Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/EDEBEE75B2F92C4C429917DCCAE37E77123C098C78627C29ABA0B449BD8E4E74/0/3137302e3136392e3130392e302f32342d3234203d3e203232393038.roa
File:                     3137302e3136392e3130392e302f32342d3234203d3e203232393038.roa (raw, json)
Hash identifier:          zl9tIRFm9UnoTnCVhRRmTqSoklAZV0Rxf6a8CyNDmyE=
Subject key identifier:   56:31:27:19:13:1A:80:49:03:DF:FD:71:BF:FE:CD:E7:58:0D:13:63
Certificate issuer:       /CN=AD1D84EEC51B659DC69FA2256D2118720A18D705
Certificate serial:       A5CC5379069AC312391113F3CDF848C97C1CCE
Authority key identifier: AD:1D:84:EE:C5:1B:65:9D:C6:9F:A2:25:6D:21:18:72:0A:18:D7:05
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD1D84EEC51B659DC69FA2256D2118720A18D705.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EDEBEE75B2F92C4C429917DCCAE37E77123C098C78627C29ABA0B449BD8E4E74/0/3137302e3136392e3130392e302f32342d3234203d3e203232393038.roa
Signing time:             Thu 27 Aug 2026 19:26:47 +0000
ROA not before:           Thu 27 Aug 2026 19:21:47 +0000
ROA not after:            Thu 26 Aug 2027 19:26:47 +0000
asID:                     22908
IP address blocks:        170.169.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EDEBEE75B2F92C4C429917DCCAE37E77123C098C78627C29ABA0B449BD8E4E74/0/AD1D84EEC51B659DC69FA2256D2118720A18D705.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EDEBEE75B2F92C4C429917DCCAE37E77123C098C78627C29ABA0B449BD8E4E74/0/AD1D84EEC51B659DC69FA2256D2118720A18D705.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD1D84EEC51B659DC69FA2256D2118720A18D705.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            a5:cc:53:79:06:9a:c3:12:39:11:13:f3:cd:f8:48:c9:7c:1c:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD1D84EEC51B659DC69FA2256D2118720A18D705
        Validity
            Not Before: Aug 27 19:21:47 2026 GMT
            Not After : Aug 26 19:26:47 2027 GMT
        Subject: CN=56312719131A804903DFFD71BFFECDE7580D1363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:2c:40:2a:7d:69:63:56:23:6a:1e:ee:b8:75:
                    c0:6f:df:ca:7c:2c:a8:73:3c:6c:51:bc:2a:ce:65:
                    0c:4d:ed:23:65:2f:77:7d:ec:e1:72:46:7d:d7:95:
                    75:29:e9:76:63:d4:1d:2b:a6:24:56:59:36:bb:06:
                    38:c3:18:00:ce:95:4d:51:9c:7e:2d:35:fc:b6:8e:
                    c8:d6:0a:13:bd:6a:e7:9c:09:36:19:c9:fa:cd:9c:
                    5a:8c:25:34:ff:09:fd:67:45:6f:29:b9:34:42:9d:
                    53:74:c3:d3:c0:f8:58:da:31:a8:d4:55:66:7b:4d:
                    96:07:bc:64:7e:37:3e:c5:98:df:89:69:67:06:20:
                    ae:a1:ee:e7:92:52:b9:2b:2a:5d:30:e6:95:d9:14:
                    6b:27:0c:da:36:18:30:78:ca:75:03:b4:75:e5:f6:
                    68:a3:66:2d:4a:13:ca:bc:6f:3a:6b:72:66:a5:9c:
                    ad:c0:bf:29:ed:29:55:c8:b0:2a:c3:82:eb:8e:89:
                    0c:c4:eb:3a:e8:f5:69:9d:2b:6f:aa:3f:39:ce:bc:
                    11:16:26:c7:d9:ca:18:dc:58:8e:03:70:29:42:95:
                    79:53:f1:bc:7c:f6:ac:a5:c4:ee:b8:4c:e2:33:1e:
                    6a:7a:ff:39:34:34:0b:6b:f0:bc:3e:81:2f:cd:12:
                    94:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:31:27:19:13:1A:80:49:03:DF:FD:71:BF:FE:CD:E7:58:0D:13:63
            X509v3 Authority Key Identifier:
                keyid:AD:1D:84:EE:C5:1B:65:9D:C6:9F:A2:25:6D:21:18:72:0A:18:D7:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EDEBEE75B2F92C4C429917DCCAE37E77123C098C78627C29ABA0B449BD8E4E74/0/AD1D84EEC51B659DC69FA2256D2118720A18D705.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD1D84EEC51B659DC69FA2256D2118720A18D705.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EDEBEE75B2F92C4C429917DCCAE37E77123C098C78627C29ABA0B449BD8E4E74/0/3137302e3136392e3130392e302f32342d3234203d3e203232393038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.169.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:c8:48:11:16:dd:5f:d5:f1:68:ce:b3:52:72:7d:95:71:80:
         8c:5f:f4:bd:59:ad:8a:cb:1e:95:87:96:c6:06:5d:26:f5:66:
         7b:67:c1:7b:87:26:d0:5c:43:bb:12:9a:e6:11:4c:bf:b7:c9:
         16:9a:7e:00:ed:4e:43:8c:df:c4:bf:66:0c:8e:6a:f4:a5:a1:
         fb:36:20:04:17:c9:84:69:8f:b1:eb:7f:69:d4:c2:34:ae:10:
         da:d5:61:a7:27:bc:cf:fd:79:9f:e5:c7:43:aa:ba:6e:83:54:
         c5:9a:81:bb:d5:9f:da:fb:17:2d:b6:8c:b1:cc:11:91:a9:3c:
         d9:bf:07:45:6f:9e:e1:a9:38:46:c5:99:95:66:48:21:c1:f6:
         ca:f6:d3:39:a5:8d:b3:b4:fc:d4:ee:d3:a6:57:58:17:0b:13:
         69:4f:2e:69:b8:d3:f0:09:40:98:6c:ad:20:9c:ce:35:ba:f9:
         39:a7:fc:48:a1:0a:3b:15:2a:24:ad:ca:93:f2:71:c4:ab:db:
         51:03:e3:da:86:84:8e:71:3f:54:76:b8:a2:4d:a9:9c:fe:c7:
         a8:85:45:1f:be:1b:dc:3f:a7:bb:be:81:f9:b2:6c:1d:10:61:
         89:ce:66:51:fc:54:2e:b2:2a:98:dd:ab:5d:a9:d0:cc:9e:89:
         6c:ca:48:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 22:33:19 2026 by rpki-client