Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1628CD0D22423E793EECC7574F47E1EE19107FBF26075D4D6D43DF584110F703/0/3137302e3233392e3137322e302f32322d3234203d3e20323634383039.roa
File:                     3137302e3233392e3137322e302f32322d3234203d3e20323634383039.roa (raw, json)
Hash identifier:          7RH0+Gx9Ebp0WMfjiRyH6Qbr+6GrNVD23fBrboSI2X8=
Subject key identifier:   DA:8A:A1:79:A9:62:1C:51:51:BC:E5:DA:24:A3:24:9F:21:C6:C7:41
Certificate issuer:       /CN=77DB86F237549BAD93A90E796F6F8B3CE8526A3D
Certificate serial:       032B1EAD2C49691FFCF1A86B83FE67D532A6709F
Authority key identifier: 77:DB:86:F2:37:54:9B:AD:93:A9:0E:79:6F:6F:8B:3C:E8:52:6A:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77DB86F237549BAD93A90E796F6F8B3CE8526A3D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1628CD0D22423E793EECC7574F47E1EE19107FBF26075D4D6D43DF584110F703/0/3137302e3233392e3137322e302f32322d3234203d3e20323634383039.roa
Signing time:             Thu 26 Mar 2026 16:25:00 +0000
ROA not before:           Thu 26 Mar 2026 16:20:00 +0000
ROA not after:            Thu 25 Mar 2027 16:25:00 +0000
asID:                     264809
IP address blocks:        170.239.172.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1628CD0D22423E793EECC7574F47E1EE19107FBF26075D4D6D43DF584110F703/0/77DB86F237549BAD93A90E796F6F8B3CE8526A3D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1628CD0D22423E793EECC7574F47E1EE19107FBF26075D4D6D43DF584110F703/0/77DB86F237549BAD93A90E796F6F8B3CE8526A3D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77DB86F237549BAD93A90E796F6F8B3CE8526A3D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Apr 2026 23:37:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:2b:1e:ad:2c:49:69:1f:fc:f1:a8:6b:83:fe:67:d5:32:a6:70:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77DB86F237549BAD93A90E796F6F8B3CE8526A3D
        Validity
            Not Before: Mar 26 16:20:00 2026 GMT
            Not After : Mar 25 16:25:00 2027 GMT
        Subject: CN=DA8AA179A9621C5151BCE5DA24A3249F21C6C741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:a9:02:b0:8b:8f:ac:14:61:5e:d1:17:79:ae:
                    ec:d9:2a:03:8c:d3:c0:26:27:d9:87:c4:bc:d8:1a:
                    d6:d4:e2:bc:fc:df:f4:ec:0f:56:6e:26:17:aa:e4:
                    42:8a:92:99:a5:8c:85:74:cd:29:3c:75:2a:dd:4d:
                    dd:9e:4b:17:30:da:38:a1:81:4d:4f:eb:41:1e:ad:
                    cc:71:16:c1:ff:6a:8d:1d:c9:90:8a:47:48:5c:dd:
                    08:0c:e1:e3:e8:f1:c9:34:54:92:b1:10:46:51:f3:
                    39:1a:09:1d:ed:24:3b:56:23:c1:43:44:2d:07:b6:
                    37:3f:54:41:0e:b2:e6:cd:5e:96:8b:b6:f9:ce:9c:
                    03:f7:61:a9:ba:62:54:85:12:66:91:c3:5d:ec:62:
                    f3:af:a7:df:ef:eb:55:89:5f:09:58:1b:fd:cc:8e:
                    1e:08:db:d5:aa:ca:36:ce:0e:a7:06:bf:51:52:8e:
                    04:38:39:c4:ea:cd:97:7f:5a:84:7a:5b:fd:91:bb:
                    1b:bb:6c:b8:cb:93:44:d5:c9:41:21:51:ac:f0:2e:
                    64:73:44:e4:9c:59:00:90:78:3f:11:31:42:42:ab:
                    07:d2:b1:f6:a4:70:2f:32:33:f6:dd:79:8d:ff:27:
                    a3:2a:50:a7:e4:9e:51:4f:58:f0:ea:a4:f6:c1:75:
                    49:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:8A:A1:79:A9:62:1C:51:51:BC:E5:DA:24:A3:24:9F:21:C6:C7:41
            X509v3 Authority Key Identifier:
                keyid:77:DB:86:F2:37:54:9B:AD:93:A9:0E:79:6F:6F:8B:3C:E8:52:6A:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1628CD0D22423E793EECC7574F47E1EE19107FBF26075D4D6D43DF584110F703/0/77DB86F237549BAD93A90E796F6F8B3CE8526A3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77DB86F237549BAD93A90E796F6F8B3CE8526A3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1628CD0D22423E793EECC7574F47E1EE19107FBF26075D4D6D43DF584110F703/0/3137302e3233392e3137322e302f32322d3234203d3e20323634383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:5b:10:4b:6b:06:c4:0e:73:5a:4a:0e:79:de:c5:28:ee:5a:
         49:e9:95:86:2c:10:68:aa:04:46:ce:5c:44:c8:a3:6e:d8:ef:
         8c:9e:99:32:15:c6:5d:d6:f2:af:e4:9e:54:3c:18:68:a1:7a:
         76:d2:bc:dc:77:e2:b1:c8:a3:7c:81:86:02:c9:39:30:e1:47:
         ca:fc:b8:33:ee:b5:c9:82:42:75:0e:40:40:08:b2:ab:d1:bd:
         95:a0:01:fa:2b:d4:7b:54:73:ad:04:d8:b3:60:91:b1:01:f9:
         6d:f6:02:ea:4d:94:9f:d4:c3:28:f1:fa:62:82:eb:fc:85:84:
         8d:3b:f3:66:65:f7:06:8c:82:ed:a5:c1:c0:f3:5d:09:cd:f7:
         17:1f:bd:4f:de:c4:fb:e9:b5:46:2d:da:57:d5:58:da:76:de:
         46:d8:59:fe:e1:8b:be:de:3c:06:8c:9a:0d:c4:a3:2f:ff:16:
         fa:fa:23:f1:8d:9f:17:ee:47:36:ad:e0:7d:61:2c:12:6a:7b:
         25:28:1e:74:ad:8f:c5:03:bf:c4:7d:8f:9c:f5:db:ed:70:0c:
         79:0b:22:84:73:50:d7:e7:22:ff:28:bb:46:07:4c:07:35:d8:
         1e:81:80:ed:30:d6:fa:55:52:41:2c:30:1e:8a:1f:e9:1f:16:
         4a:aa:50:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 08:51:28 2026 by rpki-client