Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B1EF7D8DB15D54379148B50DB90A4F61D2DD531FE334841DA30778834700DA9D/0/3137302e38312e3235352e302f32342d3234203d3e20323634383432.roa
File:                     3137302e38312e3235352e302f32342d3234203d3e20323634383432.roa (raw, json)
Hash identifier:          ZQ76eJpB7hqnpbvbFiX2RqR9WrgYB5d41IlOk3aQCzc=
Subject key identifier:   A8:D6:7E:87:82:B5:02:EE:4E:96:75:F5:D2:63:25:BB:EF:E5:4B:20
Certificate issuer:       /CN=2AE59E62324C453AEB84910F81FFB3247C715B49
Certificate serial:       034551A096389605861ADA631C345AFF51AD1318
Authority key identifier: 2A:E5:9E:62:32:4C:45:3A:EB:84:91:0F:81:FF:B3:24:7C:71:5B:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AE59E62324C453AEB84910F81FFB3247C715B49.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B1EF7D8DB15D54379148B50DB90A4F61D2DD531FE334841DA30778834700DA9D/0/3137302e38312e3235352e302f32342d3234203d3e20323634383432.roa
Signing time:             Tue 21 Apr 2026 15:39:33 +0000
ROA not before:           Tue 21 Apr 2026 15:34:33 +0000
ROA not after:            Tue 20 Apr 2027 15:39:33 +0000
asID:                     264842
IP address blocks:        170.81.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B1EF7D8DB15D54379148B50DB90A4F61D2DD531FE334841DA30778834700DA9D/0/2AE59E62324C453AEB84910F81FFB3247C715B49.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B1EF7D8DB15D54379148B50DB90A4F61D2DD531FE334841DA30778834700DA9D/0/2AE59E62324C453AEB84910F81FFB3247C715B49.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AE59E62324C453AEB84910F81FFB3247C715B49.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 03 May 2026 17:25:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:45:51:a0:96:38:96:05:86:1a:da:63:1c:34:5a:ff:51:ad:13:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2AE59E62324C453AEB84910F81FFB3247C715B49
        Validity
            Not Before: Apr 21 15:34:33 2026 GMT
            Not After : Apr 20 15:39:33 2027 GMT
        Subject: CN=A8D67E8782B502EE4E9675F5D26325BBEFE54B20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:04:df:af:2b:7a:68:7a:18:91:ea:3b:b9:55:
                    35:56:8a:44:81:df:1a:c9:1b:f3:f1:29:0b:bf:49:
                    5b:37:81:61:dc:46:9c:26:21:d4:9f:5a:fb:4f:b3:
                    05:ab:02:6c:36:f5:e0:6c:04:3c:9e:6b:80:9e:4b:
                    93:eb:41:cf:ef:9f:90:db:39:2e:a4:8e:75:08:4f:
                    e4:80:d0:08:46:1d:2e:4e:c5:22:1f:2d:d9:a3:3e:
                    3f:30:1b:9a:2b:28:97:89:53:20:84:b0:20:10:8b:
                    30:78:dd:00:86:22:94:c1:3d:b3:62:f5:b0:d8:fc:
                    d6:6f:33:ea:43:80:5e:07:6f:f1:a1:5a:d3:27:6d:
                    6d:8d:51:e0:27:9c:dc:bf:fc:28:9d:a1:52:9b:74:
                    45:3d:56:44:09:e6:7e:a9:ab:c5:d9:2a:68:92:35:
                    76:43:60:58:81:cd:f7:9e:cc:72:89:99:db:c3:8b:
                    60:37:c0:73:30:4e:b4:76:83:62:85:14:9b:38:ab:
                    01:97:21:92:87:35:ac:28:c2:dd:b8:55:33:6c:99:
                    44:db:75:fd:d8:d3:a4:2a:13:cd:09:2b:aa:b7:86:
                    aa:a9:e7:2a:a4:ed:76:ce:8b:04:d7:f0:52:86:85:
                    fb:6b:77:13:06:78:01:50:b0:ad:a4:ef:49:bc:45:
                    97:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:D6:7E:87:82:B5:02:EE:4E:96:75:F5:D2:63:25:BB:EF:E5:4B:20
            X509v3 Authority Key Identifier:
                keyid:2A:E5:9E:62:32:4C:45:3A:EB:84:91:0F:81:FF:B3:24:7C:71:5B:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B1EF7D8DB15D54379148B50DB90A4F61D2DD531FE334841DA30778834700DA9D/0/2AE59E62324C453AEB84910F81FFB3247C715B49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AE59E62324C453AEB84910F81FFB3247C715B49.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B1EF7D8DB15D54379148B50DB90A4F61D2DD531FE334841DA30778834700DA9D/0/3137302e38312e3235352e302f32342d3234203d3e20323634383432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:90:35:b7:32:6e:44:fa:5e:7d:1e:cb:54:62:db:3c:b7:64:
         bc:2d:f0:dc:b8:33:3d:6d:1e:b8:c5:0a:20:97:a9:c7:be:88:
         dc:47:a1:48:de:0e:6d:3f:19:0c:49:d8:c3:c1:ea:56:da:af:
         f5:8c:fe:3d:cb:7c:82:c9:5c:78:56:fc:69:45:1b:73:f6:21:
         be:9b:73:a9:15:46:1b:f0:34:dd:05:bc:35:5b:04:74:b5:fd:
         62:13:cb:a6:4c:07:fb:43:e2:9e:d3:2c:11:28:aa:4e:dd:31:
         6e:d7:95:96:c4:4f:fd:4e:9b:81:a7:e7:82:02:e2:b6:04:da:
         4d:9c:90:4d:be:5c:2d:0c:00:ad:a9:34:72:df:81:b3:9e:1f:
         5d:76:af:12:1e:b9:a0:10:00:bc:c9:23:5c:c7:46:63:a1:36:
         a6:6e:05:71:78:be:a5:90:53:34:60:d6:44:2d:4e:a5:33:c6:
         85:59:54:1d:41:e1:79:21:57:81:72:1a:f1:cb:e9:05:e3:44:
         46:30:29:50:80:8e:e2:5f:bc:f2:e2:d9:fa:4c:66:22:8f:8b:
         4b:c3:cb:01:79:b9:2d:fe:8a:48:eb:90:61:f7:52:e1:87:70:
         1d:cb:ee:81:fe:e7:3b:4e:a8:fe:43:87:72:42:e1:1f:b7:c0:
         97:82:e1:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 06:32:59 2026 by rpki-client