Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/75031FAC76914352C9528030F983F07816964B22F6D6496B30CBB4E63690F869/0/3136382e3230352e3137302e302f32332d3234203d3e203532343731.roa
File:                     3136382e3230352e3137302e302f32332d3234203d3e203532343731.roa (raw, json)
Hash identifier:          d1syg0qOnxrXHtVge+AwqeCCaJ/lvZM528TDCYlCzio=
Subject key identifier:   A7:0C:34:35:40:A7:DE:10:12:45:71:37:CF:89:4C:77:09:4D:47:A8
Certificate issuer:       /CN=5B9D96661EC85627A1F4994E893F26FFC408AFAC
Certificate serial:       47127F590458DD0FD06A0E486B85B520428EF075
Authority key identifier: 5B:9D:96:66:1E:C8:56:27:A1:F4:99:4E:89:3F:26:FF:C4:08:AF:AC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B9D96661EC85627A1F4994E893F26FFC408AFAC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/75031FAC76914352C9528030F983F07816964B22F6D6496B30CBB4E63690F869/0/3136382e3230352e3137302e302f32332d3234203d3e203532343731.roa
Signing time:             Sat 25 Jul 2026 07:39:34 +0000
ROA not before:           Sat 25 Jul 2026 07:34:34 +0000
ROA not after:            Sat 24 Jul 2027 07:39:34 +0000
asID:                     52471
IP address blocks:        168.205.170.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/75031FAC76914352C9528030F983F07816964B22F6D6496B30CBB4E63690F869/0/5B9D96661EC85627A1F4994E893F26FFC408AFAC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/75031FAC76914352C9528030F983F07816964B22F6D6496B30CBB4E63690F869/0/5B9D96661EC85627A1F4994E893F26FFC408AFAC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B9D96661EC85627A1F4994E893F26FFC408AFAC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Aug 2026 14:16:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:12:7f:59:04:58:dd:0f:d0:6a:0e:48:6b:85:b5:20:42:8e:f0:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B9D96661EC85627A1F4994E893F26FFC408AFAC
        Validity
            Not Before: Jul 25 07:34:34 2026 GMT
            Not After : Jul 24 07:39:34 2027 GMT
        Subject: CN=A70C343540A7DE1012457137CF894C77094D47A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a7:4b:da:3a:28:bf:47:74:25:19:11:ac:4a:
                    49:28:71:6f:98:fa:7f:69:0a:26:2c:b6:21:2a:fd:
                    a4:23:a2:7b:07:e7:9d:24:c0:22:f1:de:84:17:ca:
                    ca:2a:82:5c:85:09:a4:5d:73:b3:ea:d9:15:93:be:
                    16:47:12:0e:9d:59:46:90:1e:f8:31:fc:ca:5e:7e:
                    bb:12:bb:f2:ea:0e:49:bc:3e:e6:82:a5:af:83:a0:
                    79:b9:7d:96:04:cf:1e:69:84:c0:39:81:6e:73:ce:
                    21:b1:14:6a:0b:71:8e:5d:40:f4:bf:9c:26:c3:32:
                    fa:d3:a5:94:93:96:d9:7c:f0:4a:7b:34:88:27:8a:
                    7b:4f:e4:27:45:d8:00:f7:d1:3b:5f:64:d2:c6:8a:
                    26:e7:c6:df:68:66:08:41:27:81:6a:ad:08:11:d0:
                    5d:83:41:43:6f:91:65:86:c6:54:b9:b3:4a:cf:8c:
                    f8:43:55:ea:26:41:60:b8:a9:57:54:1a:d3:5e:b7:
                    81:e4:eb:2d:cd:86:7c:ca:06:49:91:19:79:a5:bf:
                    f7:7e:b8:5e:de:89:83:25:a5:a8:d3:b7:27:29:a1:
                    3c:3c:9f:f7:65:ac:b2:6a:46:f6:64:6e:3b:1f:0b:
                    d0:45:14:e1:c7:cd:e2:7e:2e:e9:19:76:6f:65:92:
                    17:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:0C:34:35:40:A7:DE:10:12:45:71:37:CF:89:4C:77:09:4D:47:A8
            X509v3 Authority Key Identifier:
                keyid:5B:9D:96:66:1E:C8:56:27:A1:F4:99:4E:89:3F:26:FF:C4:08:AF:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/75031FAC76914352C9528030F983F07816964B22F6D6496B30CBB4E63690F869/0/5B9D96661EC85627A1F4994E893F26FFC408AFAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B9D96661EC85627A1F4994E893F26FFC408AFAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/75031FAC76914352C9528030F983F07816964B22F6D6496B30CBB4E63690F869/0/3136382e3230352e3137302e302f32332d3234203d3e203532343731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8b:08:7f:94:75:f1:84:b4:ae:3e:d1:5e:e8:fa:2f:3c:9d:cb:
         c2:fe:95:98:e8:64:7d:58:7b:3d:83:b7:51:35:a6:b0:27:67:
         ba:c3:4c:dc:30:c3:69:64:34:41:7a:4c:cb:b2:83:cd:23:5f:
         da:65:9f:99:e2:d0:da:e1:83:81:56:07:40:4a:e5:7b:0b:78:
         92:55:06:d9:ae:29:61:7b:9f:9b:fd:45:b6:03:ea:0b:c3:8b:
         9c:60:f6:21:a4:24:e7:7b:d0:15:47:1c:91:38:30:00:36:3a:
         ea:3c:82:3d:d7:b9:52:99:d2:19:be:f3:6c:ec:93:39:d7:8c:
         c9:50:9f:f8:27:fd:94:82:48:ba:8a:f4:a8:96:43:bd:70:a5:
         a4:0a:28:88:ee:d3:08:b9:1f:91:aa:91:4b:84:72:42:5a:ff:
         88:58:85:a8:1d:d1:21:45:2d:a1:51:03:f3:15:77:a2:3c:47:
         7e:96:26:15:da:58:d2:08:cc:32:b0:84:7a:ae:1f:1e:2f:74:
         97:3a:64:c7:94:16:8e:ed:53:c5:23:ac:1a:59:38:ea:73:7e:
         d6:55:84:78:5e:07:4f:b3:fa:59:1b:12:6a:68:2c:37:f7:db:
         85:27:b8:ee:d4:ae:ab:28:5c:0e:d5:f8:47:97:54:2b:54:16:
         ad:4e:96:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 17:28:22 2026 by rpki-client