Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/28389B5E3B18B7DAF52D03353DDED295A80969643D92DD9D82DAEFE9D0B73975/0/3137302e37392e39302e302f32332d3233203d3e20323637383537.roa
File:                     3137302e37392e39302e302f32332d3233203d3e20323637383537.roa (raw, json)
Hash identifier:          o30i1s+tPRlk1o6it1nyIzTJbQRpmeeZBn4CWtuAYY8=
Subject key identifier:   66:7F:55:52:78:F2:F9:67:25:5C:4C:D4:37:28:67:7C:B8:25:4C:7C
Certificate issuer:       /CN=0CC5AA4BEDEA9A83BDE8822A77472110B7A57C76
Certificate serial:       5085D2640F43A8532EDB8149453F265A030E83F0
Authority key identifier: 0C:C5:AA:4B:ED:EA:9A:83:BD:E8:82:2A:77:47:21:10:B7:A5:7C:76
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0CC5AA4BEDEA9A83BDE8822A77472110B7A57C76.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/28389B5E3B18B7DAF52D03353DDED295A80969643D92DD9D82DAEFE9D0B73975/0/3137302e37392e39302e302f32332d3233203d3e20323637383537.roa
Signing time:             Thu 28 May 2026 18:44:33 +0000
ROA not before:           Thu 28 May 2026 18:39:33 +0000
ROA not after:            Thu 27 May 2027 18:44:33 +0000
asID:                     267857
IP address blocks:        170.79.90.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/28389B5E3B18B7DAF52D03353DDED295A80969643D92DD9D82DAEFE9D0B73975/0/0CC5AA4BEDEA9A83BDE8822A77472110B7A57C76.crl
                          rsync://repository.lacnic.net/rpki/lacnic/28389B5E3B18B7DAF52D03353DDED295A80969643D92DD9D82DAEFE9D0B73975/0/0CC5AA4BEDEA9A83BDE8822A77472110B7A57C76.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0CC5AA4BEDEA9A83BDE8822A77472110B7A57C76.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 08:40:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:85:d2:64:0f:43:a8:53:2e:db:81:49:45:3f:26:5a:03:0e:83:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CC5AA4BEDEA9A83BDE8822A77472110B7A57C76
        Validity
            Not Before: May 28 18:39:33 2026 GMT
            Not After : May 27 18:44:33 2027 GMT
        Subject: CN=667F555278F2F967255C4CD43728677CB8254C7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f6:9b:c0:68:4c:24:af:dd:ad:1d:2c:65:c7:
                    75:20:84:7f:17:49:18:ac:f9:ed:6e:aa:7d:ff:57:
                    8a:a5:9d:45:0a:3b:f1:e9:8e:fa:7f:39:5e:49:6b:
                    ce:2f:59:a1:ea:48:c0:a7:df:72:25:05:59:3b:b3:
                    f5:75:1f:5d:36:ca:b3:8e:96:1a:d9:c4:89:e8:46:
                    9f:6d:5c:38:1f:7b:d4:88:24:9e:17:12:84:f3:9e:
                    f1:d3:9a:a2:65:3b:3c:54:23:e8:6a:16:7d:b7:50:
                    33:2e:96:3d:a7:09:c5:5b:5a:df:ae:19:8e:0c:7f:
                    57:7b:38:6d:26:70:99:f0:0e:48:15:7b:98:6f:05:
                    92:dd:ef:51:96:ef:5a:ed:cb:c5:5e:83:54:3a:4e:
                    c8:a7:bf:6f:d4:77:74:47:8d:20:83:0f:01:f9:90:
                    ef:cc:60:5e:16:72:45:2e:31:99:41:1d:f7:01:2a:
                    fd:0e:55:ed:a2:fa:45:18:0e:57:e0:ec:5b:b5:54:
                    a9:09:4d:0c:d9:73:14:c3:b0:03:48:7a:70:af:c6:
                    ce:81:b7:d0:f4:87:d0:27:e9:2b:90:91:29:11:b0:
                    42:e3:7f:48:0e:b8:84:e5:f6:4f:cf:c8:e0:9c:a8:
                    bd:1f:53:d5:54:58:77:ec:1e:81:23:bb:b6:65:32:
                    a3:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:7F:55:52:78:F2:F9:67:25:5C:4C:D4:37:28:67:7C:B8:25:4C:7C
            X509v3 Authority Key Identifier:
                keyid:0C:C5:AA:4B:ED:EA:9A:83:BD:E8:82:2A:77:47:21:10:B7:A5:7C:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/28389B5E3B18B7DAF52D03353DDED295A80969643D92DD9D82DAEFE9D0B73975/0/0CC5AA4BEDEA9A83BDE8822A77472110B7A57C76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0CC5AA4BEDEA9A83BDE8822A77472110B7A57C76.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/28389B5E3B18B7DAF52D03353DDED295A80969643D92DD9D82DAEFE9D0B73975/0/3137302e37392e39302e302f32332d3233203d3e20323637383537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         58:b3:5a:e7:07:c3:f3:64:86:04:a4:08:34:d9:2e:a3:b3:02:
         1d:4b:98:0f:c6:85:9d:69:6b:ea:82:75:86:bf:e1:25:e9:75:
         e5:3b:62:56:3d:c4:19:28:12:a2:b9:b0:36:b5:12:29:4f:ea:
         18:77:ef:b1:e7:bb:0f:cd:43:52:19:99:a3:e6:78:c5:5f:9b:
         39:6a:36:b2:1c:8d:64:22:e3:dd:09:cf:b8:9e:92:f8:08:83:
         f4:2b:b8:ff:ad:91:ff:41:3d:7d:18:40:39:ff:27:9c:14:89:
         b6:be:a7:b2:37:96:09:0a:a2:5d:2e:2f:9a:88:58:04:16:9c:
         0d:71:c4:b8:61:04:0e:49:f4:d4:1a:9c:db:4b:70:67:7b:61:
         6a:73:11:47:a3:c6:71:45:46:f1:3d:29:26:ed:da:e4:50:41:
         8d:37:64:8e:af:fd:7b:64:7a:af:1e:ce:ab:38:3b:64:ed:66:
         0a:7d:ae:58:dc:7e:3c:bd:91:aa:a4:6a:47:08:0a:c6:50:2e:
         7a:9b:94:20:72:d1:97:85:bb:28:21:49:6c:a5:bc:53:78:35:
         f0:54:7a:e8:2d:f7:e4:f8:cb:c2:a8:2f:73:2c:14:0d:35:0d:
         e2:df:40:59:d4:4b:88:9a:74:fc:ee:38:6d:f9:c6:86:d0:9d:
         2b:1a:cb:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:48:13 2026 by rpki-client