Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/574430CECA3434AF6DCFC8D382C90EB1F8088A145C1C560741CC0B491DF2A0AE/0/3137302e3233382e34302e302f32322d3234203d3e20323634373935.roa
File:                     3137302e3233382e34302e302f32322d3234203d3e20323634373935.roa (raw, json)
Hash identifier:          rAxse49kzb2pniesgWW2YDUH84k1McPVPcVFeUnxPew=
Subject key identifier:   D9:51:E4:A9:15:70:60:C0:18:06:FA:8E:62:85:BA:48:B0:8B:D8:73
Certificate issuer:       /CN=1D6D410EA3908E725CB3877864E87184F8414DD7
Certificate serial:       02A4A10A07910801818B20BFFFE15E8A8EB74FCF
Authority key identifier: 1D:6D:41:0E:A3:90:8E:72:5C:B3:87:78:64:E8:71:84:F8:41:4D:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D6D410EA3908E725CB3877864E87184F8414DD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/574430CECA3434AF6DCFC8D382C90EB1F8088A145C1C560741CC0B491DF2A0AE/0/3137302e3233382e34302e302f32322d3234203d3e20323634373935.roa
Signing time:             Fri 27 Feb 2026 15:32:09 +0000
ROA not before:           Fri 27 Feb 2026 15:27:09 +0000
ROA not after:            Fri 26 Feb 2027 15:32:09 +0000
asID:                     264795
IP address blocks:        170.238.40.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/574430CECA3434AF6DCFC8D382C90EB1F8088A145C1C560741CC0B491DF2A0AE/0/1D6D410EA3908E725CB3877864E87184F8414DD7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/574430CECA3434AF6DCFC8D382C90EB1F8088A145C1C560741CC0B491DF2A0AE/0/1D6D410EA3908E725CB3877864E87184F8414DD7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D6D410EA3908E725CB3877864E87184F8414DD7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:a4:a1:0a:07:91:08:01:81:8b:20:bf:ff:e1:5e:8a:8e:b7:4f:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D6D410EA3908E725CB3877864E87184F8414DD7
        Validity
            Not Before: Feb 27 15:27:09 2026 GMT
            Not After : Feb 26 15:32:09 2027 GMT
        Subject: CN=D951E4A9157060C01806FA8E6285BA48B08BD873
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a8:50:d8:c8:05:8b:a9:bd:f2:9e:6d:33:c4:
                    e6:61:4f:7c:e5:34:e1:6f:6e:3a:b4:3f:74:fc:65:
                    09:be:10:44:3c:b8:3b:e0:68:92:db:01:76:c2:b2:
                    51:a4:c2:92:18:dc:98:b4:7d:77:14:98:a2:5d:2f:
                    4c:09:dd:b8:ca:a2:10:22:03:92:7a:14:36:80:8c:
                    88:c8:10:08:13:fb:a9:58:07:03:00:65:89:a9:d8:
                    6f:9e:7b:97:c5:a2:e9:43:5a:6f:24:c4:36:1f:c8:
                    ca:0e:6f:d1:98:bf:34:ac:b1:e2:57:68:6d:f8:c0:
                    2d:5b:01:af:34:a7:44:20:9e:ff:cb:f5:ee:e1:d7:
                    f1:50:f1:1f:18:7c:90:8b:a1:03:12:c2:20:94:d6:
                    f0:2d:8a:ad:06:67:34:ce:9d:d3:68:5b:64:52:17:
                    3a:33:8d:15:01:64:a5:0c:5f:f4:d9:32:05:28:64:
                    74:87:56:7d:5e:1c:ce:e8:45:14:15:3d:49:6d:82:
                    64:18:ab:38:14:10:ae:cf:0c:22:6f:e5:3b:37:fb:
                    bf:2b:5e:63:b3:30:63:a3:20:35:84:b5:64:4e:ae:
                    a4:35:71:eb:83:2f:70:c6:2c:fb:97:d0:95:d2:6b:
                    d1:6e:e4:03:dd:31:3e:16:e1:40:6a:30:ca:3a:0a:
                    74:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:51:E4:A9:15:70:60:C0:18:06:FA:8E:62:85:BA:48:B0:8B:D8:73
            X509v3 Authority Key Identifier:
                keyid:1D:6D:41:0E:A3:90:8E:72:5C:B3:87:78:64:E8:71:84:F8:41:4D:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/574430CECA3434AF6DCFC8D382C90EB1F8088A145C1C560741CC0B491DF2A0AE/0/1D6D410EA3908E725CB3877864E87184F8414DD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D6D410EA3908E725CB3877864E87184F8414DD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/574430CECA3434AF6DCFC8D382C90EB1F8088A145C1C560741CC0B491DF2A0AE/0/3137302e3233382e34302e302f32322d3234203d3e20323634373935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:c0:b5:58:35:53:6d:af:d0:d9:20:7f:2f:27:67:56:c3:a4:
         c6:aa:e2:c5:ef:96:7e:d5:74:bf:db:4b:14:7b:82:ea:0c:85:
         a9:60:77:24:b0:73:9f:da:a9:7c:c6:4c:37:ac:49:32:25:05:
         c5:71:f6:5b:d0:02:04:de:ec:dd:c1:22:9e:ae:38:b8:c3:7b:
         64:b9:39:49:1c:e6:07:44:32:23:ab:d7:5e:29:ae:83:29:9a:
         fd:9c:a1:f7:ad:0f:69:c2:64:c8:bf:e0:78:cc:2f:6c:f5:51:
         94:07:ff:36:90:11:92:16:d3:0d:f5:2a:ce:ea:bb:5e:10:98:
         0d:63:11:52:55:22:a4:d8:50:0f:b7:be:87:86:9c:da:84:52:
         53:5d:88:f3:b9:cb:e4:d8:9d:d8:c9:db:68:83:e0:87:a9:38:
         65:0f:0b:fc:06:06:04:a0:61:ba:1e:13:78:44:59:62:db:a2:
         fc:d3:0d:c8:8a:59:fe:34:a0:66:5d:1d:c9:62:71:37:79:62:
         e6:4a:55:9b:81:42:19:2b:e3:a5:ab:13:66:06:ba:c3:63:67:
         36:3e:ce:1c:3d:e7:48:ac:6d:4b:70:96:75:af:40:5d:4c:e3:
         54:a6:bf:a9:5d:86:07:9a:e2:7d:4c:53:9e:2a:b9:ee:12:99:
         87:33:90:d9
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUAqShCgeRCAGBiyC//+Feio63T88wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUQ2RDQxMEVBMzkwOEU3MjVDQjM4Nzc4NjRFODcxODRG
ODQxNERENzAeFw0yNjAyMjcxNTI3MDlaFw0yNzAyMjYxNTMyMDlaMDMxMTAvBgNV
BAMTKEQ5NTFFNEE5MTU3MDYwQzAxODA2RkE4RTYyODVCQTQ4QjA4QkQ4NzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClqFDYyAWLqb3ynm0zxOZhT3zl
NOFvbjq0P3T8ZQm+EEQ8uDvgaJLbAXbCslGkwpIY3Ji0fXcUmKJdL0wJ3bjKohAi
A5J6FDaAjIjIEAgT+6lYBwMAZYmp2G+ee5fFoulDWm8kxDYfyMoOb9GYvzSsseJX
aG34wC1bAa80p0Qgnv/L9e7h1/FQ8R8YfJCLoQMSwiCU1vAtiq0GZzTOndNoW2RS
FzozjRUBZKUMX/TZMgUoZHSHVn1eHM7oRRQVPUltgmQYqzgUEK7PDCJv5Ts3+78r
XmOzMGOjIDWEtWROrqQ1ceuDL3DGLPuX0JXSa9Fu5APdMT4W4UBqMMo6CnQPAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU2VHkqRVwYMAYBvqOYoW6SLCL2HMwHwYDVR0j
BBgwFoAUHW1BDqOQjnJcs4d4ZOhxhPhBTdcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NzQ0MzBDRUNBMzQzNEFGNkRDRkM4RDM4MkM5MEVCMUY4
MDg4QTE0NUMxQzU2MDc0MUNDMEI0OTFERjJBMEFFLzAvMUQ2RDQxMEVBMzkwOEU3
MjVDQjM4Nzc4NjRFODcxODRGODQxNERENy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xRDZENDEwRUEzOTA4RTcyNUNC
Mzg3Nzg2NEU4NzE4NEY4NDE0REQ3LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTc0NDMwQ0VDQTM0MzRBRjZEQ0ZDOEQzODJDOTBFQjFGODA4OEExNDVD
MUM1NjA3NDFDQzBCNDkxREYyQTBBRS8wLzMxMzczMDJlMzIzMzM4MmUzNDMwMmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM0MzczOTM1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqu4o
MA0GCSqGSIb3DQEBCwUAA4IBAQAZwLVYNVNtr9DZIH8vJ2dWw6TGquLF75Z+1XS/
20sUe4LqDIWpYHcksHOf2ql8xkw3rEkyJQXFcfZb0AIE3uzdwSKerji4w3tkuTlJ
HOYHRDIjq9deKa6DKZr9nKH3rQ9pwmTIv+B4zC9s9VGUB/82kBGSFtMN9SrO6rte
EJgNYxFSVSKk2FAPt76HhpzahFJTXYjzucvk2J3Yydtog+CHqThlDwv8BgYEoGG6
HhN4RFli26L80w3Iiln+NKBmXR3JYnE3eWLmSlWbgUIZK+OlqxNmBrrDY2c2Ps4c
PedIrG1LcJZ1r0BdTONUpr+pXYYHmuJ9TFOeKrnuEpmHM5DZ
-----END CERTIFICATE-----
Generated at Mon Mar 2 23:09:46 2026 by rpki-client