Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8B1815EAB5FB4E95B361E0B16E012767B7D8844F8F6A480D57EC28AAED1545B7/0/3137302e3233332e3135332e302f32342d3234203d3e20313938393439.roa
File:                     3137302e3233332e3135332e302f32342d3234203d3e20313938393439.roa (raw, json)
Hash identifier:          WO4nuZxcU71VFIfugng6LyzojAPhaQNzUeYxmPNEnn0=
Subject key identifier:   B2:EE:DF:17:C3:01:F9:13:AE:67:7F:B4:C4:23:DC:81:2E:10:92:28
Certificate issuer:       /CN=2ED47C2FB75D2367E01C76EF5BD93642FE56F051
Certificate serial:       02306FF52C4C6849F057DE195024B76C816D741E
Authority key identifier: 2E:D4:7C:2F:B7:5D:23:67:E0:1C:76:EF:5B:D9:36:42:FE:56:F0:51
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2ED47C2FB75D2367E01C76EF5BD93642FE56F051.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8B1815EAB5FB4E95B361E0B16E012767B7D8844F8F6A480D57EC28AAED1545B7/0/3137302e3233332e3135332e302f32342d3234203d3e20313938393439.roa
Signing time:             Tue 24 Feb 2026 19:31:41 +0000
ROA not before:           Tue 24 Feb 2026 19:26:41 +0000
ROA not after:            Tue 23 Feb 2027 19:31:41 +0000
asID:                     198949
IP address blocks:        170.233.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8B1815EAB5FB4E95B361E0B16E012767B7D8844F8F6A480D57EC28AAED1545B7/0/2ED47C2FB75D2367E01C76EF5BD93642FE56F051.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8B1815EAB5FB4E95B361E0B16E012767B7D8844F8F6A480D57EC28AAED1545B7/0/2ED47C2FB75D2367E01C76EF5BD93642FE56F051.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2ED47C2FB75D2367E01C76EF5BD93642FE56F051.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Mar 2026 17:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:30:6f:f5:2c:4c:68:49:f0:57:de:19:50:24:b7:6c:81:6d:74:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ED47C2FB75D2367E01C76EF5BD93642FE56F051
        Validity
            Not Before: Feb 24 19:26:41 2026 GMT
            Not After : Feb 23 19:31:41 2027 GMT
        Subject: CN=B2EEDF17C301F913AE677FB4C423DC812E109228
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:34:17:c4:da:d3:ad:bb:d2:63:95:86:c1:5c:
                    63:68:4b:ea:d7:74:38:d7:76:45:8e:a0:00:4d:4e:
                    8f:8e:b5:25:ac:c7:28:3a:e8:1a:cf:9b:a6:f3:9a:
                    b5:b2:df:01:c1:cf:2f:30:b1:87:d7:72:44:83:60:
                    05:2a:1e:c9:e1:a7:ab:61:7b:1e:1e:55:71:31:28:
                    6c:18:4d:57:e4:f0:a4:61:c9:bf:e4:a7:52:79:3c:
                    a1:a8:4d:41:46:61:db:5d:ed:30:23:84:cd:bb:58:
                    80:c9:ed:94:5c:73:e5:21:62:0b:8d:ad:be:1c:4b:
                    18:92:3b:9c:ca:2f:80:89:c5:ed:63:0c:ca:fd:1d:
                    aa:f0:d3:f3:e3:31:b9:de:1a:36:e6:a7:07:d0:c0:
                    22:df:4d:d7:68:fb:02:b4:91:2f:e2:3f:cc:40:75:
                    a1:f3:00:88:70:36:38:d3:8b:ec:6a:07:a7:d1:13:
                    37:df:9e:a0:8d:f5:4d:f3:e8:d2:38:fb:77:bc:e1:
                    b8:aa:a4:12:3e:eb:d9:12:4f:23:00:c2:7d:af:12:
                    d2:50:8c:fa:7d:58:d5:bc:af:51:70:5c:39:af:9f:
                    fd:cc:a9:eb:7c:25:58:ee:a1:35:4a:5e:aa:6f:90:
                    a6:30:18:5f:61:d2:ae:34:f7:d4:80:ba:fc:1c:dd:
                    46:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:EE:DF:17:C3:01:F9:13:AE:67:7F:B4:C4:23:DC:81:2E:10:92:28
            X509v3 Authority Key Identifier:
                keyid:2E:D4:7C:2F:B7:5D:23:67:E0:1C:76:EF:5B:D9:36:42:FE:56:F0:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8B1815EAB5FB4E95B361E0B16E012767B7D8844F8F6A480D57EC28AAED1545B7/0/2ED47C2FB75D2367E01C76EF5BD93642FE56F051.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2ED47C2FB75D2367E01C76EF5BD93642FE56F051.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8B1815EAB5FB4E95B361E0B16E012767B7D8844F8F6A480D57EC28AAED1545B7/0/3137302e3233332e3135332e302f32342d3234203d3e20313938393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:60:58:36:a1:9f:8e:01:ed:73:2e:5a:1c:ad:63:93:bd:6d:
         0a:f0:4f:87:39:7e:fb:d0:49:0b:09:e5:26:d4:d3:ad:c3:4a:
         0a:df:9f:66:b2:28:fb:f9:53:34:2d:92:98:6d:8c:89:d4:1c:
         5b:2e:82:81:39:97:90:36:48:4d:05:d8:63:26:34:28:ba:3f:
         09:66:76:30:e7:da:cc:59:d6:0e:a9:4b:8d:e8:71:7a:db:b3:
         9f:6e:2b:2e:03:67:6d:eb:86:c5:3f:55:70:0e:23:0e:e5:73:
         a4:b6:10:42:d9:31:ce:d3:cd:a1:7e:e5:12:e4:bb:41:36:a7:
         3c:a0:a0:5c:8a:9d:ec:f1:85:33:62:75:96:df:ca:26:64:53:
         87:bc:0c:e4:93:b0:ae:a8:c4:f2:80:36:50:b0:4b:26:23:e3:
         97:75:89:d6:42:df:60:35:a5:8c:62:de:eb:7c:ec:0e:8d:35:
         35:76:79:e5:98:81:dc:93:a1:a4:90:21:7f:0a:29:37:35:02:
         37:61:eb:5f:8e:94:e1:56:d8:66:79:bc:54:82:56:f8:fa:8a:
         56:7d:82:f0:64:7f:83:3b:d6:95:88:4a:9e:98:87:98:8b:04:
         22:95:e7:cb:0b:51:7b:d2:29:0c:78:15:b0:70:3d:a0:43:04:
         ad:ee:cd:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:15:59 2026 by rpki-client