Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A63E44195B15618226F93AF42A2D6CB52A6E73BC1D027C964ECD92A0216FF6D7/0/3137302e3233382e3233372e302f32342d3234203d3e203138363738.roa
File:                     3137302e3233382e3233372e302f32342d3234203d3e203138363738.roa (raw, json)
Hash identifier:          dkiJ67b2apTwPAMupblUkfd5XfI2XxxPJXcysPIOggU=
Subject key identifier:   BE:08:50:AC:6A:42:D6:A1:29:B5:59:2D:F3:85:43:DF:5C:E1:0F:B9
Certificate issuer:       /CN=219FCBA9FFEA4717ABF6A9EF85B7C636D9D23BEA
Certificate serial:       2348BF95E9048661224F84B3C580975324D98987
Authority key identifier: 21:9F:CB:A9:FF:EA:47:17:AB:F6:A9:EF:85:B7:C6:36:D9:D2:3B:EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/219FCBA9FFEA4717ABF6A9EF85B7C636D9D23BEA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A63E44195B15618226F93AF42A2D6CB52A6E73BC1D027C964ECD92A0216FF6D7/0/3137302e3233382e3233372e302f32342d3234203d3e203138363738.roa
Signing time:             Wed 01 Apr 2026 01:15:01 +0000
ROA not before:           Wed 01 Apr 2026 01:10:01 +0000
ROA not after:            Wed 31 Mar 2027 01:15:01 +0000
asID:                     18678
IP address blocks:        170.238.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A63E44195B15618226F93AF42A2D6CB52A6E73BC1D027C964ECD92A0216FF6D7/0/219FCBA9FFEA4717ABF6A9EF85B7C636D9D23BEA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A63E44195B15618226F93AF42A2D6CB52A6E73BC1D027C964ECD92A0216FF6D7/0/219FCBA9FFEA4717ABF6A9EF85B7C636D9D23BEA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/219FCBA9FFEA4717ABF6A9EF85B7C636D9D23BEA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Apr 2026 21:23:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:48:bf:95:e9:04:86:61:22:4f:84:b3:c5:80:97:53:24:d9:89:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=219FCBA9FFEA4717ABF6A9EF85B7C636D9D23BEA
        Validity
            Not Before: Apr  1 01:10:01 2026 GMT
            Not After : Mar 31 01:15:01 2027 GMT
        Subject: CN=BE0850AC6A42D6A129B5592DF38543DF5CE10FB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f5:9b:a6:17:bb:4d:6e:af:8e:72:64:93:4c:
                    ed:74:f6:78:02:03:5f:b9:cc:05:7e:b3:9c:e2:77:
                    5c:8d:f0:8a:dc:70:d5:ea:56:e3:5c:cb:8c:c7:0b:
                    48:19:3d:ca:ce:e7:08:a5:1a:b4:77:e0:d3:99:d0:
                    c9:31:91:93:e8:b9:cc:2f:ed:18:ea:c3:03:53:f8:
                    d9:d4:ce:b0:10:7c:ba:bb:f4:bb:ff:f1:1f:64:bd:
                    1b:20:29:16:f3:60:69:9c:ff:71:cc:df:91:20:7a:
                    f9:35:99:92:1d:af:17:72:01:ad:ff:c4:39:4e:f5:
                    f0:1e:44:df:71:9f:61:3e:82:5b:fc:c6:de:34:86:
                    3a:a0:f2:35:7e:93:67:f3:5f:2a:84:78:b2:b7:a5:
                    c5:a8:97:ef:3f:f9:69:26:8a:fb:73:23:43:d5:0b:
                    85:75:db:81:c9:49:c1:5e:85:92:b9:cc:86:c2:23:
                    d1:d6:be:cd:33:c0:27:e3:ac:a3:93:0d:c8:98:b6:
                    17:79:96:61:6a:23:8c:6b:9f:b9:76:97:b8:ac:1c:
                    bc:47:16:4f:8e:a9:e4:11:3e:7c:2f:2d:c9:ae:24:
                    fa:72:48:0d:83:34:fa:af:0d:37:d7:43:e6:d4:ce:
                    a9:21:2e:7e:5c:89:d8:69:e8:ca:a6:b5:5a:ae:ef:
                    14:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:08:50:AC:6A:42:D6:A1:29:B5:59:2D:F3:85:43:DF:5C:E1:0F:B9
            X509v3 Authority Key Identifier:
                keyid:21:9F:CB:A9:FF:EA:47:17:AB:F6:A9:EF:85:B7:C6:36:D9:D2:3B:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A63E44195B15618226F93AF42A2D6CB52A6E73BC1D027C964ECD92A0216FF6D7/0/219FCBA9FFEA4717ABF6A9EF85B7C636D9D23BEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/219FCBA9FFEA4717ABF6A9EF85B7C636D9D23BEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A63E44195B15618226F93AF42A2D6CB52A6E73BC1D027C964ECD92A0216FF6D7/0/3137302e3233382e3233372e302f32342d3234203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:49:e5:1f:e3:a5:eb:10:87:f9:84:97:24:69:78:68:44:1e:
         14:c1:c7:ea:3b:46:e0:cc:aa:af:28:7e:9b:68:7f:e5:cc:3d:
         03:c5:f5:21:5b:26:2b:13:8c:d2:ea:5c:27:2e:8c:49:0e:49:
         95:4f:ed:90:60:71:5b:a7:36:a7:52:56:f3:e0:49:92:45:98:
         08:5b:3b:c4:97:ac:92:ba:d2:b7:4b:9f:c0:3f:36:81:ed:11:
         50:82:34:74:d1:54:7a:bc:89:1d:8a:11:12:c3:fb:fe:21:48:
         b7:4e:80:f3:e2:fc:31:cb:1f:c7:4e:82:95:82:77:18:fe:68:
         44:c2:2b:dd:ef:c2:44:dc:71:2a:29:f4:99:bc:07:bc:2d:0c:
         cc:79:72:3b:fd:f9:de:5d:88:3b:6a:63:38:84:98:e5:96:26:
         9c:1e:f1:30:7d:f3:4e:7a:ba:0d:73:b3:99:cc:39:86:a6:b4:
         a7:e9:cf:05:38:48:47:eb:44:41:1a:ed:73:cf:7b:a0:63:c6:
         be:04:d0:9e:1a:f5:fc:9e:8a:75:44:39:39:1c:0d:77:5f:8b:
         d1:80:af:aa:97:56:ef:5a:11:f9:ac:ac:0b:96:5a:fa:3c:9f:
         f5:7a:54:3e:63:bc:2f:f2:18:84:ca:e8:cd:f0:86:02:8e:aa:
         1b:b6:1c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:56:12 2026 by rpki-client