Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8CF1E17EB6D9A7080DB6B0F50A25A46AC21B045D3C1C39BE022D213BF41CD7B1/0/3137302e3234372e3138382e302f32342d3234203d3e20323635353239.roa
File:                     3137302e3234372e3138382e302f32342d3234203d3e20323635353239.roa (raw, json)
Hash identifier:          2rMyw1K0MpSvkrkXfwxS1OCd9H30QALJB0X3ejrbHSI=
Subject key identifier:   29:2B:6F:76:55:4D:A4:80:8E:1C:ED:6B:E8:5D:D4:94:D3:5A:05:AB
Certificate issuer:       /CN=42FB55A41791F87502D72CC216E456680D5D80C0
Certificate serial:       08BE0703883ACD9DDA7EC6820DAD471107573F96
Authority key identifier: 42:FB:55:A4:17:91:F8:75:02:D7:2C:C2:16:E4:56:68:0D:5D:80:C0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42FB55A41791F87502D72CC216E456680D5D80C0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8CF1E17EB6D9A7080DB6B0F50A25A46AC21B045D3C1C39BE022D213BF41CD7B1/0/3137302e3234372e3138382e302f32342d3234203d3e20323635353239.roa
Signing time:             Tue 02 Jun 2026 13:45:02 +0000
ROA not before:           Tue 02 Jun 2026 13:40:02 +0000
ROA not after:            Tue 01 Jun 2027 13:45:02 +0000
asID:                     265529
IP address blocks:        170.247.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8CF1E17EB6D9A7080DB6B0F50A25A46AC21B045D3C1C39BE022D213BF41CD7B1/0/42FB55A41791F87502D72CC216E456680D5D80C0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8CF1E17EB6D9A7080DB6B0F50A25A46AC21B045D3C1C39BE022D213BF41CD7B1/0/42FB55A41791F87502D72CC216E456680D5D80C0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42FB55A41791F87502D72CC216E456680D5D80C0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:be:07:03:88:3a:cd:9d:da:7e:c6:82:0d:ad:47:11:07:57:3f:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42FB55A41791F87502D72CC216E456680D5D80C0
        Validity
            Not Before: Jun  2 13:40:02 2026 GMT
            Not After : Jun  1 13:45:02 2027 GMT
        Subject: CN=292B6F76554DA4808E1CED6BE85DD494D35A05AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:70:3b:c8:a0:a9:22:d9:a4:37:f8:64:19:af:
                    b7:22:46:48:da:75:47:2b:25:8c:32:90:89:59:d7:
                    c3:b7:ae:55:1e:9e:17:08:37:23:21:a8:05:d0:41:
                    f0:b9:13:8e:bd:47:41:b0:f1:3f:d5:74:dc:61:84:
                    60:23:70:36:5e:e9:af:58:69:42:95:a7:61:e4:4c:
                    4b:dc:e9:cf:c0:7b:23:72:73:1c:93:f7:35:71:e3:
                    3c:6a:d2:1b:a4:c8:a1:ff:ef:cd:17:17:45:ed:4e:
                    81:5d:66:cd:39:21:ca:98:2f:81:af:fb:84:b3:44:
                    98:b6:04:19:a0:6c:14:e8:17:4b:9f:44:34:13:71:
                    d2:45:7b:dd:90:26:58:05:b6:7f:68:fe:8f:7b:af:
                    17:22:01:12:1c:3f:53:2c:e7:37:45:9b:7a:b7:fc:
                    a0:fc:a1:64:96:e4:22:50:3b:00:97:4a:bc:79:dc:
                    d8:10:1d:45:f0:15:16:80:85:43:06:2e:4d:25:99:
                    aa:ec:5c:d6:a6:dc:2c:e9:58:69:c9:6e:ac:95:9c:
                    04:8d:28:31:d2:f5:a5:c1:92:4b:1c:b9:56:c5:eb:
                    a3:b0:e5:c0:94:85:85:f1:ad:8e:7c:d8:3f:7e:77:
                    74:80:17:2d:84:93:4a:cf:3c:d8:42:cf:f5:2b:89:
                    fa:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:2B:6F:76:55:4D:A4:80:8E:1C:ED:6B:E8:5D:D4:94:D3:5A:05:AB
            X509v3 Authority Key Identifier:
                keyid:42:FB:55:A4:17:91:F8:75:02:D7:2C:C2:16:E4:56:68:0D:5D:80:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8CF1E17EB6D9A7080DB6B0F50A25A46AC21B045D3C1C39BE022D213BF41CD7B1/0/42FB55A41791F87502D72CC216E456680D5D80C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42FB55A41791F87502D72CC216E456680D5D80C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8CF1E17EB6D9A7080DB6B0F50A25A46AC21B045D3C1C39BE022D213BF41CD7B1/0/3137302e3234372e3138382e302f32342d3234203d3e20323635353239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:22:3d:50:dd:a9:5a:17:33:da:4b:09:28:54:f2:c1:0e:ef:
         60:ff:a4:16:94:3b:23:b6:7c:b4:21:62:84:d1:29:52:d3:73:
         a2:2b:45:91:3b:fe:ae:72:49:4e:f2:e8:22:c6:38:e9:a1:72:
         d6:38:5d:cf:51:64:03:7b:e3:bc:a9:29:4b:74:39:e5:e1:fc:
         f4:3c:f0:09:6b:6a:1b:05:44:f1:ec:f7:f9:fa:e7:6a:17:9f:
         2f:d4:11:b7:93:99:9d:0b:55:b4:ae:43:8c:e5:3c:04:b6:19:
         b6:d4:a7:30:95:58:5a:92:b8:c1:f2:b3:d5:99:55:2a:ef:09:
         1f:87:21:3f:c9:09:bf:9f:4a:79:0f:3d:77:4d:9d:23:36:ca:
         43:fd:88:a8:6b:45:45:9c:cf:77:38:87:aa:7a:de:91:04:2f:
         f7:5e:39:c0:7a:88:1b:5f:2d:66:3f:f3:2b:e8:e2:d4:7e:74:
         42:bc:f8:c4:b4:9c:61:bf:1b:26:13:44:a1:5b:b1:a5:7c:0c:
         8a:c4:db:f8:43:e9:24:6e:09:c3:5e:b9:1e:82:c2:6a:20:60:
         87:dc:0e:b5:5d:33:a6:70:82:cc:d3:75:a5:86:74:49:e2:e3:
         eb:f1:f6:3b:95:63:ea:91:38:d3:5e:15:e0:3a:96:b8:11:6a:
         7a:9f:8a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:59:57 2026 by rpki-client