Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D55ACDDF47E4A075D61197B1AE6007754B50DC828C73BBC692CDC7D225EFD800/0/3231332e3233362e352e302f32342d3234203d3e20323734303130.roa
File:                     3231332e3233362e352e302f32342d3234203d3e20323734303130.roa (raw, json)
Hash identifier:          SVp2jb2GXXWkDpySF2H+MOYqpNVtMCoqOxaQEGT6aH8=
Subject key identifier:   11:45:AE:85:C5:47:D8:74:C8:81:CA:1D:98:9C:0C:2A:7D:55:FC:36
Certificate issuer:       /CN=7C2A792A14C70622CACEC16518571AA283B3ACB7
Certificate serial:       1D5FC2797BE5A516BEFA84810AFB430A9D194221
Authority key identifier: 7C:2A:79:2A:14:C7:06:22:CA:CE:C1:65:18:57:1A:A2:83:B3:AC:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7C2A792A14C70622CACEC16518571AA283B3ACB7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D55ACDDF47E4A075D61197B1AE6007754B50DC828C73BBC692CDC7D225EFD800/0/3231332e3233362e352e302f32342d3234203d3e20323734303130.roa
Signing time:             Fri 30 Jan 2026 06:38:26 +0000
ROA not before:           Fri 30 Jan 2026 06:33:26 +0000
ROA not after:            Fri 29 Jan 2027 06:38:26 +0000
asID:                     274010
IP address blocks:        213.236.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D55ACDDF47E4A075D61197B1AE6007754B50DC828C73BBC692CDC7D225EFD800/0/7C2A792A14C70622CACEC16518571AA283B3ACB7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D55ACDDF47E4A075D61197B1AE6007754B50DC828C73BBC692CDC7D225EFD800/0/7C2A792A14C70622CACEC16518571AA283B3ACB7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7C2A792A14C70622CACEC16518571AA283B3ACB7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Mar 2026 16:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:5f:c2:79:7b:e5:a5:16:be:fa:84:81:0a:fb:43:0a:9d:19:42:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C2A792A14C70622CACEC16518571AA283B3ACB7
        Validity
            Not Before: Jan 30 06:33:26 2026 GMT
            Not After : Jan 29 06:38:26 2027 GMT
        Subject: CN=1145AE85C547D874C881CA1D989C0C2A7D55FC36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9c:e8:49:e4:9b:e9:11:79:c9:65:eb:84:8c:
                    75:af:dc:44:f3:01:44:fa:da:5a:0b:22:09:0c:2a:
                    18:a0:21:09:39:d0:fb:d8:1a:a8:dc:52:8e:4e:c4:
                    fc:77:8e:85:4d:75:dd:8d:fd:c3:56:48:fc:6c:9c:
                    24:84:63:6d:03:da:f2:2e:56:c8:c7:50:2a:d4:2f:
                    99:6e:64:12:d9:e4:60:e8:89:1c:09:0d:68:db:cb:
                    2d:dd:31:65:4e:61:a1:73:97:3e:2f:91:78:8f:01:
                    2e:7a:3a:d9:29:df:7e:12:da:5e:db:d5:9b:07:ed:
                    fd:98:23:4b:2d:bc:58:a9:f1:a6:b1:17:6f:20:dc:
                    43:e1:10:b7:62:99:b3:e4:93:a9:fb:4f:d9:9c:76:
                    d0:7b:db:f0:80:0b:ab:37:d3:1e:65:8b:29:30:29:
                    30:18:22:13:4a:03:99:c7:cb:3f:a6:08:15:cd:7e:
                    35:57:0c:09:88:fe:8a:ad:79:12:31:90:c8:0b:bf:
                    1d:20:7b:31:f0:29:71:cd:f7:1c:24:42:c6:93:bc:
                    6b:a2:bf:99:32:b8:d4:be:de:a0:33:91:ea:42:05:
                    bc:a7:87:dc:4b:bb:bd:2f:f6:b8:28:2d:dd:ad:92:
                    95:cb:ea:7c:97:80:a0:b4:1e:6f:40:5b:02:bf:c0:
                    72:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:45:AE:85:C5:47:D8:74:C8:81:CA:1D:98:9C:0C:2A:7D:55:FC:36
            X509v3 Authority Key Identifier:
                keyid:7C:2A:79:2A:14:C7:06:22:CA:CE:C1:65:18:57:1A:A2:83:B3:AC:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D55ACDDF47E4A075D61197B1AE6007754B50DC828C73BBC692CDC7D225EFD800/0/7C2A792A14C70622CACEC16518571AA283B3ACB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7C2A792A14C70622CACEC16518571AA283B3ACB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D55ACDDF47E4A075D61197B1AE6007754B50DC828C73BBC692CDC7D225EFD800/0/3231332e3233362e352e302f32342d3234203d3e20323734303130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.236.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:39:7f:a4:53:2c:ab:51:53:1d:42:2f:ff:7b:b4:76:4d:a3:
         51:75:35:92:9b:d1:5d:d7:21:ad:f0:d7:58:02:b5:6b:ee:78:
         69:bf:8c:8f:0a:8b:73:bb:21:bb:6f:e2:77:b2:53:01:0b:98:
         38:d6:de:89:83:08:7f:6f:93:c8:85:05:91:46:61:52:d6:9f:
         70:36:aa:e9:d9:7a:06:40:af:5e:c0:73:89:ce:c1:e5:4c:25:
         8a:9f:7e:27:a2:79:d4:e8:93:41:15:a0:c0:54:80:a3:1a:a9:
         05:50:34:85:ad:b4:b5:85:c6:68:e7:4d:72:29:26:ac:7f:31:
         74:22:ec:35:1e:69:05:86:d2:75:9b:02:7f:cb:a1:2b:42:86:
         18:37:e1:ca:5f:96:1b:c5:97:e0:34:af:b9:5a:dd:6e:e5:6b:
         b5:a0:ae:59:4a:1c:fe:8a:5a:e2:08:9a:c1:09:03:f7:82:b8:
         c4:45:fc:6f:cb:6c:c0:0f:92:d1:a2:03:44:9c:4f:cf:2f:f4:
         38:c6:a7:4f:a9:47:03:85:3f:89:35:8e:98:ec:83:ed:09:75:
         bc:f8:31:8d:89:87:d5:06:6d:4e:07:27:06:60:82:b6:60:03:
         e0:89:f0:b4:95:ec:02:db:0d:b9:af:19:0e:9f:5f:61:d7:67:
         be:18:57:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 02:13:07 2026 by rpki-client