Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/EDEBEE75B2F92C4C429917DCCAE37E77123C098C78627C29ABA0B449BD8E4E74/0/3137302e3136392e3130392e302f32342d3234203d3e203232303131.roa
File:                     3137302e3136392e3130392e302f32342d3234203d3e203232303131.roa (raw, json)
Hash identifier:          u1Pwzis+K/u/PqMe6aIdUlKpP/d8T8SOPLaPRjafTko=
Subject key identifier:   09:80:B5:25:22:D4:2D:77:E0:86:3E:00:88:67:B6:8F:71:F8:1A:FC
Certificate issuer:       /CN=AD1D84EEC51B659DC69FA2256D2118720A18D705
Certificate serial:       28E445EF0ABD92E32631ABD9B64A871F8C88082F
Authority key identifier: AD:1D:84:EE:C5:1B:65:9D:C6:9F:A2:25:6D:21:18:72:0A:18:D7:05
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD1D84EEC51B659DC69FA2256D2118720A18D705.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EDEBEE75B2F92C4C429917DCCAE37E77123C098C78627C29ABA0B449BD8E4E74/0/3137302e3136392e3130392e302f32342d3234203d3e203232303131.roa
Signing time:             Thu 27 Aug 2026 19:26:47 +0000
ROA not before:           Thu 27 Aug 2026 19:21:47 +0000
ROA not after:            Thu 26 Aug 2027 19:26:47 +0000
asID:                     22011
IP address blocks:        170.169.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EDEBEE75B2F92C4C429917DCCAE37E77123C098C78627C29ABA0B449BD8E4E74/0/AD1D84EEC51B659DC69FA2256D2118720A18D705.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EDEBEE75B2F92C4C429917DCCAE37E77123C098C78627C29ABA0B449BD8E4E74/0/AD1D84EEC51B659DC69FA2256D2118720A18D705.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD1D84EEC51B659DC69FA2256D2118720A18D705.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:e4:45:ef:0a:bd:92:e3:26:31:ab:d9:b6:4a:87:1f:8c:88:08:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD1D84EEC51B659DC69FA2256D2118720A18D705
        Validity
            Not Before: Aug 27 19:21:47 2026 GMT
            Not After : Aug 26 19:26:47 2027 GMT
        Subject: CN=0980B52522D42D77E0863E008867B68F71F81AFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c7:55:2a:78:ca:d3:84:1c:ae:4d:e1:c8:8a:
                    87:97:7e:5f:6a:87:27:14:e5:e0:d7:00:4c:00:62:
                    09:27:c4:f9:dc:55:8c:5c:2b:89:cb:cc:b2:98:fa:
                    45:ab:e7:70:97:ab:3e:c0:86:ad:e3:43:eb:c0:2b:
                    75:a8:82:b7:17:0a:0b:fc:1f:c9:80:be:42:9d:89:
                    a7:75:49:27:ef:20:47:53:c7:e4:f2:58:d4:ab:4a:
                    20:7c:68:40:1a:55:84:10:bc:fb:ea:a8:f1:7b:56:
                    37:83:de:b2:79:30:a9:8a:a9:2e:b2:5b:10:e6:1a:
                    67:fb:ea:b7:f7:dc:8f:18:18:a2:ab:f6:f7:ca:e1:
                    40:3d:48:8b:d9:20:f0:4b:39:6e:b2:0f:73:98:92:
                    72:d6:43:ae:7b:d6:af:5e:5e:16:f4:a5:2b:c0:27:
                    04:9a:a2:51:56:51:6b:b0:46:9d:f4:de:d3:a4:a8:
                    2a:23:b9:c4:75:b4:05:64:15:ec:7c:82:cd:f9:f8:
                    d8:a5:5a:50:6e:34:bb:88:b2:f7:a3:93:e8:12:29:
                    fa:57:9a:20:cc:b4:a9:16:68:d0:55:ac:2b:2e:18:
                    5e:b2:fc:d4:2d:9a:9e:eb:2d:c4:fd:e9:af:33:13:
                    63:2d:a0:08:b4:13:73:08:91:2c:b9:3d:02:f7:14:
                    aa:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:80:B5:25:22:D4:2D:77:E0:86:3E:00:88:67:B6:8F:71:F8:1A:FC
            X509v3 Authority Key Identifier:
                keyid:AD:1D:84:EE:C5:1B:65:9D:C6:9F:A2:25:6D:21:18:72:0A:18:D7:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EDEBEE75B2F92C4C429917DCCAE37E77123C098C78627C29ABA0B449BD8E4E74/0/AD1D84EEC51B659DC69FA2256D2118720A18D705.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD1D84EEC51B659DC69FA2256D2118720A18D705.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EDEBEE75B2F92C4C429917DCCAE37E77123C098C78627C29ABA0B449BD8E4E74/0/3137302e3136392e3130392e302f32342d3234203d3e203232303131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.169.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:9d:4a:64:4a:30:95:be:85:d1:b0:c3:f5:16:35:d3:c7:e4:
         08:10:f8:14:c8:c2:c7:43:b0:a1:d4:04:39:9a:d3:19:f3:15:
         f8:04:a6:e4:b4:2b:cb:9a:07:29:ff:16:d2:6c:a7:54:41:b1:
         09:3c:84:44:0f:5d:fa:32:c7:77:af:fa:45:5e:e9:41:49:47:
         21:e2:90:c9:a1:dd:6a:4b:36:99:01:03:ee:6c:28:1f:a0:31:
         80:b3:b7:e6:ef:47:8c:59:d6:97:a6:95:8c:4c:b3:a3:ef:49:
         4c:30:c0:0b:78:6e:13:1f:fa:52:95:72:b1:74:68:c9:1b:34:
         3d:1e:0e:3f:7e:83:b4:d0:b0:a9:75:8d:dd:d9:7d:e8:16:ce:
         83:e8:d1:da:c0:23:a0:bb:81:07:22:66:12:0c:0c:83:05:b6:
         25:9d:68:15:7c:be:09:15:7f:ef:9d:30:fb:39:97:73:a8:16:
         3e:00:f5:fb:43:d7:41:99:af:92:a5:50:d4:4a:f1:60:09:ee:
         e7:92:bf:15:0a:35:12:e7:a9:c9:94:06:89:3d:fd:64:f7:1d:
         eb:2e:77:9a:e7:86:a6:25:84:05:cd:fa:81:97:26:09:50:46:
         bc:a1:d6:2f:c9:de:c0:29:3e:11:86:57:99:e7:41:88:2d:d2:
         69:51:ad:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 21:32:48 2026 by rpki-client