Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/3137392e35322e302e302f31352d3234203d3e2036343030.roa
File:                     3137392e35322e302e302f31352d3234203d3e2036343030.roa (raw, json)
Hash identifier:          cwfuIkDoG+adYNfsmfbBKTuvN+y74GGXSDaKX53SQTg=
Subject key identifier:   F7:4E:AC:32:B0:D5:DA:92:98:94:3A:DE:95:64:19:3E:70:7F:9A:A5
Certificate issuer:       /CN=81DF8317A0EC6E3A5E6078C1892078DD270DBBFE
Certificate serial:       4F6875D2553104872C7C78B265A682A0FA918943
Authority key identifier: 81:DF:83:17:A0:EC:6E:3A:5E:60:78:C1:89:20:78:DD:27:0D:BB:FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/3137392e35322e302e302f31352d3234203d3e2036343030.roa
Signing time:             Tue 07 Jul 2026 14:51:21 +0000
ROA not before:           Tue 07 Jul 2026 14:46:21 +0000
ROA not after:            Tue 06 Jul 2027 14:51:21 +0000
asID:                     6400
IP address blocks:        179.52.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 27 Jul 2026 23:09:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:68:75:d2:55:31:04:87:2c:7c:78:b2:65:a6:82:a0:fa:91:89:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81DF8317A0EC6E3A5E6078C1892078DD270DBBFE
        Validity
            Not Before: Jul  7 14:46:21 2026 GMT
            Not After : Jul  6 14:51:21 2027 GMT
        Subject: CN=F74EAC32B0D5DA9298943ADE9564193E707F9AA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:af:e8:48:29:a5:a6:ec:79:99:d0:7e:91:af:
                    55:55:8e:47:19:9f:d0:33:85:54:3e:b8:2a:9b:68:
                    80:b7:d0:e9:d7:ec:68:cc:91:5d:7d:ea:ba:00:5f:
                    f6:dc:8b:a9:16:1c:23:6b:91:83:5d:9c:b0:96:e8:
                    58:ab:89:28:a1:41:94:ac:14:0d:8f:2b:d2:b0:6b:
                    66:cd:ba:f6:d7:85:1e:8e:f5:28:3b:50:ac:2c:f0:
                    ac:02:2a:07:b7:ea:37:2e:48:34:39:0f:43:a7:23:
                    fb:45:06:92:17:0b:9c:6f:92:16:e0:c1:2a:9e:02:
                    71:b5:d1:7e:57:64:9e:1a:63:e0:bf:85:e4:14:59:
                    53:37:b4:f8:ff:c6:8e:59:ea:fd:7d:1e:f1:47:d1:
                    eb:df:dd:18:3b:33:a1:2d:a5:31:b7:b5:70:d4:04:
                    7a:f5:54:a4:54:14:6a:e0:48:6a:57:80:ad:42:70:
                    4d:17:e1:ce:34:45:2b:b7:b6:e6:c7:ae:67:d0:8b:
                    ab:4b:1a:60:f6:e7:1c:a9:cc:46:fc:eb:b2:b4:c3:
                    f2:4a:ea:a8:93:bd:08:5a:d6:c4:96:94:0e:c9:0c:
                    fe:c5:aa:c9:cb:29:88:ba:ec:0d:d2:9e:3c:cb:0a:
                    b9:5f:df:89:55:e2:58:4f:c9:bc:05:f5:dd:9a:18:
                    62:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:4E:AC:32:B0:D5:DA:92:98:94:3A:DE:95:64:19:3E:70:7F:9A:A5
            X509v3 Authority Key Identifier:
                keyid:81:DF:83:17:A0:EC:6E:3A:5E:60:78:C1:89:20:78:DD:27:0D:BB:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/3137392e35322e302e302f31352d3234203d3e2036343030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.52.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         0e:df:00:c6:12:36:07:b6:a2:7b:68:73:c5:fb:16:14:1f:0c:
         e2:ed:20:35:5d:59:de:b6:d1:1d:0a:8d:cb:9a:85:f1:55:f8:
         a5:c9:4a:62:f3:fb:c5:06:22:46:ef:49:5d:ef:d1:c7:13:d1:
         c8:1d:48:bf:a1:5d:ac:94:46:ae:01:c0:d7:b8:a2:c5:1e:b4:
         88:4e:ed:9e:cc:7d:37:47:95:bd:31:8a:ac:1b:cd:cc:d7:2a:
         f8:3b:c2:f1:6d:7c:3f:41:ca:67:65:d1:85:cb:95:af:22:76:
         05:f8:ef:d1:59:99:9e:09:75:14:b1:f5:d5:c8:d5:05:ea:39:
         58:eb:aa:0a:70:38:b7:68:41:7d:93:47:3f:d0:aa:25:7f:0c:
         07:b1:5d:50:1d:d3:77:66:41:91:08:24:47:c9:c9:1e:8d:93:
         47:4d:22:58:f2:8b:26:90:3d:06:70:7f:9b:6d:87:76:a7:1a:
         f8:23:0b:b6:8a:64:22:1d:7b:f1:08:6e:b4:95:82:64:2a:e1:
         d1:27:39:be:20:90:c4:fc:1d:50:51:7b:96:93:7c:17:32:c4:
         76:75:47:7a:a5:88:1f:6b:c7:4a:b3:f8:e2:0a:25:94:47:c7:
         52:0c:23:37:22:6f:8f:8e:ad:24:8a:88:e7:7a:45:17:46:8a:
         51:7b:f1:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:17:59 2026 by rpki-client