Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B1EF7D8DB15D54379148B50DB90A4F61D2DD531FE334841DA30778834700DA9D/0/3137302e38312e3235322e302f32322d3234203d3e20323634383432.roa
File:                     3137302e38312e3235322e302f32322d3234203d3e20323634383432.roa (raw, json)
Hash identifier:          XIkGuf2ab4W73m1Z3rvl9O/V64Ypfhk70XkY8DNxRFo=
Subject key identifier:   97:96:92:26:D1:62:BA:34:59:E5:80:67:8E:9B:25:C2:FA:10:06:C1
Certificate issuer:       /CN=2AE59E62324C453AEB84910F81FFB3247C715B49
Certificate serial:       68141A862B8B55ED91578E98211D18020F1E58E5
Authority key identifier: 2A:E5:9E:62:32:4C:45:3A:EB:84:91:0F:81:FF:B3:24:7C:71:5B:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AE59E62324C453AEB84910F81FFB3247C715B49.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B1EF7D8DB15D54379148B50DB90A4F61D2DD531FE334841DA30778834700DA9D/0/3137302e38312e3235322e302f32322d3234203d3e20323634383432.roa
Signing time:             Tue 21 Apr 2026 18:39:36 +0000
ROA not before:           Tue 21 Apr 2026 18:34:36 +0000
ROA not after:            Tue 20 Apr 2027 18:39:36 +0000
asID:                     264842
IP address blocks:        170.81.252.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B1EF7D8DB15D54379148B50DB90A4F61D2DD531FE334841DA30778834700DA9D/0/2AE59E62324C453AEB84910F81FFB3247C715B49.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B1EF7D8DB15D54379148B50DB90A4F61D2DD531FE334841DA30778834700DA9D/0/2AE59E62324C453AEB84910F81FFB3247C715B49.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AE59E62324C453AEB84910F81FFB3247C715B49.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 03 May 2026 17:25:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:14:1a:86:2b:8b:55:ed:91:57:8e:98:21:1d:18:02:0f:1e:58:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2AE59E62324C453AEB84910F81FFB3247C715B49
        Validity
            Not Before: Apr 21 18:34:36 2026 GMT
            Not After : Apr 20 18:39:36 2027 GMT
        Subject: CN=97969226D162BA3459E580678E9B25C2FA1006C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:49:fa:b8:d2:e6:9e:ca:bc:46:65:37:58:ac:
                    a8:1a:12:7b:52:16:e5:3c:a1:0d:21:e7:6e:13:04:
                    3b:02:fe:f5:81:e2:10:33:07:c2:a7:57:c0:a4:09:
                    d3:d7:d3:bf:9a:31:4b:0e:28:df:60:df:aa:49:ad:
                    d7:3c:ed:1d:e8:f6:37:2f:15:40:88:a4:46:3f:e9:
                    cc:a2:dc:16:0b:01:6e:ac:08:ae:1e:5b:b5:53:64:
                    ae:1e:01:56:8f:1f:59:bb:4d:b8:84:f5:7a:d4:8b:
                    01:83:c5:c7:99:99:fe:9f:ff:24:cc:d5:6b:d6:5a:
                    e1:a2:d6:76:e0:cf:c9:b9:03:93:c4:8f:f7:d3:3a:
                    dc:9a:e9:7b:58:81:e8:63:d5:b7:51:9c:b3:ec:b0:
                    2f:e6:d7:8e:2a:20:26:44:09:76:f8:a1:43:3f:da:
                    bc:77:9a:4b:4a:a5:b5:fe:01:c0:ce:fd:2e:6e:43:
                    50:73:51:e4:72:84:24:62:6c:90:2a:30:b2:39:8c:
                    f9:74:ce:a8:ea:15:a3:ae:96:82:db:df:15:c4:f8:
                    03:a7:80:fa:cd:fe:e0:55:32:f7:6e:6c:20:7a:68:
                    0e:eb:c3:0d:82:3d:d8:37:9e:2e:fb:d5:2d:83:b1:
                    e5:b5:b9:52:a1:c9:9f:b4:4d:15:a3:12:3c:a0:85:
                    df:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:96:92:26:D1:62:BA:34:59:E5:80:67:8E:9B:25:C2:FA:10:06:C1
            X509v3 Authority Key Identifier:
                keyid:2A:E5:9E:62:32:4C:45:3A:EB:84:91:0F:81:FF:B3:24:7C:71:5B:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B1EF7D8DB15D54379148B50DB90A4F61D2DD531FE334841DA30778834700DA9D/0/2AE59E62324C453AEB84910F81FFB3247C715B49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AE59E62324C453AEB84910F81FFB3247C715B49.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B1EF7D8DB15D54379148B50DB90A4F61D2DD531FE334841DA30778834700DA9D/0/3137302e38312e3235322e302f32322d3234203d3e20323634383432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:64:9f:d6:b6:6b:0c:54:11:03:f6:62:86:00:ac:cd:5f:f9:
         f2:b6:b4:e0:50:9a:98:88:7d:3b:98:2d:20:bb:79:e0:e4:ea:
         32:d1:bd:3c:5a:4f:8b:72:93:71:72:14:4a:c5:f8:eb:6b:b9:
         aa:64:4a:4a:65:12:80:a1:de:23:dc:2d:46:c3:e9:7b:d4:8d:
         49:72:5c:0f:63:7a:c7:c8:f7:4b:91:52:ae:a3:e1:3a:c2:1c:
         f2:04:3d:34:b1:9c:18:76:cb:4e:91:c3:55:cd:cd:d0:37:57:
         22:73:17:45:69:d8:21:62:47:4f:a5:b9:33:15:8a:3a:7f:22:
         23:12:01:83:c5:69:b9:a0:c1:17:ec:af:6c:a4:33:3b:d9:68:
         b5:67:b3:88:5d:7e:e9:7a:8d:06:76:ad:33:f6:a3:6f:c9:6f:
         1c:4c:7c:7e:c2:82:0d:1e:f8:5f:02:7f:8f:fb:db:10:fb:2b:
         3c:bc:7a:00:07:e3:a2:77:35:57:9d:a8:92:2c:ae:9e:24:41:
         74:01:09:e8:5b:ce:55:e5:22:b7:c6:ed:6a:70:59:39:72:83:
         76:a2:75:17:21:08:db:20:90:4f:c1:91:1d:1f:15:ac:83:c7:
         9a:fe:99:ab:3d:81:a3:e8:05:9f:75:98:87:ab:56:a7:40:7f:
         9e:65:f1:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 06:32:57 2026 by rpki-client