Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/EDEBEE75B2F92C4C429917DCCAE37E77123C098C78627C29ABA0B449BD8E4E74/0/3137302e3136392e3130382e302f32342d3234203d3e203232303131.roa
File:                     3137302e3136392e3130382e302f32342d3234203d3e203232303131.roa (raw, json)
Hash identifier:          s7uDjXtT00OZa8KANw9aksc9JDbPzzksx/hkYgZ9P4A=
Subject key identifier:   E4:F4:A8:0C:CA:B6:AA:C8:2A:A5:05:A2:96:E8:6E:D8:C5:74:A4:1B
Certificate issuer:       /CN=AD1D84EEC51B659DC69FA2256D2118720A18D705
Certificate serial:       7E834827044137B3C5CE4CC866452C327888B8CC
Authority key identifier: AD:1D:84:EE:C5:1B:65:9D:C6:9F:A2:25:6D:21:18:72:0A:18:D7:05
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD1D84EEC51B659DC69FA2256D2118720A18D705.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EDEBEE75B2F92C4C429917DCCAE37E77123C098C78627C29ABA0B449BD8E4E74/0/3137302e3136392e3130382e302f32342d3234203d3e203232303131.roa
Signing time:             Thu 27 Aug 2026 19:26:47 +0000
ROA not before:           Thu 27 Aug 2026 19:21:47 +0000
ROA not after:            Thu 26 Aug 2027 19:26:47 +0000
asID:                     22011
IP address blocks:        170.169.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EDEBEE75B2F92C4C429917DCCAE37E77123C098C78627C29ABA0B449BD8E4E74/0/AD1D84EEC51B659DC69FA2256D2118720A18D705.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EDEBEE75B2F92C4C429917DCCAE37E77123C098C78627C29ABA0B449BD8E4E74/0/AD1D84EEC51B659DC69FA2256D2118720A18D705.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD1D84EEC51B659DC69FA2256D2118720A18D705.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:83:48:27:04:41:37:b3:c5:ce:4c:c8:66:45:2c:32:78:88:b8:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD1D84EEC51B659DC69FA2256D2118720A18D705
        Validity
            Not Before: Aug 27 19:21:47 2026 GMT
            Not After : Aug 26 19:26:47 2027 GMT
        Subject: CN=E4F4A80CCAB6AAC82AA505A296E86ED8C574A41B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:65:ae:85:b2:48:2a:66:cc:5e:2c:51:2a:9a:
                    58:8d:97:b4:32:75:4a:3e:7d:d4:d7:c8:09:d6:fd:
                    04:26:90:e7:d3:86:39:ba:71:3a:2a:66:d6:82:20:
                    f1:5e:96:5a:1e:4b:05:71:43:c4:dd:d8:4f:e3:ed:
                    62:e1:3d:96:ad:e9:6a:73:94:1c:49:c2:48:a1:ea:
                    a8:16:9d:c7:33:20:e1:80:62:34:73:b0:9f:3b:d9:
                    ae:83:c2:d3:ce:c8:4d:6e:74:d5:7c:44:1a:de:d1:
                    47:d4:5c:cb:4f:6d:ac:25:f9:4a:74:ae:db:22:8c:
                    89:68:64:8c:7c:d8:0f:74:8c:b4:91:a8:f0:8f:97:
                    94:95:cc:c7:ab:9b:95:97:74:87:88:5a:94:98:d1:
                    c0:6f:c3:3f:a2:a7:33:47:77:7c:a4:9f:2d:f5:ab:
                    d1:dd:c3:8a:61:3a:e6:6a:4c:d0:98:29:00:04:24:
                    30:82:9f:bd:0b:2c:60:41:62:89:44:98:d4:88:6d:
                    d3:dd:81:72:11:f8:97:d7:94:81:e6:20:a0:d7:15:
                    b6:63:e4:c1:08:a8:7d:6e:ed:56:c7:81:9e:e5:00:
                    10:4f:a2:5e:62:e6:88:31:3b:28:af:56:cf:48:e7:
                    d7:6e:99:3a:38:21:4b:69:a1:3d:d8:54:64:8b:65:
                    51:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:F4:A8:0C:CA:B6:AA:C8:2A:A5:05:A2:96:E8:6E:D8:C5:74:A4:1B
            X509v3 Authority Key Identifier:
                keyid:AD:1D:84:EE:C5:1B:65:9D:C6:9F:A2:25:6D:21:18:72:0A:18:D7:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EDEBEE75B2F92C4C429917DCCAE37E77123C098C78627C29ABA0B449BD8E4E74/0/AD1D84EEC51B659DC69FA2256D2118720A18D705.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD1D84EEC51B659DC69FA2256D2118720A18D705.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EDEBEE75B2F92C4C429917DCCAE37E77123C098C78627C29ABA0B449BD8E4E74/0/3137302e3136392e3130382e302f32342d3234203d3e203232303131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.169.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:43:82:1a:6b:d6:a7:f8:27:ec:58:8e:25:af:cc:43:b0:d4:
         ad:c7:78:96:f0:a4:a2:90:5c:59:6e:7f:70:34:18:b8:d0:22:
         0c:55:e6:69:f4:38:69:42:b1:56:c2:e7:7c:39:33:5e:1a:8a:
         54:b2:2f:50:a6:d2:ea:95:14:f3:64:0e:1e:ad:31:f9:2d:4a:
         80:91:9f:f2:d8:6c:7d:c9:1a:ba:ac:59:88:e6:0d:3e:28:2b:
         59:68:0b:d3:d8:bf:9c:9d:19:37:a3:53:8e:23:f2:2c:69:ff:
         92:85:20:0e:7d:56:64:d2:e6:af:fa:ae:e1:13:cd:ad:fa:b7:
         26:40:b3:19:12:af:9a:dc:1b:7e:2d:95:0e:ef:da:f0:68:fe:
         ca:f5:7f:e6:73:f3:a8:c6:4d:1f:d8:26:63:2a:4f:38:b5:5b:
         ee:91:7e:cf:14:c0:dd:8a:c4:71:11:36:1e:16:59:0f:f6:4c:
         88:ce:f0:dd:ae:67:0d:e2:9b:d8:38:48:0b:52:21:71:8e:a0:
         a1:1b:2a:f0:bd:f1:c8:62:a1:4c:a8:1c:ea:0a:66:46:22:ed:
         51:ce:1e:9c:fe:a3:cd:d7:68:e3:26:9d:2b:d1:74:3d:de:93:
         dd:2f:79:cd:f4:78:90:17:fc:26:80:6c:75:b4:f1:2c:c1:29:
         6c:e1:cc:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 21:32:38 2026 by rpki-client