Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51720634CD7ECF83983D328C94314C3F01C0804FD39ADA5CCBF37C47359FED95/0/3137302e38302e31362e302f32322d3234203d3e20323632323433.roa
File:                     3137302e38302e31362e302f32322d3234203d3e20323632323433.roa (raw, json)
Hash identifier:          ZgcVHFgdZGjV8AdD/IQWISIGukiokGc1d10Hi/vPrUw=
Subject key identifier:   A8:7B:96:90:1B:CF:ED:42:98:C8:8C:D2:0E:71:22:0D:77:2B:4D:46
Certificate issuer:       /CN=0ED6B673F8639E1BFA76C3D0C7C86D575AE0F0CE
Certificate serial:       5167EA25B5FAC277572117837448FA364DA3437C
Authority key identifier: 0E:D6:B6:73:F8:63:9E:1B:FA:76:C3:D0:C7:C8:6D:57:5A:E0:F0:CE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0ED6B673F8639E1BFA76C3D0C7C86D575AE0F0CE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51720634CD7ECF83983D328C94314C3F01C0804FD39ADA5CCBF37C47359FED95/0/3137302e38302e31362e302f32322d3234203d3e20323632323433.roa
Signing time:             Fri 10 Apr 2026 13:55:01 +0000
ROA not before:           Fri 10 Apr 2026 13:50:01 +0000
ROA not after:            Fri 09 Apr 2027 13:55:01 +0000
asID:                     262243
IP address blocks:        170.80.16.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51720634CD7ECF83983D328C94314C3F01C0804FD39ADA5CCBF37C47359FED95/0/0ED6B673F8639E1BFA76C3D0C7C86D575AE0F0CE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51720634CD7ECF83983D328C94314C3F01C0804FD39ADA5CCBF37C47359FED95/0/0ED6B673F8639E1BFA76C3D0C7C86D575AE0F0CE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0ED6B673F8639E1BFA76C3D0C7C86D575AE0F0CE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 04:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:67:ea:25:b5:fa:c2:77:57:21:17:83:74:48:fa:36:4d:a3:43:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ED6B673F8639E1BFA76C3D0C7C86D575AE0F0CE
        Validity
            Not Before: Apr 10 13:50:01 2026 GMT
            Not After : Apr  9 13:55:01 2027 GMT
        Subject: CN=A87B96901BCFED4298C88CD20E71220D772B4D46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:78:54:e9:bc:dc:31:6d:8c:66:92:6f:1f:b0:
                    1e:30:9d:4e:a1:9e:de:8e:08:3d:55:da:cc:f3:c3:
                    a9:fe:c9:22:da:39:07:3c:d3:e4:1d:70:ff:19:8e:
                    7d:89:48:5b:ce:ce:8d:5b:53:51:bc:9d:d2:f9:72:
                    2e:63:63:3d:0a:72:a2:a4:fd:17:f0:fa:5f:67:7a:
                    14:1b:0c:55:c1:a3:11:8b:f1:b7:5a:2a:4d:77:12:
                    df:c5:14:f2:8c:23:f3:91:41:2c:57:6e:5a:c7:b9:
                    82:97:30:ed:83:58:a3:c0:c7:b3:58:c0:84:45:2c:
                    60:b8:26:12:8d:17:7e:c4:d6:d6:1b:53:7c:13:b3:
                    78:d8:f0:08:58:40:e0:2f:bf:61:b7:7b:2f:b1:a7:
                    38:88:e5:02:a3:7a:6f:ac:88:a6:2d:33:14:34:f6:
                    53:5c:b7:d8:e2:cd:2f:87:c0:0d:ca:83:cd:e1:cf:
                    76:4f:df:e9:af:dc:2d:65:d0:4c:0f:43:6c:cc:47:
                    49:71:c7:3d:62:2d:76:c6:59:20:d9:92:25:bb:e9:
                    0a:e4:62:c7:96:6c:1d:7f:2b:ad:29:95:da:2c:db:
                    42:30:03:a0:bd:dc:f9:bb:37:33:af:c4:45:0e:2a:
                    ba:14:cc:94:e0:40:7f:dd:16:33:e3:6a:d9:85:5c:
                    10:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:7B:96:90:1B:CF:ED:42:98:C8:8C:D2:0E:71:22:0D:77:2B:4D:46
            X509v3 Authority Key Identifier:
                keyid:0E:D6:B6:73:F8:63:9E:1B:FA:76:C3:D0:C7:C8:6D:57:5A:E0:F0:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51720634CD7ECF83983D328C94314C3F01C0804FD39ADA5CCBF37C47359FED95/0/0ED6B673F8639E1BFA76C3D0C7C86D575AE0F0CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0ED6B673F8639E1BFA76C3D0C7C86D575AE0F0CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51720634CD7ECF83983D328C94314C3F01C0804FD39ADA5CCBF37C47359FED95/0/3137302e38302e31362e302f32322d3234203d3e20323632323433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c1:12:10:ae:1e:37:b2:b4:c2:60:9b:9e:b6:9b:d7:90:0a:88:
         38:55:2e:7f:ab:b1:fa:10:a6:88:9e:12:ec:9b:16:e7:1d:85:
         54:c6:d3:6b:e8:3c:31:f9:76:e1:50:22:1e:29:fb:a8:34:84:
         fb:4a:ec:fb:e7:19:e5:52:3e:4f:fa:86:88:d9:15:25:4c:a9:
         a6:34:21:a4:c4:5b:67:4f:96:cf:d8:f4:ae:fb:29:f4:51:6d:
         00:bf:23:6b:a1:4e:1e:d3:9e:3e:47:0a:7d:31:55:38:aa:29:
         44:50:7a:e6:59:80:01:84:6d:25:f4:b1:8c:b6:ca:11:39:06:
         55:11:7f:26:64:42:0e:a1:65:60:11:b4:59:8a:87:23:52:0c:
         85:84:10:c4:5e:0a:7c:1e:ce:a7:36:dc:bb:ef:b1:d6:f0:d8:
         46:c4:c9:83:de:48:b6:66:ac:9a:1a:5a:10:f5:ac:70:7e:cd:
         86:b3:79:51:ee:98:c5:f9:ef:90:13:13:c8:99:a8:b5:c4:9d:
         ef:1b:30:d5:21:ab:10:3d:b7:61:7e:20:76:bc:34:f2:26:6e:
         be:35:70:ba:d4:30:4c:c7:4d:00:bc:86:29:c2:14:4d:3f:e3:
         d5:dc:58:0c:07:6d:6f:5b:ba:df:3e:27:dc:ad:a4:17:05:54:
         29:b5:71:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:13:12 2026 by rpki-client