Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/729B01BF1354927E5D5218FEBC08835558C0092CE9C0372D6D616D88A94672CD/0/3137302e3234372e3135342e302f32342d3234203d3e20323635363938.roa
File:                     3137302e3234372e3135342e302f32342d3234203d3e20323635363938.roa (raw, json)
Hash identifier:          uVGeMS3ZnPIi3r1jpJ1Oa2lqgCPySYGAQUITnYFwNT8=
Subject key identifier:   1C:53:9C:AF:02:A6:CB:C0:E5:FA:B5:71:7D:93:85:29:B7:5E:E0:70
Certificate issuer:       /CN=65C457F2E92F80EBD54D3FC02804D19BC1A7847B
Certificate serial:       67F3FAB80E21737ED9CC05747E61EB8BD891AE5C
Authority key identifier: 65:C4:57:F2:E9:2F:80:EB:D5:4D:3F:C0:28:04:D1:9B:C1:A7:84:7B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65C457F2E92F80EBD54D3FC02804D19BC1A7847B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/729B01BF1354927E5D5218FEBC08835558C0092CE9C0372D6D616D88A94672CD/0/3137302e3234372e3135342e302f32342d3234203d3e20323635363938.roa
Signing time:             Sat 10 Oct 2026 18:10:00 +0000
ROA not before:           Sat 10 Oct 2026 18:05:00 +0000
ROA not after:            Sat 09 Oct 2027 18:10:00 +0000
asID:                     265698
IP address blocks:        170.247.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/729B01BF1354927E5D5218FEBC08835558C0092CE9C0372D6D616D88A94672CD/0/65C457F2E92F80EBD54D3FC02804D19BC1A7847B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/729B01BF1354927E5D5218FEBC08835558C0092CE9C0372D6D616D88A94672CD/0/65C457F2E92F80EBD54D3FC02804D19BC1A7847B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65C457F2E92F80EBD54D3FC02804D19BC1A7847B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 18:47:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:f3:fa:b8:0e:21:73:7e:d9:cc:05:74:7e:61:eb:8b:d8:91:ae:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65C457F2E92F80EBD54D3FC02804D19BC1A7847B
        Validity
            Not Before: Oct 10 18:05:00 2026 GMT
            Not After : Oct  9 18:10:00 2027 GMT
        Subject: CN=1C539CAF02A6CBC0E5FAB5717D938529B75EE070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0a:0a:a0:c9:5a:61:ec:e9:14:5c:36:aa:61:
                    e1:d3:2f:f8:86:c7:60:2f:07:e5:2e:40:df:14:4e:
                    bb:3e:7e:22:e6:fe:c4:e9:9a:65:5f:a8:cc:07:20:
                    ef:29:33:a9:0f:2d:41:4e:82:6c:a0:a3:16:6f:bc:
                    2c:d1:fd:30:46:81:53:f3:c8:ce:cf:ae:82:2a:11:
                    30:7a:2e:36:8d:44:6b:5b:63:b2:3b:c4:6c:3f:ed:
                    20:f9:2e:ae:1f:99:0b:b8:13:88:d9:87:20:ad:1c:
                    5e:05:8e:d5:98:a1:d7:71:b8:24:26:8f:ce:16:6b:
                    7d:2d:8e:9a:7b:5b:1a:70:50:19:42:1e:7f:4c:88:
                    21:99:1f:39:48:00:8b:e9:81:3d:99:d7:94:6e:d0:
                    6c:44:c2:1f:c9:d4:53:5e:ce:53:dc:c3:b1:22:6e:
                    09:60:9f:20:a6:7a:63:58:9d:e5:6b:bd:57:28:3f:
                    d3:1b:59:ff:57:a9:fe:93:9c:29:8e:69:00:ab:0a:
                    b3:b8:5a:f3:49:7c:67:e0:1b:24:4e:e4:67:fd:18:
                    ea:51:28:3e:d9:d9:c2:e5:35:ed:78:88:e9:dc:21:
                    e7:9f:bc:e6:20:7e:ba:d3:43:72:5b:d0:8f:4e:15:
                    06:5b:b6:d5:ef:3c:1b:dd:d4:e9:da:7f:e4:9e:5d:
                    40:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:53:9C:AF:02:A6:CB:C0:E5:FA:B5:71:7D:93:85:29:B7:5E:E0:70
            X509v3 Authority Key Identifier:
                keyid:65:C4:57:F2:E9:2F:80:EB:D5:4D:3F:C0:28:04:D1:9B:C1:A7:84:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/729B01BF1354927E5D5218FEBC08835558C0092CE9C0372D6D616D88A94672CD/0/65C457F2E92F80EBD54D3FC02804D19BC1A7847B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65C457F2E92F80EBD54D3FC02804D19BC1A7847B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/729B01BF1354927E5D5218FEBC08835558C0092CE9C0372D6D616D88A94672CD/0/3137302e3234372e3135342e302f32342d3234203d3e20323635363938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:69:8a:5e:6a:5f:90:56:40:60:6c:dd:af:35:f6:14:72:96:
         09:37:31:bf:db:39:c6:5d:39:35:80:e5:7b:1d:06:6e:4f:e1:
         05:93:e5:3b:25:04:20:70:10:41:b7:17:dc:fe:19:67:0e:32:
         d9:c3:f1:86:b7:f5:33:14:af:3d:b7:47:82:3f:0a:f1:b6:bf:
         43:22:49:ec:7f:e4:47:bc:d3:4d:6e:61:b4:e2:b6:07:33:f5:
         9c:d2:fb:f0:0a:e6:b9:ba:25:67:99:bf:de:fd:9e:6d:eb:32:
         c3:9d:29:94:b2:2c:66:ad:4d:da:37:c5:4c:eb:75:43:17:02:
         33:99:0e:9d:35:1b:af:1e:bf:7b:ad:70:34:04:7c:1a:ca:8c:
         8a:dc:e4:a8:0d:75:40:f6:9d:25:7f:af:6f:4c:c7:19:c4:45:
         fb:9f:ad:4a:6c:53:1b:da:65:5a:b5:f3:d9:90:fc:a6:ad:6c:
         5c:7e:83:e5:7e:37:10:ed:97:68:d5:99:b4:a5:cf:4c:8a:d0:
         78:c4:83:06:0a:22:c6:cb:c5:06:25:ae:34:81:33:c8:3a:00:
         c4:a5:2f:9d:83:1c:30:1c:8d:bc:15:8a:08:16:a3:dc:8c:e5:
         ff:25:bb:f8:47:83:77:66:45:17:33:47:82:0c:a2:e6:cb:73:
         93:bc:cc:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 03:51:36 2026 by rpki-client