Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B1EF7D8DB15D54379148B50DB90A4F61D2DD531FE334841DA30778834700DA9D/0/3137302e38312e3235322e302f32342d3234203d3e20323634383432.roa
File:                     3137302e38312e3235322e302f32342d3234203d3e20323634383432.roa (raw, json)
Hash identifier:          yoRpRHday2FAtuFtPCDe0/Hdm2ZkCwI61oxdeOl9BJM=
Subject key identifier:   29:67:DA:9C:66:9F:23:D2:42:DB:D0:01:4F:84:CF:5E:51:09:CD:45
Certificate issuer:       /CN=2AE59E62324C453AEB84910F81FFB3247C715B49
Certificate serial:       5ABDF1577B5B3AE160CAED975FE9EBBFF6CB9DEA
Authority key identifier: 2A:E5:9E:62:32:4C:45:3A:EB:84:91:0F:81:FF:B3:24:7C:71:5B:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AE59E62324C453AEB84910F81FFB3247C715B49.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B1EF7D8DB15D54379148B50DB90A4F61D2DD531FE334841DA30778834700DA9D/0/3137302e38312e3235322e302f32342d3234203d3e20323634383432.roa
Signing time:             Tue 21 Apr 2026 15:39:33 +0000
ROA not before:           Tue 21 Apr 2026 15:34:33 +0000
ROA not after:            Tue 20 Apr 2027 15:39:33 +0000
asID:                     264842
IP address blocks:        170.81.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B1EF7D8DB15D54379148B50DB90A4F61D2DD531FE334841DA30778834700DA9D/0/2AE59E62324C453AEB84910F81FFB3247C715B49.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B1EF7D8DB15D54379148B50DB90A4F61D2DD531FE334841DA30778834700DA9D/0/2AE59E62324C453AEB84910F81FFB3247C715B49.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AE59E62324C453AEB84910F81FFB3247C715B49.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 03 May 2026 17:25:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:bd:f1:57:7b:5b:3a:e1:60:ca:ed:97:5f:e9:eb:bf:f6:cb:9d:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2AE59E62324C453AEB84910F81FFB3247C715B49
        Validity
            Not Before: Apr 21 15:34:33 2026 GMT
            Not After : Apr 20 15:39:33 2027 GMT
        Subject: CN=2967DA9C669F23D242DBD0014F84CF5E5109CD45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9c:da:89:68:b2:f4:59:0c:af:97:11:d2:31:
                    8b:16:7d:27:c3:bf:39:3a:57:13:34:7f:10:fe:15:
                    60:55:df:9c:fa:10:f3:49:6b:e3:0e:1c:ec:1b:cd:
                    62:61:99:c5:8d:c3:a7:56:c0:9d:91:5b:a5:98:7d:
                    4c:09:45:8b:95:97:83:a4:0f:c2:09:49:33:7a:2a:
                    eb:5b:c7:b3:66:30:0b:e1:ad:a6:1c:50:05:d9:1b:
                    fe:8f:3d:89:4f:cc:83:fc:8e:31:7b:1a:1f:03:60:
                    97:3f:f2:9e:59:91:95:81:2e:a2:25:3f:85:ac:e7:
                    35:97:eb:8c:6b:c2:bc:6b:d1:b1:18:3f:c1:3c:0d:
                    23:4c:7b:0d:e7:9c:2f:45:be:e3:ad:d1:b1:ff:10:
                    98:ca:65:b6:39:c9:00:28:28:43:65:f7:0d:3a:01:
                    8a:e6:c1:9c:04:e2:67:07:17:27:40:65:0a:a8:ff:
                    3c:67:b3:6a:0d:59:64:db:1b:47:c2:d3:71:17:18:
                    ae:d1:ff:aa:1c:54:d3:b8:cf:72:c8:01:da:35:78:
                    03:97:59:b9:18:7f:00:57:7c:61:02:2e:4f:21:91:
                    2c:70:7c:7d:af:54:1a:e6:23:47:6b:12:27:2b:b8:
                    bf:47:05:07:a3:56:5b:d2:4e:bc:f4:cd:49:4f:ba:
                    d8:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:67:DA:9C:66:9F:23:D2:42:DB:D0:01:4F:84:CF:5E:51:09:CD:45
            X509v3 Authority Key Identifier:
                keyid:2A:E5:9E:62:32:4C:45:3A:EB:84:91:0F:81:FF:B3:24:7C:71:5B:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B1EF7D8DB15D54379148B50DB90A4F61D2DD531FE334841DA30778834700DA9D/0/2AE59E62324C453AEB84910F81FFB3247C715B49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AE59E62324C453AEB84910F81FFB3247C715B49.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B1EF7D8DB15D54379148B50DB90A4F61D2DD531FE334841DA30778834700DA9D/0/3137302e38312e3235322e302f32342d3234203d3e20323634383432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:fe:2f:bb:e2:3b:20:da:8c:0d:c7:12:85:86:72:92:17:e7:
         d2:be:a5:b7:b0:6f:40:60:aa:ff:2e:50:8c:6c:dc:9f:e5:34:
         88:20:2d:6c:6b:ce:94:44:19:f6:6c:fd:f6:72:83:d9:a9:46:
         e3:e9:c8:08:e0:d7:01:4f:0d:51:fb:80:20:00:e7:03:10:36:
         c2:ac:67:a0:44:8a:25:41:f1:d1:0c:05:a4:1e:f6:f7:a4:39:
         9c:76:1f:14:e8:20:d6:b4:34:c9:cc:58:81:51:15:65:b7:b0:
         e5:6d:03:6b:bf:86:b4:7f:0d:78:c8:54:e6:d9:58:cd:60:21:
         42:75:3e:f2:3f:e0:dd:da:0f:60:52:8c:36:40:d5:91:2a:fc:
         9a:0a:96:ce:1e:82:5d:87:fb:9c:61:59:9b:33:4e:bd:f7:a4:
         7f:ef:d8:30:73:e7:bb:1b:4d:c0:63:d0:13:1b:15:2b:0e:b2:
         10:ea:72:05:ff:30:86:6a:48:e6:c9:2d:55:45:49:6e:87:41:
         21:c5:f9:6b:a6:36:22:30:b1:92:13:cb:8c:90:b8:52:88:f6:
         a7:dd:42:4e:0e:28:be:52:1d:fc:e8:20:4e:7f:04:c3:3f:4a:
         34:4f:90:bd:9c:5c:4f:df:39:53:87:19:08:5c:0f:11:d5:2f:
         df:af:cf:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 06:33:04 2026 by rpki-client