Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/3137302e3233332e37332e302f32342d3234203d3e203336353131.roa
File:                     3137302e3233332e37332e302f32342d3234203d3e203336353131.roa (raw, json)
Hash identifier:          dL1VJpzj7+zX6NBTyYEPWc7bv7x0G4qATSfmoorvJGE=
Subject key identifier:   4B:F8:14:3D:9E:33:DB:B6:9B:E7:1E:99:EF:F6:A9:6B:7B:F8:9C:DA
Certificate issuer:       /CN=9651F1E4B6480D19626E784CA1A8F0ABC94C1487
Certificate serial:       413AE9ACB89B5788039440D6D33373424CF33863
Authority key identifier: 96:51:F1:E4:B6:48:0D:19:62:6E:78:4C:A1:A8:F0:AB:C9:4C:14:87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/3137302e3233332e37332e302f32342d3234203d3e203336353131.roa
Signing time:             Tue 20 Oct 2026 16:42:07 +0000
ROA not before:           Tue 20 Oct 2026 16:37:07 +0000
ROA not after:            Tue 19 Oct 2027 16:42:07 +0000
asID:                     36511
IP address blocks:        170.233.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 15:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:3a:e9:ac:b8:9b:57:88:03:94:40:d6:d3:33:73:42:4c:f3:38:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9651F1E4B6480D19626E784CA1A8F0ABC94C1487
        Validity
            Not Before: Oct 20 16:37:07 2026 GMT
            Not After : Oct 19 16:42:07 2027 GMT
        Subject: CN=4BF8143D9E33DBB69BE71E99EFF6A96B7BF89CDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8a:5c:68:09:62:bf:44:c4:e3:b0:5c:85:d5:
                    d7:6e:c7:55:dc:a7:48:08:ec:3f:dc:ce:e4:d8:90:
                    f7:f4:2b:c1:d7:b2:a2:ad:68:28:ea:67:4e:1f:4d:
                    bd:1f:6e:dc:fe:3f:4f:67:a3:1b:58:ce:69:26:4d:
                    fb:f0:8f:e0:b8:b1:77:f3:21:f3:ad:a6:6b:e4:43:
                    76:aa:31:aa:97:45:e3:f6:ee:ff:50:94:34:ef:32:
                    d7:e0:14:18:8a:bb:70:fe:e2:5a:d0:a6:71:a7:b4:
                    6d:ef:2d:1c:66:ce:0c:e7:09:de:ff:ab:d0:30:d6:
                    53:47:4c:e4:b8:bf:bd:69:3c:f7:7c:39:c7:8e:23:
                    05:64:16:b6:06:81:a7:64:15:e2:80:40:d8:53:88:
                    ff:4c:27:62:e2:d8:8f:81:51:6a:28:4d:6c:76:a8:
                    b7:86:d6:37:a2:fc:5c:fc:32:2f:8d:bb:f0:53:99:
                    a5:b8:42:b1:7d:5e:71:16:48:56:08:8a:9c:dc:c3:
                    aa:ad:e4:a6:bb:9b:ad:6d:6f:26:d5:66:ac:91:25:
                    98:1d:91:0f:0c:a1:66:c1:07:fb:ea:ba:4b:26:72:
                    80:38:89:92:0a:2e:32:1d:74:6e:97:05:61:38:e3:
                    09:0f:c9:95:f6:15:a1:75:d6:c4:be:1f:90:32:66:
                    1e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:F8:14:3D:9E:33:DB:B6:9B:E7:1E:99:EF:F6:A9:6B:7B:F8:9C:DA
            X509v3 Authority Key Identifier:
                keyid:96:51:F1:E4:B6:48:0D:19:62:6E:78:4C:A1:A8:F0:AB:C9:4C:14:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/3137302e3233332e37332e302f32342d3234203d3e203336353131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:79:53:c5:d8:77:7c:3f:4d:a0:f6:73:ea:82:72:88:5a:b3:
         71:68:29:a8:3a:75:d7:89:b5:7a:aa:bb:92:6c:9c:8c:9d:8d:
         06:4a:ad:c7:b7:98:31:de:01:e4:7b:e7:db:bd:ea:62:a7:a9:
         db:38:51:be:7d:61:b1:56:86:84:6d:50:f5:42:15:39:55:73:
         2e:1f:78:bc:16:6a:4b:43:06:86:64:3a:3f:c6:0c:ff:67:33:
         c3:61:d1:14:36:07:96:a6:d8:83:88:bf:bb:04:95:d9:cd:f8:
         cb:63:48:82:29:e9:02:eb:98:0e:60:1c:dd:86:ec:9f:8e:f3:
         cd:90:0d:91:3c:e5:67:46:6c:a4:ce:c1:35:d6:9a:3a:f2:d9:
         0a:63:65:56:27:aa:c8:a5:8d:20:c0:df:c1:87:f8:78:c3:b8:
         92:15:84:3b:8f:b8:fe:76:77:35:76:47:09:af:04:d8:e6:01:
         af:9a:25:a8:9e:48:c3:f2:99:f3:0b:d3:fc:c6:f9:44:f0:1a:
         67:fe:fc:c7:b8:bc:d9:a1:6d:e1:b3:67:2a:7d:e7:3d:ba:f9:
         9a:65:c8:4d:39:15:67:27:11:f7:c2:3b:fe:8d:51:82:4f:64:
         21:e3:a2:ae:8e:03:45:29:b1:7b:75:81:28:2f:f0:8d:3e:ea:
         64:0c:04:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 14:14:52 2026 by rpki-client