Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/46AA70DCBED89305C56286B2D479399AC5133D09597ACEEF8837E4E6ED78BDB5/0/3136302e3233382e3235342e302f32332d3233203d3e20323634383539.roa
File:                     3136302e3233382e3235342e302f32332d3233203d3e20323634383539.roa (raw, json)
Hash identifier:          Vsi1n1PytVp2vuBTOSqOjua+26HSaimYx2Wxn5tSMPA=
Subject key identifier:   FD:5E:68:D6:03:FF:0B:E8:49:AD:EC:1F:A0:91:AA:18:F4:C9:8A:AA
Certificate issuer:       /CN=20B9C47C5E606454FC314AD7D8CD786FB8049FF1
Certificate serial:       2DB3CCEB863FD8060C32371DD683ABF670DB5031
Authority key identifier: 20:B9:C4:7C:5E:60:64:54:FC:31:4A:D7:D8:CD:78:6F:B8:04:9F:F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20B9C47C5E606454FC314AD7D8CD786FB8049FF1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/46AA70DCBED89305C56286B2D479399AC5133D09597ACEEF8837E4E6ED78BDB5/0/3136302e3233382e3235342e302f32332d3233203d3e20323634383539.roa
Signing time:             Sun 12 Apr 2026 02:38:30 +0000
ROA not before:           Sun 12 Apr 2026 02:33:30 +0000
ROA not after:            Sun 11 Apr 2027 02:38:30 +0000
asID:                     264859
IP address blocks:        160.238.254.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/46AA70DCBED89305C56286B2D479399AC5133D09597ACEEF8837E4E6ED78BDB5/0/20B9C47C5E606454FC314AD7D8CD786FB8049FF1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/46AA70DCBED89305C56286B2D479399AC5133D09597ACEEF8837E4E6ED78BDB5/0/20B9C47C5E606454FC314AD7D8CD786FB8049FF1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20B9C47C5E606454FC314AD7D8CD786FB8049FF1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Apr 2026 01:05:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:b3:cc:eb:86:3f:d8:06:0c:32:37:1d:d6:83:ab:f6:70:db:50:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20B9C47C5E606454FC314AD7D8CD786FB8049FF1
        Validity
            Not Before: Apr 12 02:33:30 2026 GMT
            Not After : Apr 11 02:38:30 2027 GMT
        Subject: CN=FD5E68D603FF0BE849ADEC1FA091AA18F4C98AAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5f:01:e6:8c:d2:99:7c:5b:9c:af:9d:4f:56:
                    99:e4:19:7d:98:a9:99:00:b2:79:90:5b:c1:a9:d7:
                    39:cd:4e:95:f5:ef:e2:49:67:bc:06:e5:31:10:88:
                    ba:ff:5f:e4:55:35:63:f7:3d:eb:65:e9:9f:d7:91:
                    3c:c8:c3:4d:b7:af:59:4d:00:36:f2:b7:1c:f0:5a:
                    f2:30:ec:0e:eb:b9:6c:19:bd:a7:37:2e:b3:92:46:
                    b0:33:f7:e9:5f:19:8c:2e:75:a6:a2:58:17:2c:db:
                    02:24:41:f3:e6:ec:df:7e:da:f4:63:85:f6:c0:a3:
                    21:d3:56:91:f4:4d:ef:69:d0:a6:0b:37:4e:9e:bb:
                    d3:e6:15:5e:91:cf:bf:48:32:c4:b4:48:c5:82:09:
                    f9:d9:18:ca:f6:42:5f:20:eb:56:a8:18:1c:07:51:
                    ce:2d:28:2d:f4:c8:62:35:88:8e:76:74:19:ff:01:
                    40:0f:40:32:49:d0:6c:a1:0b:48:71:3d:b1:33:3b:
                    f7:b9:cf:39:10:df:53:85:c0:75:b2:67:2b:f6:09:
                    a8:02:32:25:02:69:36:a8:84:1a:21:83:6d:75:2f:
                    ae:a5:a4:87:a0:c9:54:1b:f6:1f:3c:1b:8f:fc:05:
                    92:cb:81:42:ef:25:d6:a0:6a:77:1a:e0:e3:ed:cd:
                    df:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:5E:68:D6:03:FF:0B:E8:49:AD:EC:1F:A0:91:AA:18:F4:C9:8A:AA
            X509v3 Authority Key Identifier:
                keyid:20:B9:C4:7C:5E:60:64:54:FC:31:4A:D7:D8:CD:78:6F:B8:04:9F:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/46AA70DCBED89305C56286B2D479399AC5133D09597ACEEF8837E4E6ED78BDB5/0/20B9C47C5E606454FC314AD7D8CD786FB8049FF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20B9C47C5E606454FC314AD7D8CD786FB8049FF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/46AA70DCBED89305C56286B2D479399AC5133D09597ACEEF8837E4E6ED78BDB5/0/3136302e3233382e3235342e302f32332d3233203d3e20323634383539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:ac:db:bd:0d:ea:71:df:0a:3d:d9:02:81:2d:d0:19:ee:fa:
         eb:da:dd:35:a9:0f:b6:13:1c:e5:f7:0d:df:4b:ed:60:50:f4:
         88:3c:ea:27:28:01:68:ae:70:ec:88:15:cc:6c:72:68:a6:22:
         a8:ae:b3:ce:6a:29:5f:6d:de:f0:04:ac:85:58:7a:68:5e:4f:
         36:2b:8a:64:66:f5:54:ae:b8:b4:c0:a2:a1:af:06:25:63:cd:
         6f:92:65:5e:71:82:72:b8:f5:01:ae:00:f5:7c:b8:8d:89:c4:
         b0:35:61:3f:4a:c3:1b:0a:f4:50:cf:48:0d:5a:36:8d:20:56:
         5d:d7:17:81:c0:f0:c3:35:cd:88:69:a5:5f:72:2b:af:df:02:
         6f:4f:83:46:39:fb:17:d3:05:8a:94:52:5d:a1:65:86:1d:6d:
         69:46:56:dd:f9:be:87:69:08:63:19:cc:5e:41:b8:d5:27:ff:
         a5:91:fc:bb:ca:1e:c9:b5:56:73:3f:c5:15:d9:4e:63:b1:6a:
         ae:ef:f5:e8:08:31:91:4e:af:e2:9d:ca:84:4d:50:1b:53:f6:
         99:e5:ea:fc:7f:75:34:e0:9c:a2:78:1f:53:7e:7c:ae:a2:ae:
         ce:94:72:1d:67:76:5b:64:5b:e7:ae:3e:db:aa:bb:f4:bb:d4:
         31:19:9b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:38:36 2026 by rpki-client