Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8CF1E17EB6D9A7080DB6B0F50A25A46AC21B045D3C1C39BE022D213BF41CD7B1/0/3137302e3234372e3139312e302f32342d3234203d3e20323635353239.roa
File:                     3137302e3234372e3139312e302f32342d3234203d3e20323635353239.roa (raw, json)
Hash identifier:          o4tIyPqiq9qe/z64CPDtCZkzQCwdx74MiIiTTw4Bo+Y=
Subject key identifier:   88:AA:97:B6:2F:28:BC:06:19:EA:5A:41:C9:A0:0D:76:0C:C3:CD:19
Certificate issuer:       /CN=42FB55A41791F87502D72CC216E456680D5D80C0
Certificate serial:       4D475A4D456CE8CE3A7FD851C3A7B6E6BCAE4C7C
Authority key identifier: 42:FB:55:A4:17:91:F8:75:02:D7:2C:C2:16:E4:56:68:0D:5D:80:C0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42FB55A41791F87502D72CC216E456680D5D80C0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8CF1E17EB6D9A7080DB6B0F50A25A46AC21B045D3C1C39BE022D213BF41CD7B1/0/3137302e3234372e3139312e302f32342d3234203d3e20323635353239.roa
Signing time:             Tue 02 Jun 2026 13:45:01 +0000
ROA not before:           Tue 02 Jun 2026 13:40:01 +0000
ROA not after:            Tue 01 Jun 2027 13:45:01 +0000
asID:                     265529
IP address blocks:        170.247.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8CF1E17EB6D9A7080DB6B0F50A25A46AC21B045D3C1C39BE022D213BF41CD7B1/0/42FB55A41791F87502D72CC216E456680D5D80C0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8CF1E17EB6D9A7080DB6B0F50A25A46AC21B045D3C1C39BE022D213BF41CD7B1/0/42FB55A41791F87502D72CC216E456680D5D80C0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42FB55A41791F87502D72CC216E456680D5D80C0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:47:5a:4d:45:6c:e8:ce:3a:7f:d8:51:c3:a7:b6:e6:bc:ae:4c:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42FB55A41791F87502D72CC216E456680D5D80C0
        Validity
            Not Before: Jun  2 13:40:01 2026 GMT
            Not After : Jun  1 13:45:01 2027 GMT
        Subject: CN=88AA97B62F28BC0619EA5A41C9A00D760CC3CD19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0a:28:42:f8:cd:f4:ab:35:db:e5:85:f0:91:
                    27:27:2e:27:77:84:42:d6:81:32:15:0d:e7:31:c3:
                    10:14:4d:ab:3c:da:aa:fe:26:2f:08:a1:2c:a7:7a:
                    89:b2:f0:ee:dc:42:87:8b:d6:ae:2c:52:29:bc:b2:
                    c3:f1:a2:b2:0c:b4:c6:b1:cf:a6:27:4f:33:11:ec:
                    63:8f:8c:28:03:46:2a:ce:e2:21:5f:00:1d:6a:04:
                    14:00:c9:10:62:a0:b0:22:db:2f:53:0d:05:b4:83:
                    70:d9:20:ba:38:1b:6f:3f:7a:14:54:74:f3:b1:cb:
                    d3:e9:17:05:77:88:21:9c:55:e7:24:c4:b6:d7:aa:
                    3f:01:3c:b8:6e:07:e2:79:3b:ab:c2:21:cf:46:27:
                    79:f3:e4:e9:40:77:9f:97:2d:d4:c7:28:43:77:a2:
                    3a:2a:20:18:11:37:17:3d:67:17:f3:2a:8f:23:b9:
                    48:b8:e8:38:ff:c6:86:92:56:84:1c:44:70:20:41:
                    a4:a2:10:ea:61:0f:56:59:28:40:33:42:8e:95:10:
                    46:f1:32:2e:1f:35:07:97:1f:ad:cb:6d:9f:1f:d6:
                    b7:e9:f0:81:05:8c:11:b7:fc:ce:69:3e:b8:ee:61:
                    46:67:06:e5:be:46:df:6e:21:4a:b1:17:f8:92:1d:
                    e2:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:AA:97:B6:2F:28:BC:06:19:EA:5A:41:C9:A0:0D:76:0C:C3:CD:19
            X509v3 Authority Key Identifier:
                keyid:42:FB:55:A4:17:91:F8:75:02:D7:2C:C2:16:E4:56:68:0D:5D:80:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8CF1E17EB6D9A7080DB6B0F50A25A46AC21B045D3C1C39BE022D213BF41CD7B1/0/42FB55A41791F87502D72CC216E456680D5D80C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42FB55A41791F87502D72CC216E456680D5D80C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8CF1E17EB6D9A7080DB6B0F50A25A46AC21B045D3C1C39BE022D213BF41CD7B1/0/3137302e3234372e3139312e302f32342d3234203d3e20323635353239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:1f:9a:ed:03:c9:e0:73:ce:4a:1c:4a:7f:11:7c:a1:a0:67:
         b0:75:77:32:88:66:22:80:cc:87:7f:04:96:64:04:86:84:9d:
         ec:df:21:88:7a:53:a2:bd:23:27:2c:03:03:e2:b2:ab:28:a9:
         c0:4b:73:8f:fa:b6:82:aa:74:7e:0d:1d:de:e0:58:8f:ab:7a:
         33:d1:63:b0:ef:00:1b:4d:4b:c3:e1:c5:db:b3:e6:9c:03:c8:
         d2:6c:2c:3b:f1:4c:1d:9e:62:63:1e:51:b8:f0:6c:3e:aa:dc:
         c7:ff:c6:a8:b6:90:47:5e:ff:a8:3d:3a:43:9e:c1:5e:61:2f:
         4b:7a:fa:3b:a2:8a:03:da:5c:01:01:e2:0d:bd:81:95:e6:1a:
         f5:fb:6f:02:9a:7f:eb:fe:07:41:38:73:ca:38:ba:ab:36:81:
         68:0f:50:4e:69:b6:f7:b0:40:18:6f:bb:67:48:f4:d9:f4:33:
         65:65:6b:25:13:a9:ac:5b:42:53:62:b8:58:8c:42:48:34:a8:
         d9:f5:be:8e:ce:0c:78:13:bc:85:95:29:83:1b:1d:f4:16:91:
         b5:b8:4b:e4:05:ed:c7:43:16:90:9a:b3:de:e8:74:e5:a4:56:
         8b:cb:dc:95:d5:34:e7:0d:ae:e3:2e:f6:81:87:17:d8:44:9c:
         0b:e5:3d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:59:14 2026 by rpki-client