Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3134382e3233302e31392e302f32342d3234203d3e203236363137.roa
File:                     3134382e3233302e31392e302f32342d3234203d3e203236363137.roa (raw, json)
Hash identifier:          TjFC8R7khb6f3TiLIc/BOs7snAoUl44ylh6YFI59lQI=
Subject key identifier:   B4:FD:C9:5E:98:9E:4B:89:A9:17:A2:46:9D:2E:5F:56:6C:82:21:C4
Certificate issuer:       /CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
Certificate serial:       53BF0B059251774CCDA1A3DBCED3473FD358CB70
Authority key identifier: 4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3134382e3233302e31392e302f32342d3234203d3e203236363137.roa
Signing time:             Tue 07 Apr 2026 00:37:43 +0000
ROA not before:           Tue 07 Apr 2026 00:32:43 +0000
ROA not after:            Tue 06 Apr 2027 00:37:43 +0000
asID:                     26617
IP address blocks:        148.230.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 00:51:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:bf:0b:05:92:51:77:4c:cd:a1:a3:db:ce:d3:47:3f:d3:58:cb:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
        Validity
            Not Before: Apr  7 00:32:43 2026 GMT
            Not After : Apr  6 00:37:43 2027 GMT
        Subject: CN=B4FDC95E989E4B89A917A2469D2E5F566C8221C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3b:58:39:ef:4a:50:8e:10:25:9b:f6:2f:e4:
                    da:cb:b1:2e:52:d3:cf:07:06:f8:87:d1:67:47:f9:
                    43:f1:d1:9e:0e:98:da:d8:66:d4:f9:96:e0:d1:f5:
                    f3:90:3c:e2:fc:8b:83:a0:ea:c1:5e:4f:b4:c7:d7:
                    d1:7f:9f:94:10:fb:d1:30:22:1e:98:43:1c:65:56:
                    f4:b3:8b:d6:a9:04:70:29:1d:dc:07:9b:99:dc:fe:
                    30:a1:e4:2b:e2:48:bb:52:89:a2:38:0c:35:c0:ae:
                    e4:cf:aa:e0:f6:da:d3:97:c2:a7:ad:2d:54:3f:a5:
                    5f:d3:11:ba:e2:a2:5e:34:62:94:9c:d7:85:09:71:
                    47:52:bf:c7:30:20:1d:aa:8a:f1:08:e6:4e:55:cc:
                    0d:7a:ec:f5:36:d7:6a:da:64:96:b3:d0:3e:e1:ba:
                    28:c4:dc:38:05:be:03:c7:46:4e:34:4b:ab:1f:c5:
                    1c:38:ac:c6:f6:16:5b:92:d6:48:5a:e8:47:b3:97:
                    77:2d:17:96:6f:78:de:59:18:41:b6:6d:30:66:a9:
                    5f:f9:4a:85:af:dd:ea:fc:4f:56:29:84:e4:bc:8f:
                    ca:11:ac:22:4b:f4:a4:3c:bd:38:34:0e:ca:d7:90:
                    51:26:ff:51:7e:b6:a9:e5:8a:76:d6:2e:4a:6e:78:
                    76:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:FD:C9:5E:98:9E:4B:89:A9:17:A2:46:9D:2E:5F:56:6C:82:21:C4
            X509v3 Authority Key Identifier:
                keyid:4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3134382e3233302e31392e302f32342d3234203d3e203236363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.230.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:63:b7:e8:06:e1:d1:7e:49:cb:14:cc:00:54:68:ed:5e:e0:
         6a:46:20:37:a6:f6:bf:eb:e8:83:92:ef:7b:b2:a0:15:b8:a0:
         03:36:c2:ef:58:6d:64:84:18:5c:94:30:0a:37:15:b9:6b:83:
         62:77:c9:d9:db:a6:df:8c:4b:37:35:a1:2d:25:22:79:d4:af:
         d7:92:70:28:ca:c7:18:cb:2a:a5:8b:65:da:20:df:0c:9d:fc:
         0e:67:3e:e4:d1:dd:4e:59:4e:46:d5:7c:12:97:74:17:31:a4:
         fa:05:e7:66:94:c5:ee:8d:ff:f8:d6:e4:82:9c:fa:12:ff:85:
         0e:11:11:9d:8f:93:22:20:db:96:69:f4:e1:00:75:10:8d:9d:
         12:57:23:8a:f1:92:c1:32:5c:95:22:ea:a6:4e:18:73:b2:b8:
         7b:51:f2:94:12:86:7a:7b:28:4a:d3:c1:e3:ee:b5:42:03:80:
         dc:3a:22:8c:98:39:a4:06:51:27:54:69:b3:b3:26:34:54:8f:
         38:7d:dd:06:96:19:b5:47:78:c5:5b:ba:f4:b0:c7:14:45:d6:
         28:3c:64:52:cc:13:e9:a7:2a:bd:68:4b:33:de:18:11:eb:25:
         67:39:f1:82:a4:08:85:42:05:45:03:0e:87:cd:e6:e9:f2:fc:
         4e:ee:a1:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:33:17 2026 by rpki-client