Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E7781D1B7DCD36BA55EBDAFBF509D645DD7F4339B193E862A1571C4A1146DBC0/0/3137302e3135302e38382e302f32322d3234203d3e20323030393038.roa
File:                     3137302e3135302e38382e302f32322d3234203d3e20323030393038.roa (raw, json)
Hash identifier:          whfDEKrpTMnj9EE5K8Bs7eEzsuJL2E5m8enaHQbmv38=
Subject key identifier:   44:8F:24:C1:AB:0B:45:EE:A9:38:51:29:8A:05:8F:3D:C3:98:76:A2
Certificate issuer:       /CN=03A6A69649FF3B8207574889C062EB9EB55CB389
Certificate serial:       7C1DCD0206F85910430856F08DC38355052EE16B
Authority key identifier: 03:A6:A6:96:49:FF:3B:82:07:57:48:89:C0:62:EB:9E:B5:5C:B3:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03A6A69649FF3B8207574889C062EB9EB55CB389.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E7781D1B7DCD36BA55EBDAFBF509D645DD7F4339B193E862A1571C4A1146DBC0/0/3137302e3135302e38382e302f32322d3234203d3e20323030393038.roa
Signing time:             Mon 16 Feb 2026 11:30:41 +0000
ROA not before:           Mon 16 Feb 2026 11:25:41 +0000
ROA not after:            Mon 15 Feb 2027 11:30:41 +0000
asID:                     200908
IP address blocks:        170.150.88.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E7781D1B7DCD36BA55EBDAFBF509D645DD7F4339B193E862A1571C4A1146DBC0/0/03A6A69649FF3B8207574889C062EB9EB55CB389.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E7781D1B7DCD36BA55EBDAFBF509D645DD7F4339B193E862A1571C4A1146DBC0/0/03A6A69649FF3B8207574889C062EB9EB55CB389.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03A6A69649FF3B8207574889C062EB9EB55CB389.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Mar 2026 19:59:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:1d:cd:02:06:f8:59:10:43:08:56:f0:8d:c3:83:55:05:2e:e1:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03A6A69649FF3B8207574889C062EB9EB55CB389
        Validity
            Not Before: Feb 16 11:25:41 2026 GMT
            Not After : Feb 15 11:30:41 2027 GMT
        Subject: CN=448F24C1AB0B45EEA93851298A058F3DC39876A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f6:29:80:f5:3e:c2:0d:ec:30:99:ad:cb:39:
                    4d:ea:ec:dd:3f:65:2a:15:c5:96:15:2a:cd:96:f4:
                    93:3f:76:0a:30:36:44:a9:98:f3:17:e2:14:fd:ef:
                    20:d3:08:83:d9:c1:ae:6e:55:28:7d:61:93:1d:92:
                    9c:26:b2:ce:36:04:4a:b4:3a:59:cb:74:9f:49:db:
                    a8:7b:a0:3d:c6:67:79:23:a5:f4:18:72:70:76:0e:
                    8d:ab:11:16:2d:f3:b9:ba:9d:06:b5:14:cf:e1:15:
                    99:6a:f8:40:95:d2:40:dd:77:ea:df:f6:ce:f4:1e:
                    3e:8a:81:f3:3e:d7:e8:f6:39:a2:7c:7c:5d:59:a6:
                    2d:95:3c:ce:fb:e1:a0:3f:9f:d8:e4:db:99:6f:6c:
                    b1:e4:5d:a9:40:b5:cc:f9:a8:27:2e:56:b8:bb:a7:
                    92:59:c2:b2:c6:dd:b7:37:43:b4:75:57:a2:6c:6d:
                    6f:00:11:35:fe:db:94:74:32:5f:61:21:89:20:3c:
                    5a:4e:6b:d0:38:0f:f1:36:75:15:c8:a7:39:dd:53:
                    d3:69:16:83:f0:fa:c2:ee:13:bb:d2:20:1a:05:b6:
                    02:a6:0e:bd:74:2e:14:6d:c7:3e:a2:a0:43:53:64:
                    ef:27:d5:22:09:4a:49:06:d0:54:3d:80:ed:fa:ae:
                    61:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:8F:24:C1:AB:0B:45:EE:A9:38:51:29:8A:05:8F:3D:C3:98:76:A2
            X509v3 Authority Key Identifier:
                keyid:03:A6:A6:96:49:FF:3B:82:07:57:48:89:C0:62:EB:9E:B5:5C:B3:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E7781D1B7DCD36BA55EBDAFBF509D645DD7F4339B193E862A1571C4A1146DBC0/0/03A6A69649FF3B8207574889C062EB9EB55CB389.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03A6A69649FF3B8207574889C062EB9EB55CB389.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E7781D1B7DCD36BA55EBDAFBF509D645DD7F4339B193E862A1571C4A1146DBC0/0/3137302e3135302e38382e302f32322d3234203d3e20323030393038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b8:6b:ec:20:da:69:c9:e6:1b:77:70:6e:e9:ff:de:f3:81:3c:
         d3:56:a4:9a:66:ab:b2:1a:af:7d:e5:cc:2f:c8:e3:45:2c:9a:
         81:63:a8:fd:fb:25:f0:54:7c:10:65:57:95:d3:71:d2:37:96:
         c6:0f:4d:22:d3:0c:52:bb:f4:09:4c:c6:8b:99:30:f9:9c:de:
         66:3f:a7:6f:de:f7:14:36:73:d4:a8:f9:1c:fb:df:49:fd:57:
         3e:a6:cd:a5:5e:be:0f:d2:19:9e:69:df:04:38:68:e3:8c:cf:
         e2:6f:f0:5d:d3:2d:82:0c:5b:47:ba:87:a1:0a:57:6f:d7:78:
         c3:bf:2d:66:70:a7:63:1d:42:cb:b2:a6:5a:bc:f9:c5:8c:c7:
         eb:89:25:d0:e3:a1:da:b0:0a:0f:48:1e:ac:65:af:e4:b5:05:
         40:83:df:84:a7:2e:1a:39:d7:7e:0f:49:7e:c8:3c:e0:63:10:
         3c:d4:e6:e7:7f:38:45:2c:c6:56:cb:43:a3:fb:58:14:ad:e9:
         36:b1:98:2c:4e:c3:c4:15:c6:af:40:0d:6a:be:14:8e:91:7f:
         ff:d5:a0:ce:3d:ce:b5:1c:ee:51:b8:57:a2:6d:1c:ba:06:2d:
         08:4b:3b:4c:87:49:da:69:3f:96:60:09:66:0a:04:65:93:80:
         40:95:1b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:26:50 2026 by rpki-client