBEAD0CF80516E1794A01BEFD23DDD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B516BC52FDBEAD0CF80516E1794A01BEFD23DDD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/286A91BA89AF978CCE2BB0FA7581486B216EA959BDF3E8E24B7EDCFF177D5193/0/3137302e3233312e3232382e302f32322d3234203d3e203134313738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:3c:d8:25:91:af:fb:ae:da:14:51:32:73:1e:58:86:c1:2e:
         be:a2:2d:cf:24:c4:2f:ee:f1:e0:dc:15:3d:10:c3:91:2d:11:
         a3:e0:6f:13:1d:2b:bc:2e:1d:a9:51:49:e6:9b:a2:43:83:94:
         c9:bc:f5:c1:0c:b9:01:4c:b0:d2:e0:1b:01:13:82:3c:9c:c3:
         65:da:4b:15:d0:16:1b:b3:9a:10:1e:ca:f2:ed:f4:2c:48:47:
         0e:8e:84:4a:bf:2e:e3:49:66:21:91:95:98:42:64:ab:94:2f:
         6a:c4:c9:70:09:67:3b:7c:83:59:e2:61:80:9f:51:6a:b2:37:
         b3:67:c3:54:0a:3c:44:16:b9:20:b4:77:48:16:95:46:2f:1e:
         ae:08:2d:ca:11:fe:4f:12:34:01:6a:93:4f:ab:39:c0:e6:56:
         9c:b6:e8:a7:ca:81:02:a2:93:10:7a:ac:60:43:ae:f5:94:a8:
         e8:d2:32:64:a5:eb:f2:c9:9b:6a:27:dd:e6:f9:46:08:2f:c3:
         09:0c:c5:e3:c0:c3:bc:1b:52:07:e7:28:b0:0c:0a:87:d2:47:
         0c:15:fb:96:b5:ba:a2:8d:ee:1b:aa:f4:c6:7e:9f:3d:f7:63:
         92:95:96:6e:b1:0c:05:89:ac:8e:13:79:55:de:37:f0:d7:0d:
         f8:c9:65:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 21:06:31 2026 by rpki-client