Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/7E22BF8AC36F9B799BC2806417A17393F770E8043AF00DD68BD22E468A26E1AD/0/3137302e3233382e3137302e302f32332d3234203d3e20323634383031.roa
File:                     3137302e3233382e3137302e302f32332d3234203d3e20323634383031.roa (raw, json)
Hash identifier:          MPya4NLSeo/8yC91GVY7HTIMv56pKuNAFbJsK22hKr4=
Subject key identifier:   28:4D:66:B5:2B:85:57:D0:31:D9:01:27:D6:13:34:86:E4:86:4F:0E
Certificate issuer:       /CN=BD95557260FD7A36E6338BA61ED0BAA8DB4183F8
Certificate serial:       7196262936981B8E38777AC7E7DC6F4EEFA9C72E
Authority key identifier: BD:95:55:72:60:FD:7A:36:E6:33:8B:A6:1E:D0:BA:A8:DB:41:83:F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD95557260FD7A36E6338BA61ED0BAA8DB4183F8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E22BF8AC36F9B799BC2806417A17393F770E8043AF00DD68BD22E468A26E1AD/0/3137302e3233382e3137302e302f32332d3234203d3e20323634383031.roa
Signing time:             Tue 27 Oct 2026 21:43:18 +0000
ROA not before:           Tue 27 Oct 2026 21:38:18 +0000
ROA not after:            Tue 26 Oct 2027 21:43:18 +0000
asID:                     264801
IP address blocks:        170.238.170.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E22BF8AC36F9B799BC2806417A17393F770E8043AF00DD68BD22E468A26E1AD/0/BD95557260FD7A36E6338BA61ED0BAA8DB4183F8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E22BF8AC36F9B799BC2806417A17393F770E8043AF00DD68BD22E468A26E1AD/0/BD95557260FD7A36E6338BA61ED0BAA8DB4183F8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD95557260FD7A36E6338BA61ED0BAA8DB4183F8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 18:07:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:96:26:29:36:98:1b:8e:38:77:7a:c7:e7:dc:6f:4e:ef:a9:c7:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD95557260FD7A36E6338BA61ED0BAA8DB4183F8
        Validity
            Not Before: Oct 27 21:38:18 2026 GMT
            Not After : Oct 26 21:43:18 2027 GMT
        Subject: CN=284D66B52B8557D031D90127D6133486E4864F0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:17:0d:dc:56:22:e6:b2:9e:b3:2e:0d:34:3d:
                    69:2f:54:b8:41:d0:28:f9:dc:f5:53:1b:db:2d:02:
                    c9:3d:19:9f:db:97:59:a5:ab:60:b7:47:06:d2:b0:
                    c0:21:d4:9d:b1:9e:e5:c6:90:26:6e:28:71:fe:1f:
                    d4:b6:11:6b:30:31:53:25:6f:67:7e:c3:c4:09:2f:
                    57:6c:d2:7b:63:71:15:ae:6d:07:3b:f9:d2:78:34:
                    f8:5e:79:0a:fc:16:07:14:f1:b1:54:7d:cc:09:22:
                    bb:c0:a5:79:36:18:54:20:74:4c:c8:3d:a7:52:61:
                    37:28:2e:fb:eb:f2:30:2b:25:c8:cf:9e:c7:64:da:
                    c8:2c:8c:b1:da:0b:28:0a:19:c8:d7:dd:f3:8a:c3:
                    e7:eb:27:2b:32:79:31:56:83:11:90:e6:d2:1c:1d:
                    9b:e7:fd:b0:c6:07:de:c2:51:a5:80:b9:ed:22:c6:
                    82:db:33:70:e2:6d:dd:c2:69:43:57:4d:d8:6e:51:
                    69:bc:a5:b7:5b:2c:e8:42:fa:f1:b0:9b:17:5d:1d:
                    07:14:c5:7a:db:47:7f:fd:05:27:90:bf:03:db:63:
                    a8:64:93:6e:fd:01:b8:91:0f:65:28:4b:14:6a:92:
                    ae:ec:b5:32:2f:9e:5e:25:b5:f8:08:3b:38:93:29:
                    0d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:4D:66:B5:2B:85:57:D0:31:D9:01:27:D6:13:34:86:E4:86:4F:0E
            X509v3 Authority Key Identifier:
                keyid:BD:95:55:72:60:FD:7A:36:E6:33:8B:A6:1E:D0:BA:A8:DB:41:83:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E22BF8AC36F9B799BC2806417A17393F770E8043AF00DD68BD22E468A26E1AD/0/BD95557260FD7A36E6338BA61ED0BAA8DB4183F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD95557260FD7A36E6338BA61ED0BAA8DB4183F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E22BF8AC36F9B799BC2806417A17393F770E8043AF00DD68BD22E468A26E1AD/0/3137302e3233382e3137302e302f32332d3234203d3e20323634383031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:12:50:f0:2d:de:05:ff:26:b9:39:44:ce:78:de:ed:6e:18:
         70:1c:8e:02:2a:fe:92:50:67:44:07:b0:72:de:30:6c:a3:ac:
         65:92:b5:57:ef:6d:17:c5:fe:04:d2:50:37:fc:f5:0c:bc:6e:
         e2:bb:b3:ad:e8:fb:19:af:e6:5f:80:1e:c0:84:9a:87:30:d0:
         9a:e2:1f:eb:5b:b0:a2:9a:d2:f3:74:af:d4:97:e4:6b:de:88:
         38:a3:e0:0d:65:bf:b4:b1:c4:1e:f5:90:14:f3:07:0e:f5:da:
         41:37:cd:70:ee:35:1d:eb:29:b5:20:8d:81:94:35:73:e3:4a:
         d5:ce:c8:ee:64:d3:bb:51:b1:f5:68:38:df:a3:59:5f:cd:6d:
         e7:76:c6:d1:da:01:ce:ea:88:2c:80:a8:97:fc:18:19:48:32:
         8e:78:e7:24:13:04:31:f0:7e:0e:5a:94:90:15:98:9d:ba:b9:
         b4:db:8f:6d:4a:33:00:37:6d:58:f7:89:4e:83:bc:78:ea:78:
         48:36:44:ea:a4:98:0a:e9:aa:90:f9:8e:98:c9:42:28:4f:34:
         b9:7a:45:81:73:90:68:9a:92:e4:42:e2:d7:a6:54:2e:7b:3d:
         d7:7d:54:52:9e:bd:52:d2:f1:24:3b:a4:2d:a4:39:7b:1d:ee:
         50:25:9f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 20:36:47 2026 by rpki-client