Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3134382e3232372e3231362e302f32342d3234203d3e203236363137.roa
File:                     3134382e3232372e3231362e302f32342d3234203d3e203236363137.roa (raw, json)
Hash identifier:          ONtIjSqmWEN1Jy6tAeCtrcsF4dm4coziYUFDVuS8BOM=
Subject key identifier:   33:CD:02:AC:43:0E:2D:C6:6D:97:CC:2C:B9:35:FB:B8:05:88:E3:62
Certificate issuer:       /CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
Certificate serial:       423DCBB047369E4DF66367EEDCCA4DD993F8B040
Authority key identifier: 4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3134382e3232372e3231362e302f32342d3234203d3e203236363137.roa
Signing time:             Thu 05 Mar 2026 21:25:04 +0000
ROA not before:           Thu 05 Mar 2026 21:20:04 +0000
ROA not after:            Thu 04 Mar 2027 21:25:04 +0000
asID:                     26617
IP address blocks:        148.227.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 13 Mar 2026 23:46:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:3d:cb:b0:47:36:9e:4d:f6:63:67:ee:dc:ca:4d:d9:93:f8:b0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
        Validity
            Not Before: Mar  5 21:20:04 2026 GMT
            Not After : Mar  4 21:25:04 2027 GMT
        Subject: CN=33CD02AC430E2DC66D97CC2CB935FBB80588E362
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b0:fd:30:86:ea:4f:7e:4c:51:90:dc:24:1c:
                    7b:8e:91:25:20:cd:66:41:22:4b:65:f7:80:57:e8:
                    a9:ff:14:50:c4:9b:15:d6:ee:ba:02:80:a0:40:01:
                    8d:1f:b9:b6:7f:76:42:da:40:7f:21:7d:eb:d7:71:
                    05:71:ea:06:b7:71:0f:10:68:41:a0:56:bc:9a:e3:
                    78:7c:4b:68:b3:38:4e:51:07:99:69:d8:05:c3:f3:
                    54:b8:03:a4:20:83:fc:bf:12:fe:1f:03:37:47:4d:
                    30:ce:55:c9:b0:a8:6d:a5:52:6d:68:94:0d:ae:20:
                    2f:be:93:8c:b6:0b:60:8e:bf:66:f4:db:d4:6e:d4:
                    68:66:7f:f4:b2:3a:bf:13:21:9d:f5:27:44:79:a9:
                    c6:19:14:1c:98:96:bd:ec:00:06:3f:dd:7f:7a:5f:
                    42:3f:bb:b7:19:f3:87:f6:10:ad:ba:ce:18:db:8f:
                    65:93:64:6e:cb:dd:73:c2:76:a3:cb:02:2c:97:45:
                    c5:f2:e1:65:50:7a:7c:33:16:71:cf:cd:16:fa:f8:
                    0c:46:b8:1e:4d:19:0d:2a:ff:aa:d1:7a:de:50:ae:
                    fe:08:78:00:1f:d4:24:52:66:b0:c2:aa:4b:6b:a1:
                    8e:b0:74:57:30:ea:f5:ce:80:8d:b2:df:b7:3a:75:
                    bd:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:CD:02:AC:43:0E:2D:C6:6D:97:CC:2C:B9:35:FB:B8:05:88:E3:62
            X509v3 Authority Key Identifier:
                keyid:4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3134382e3232372e3231362e302f32342d3234203d3e203236363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.227.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:ec:2d:12:ae:0c:32:e4:e7:4b:07:7e:53:df:77:e0:cc:74:
         dd:da:f1:58:e1:c3:8b:e3:9f:4c:a4:0d:28:65:49:54:b7:ed:
         43:dd:f4:66:13:8d:d1:28:f3:f5:16:47:d0:72:1e:a6:26:51:
         41:72:29:ab:fc:81:28:ea:96:85:01:c3:e3:d4:4c:07:40:62:
         b4:6f:5c:28:dd:ef:8c:dd:b8:58:6a:aa:20:41:63:cf:0a:e8:
         4d:50:d2:c5:d2:f1:ea:f3:1c:28:8b:c4:67:cc:27:24:52:de:
         fe:85:f2:24:b9:6f:89:d9:69:fd:91:ca:e5:51:82:25:cb:62:
         f9:db:1e:4d:c6:04:49:0b:a0:2c:f7:df:bc:33:7a:22:eb:43:
         15:ac:17:2d:82:69:ec:f4:a0:a0:1b:ff:62:a3:98:74:45:12:
         60:59:5b:35:2c:c4:c6:62:19:9a:63:ab:95:d8:7d:13:c9:bb:
         15:b9:3e:79:0c:8b:32:05:d6:db:76:10:66:96:a0:7b:d5:35:
         41:fe:1c:61:b6:65:9f:d7:27:3e:42:dc:ab:6c:e0:44:53:7c:
         e0:03:e4:1f:b0:ba:24:bd:2e:ae:16:2b:ad:ff:75:8e:a7:87:
         f0:0f:08:f9:1b:f7:fd:6c:e4:8a:14:3f:d2:74:1f:00:7c:5f:
         92:ce:48:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 10 13:38:49 2026 by rpki-client