Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/3137302e38342e3137322e302f32322d3234203d3e203532343638.roa
File:                     3137302e38342e3137322e302f32322d3234203d3e203532343638.roa (raw, json)
Hash identifier:          glddoY8kxttMv7FWfjo9Yc9CoubEo+n3aRfojUc4Qs0=
Subject key identifier:   1C:5A:FE:B0:D5:0F:A8:CF:14:75:DE:C7:96:60:32:A2:F0:0E:8D:F8
Certificate issuer:       /CN=89CB216508CEF38CB2A68E45EBF4D418531E3799
Certificate serial:       5A85A30889546AC7BCE97C7D4B721C9F15C2D028
Authority key identifier: 89:CB:21:65:08:CE:F3:8C:B2:A6:8E:45:EB:F4:D4:18:53:1E:37:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/3137302e38342e3137322e302f32322d3234203d3e203532343638.roa
Signing time:             Thu 05 Mar 2026 17:32:57 +0000
ROA not before:           Thu 05 Mar 2026 17:27:57 +0000
ROA not after:            Thu 04 Mar 2027 17:32:57 +0000
asID:                     52468
IP address blocks:        170.84.172.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 14 Mar 2026 20:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:85:a3:08:89:54:6a:c7:bc:e9:7c:7d:4b:72:1c:9f:15:c2:d0:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89CB216508CEF38CB2A68E45EBF4D418531E3799
        Validity
            Not Before: Mar  5 17:27:57 2026 GMT
            Not After : Mar  4 17:32:57 2027 GMT
        Subject: CN=1C5AFEB0D50FA8CF1475DEC7966032A2F00E8DF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ea:0b:1d:11:b3:ad:1d:98:f8:5b:16:59:70:
                    88:82:9e:22:24:3a:13:f5:54:5e:d4:f5:26:bd:65:
                    7a:0f:ef:26:79:d0:85:55:4b:1a:4d:51:58:41:26:
                    57:bc:4e:f3:29:a8:8f:bc:ab:59:22:c9:57:89:72:
                    57:54:41:1e:ab:e4:ca:a7:30:a0:34:59:34:be:0d:
                    e5:c0:aa:4e:cf:1d:39:29:aa:fd:ed:e4:14:9d:0c:
                    cc:5d:23:23:45:e2:14:7b:bb:a8:2f:66:24:21:18:
                    11:0f:ba:9e:08:05:69:86:bb:9b:1a:d8:e9:b3:60:
                    18:65:dd:4b:75:d5:7d:39:34:03:bc:fc:ca:25:f7:
                    6a:80:c6:55:9d:cf:40:e4:9a:5e:6f:4f:a6:c6:9d:
                    a8:12:f2:4e:cc:92:d6:75:76:90:80:e6:f0:63:fd:
                    20:ee:2f:a3:7a:db:93:c0:3c:fc:df:74:bf:aa:92:
                    bf:80:0b:49:8d:e0:59:bf:a6:83:c5:fa:8f:4a:d3:
                    c8:b6:61:81:e3:a5:ca:ae:98:db:b6:c3:06:e5:a6:
                    64:97:03:5b:75:b1:49:25:d0:35:04:d9:95:7c:41:
                    98:c3:f2:69:a3:d4:69:c1:a2:ed:34:37:39:ed:d1:
                    1d:c0:1b:b7:1d:6d:c9:1f:11:ec:a9:c4:ac:f0:f4:
                    9c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:5A:FE:B0:D5:0F:A8:CF:14:75:DE:C7:96:60:32:A2:F0:0E:8D:F8
            X509v3 Authority Key Identifier:
                keyid:89:CB:21:65:08:CE:F3:8C:B2:A6:8E:45:EB:F4:D4:18:53:1E:37:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/3137302e38342e3137322e302f32322d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:54:fc:95:79:3f:ea:b7:d4:c7:20:ee:eb:a5:d3:0e:0f:18:
         b4:ed:9b:4b:7c:e4:49:d4:a4:65:0c:92:53:14:74:9a:73:5b:
         9c:c6:bd:cc:5b:4b:64:de:a2:e7:31:98:ff:b4:39:a1:f7:f1:
         f2:88:b7:a8:59:7c:ee:55:2c:2c:9e:02:75:cb:a9:5c:a3:4e:
         59:2f:4a:3d:08:9b:18:30:7b:be:bf:b4:c9:0f:ad:05:0c:23:
         5b:48:04:5e:a0:52:46:ed:6a:94:b1:02:bd:cc:63:36:f6:75:
         da:1a:94:fc:6f:ad:62:bb:59:e2:3d:24:8d:49:af:f9:2b:50:
         db:4e:d7:5f:f3:fd:fe:23:15:65:d0:4a:c0:dc:30:11:a5:d8:
         ff:14:3f:1c:42:a5:57:6b:d0:7c:e3:6e:dc:4a:87:3b:7d:50:
         ee:eb:31:fb:59:51:54:80:cb:75:eb:a7:9f:05:ba:64:7f:d7:
         63:ec:de:38:38:d4:c5:09:eb:ca:d4:e3:34:b5:ef:c9:45:ba:
         ae:db:02:1c:9a:08:c9:28:70:4e:2a:82:24:a2:d8:8a:c8:ef:
         7e:b6:a1:6c:79:6b:db:f4:6a:af:2f:bb:c2:e9:d8:08:9b:66:
         f6:33:ff:de:f4:ba:60:c1:8c:b8:8f:cd:60:43:7d:53:92:a4:
         8e:5e:99:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 11 11:06:24 2026 by rpki-client