Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/3137302e3233332e37322e302f32342d3234203d3e203333333932.roa
File:                     3137302e3233332e37322e302f32342d3234203d3e203333333932.roa (raw, json)
Hash identifier:          BsPIgBRyKdm7K3163xL6uF3u4gsi8H2s2sDu4QNa+xw=
Subject key identifier:   10:E0:DE:A3:9C:03:6C:61:75:EF:02:F1:CF:9F:32:93:4B:E3:C6:33
Certificate issuer:       /CN=9651F1E4B6480D19626E784CA1A8F0ABC94C1487
Certificate serial:       7DCC8CD934A7329A339B736D66A431BA0DE9E28F
Authority key identifier: 96:51:F1:E4:B6:48:0D:19:62:6E:78:4C:A1:A8:F0:AB:C9:4C:14:87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/3137302e3233332e37322e302f32342d3234203d3e203333333932.roa
Signing time:             Tue 20 Oct 2026 16:42:07 +0000
ROA not before:           Tue 20 Oct 2026 16:37:07 +0000
ROA not after:            Tue 19 Oct 2027 16:42:07 +0000
asID:                     33392
IP address blocks:        170.233.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 22:28:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:cc:8c:d9:34:a7:32:9a:33:9b:73:6d:66:a4:31:ba:0d:e9:e2:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9651F1E4B6480D19626E784CA1A8F0ABC94C1487
        Validity
            Not Before: Oct 20 16:37:07 2026 GMT
            Not After : Oct 19 16:42:07 2027 GMT
        Subject: CN=10E0DEA39C036C6175EF02F1CF9F32934BE3C633
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:72:d6:76:01:ce:04:cc:e9:7d:3f:23:a4:c0:
                    10:e4:86:08:55:ab:15:48:5b:46:55:cc:da:e5:fc:
                    3b:d3:e4:91:52:a3:dd:71:36:4c:ae:20:0d:02:15:
                    ba:88:bc:95:62:4f:3d:e0:e5:f6:09:ad:f5:2b:dd:
                    5b:c9:52:ee:cb:9a:d4:f3:18:ca:41:dd:39:e5:01:
                    ec:20:7e:18:b4:30:5d:64:7b:33:b2:ed:97:d7:c3:
                    51:61:2e:45:d6:7c:5c:18:17:3a:97:4d:a4:2c:cc:
                    20:52:5a:07:4d:82:83:f4:c1:74:72:40:b7:6b:d4:
                    9f:f1:0e:6d:d3:d0:f0:67:30:b0:bd:af:3d:dd:9a:
                    c3:22:2d:03:da:d2:4d:84:e8:e7:fe:d6:80:1d:6e:
                    63:53:a0:55:fb:3e:77:1b:11:0b:6a:91:0b:0c:6e:
                    fe:6e:16:47:5d:54:00:3f:5c:bb:b6:46:c8:38:b0:
                    a9:80:46:75:dc:2d:2d:e1:59:bc:3e:9c:c1:ce:2a:
                    cb:d7:21:89:bb:6b:b7:f0:f2:0a:2c:41:5d:54:f9:
                    2b:f0:19:59:0e:41:e2:72:97:bf:80:4a:1e:be:0b:
                    ad:b0:22:0c:46:7d:94:2e:a8:8f:4e:8f:bf:84:d0:
                    2d:31:c7:9b:a5:5d:eb:11:8b:87:15:3b:87:3a:c1:
                    91:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:E0:DE:A3:9C:03:6C:61:75:EF:02:F1:CF:9F:32:93:4B:E3:C6:33
            X509v3 Authority Key Identifier:
                keyid:96:51:F1:E4:B6:48:0D:19:62:6E:78:4C:A1:A8:F0:AB:C9:4C:14:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/3137302e3233332e37322e302f32342d3234203d3e203333333932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:cd:06:3c:8f:36:5a:3b:0a:47:27:62:ae:c3:92:c1:21:99:
         51:52:22:13:2c:53:f0:74:bb:ac:c1:2c:6d:33:95:e8:cc:2a:
         ed:58:a9:74:c7:86:82:67:3b:be:58:29:8d:79:a3:8b:0a:5a:
         79:05:4a:47:38:e5:85:f2:99:b1:59:ba:8c:bf:8c:4a:83:c5:
         03:50:04:69:5c:7b:b2:bb:6c:07:fa:aa:d8:00:b5:6e:ef:18:
         79:e1:a1:f0:87:fb:6e:ca:ea:85:a1:ea:95:20:99:12:81:5b:
         d5:d0:6a:15:ad:a9:d9:fd:0c:91:f1:46:f1:49:c8:55:7f:5b:
         68:9f:df:40:b6:f7:f8:ae:3c:d5:16:25:8e:ac:11:32:1e:b5:
         74:d5:17:48:1b:b1:b4:06:7a:14:0e:18:63:98:cd:d9:20:0e:
         bd:58:17:20:9e:82:d8:4b:63:cb:c2:8c:27:78:b7:33:03:5e:
         d3:dd:63:4a:8d:9e:2c:6f:92:c5:aa:a0:44:89:7b:20:8f:3c:
         e2:27:88:da:7d:37:9e:2f:0a:5e:5a:15:0d:a0:02:0a:01:89:
         74:da:f4:f7:0a:c7:8f:3d:ee:c1:f3:a7:cb:b1:11:57:bd:e4:
         af:ac:7d:5a:a0:80:b4:9f:a4:6d:63:fe:be:c5:e0:97:16:e9:
         bc:c1:bd:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 21:43:09 2026 by rpki-client