Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/3137302e38312e33322e302f32322d3234203d3e203238313130.roa
File:                     3137302e38312e33322e302f32322d3234203d3e203238313130.roa (raw, json)
Hash identifier:          2WIkzQUDzw8gMVeXKZW6r2N36lOD2hf+BbVnvUFoFu0=
Subject key identifier:   51:D7:D8:D3:F3:11:F9:DC:65:DD:F5:64:DC:C2:B9:C8:2A:96:07:CE
Certificate issuer:       /CN=858889372446EF678E35E9D349C0785A81B8FBB7
Certificate serial:       5AC6658D8CA8C0469698521958C5ACA0D3D64EA2
Authority key identifier: 85:88:89:37:24:46:EF:67:8E:35:E9:D3:49:C0:78:5A:81:B8:FB:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/858889372446EF678E35E9D349C0785A81B8FBB7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/3137302e38312e33322e302f32322d3234203d3e203238313130.roa
Signing time:             Wed 21 Oct 2026 18:42:16 +0000
ROA not before:           Wed 21 Oct 2026 18:37:16 +0000
ROA not after:            Wed 20 Oct 2027 18:42:16 +0000
asID:                     28110
IP address blocks:        170.81.32.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/858889372446EF678E35E9D349C0785A81B8FBB7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/858889372446EF678E35E9D349C0785A81B8FBB7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/858889372446EF678E35E9D349C0785A81B8FBB7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 22:32:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:c6:65:8d:8c:a8:c0:46:96:98:52:19:58:c5:ac:a0:d3:d6:4e:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=858889372446EF678E35E9D349C0785A81B8FBB7
        Validity
            Not Before: Oct 21 18:37:16 2026 GMT
            Not After : Oct 20 18:42:16 2027 GMT
        Subject: CN=51D7D8D3F311F9DC65DDF564DCC2B9C82A9607CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5a:21:e8:94:15:65:1e:9d:7d:85:51:f8:c1:
                    fa:6f:6d:a2:f5:6b:0d:f4:f5:ca:37:25:a3:10:dd:
                    cb:b2:3d:ad:17:68:7a:39:ac:3a:63:0e:24:36:d3:
                    a4:fa:43:cc:c1:d4:49:3d:ea:af:66:14:c0:a6:9c:
                    cf:1a:3e:99:b6:1d:4b:a5:84:02:68:5f:29:47:93:
                    22:34:38:85:62:fa:79:82:29:10:34:ec:d6:2f:63:
                    6b:32:2d:3c:d1:50:4e:7e:0d:46:1c:39:0c:65:4a:
                    70:ba:42:52:17:11:63:8e:33:94:7f:4c:ed:b5:c1:
                    b0:28:b6:91:a4:57:24:7e:54:75:19:cd:1d:77:6c:
                    29:af:3e:14:ab:9d:98:65:72:96:c3:ba:17:ec:ab:
                    fa:28:f1:05:9a:c8:85:4c:eb:12:4e:c9:6e:06:58:
                    cd:20:7f:51:ad:ec:f5:e3:6f:46:bf:9d:22:db:26:
                    a9:6f:b8:d9:99:76:d5:f2:3f:e3:3c:1b:e6:c4:77:
                    56:e1:89:47:0d:61:0f:76:33:1b:a7:cc:39:b0:07:
                    92:4e:00:c6:97:ca:0f:7b:4c:74:4b:b6:f5:48:26:
                    3e:89:dd:4a:98:4a:4b:e4:b8:03:9f:93:93:70:f1:
                    3a:52:f1:cb:96:d7:95:92:bd:42:9a:58:31:57:fb:
                    6c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:D7:D8:D3:F3:11:F9:DC:65:DD:F5:64:DC:C2:B9:C8:2A:96:07:CE
            X509v3 Authority Key Identifier:
                keyid:85:88:89:37:24:46:EF:67:8E:35:E9:D3:49:C0:78:5A:81:B8:FB:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/858889372446EF678E35E9D349C0785A81B8FBB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/858889372446EF678E35E9D349C0785A81B8FBB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/3137302e38312e33322e302f32322d3234203d3e203238313130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:84:5f:a7:db:08:cc:ad:d7:b1:ef:67:ce:da:95:3f:3e:8f:
         d1:e5:c2:bb:36:c8:72:bf:ea:93:e6:d5:06:4c:d3:b4:5f:7a:
         73:58:bf:8c:fa:27:56:b2:f7:68:c1:23:16:cf:3e:69:33:c9:
         8b:6d:3a:1a:47:a3:da:f2:da:1f:3a:e3:58:cc:ae:c8:d5:e6:
         c1:9c:72:14:bd:9d:3e:f8:e0:81:bb:b1:e3:52:03:70:04:d2:
         27:a5:f5:72:62:59:40:13:67:88:d4:ce:a2:78:6d:e1:11:45:
         7a:6d:8a:7e:d3:e8:45:64:7e:a6:06:f9:47:c1:2e:75:db:55:
         0b:0e:51:0c:97:47:3a:7f:bd:d0:15:74:17:0d:26:81:64:7a:
         88:25:41:e2:9b:17:f8:8d:91:ee:7c:cf:53:2a:70:99:1c:b9:
         5d:1b:70:c5:fa:97:73:5a:c3:64:9a:91:cf:7e:b9:6c:a5:6c:
         fa:e6:e8:a5:ba:aa:46:4f:b0:69:13:ee:97:d2:ce:75:52:05:
         30:6b:d1:b0:9d:d6:4a:1f:82:ef:35:d3:33:3a:6a:34:3b:4e:
         77:f5:5d:3f:8f:0e:da:4e:11:f4:18:ed:62:86:39:41:f4:f0:
         2f:e7:02:75:57:0d:72:73:44:fd:e6:8a:db:99:2f:7d:31:e2:
         1d:0a:9b:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 13:46:29 2026 by rpki-client