Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/3137302e3234342e39302e302f32342d3234203d3e20323734323836.roa
File:                     3137302e3234342e39302e302f32342d3234203d3e20323734323836.roa (raw, json)
Hash identifier:          GGfLY6BRQ+QI9UGn4V3fE744iMNkhhp7g8Sx5ZWa6OA=
Subject key identifier:   6C:5D:21:5B:D9:D9:BF:6D:B5:07:87:A4:E3:17:43:04:C2:D7:43:16
Certificate issuer:       /CN=CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC
Certificate serial:       475E11752E1330A61DD51BF061DAE6E69782E5D8
Authority key identifier: CE:FF:58:50:7A:F1:A0:6A:EF:DA:67:DD:8D:65:12:5C:36:4A:4D:EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/3137302e3234342e39302e302f32342d3234203d3e20323734323836.roa
Signing time:             Thu 20 Aug 2026 21:05:00 +0000
ROA not before:           Thu 20 Aug 2026 21:00:00 +0000
ROA not after:            Thu 19 Aug 2027 21:05:00 +0000
asID:                     274286
IP address blocks:        170.244.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 15 Sep 2026 10:15:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:5e:11:75:2e:13:30:a6:1d:d5:1b:f0:61:da:e6:e6:97:82:e5:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC
        Validity
            Not Before: Aug 20 21:00:00 2026 GMT
            Not After : Aug 19 21:05:00 2027 GMT
        Subject: CN=6C5D215BD9D9BF6DB50787A4E3174304C2D74316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:43:7f:e6:44:b7:e5:99:f1:d3:8e:48:91:46:
                    38:5a:4f:f4:ce:f4:ba:31:f0:8e:d7:96:69:57:7a:
                    69:e5:eb:79:b3:6a:e5:16:62:1b:6d:32:a9:3f:2d:
                    b0:fe:10:94:8e:21:53:ce:79:7a:e8:c2:44:11:c1:
                    bc:8d:24:c3:d9:c2:49:0e:43:84:5d:67:46:ae:63:
                    aa:3c:bd:a7:27:d8:ce:7d:2b:03:cb:7f:77:15:18:
                    06:ac:7b:da:86:39:61:7a:de:12:cc:97:d1:2a:46:
                    9b:4d:10:80:4b:36:d5:dc:3c:17:b2:26:65:3f:cc:
                    90:87:7c:e3:91:cd:5b:30:29:a2:e9:e8:1a:ce:d7:
                    48:1d:c7:54:19:06:3a:17:84:b4:3d:9e:1c:e0:c7:
                    3e:e1:46:65:8f:89:9b:1c:06:0f:94:ae:17:d5:bb:
                    9e:75:34:e5:59:64:c8:eb:53:8d:15:5a:e7:8b:4e:
                    b6:db:22:c2:c5:3c:3b:03:3d:df:7e:a4:b6:7e:eb:
                    aa:7d:4e:21:f4:77:f9:cf:f6:dc:c7:f0:79:51:9f:
                    15:e7:7b:dd:25:94:dc:82:ec:89:b8:52:29:77:31:
                    03:df:3f:68:11:24:d7:74:e0:31:fd:44:de:66:ce:
                    58:58:d9:9c:c2:db:43:e2:2a:97:2d:66:1b:89:dc:
                    b0:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:5D:21:5B:D9:D9:BF:6D:B5:07:87:A4:E3:17:43:04:C2:D7:43:16
            X509v3 Authority Key Identifier:
                keyid:CE:FF:58:50:7A:F1:A0:6A:EF:DA:67:DD:8D:65:12:5C:36:4A:4D:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/3137302e3234342e39302e302f32342d3234203d3e20323734323836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:ab:48:ab:ec:37:82:4b:3b:20:71:5e:27:64:f9:33:52:b0:
         06:6e:20:6e:32:bc:3a:1e:53:83:f8:ba:0b:a7:e0:c8:fc:1f:
         4d:13:48:56:25:2c:bc:13:d6:b9:2d:2c:9d:e7:4d:63:9a:9a:
         6b:c5:97:fe:47:13:3d:21:74:71:37:f3:78:7f:b1:db:cc:98:
         0a:df:bd:f4:23:f8:29:1b:17:28:48:f5:92:cb:a6:aa:ad:4b:
         1f:b1:79:93:9b:70:e1:b0:7c:b7:97:53:52:90:dc:8b:27:f4:
         d4:a3:b8:ae:cc:39:64:4c:6a:c0:88:92:7f:68:27:a3:20:d6:
         d6:a4:94:52:63:03:2e:0b:1c:ae:14:1b:52:a1:e5:88:93:14:
         b5:71:a1:b7:dd:49:ca:5a:e8:ce:80:20:77:ad:7b:a6:c2:56:
         b4:a8:e7:77:36:c7:38:15:33:bf:ec:42:bf:53:2a:be:73:b1:
         03:45:90:8e:35:f6:39:99:02:20:43:09:69:87:ad:a5:b6:4b:
         1b:ff:1d:d0:e4:0d:93:62:a3:72:de:6c:dc:6b:8d:8d:75:0c:
         6e:0c:1b:34:f7:f4:3f:7c:0c:e5:bb:e2:8d:6a:31:ff:67:41:
         4d:e9:ca:a9:d7:c2:70:81:69:45:9c:d6:a4:5a:0f:e4:91:95:
         36:67:41:eb
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUR14RdS4TMKYd1RvwYdrm5peC5dgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0VGRjU4NTA3QUYxQTA2QUVGREE2N0REOEQ2NTEyNUMz
NjRBNERFQzAeFw0yNjA4MjAyMTAwMDBaFw0yNzA4MTkyMTA1MDBaMDMxMTAvBgNV
BAMTKDZDNUQyMTVCRDlEOUJGNkRCNTA3ODdBNEUzMTc0MzA0QzJENzQzMTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpQ3/mRLflmfHTjkiRRjhaT/TO
9Lox8I7XlmlXemnl63mzauUWYhttMqk/LbD+EJSOIVPOeXrowkQRwbyNJMPZwkkO
Q4RdZ0auY6o8vacn2M59KwPLf3cVGAase9qGOWF63hLMl9EqRptNEIBLNtXcPBey
JmU/zJCHfOORzVswKaLp6BrO10gdx1QZBjoXhLQ9nhzgxz7hRmWPiZscBg+UrhfV
u551NOVZZMjrU40VWueLTrbbIsLFPDsDPd9+pLZ+66p9TiH0d/nP9tzH8HlRnxXn
e90llNyC7Im4Uil3MQPfP2gRJNd04DH9RN5mzlhY2ZzC20PiKpctZhuJ3LDvAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUbF0hW9nZv221B4ek4xdDBMLXQxYwHwYDVR0j
BBgwFoAUzv9YUHrxoGrv2mfdjWUSXDZKTewwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CNURDOTc2OEVBMEFBQ0Y0NkRDOTExRTgxRDBEOUQwNDk5
MjdEMjRBQUNBRjA2ODVDQjM2N0Q1NENFRTJCRDk1LzAvQ0VGRjU4NTA3QUYxQTA2
QUVGREE2N0REOEQ2NTEyNUMzNjRBNERFQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DRUZGNTg1MDdBRjFBMDZBRUZE
QTY3REQ4RDY1MTI1QzM2NEE0REVDLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjVEQzk3NjhFQTBBQUNGNDZEQzkxMUU4MUQwRDlEMDQ5OTI3RDI0QUFD
QUYwNjg1Q0IzNjdENTRDRUUyQkQ5NS8wLzMxMzczMDJlMzIzNDM0MmUzOTMwMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzM0MzIzODM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqvRa
MA0GCSqGSIb3DQEBCwUAA4IBAQChq0ir7DeCSzsgcV4nZPkzUrAGbiBuMrw6HlOD
+LoLp+DI/B9NE0hWJSy8E9a5LSyd501jmpprxZf+RxM9IXRxN/N4f7HbzJgK3730
I/gpGxcoSPWSy6aqrUsfsXmTm3DhsHy3l1NSkNyLJ/TUo7iuzDlkTGrAiJJ/aCej
INbWpJRSYwMuCxyuFBtSoeWIkxS1caG33UnKWujOgCB3rXumwla0qOd3Nsc4FTO/
7EK/Uyq+c7EDRZCONfY5mQIgQwlph62ltksb/x3Q5A2TYqNy3mzca42NdQxuDBs0
9/Q/fAzlu+KNajH/Z0FN6cqp18JwgWlFnNakWg/kkZU2Z0Hr
-----END CERTIFICATE-----
Generated at Fri Sep 11 17:21:30 2026 by rpki-client