Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/84380F178E7F2128D1EC239DFDB18C666D849AAB8B7E0960A9BE139A9D98812F/0/3137302e3234372e3231322e302f32322d3234203d3e20323634363630.roa
File:                     3137302e3234372e3231322e302f32322d3234203d3e20323634363630.roa (raw, json)
Hash identifier:          4HYQewLH8bzX7iDdDQH321M6ZG6ryRvS2QESs565/P0=
Subject key identifier:   D3:34:25:DC:D9:FB:3F:40:1C:CC:AE:D0:4D:AC:91:62:47:A6:D3:D1
Certificate issuer:       /CN=84445FEE22581E9527451A2023AA1565199DA88D
Certificate serial:       0C79629D0924FB908E84AB72B40030423C0F2635
Authority key identifier: 84:44:5F:EE:22:58:1E:95:27:45:1A:20:23:AA:15:65:19:9D:A8:8D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84445FEE22581E9527451A2023AA1565199DA88D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/84380F178E7F2128D1EC239DFDB18C666D849AAB8B7E0960A9BE139A9D98812F/0/3137302e3234372e3231322e302f32322d3234203d3e20323634363630.roa
Signing time:             Tue 06 Jan 2026 19:16:33 +0000
ROA not before:           Tue 06 Jan 2026 19:11:33 +0000
ROA not after:            Tue 05 Jan 2027 19:16:33 +0000
asID:                     264660
IP address blocks:        170.247.212.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/84380F178E7F2128D1EC239DFDB18C666D849AAB8B7E0960A9BE139A9D98812F/0/84445FEE22581E9527451A2023AA1565199DA88D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/84380F178E7F2128D1EC239DFDB18C666D849AAB8B7E0960A9BE139A9D98812F/0/84445FEE22581E9527451A2023AA1565199DA88D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84445FEE22581E9527451A2023AA1565199DA88D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:79:62:9d:09:24:fb:90:8e:84:ab:72:b4:00:30:42:3c:0f:26:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84445FEE22581E9527451A2023AA1565199DA88D
        Validity
            Not Before: Jan  6 19:11:33 2026 GMT
            Not After : Jan  5 19:16:33 2027 GMT
        Subject: CN=D33425DCD9FB3F401CCCAED04DAC916247A6D3D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1b:cd:8f:9d:f0:15:2f:bd:ec:35:83:1d:a5:
                    c5:5e:c0:9a:4f:ee:38:6b:19:60:b6:4f:d5:7b:54:
                    9d:aa:1f:f4:e7:dc:2f:0a:44:16:ab:6a:dc:fc:87:
                    2f:0f:5f:08:b9:dc:b7:24:bb:4d:6c:c4:97:19:66:
                    27:14:b9:92:85:87:6e:aa:be:2a:99:8e:03:4e:69:
                    6b:4d:cb:75:e1:98:55:45:45:43:57:4a:4a:4f:15:
                    48:1b:06:7c:d9:73:92:12:cb:c8:31:8f:a3:d9:73:
                    ba:eb:c3:2e:f5:22:8b:e8:42:66:2b:2a:5e:aa:01:
                    3b:e6:b4:4f:1d:0f:cc:a6:7a:a8:80:46:e8:e4:8a:
                    0d:e3:3b:e3:94:af:11:08:56:6c:5c:9d:86:ac:d1:
                    4e:6c:19:42:54:f8:fa:15:cb:bb:ac:66:05:06:5c:
                    73:b9:44:ac:5f:03:29:6d:4a:cf:e6:7e:41:f3:5c:
                    03:15:e8:cf:64:a5:ee:5a:d9:fc:25:45:a7:9a:e9:
                    a2:2f:27:97:17:aa:38:ce:d6:ae:9c:ad:38:3b:2c:
                    ca:87:94:60:d7:b8:d2:c7:97:44:7c:0c:ca:25:66:
                    ea:2c:db:4b:38:a7:f1:f9:8f:39:a4:bb:21:29:f5:
                    e7:01:ea:4a:12:4b:50:28:a0:ce:4a:4b:8a:d4:24:
                    30:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:34:25:DC:D9:FB:3F:40:1C:CC:AE:D0:4D:AC:91:62:47:A6:D3:D1
            X509v3 Authority Key Identifier:
                keyid:84:44:5F:EE:22:58:1E:95:27:45:1A:20:23:AA:15:65:19:9D:A8:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/84380F178E7F2128D1EC239DFDB18C666D849AAB8B7E0960A9BE139A9D98812F/0/84445FEE22581E9527451A2023AA1565199DA88D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84445FEE22581E9527451A2023AA1565199DA88D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/84380F178E7F2128D1EC239DFDB18C666D849AAB8B7E0960A9BE139A9D98812F/0/3137302e3234372e3231322e302f32322d3234203d3e20323634363630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:01:5b:e5:34:b5:6f:c4:74:ec:68:59:23:08:6f:71:59:71:
         8a:11:4f:a6:d3:1e:f0:b3:5e:b4:a1:55:1e:d2:74:56:33:ac:
         2d:c1:4b:89:1e:d9:e5:16:32:37:84:69:36:03:77:f6:ec:02:
         de:9a:ee:b2:b8:f5:53:53:4d:3a:ae:65:26:66:f0:79:e3:aa:
         a1:e4:98:f7:34:aa:bd:3a:2a:f7:73:13:40:e5:cb:f1:29:55:
         f0:4b:a3:cc:3a:4e:85:85:92:31:4e:7d:56:b7:e3:51:8d:d4:
         a9:77:69:e1:37:41:9f:fe:3e:17:41:f7:6e:77:19:90:fa:2a:
         0c:ab:93:73:67:7d:60:8b:b8:3b:ed:f9:bc:5f:ec:9e:eb:24:
         19:1f:9c:2f:df:3a:dc:96:e5:fc:34:5c:d4:65:49:2d:00:ce:
         e9:71:76:a8:67:d7:a3:18:a2:c6:61:9a:f3:b4:38:00:56:67:
         94:b9:c0:1a:d3:e8:cc:0c:91:dd:7c:87:b0:32:40:a9:ef:88:
         a8:d9:57:c7:0f:0b:70:df:64:73:6e:8c:67:a8:c0:de:91:ff:
         35:d1:69:66:43:c6:1c:a4:ad:1c:72:cd:62:50:a3:92:fd:94:
         38:6d:66:c7:62:b2:9e:62:4c:20:18:6b:b3:f7:65:32:d5:f3:
         28:65:09:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:31:59 2026 by rpki-client