Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/3137302e38342e3137322e302f32322d3234203d3e203631353132.roa
File:                     3137302e38342e3137322e302f32322d3234203d3e203631353132.roa (raw, json)
Hash identifier:          VpzZQstYmiD+Majy6ROLC0UGt/M4GNHh0rXmJLvP0y0=
Subject key identifier:   DF:1C:9C:37:17:F0:60:49:77:91:AE:36:74:55:D1:66:30:A9:B6:EC
Certificate issuer:       /CN=89CB216508CEF38CB2A68E45EBF4D418531E3799
Certificate serial:       2D3F78399BC61ED3D5FDF0A6CDB719E389AC6893
Authority key identifier: 89:CB:21:65:08:CE:F3:8C:B2:A6:8E:45:EB:F4:D4:18:53:1E:37:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/3137302e38342e3137322e302f32322d3234203d3e203631353132.roa
Signing time:             Thu 05 Mar 2026 17:32:58 +0000
ROA not before:           Thu 05 Mar 2026 17:27:58 +0000
ROA not after:            Thu 04 Mar 2027 17:32:58 +0000
asID:                     61512
IP address blocks:        170.84.172.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 14 Mar 2026 20:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:3f:78:39:9b:c6:1e:d3:d5:fd:f0:a6:cd:b7:19:e3:89:ac:68:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89CB216508CEF38CB2A68E45EBF4D418531E3799
        Validity
            Not Before: Mar  5 17:27:58 2026 GMT
            Not After : Mar  4 17:32:58 2027 GMT
        Subject: CN=DF1C9C3717F060497791AE367455D16630A9B6EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:91:44:23:34:3f:e5:7e:eb:e0:0b:50:df:01:
                    15:93:30:5e:6a:ef:78:8b:4f:97:6a:95:59:bf:54:
                    95:cd:08:82:b8:38:88:63:0c:c4:e0:fa:90:6a:ff:
                    5f:31:8f:be:af:f8:5e:a9:66:f9:49:fb:c1:74:58:
                    48:2e:0b:b7:76:5e:bb:25:6b:12:66:f0:60:d7:f6:
                    f5:30:de:af:50:3f:40:51:9d:77:e1:4a:70:63:3e:
                    9f:91:e1:2e:df:69:77:0d:ad:be:d9:15:ca:c2:d3:
                    27:86:43:45:a8:cf:50:7b:43:05:a8:d4:5f:28:1c:
                    aa:43:f6:44:01:98:84:43:b3:b3:8b:4f:26:1f:1c:
                    ad:6a:89:ef:3a:97:8b:0d:96:68:4d:e1:ef:d4:0c:
                    25:91:f3:d6:41:0f:1d:25:b5:7e:52:f0:70:30:96:
                    0b:35:9f:f4:f1:a8:e0:12:9c:34:62:cf:1a:38:0a:
                    40:5a:ab:29:1a:4d:3e:8f:b9:65:fe:ed:1d:dc:9c:
                    65:64:15:6a:ba:2b:b4:21:3e:5b:90:62:e5:8e:b0:
                    8b:37:96:e4:5b:a9:b1:50:bc:b5:c8:1d:f8:ec:17:
                    5f:93:ac:5c:f9:8c:a6:7a:8a:ae:9f:ca:ce:09:52:
                    69:d2:52:bd:e5:7b:70:e2:cf:22:88:8d:bc:99:e2:
                    02:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:1C:9C:37:17:F0:60:49:77:91:AE:36:74:55:D1:66:30:A9:B6:EC
            X509v3 Authority Key Identifier:
                keyid:89:CB:21:65:08:CE:F3:8C:B2:A6:8E:45:EB:F4:D4:18:53:1E:37:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/3137302e38342e3137322e302f32322d3234203d3e203631353132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:1b:ae:f7:ff:13:f3:e1:4b:25:d2:47:5b:47:6b:37:e7:ab:
         54:7d:d5:a6:75:1b:f5:0d:d8:47:d2:45:fb:73:72:de:5d:02:
         2c:c2:49:d9:b7:19:bc:9c:3e:9a:70:9c:e5:98:69:d5:f9:e6:
         d7:bc:dc:34:a6:9c:4c:5c:37:4e:4b:bd:d0:b8:0e:e6:98:a5:
         44:e6:8d:13:75:03:5f:53:a8:60:75:17:a4:23:5c:eb:52:0e:
         25:00:ec:fb:9d:21:b8:e4:3f:93:c5:db:f1:ba:45:ee:b0:14:
         5f:1c:ab:6b:37:2e:bd:2d:30:c0:d1:71:fc:a4:7a:1a:58:29:
         0d:1e:10:2a:bc:d5:35:5d:19:03:d4:9f:0f:5d:cb:f0:0c:70:
         33:21:6a:56:12:8a:0a:ab:fb:76:01:47:4d:16:60:92:98:65:
         e2:ef:24:98:e0:54:14:01:67:c1:d4:44:8e:35:53:77:01:7b:
         55:68:f8:47:18:03:85:c4:6f:da:a7:ec:73:4d:6e:ae:d0:99:
         26:ee:3e:aa:b3:83:e2:bf:9e:f3:4b:74:c1:de:36:9b:b0:64:
         91:76:81:5f:16:3c:d7:68:29:12:3c:16:59:00:80:0c:4e:6c:
         70:7d:84:ff:26:f8:a2:26:96:6c:fe:c8:98:90:01:7d:4f:27:
         43:10:7a:6c
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIULT94OZvGHtPV/fCmzbcZ44msaJMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODlDQjIxNjUwOENFRjM4Q0IyQTY4RTQ1RUJGNEQ0MTg1
MzFFMzc5OTAeFw0yNjAzMDUxNzI3NThaFw0yNzAzMDQxNzMyNThaMDMxMTAvBgNV
BAMTKERGMUM5QzM3MTdGMDYwNDk3NzkxQUUzNjc0NTVEMTY2MzBBOUI2RUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxkUQjND/lfuvgC1DfARWTMF5q
73iLT5dqlVm/VJXNCIK4OIhjDMTg+pBq/18xj76v+F6pZvlJ+8F0WEguC7d2Xrsl
axJm8GDX9vUw3q9QP0BRnXfhSnBjPp+R4S7faXcNrb7ZFcrC0yeGQ0Woz1B7QwWo
1F8oHKpD9kQBmIRDs7OLTyYfHK1qie86l4sNlmhN4e/UDCWR89ZBDx0ltX5S8HAw
lgs1n/TxqOASnDRizxo4CkBaqykaTT6PuWX+7R3cnGVkFWq6K7QhPluQYuWOsIs3
luRbqbFQvLXIHfjsF1+TrFz5jKZ6iq6fys4JUmnSUr3le3DizyKIjbyZ4gKXAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU3xycNxfwYEl3ka42dFXRZjCptuwwHwYDVR0j
BBgwFoAUicshZQjO84yypo5F6/TUGFMeN5kwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DMjYzNjk1OTAyNkQ1QTY4N0Q2RjA2OEJFQ0E1Q0FCRTVF
OEU5QUI2MEEwOEYzMEVBQzNGMzI0OUY0MzcyQjdELzAvODlDQjIxNjUwOENFRjM4
Q0IyQTY4RTQ1RUJGNEQ0MTg1MzFFMzc5OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84OUNCMjE2NTA4Q0VGMzhDQjJB
NjhFNDVFQkY0RDQxODUzMUUzNzk5LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzI2MzY5NTkwMjZENUE2ODdENkYwNjhCRUNBNUNBQkU1RThFOUFCNjBB
MDhGMzBFQUMzRjMyNDlGNDM3MkI3RC8wLzMxMzczMDJlMzgzNDJlMzEzNzMyMmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzYzMTM1MzEzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAqpUrDAN
BgkqhkiG9w0BAQsFAAOCAQEAaxuu9/8T8+FLJdJHW0drN+erVH3VpnUb9Q3YR9JF
+3Ny3l0CLMJJ2bcZvJw+mnCc5Zhp1fnm17zcNKacTFw3Tku90LgO5pilROaNE3UD
X1OoYHUXpCNc61IOJQDs+50huOQ/k8Xb8bpF7rAUXxyrazcuvS0wwNFx/KR6Glgp
DR4QKrzVNV0ZA9SfD13L8AxwMyFqVhKKCqv7dgFHTRZgkphl4u8kmOBUFAFnwdRE
jjVTdwF7VWj4RxgDhcRv2qfsc01urtCZJu4+qrOD4r+e80t0wd42m7BkkXaBXxY8
12gpEjwWWQCADE5scH2E/yb4oiaWbP7ImJABfU8nQxB6bA==
-----END CERTIFICATE-----
Generated at Wed Mar 11 11:02:59 2026 by rpki-client