Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/14CB370010DE6D85153F1C51BFF7A0D15EEE00AE2DE4C16398C1B30E930DFF07/0/3231332e3137332e35352e302f32342d3234203d3e20323733383937.roa
File:                     3231332e3137332e35352e302f32342d3234203d3e20323733383937.roa (raw, json)
Hash identifier:          qC6HvW1zTQeN7QTgV/uCWG2o2cvrISYIhD8jmsm1BeY=
Subject key identifier:   85:B1:BE:6C:0D:07:F4:47:21:F5:10:4A:1F:62:02:CA:B7:35:06:CF
Certificate issuer:       /CN=95116A890D205119BAB4C1812515C4DD5B11AEFF
Certificate serial:       5AF9C5B6813E65D0EE110750E4AF90748A5D10AF
Authority key identifier: 95:11:6A:89:0D:20:51:19:BA:B4:C1:81:25:15:C4:DD:5B:11:AE:FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/95116A890D205119BAB4C1812515C4DD5B11AEFF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/14CB370010DE6D85153F1C51BFF7A0D15EEE00AE2DE4C16398C1B30E930DFF07/0/3231332e3137332e35352e302f32342d3234203d3e20323733383937.roa
Signing time:             Mon 02 Feb 2026 19:28:53 +0000
ROA not before:           Mon 02 Feb 2026 19:23:53 +0000
ROA not after:            Mon 01 Feb 2027 19:28:53 +0000
asID:                     273897
IP address blocks:        213.173.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/14CB370010DE6D85153F1C51BFF7A0D15EEE00AE2DE4C16398C1B30E930DFF07/0/95116A890D205119BAB4C1812515C4DD5B11AEFF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/14CB370010DE6D85153F1C51BFF7A0D15EEE00AE2DE4C16398C1B30E930DFF07/0/95116A890D205119BAB4C1812515C4DD5B11AEFF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/95116A890D205119BAB4C1812515C4DD5B11AEFF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:f9:c5:b6:81:3e:65:d0:ee:11:07:50:e4:af:90:74:8a:5d:10:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95116A890D205119BAB4C1812515C4DD5B11AEFF
        Validity
            Not Before: Feb  2 19:23:53 2026 GMT
            Not After : Feb  1 19:28:53 2027 GMT
        Subject: CN=85B1BE6C0D07F44721F5104A1F6202CAB73506CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:dc:e6:ed:88:d8:6c:cf:eb:af:3b:69:4f:bf:
                    3c:07:05:33:c2:99:45:ee:17:55:ab:32:3f:58:f8:
                    03:48:bf:9a:5f:7a:90:d8:e0:28:40:15:0c:37:1b:
                    0d:af:86:03:9f:6c:97:9e:e3:23:a4:3b:c0:04:cd:
                    f8:fa:bd:25:6d:46:2f:32:fa:26:15:62:9d:cd:b1:
                    ee:de:b0:62:c5:01:b4:f7:7e:78:3c:ac:fb:48:38:
                    5e:1d:cb:7a:91:63:dc:f0:d1:0e:61:62:f7:4d:c2:
                    15:70:be:ef:45:b7:c0:88:03:21:f0:07:47:fc:c7:
                    0a:08:7e:30:a5:e2:ba:a1:8d:ab:ba:de:9a:69:71:
                    86:94:5d:be:86:94:41:40:13:0b:ab:4d:3d:c8:56:
                    df:9a:36:82:75:1b:79:fd:0b:d5:47:28:25:fd:41:
                    73:dc:d5:77:3a:ef:ae:e2:34:d5:ba:c4:d5:8d:1f:
                    ea:60:c0:c2:a1:f1:ee:65:62:fb:9d:f2:32:d9:cc:
                    60:a4:02:01:e0:2f:ad:e0:5a:08:2a:6f:c9:d1:de:
                    7e:6d:c6:cb:07:e7:46:9f:9c:b5:6b:7d:8b:23:ca:
                    8d:d5:a0:6e:72:08:a0:31:85:bd:ef:01:e3:09:b6:
                    89:a6:42:80:21:a6:41:41:71:66:87:36:65:68:e4:
                    1b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:B1:BE:6C:0D:07:F4:47:21:F5:10:4A:1F:62:02:CA:B7:35:06:CF
            X509v3 Authority Key Identifier:
                keyid:95:11:6A:89:0D:20:51:19:BA:B4:C1:81:25:15:C4:DD:5B:11:AE:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/14CB370010DE6D85153F1C51BFF7A0D15EEE00AE2DE4C16398C1B30E930DFF07/0/95116A890D205119BAB4C1812515C4DD5B11AEFF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/95116A890D205119BAB4C1812515C4DD5B11AEFF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/14CB370010DE6D85153F1C51BFF7A0D15EEE00AE2DE4C16398C1B30E930DFF07/0/3231332e3137332e35352e302f32342d3234203d3e20323733383937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.173.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:cf:e0:8e:c1:73:7f:5b:85:41:98:ca:65:8a:09:bc:56:27:
         43:2a:64:fb:e9:9c:7c:58:13:90:8b:51:43:e3:8f:3b:68:0d:
         e9:57:10:28:b5:b4:10:e5:0f:93:fe:42:b3:bd:f5:3d:83:ea:
         d9:7c:7a:7a:29:3c:c9:e9:39:59:33:47:44:27:ea:f9:fe:7d:
         02:4a:57:a6:8d:84:3f:ec:fd:ba:18:2c:9f:f3:9b:cd:e2:04:
         92:3d:fe:3b:19:c6:2e:f0:c2:0d:c0:a8:ce:f0:08:ab:11:25:
         d0:87:e9:7a:75:3c:35:d9:11:19:fa:ec:bd:59:fc:32:6e:72:
         7f:f7:88:ea:70:0d:95:bf:2f:ad:87:6b:5a:45:85:49:e5:2e:
         62:3a:23:8a:d5:d2:06:cc:dd:44:44:95:31:d0:68:4e:21:a4:
         01:98:25:9e:8b:a2:c9:bf:7e:00:60:f2:54:e4:fb:77:fd:1b:
         b3:6f:25:cc:77:2c:dd:74:4b:4b:de:27:fc:f2:92:98:ff:ce:
         1f:d0:e5:cf:2d:aa:a9:eb:6b:b4:cb:54:bb:fe:4f:d8:cb:f4:
         10:b5:d0:b9:21:ad:2f:cc:2d:d3:93:a0:d3:ee:76:a3:5c:c4:
         54:11:36:60:13:7c:f8:ae:87:d4:29:a8:bc:5b:ae:b1:b2:0d:
         91:59:72:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 02:47:20 2026 by rpki-client