Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3137392e35312e31362e302f32342d3234203d3e203137303739.roa
File:                     3137392e35312e31362e302f32342d3234203d3e203137303739.roa (raw, json)
Hash identifier:          sY/z1RGQNFF4ddn73rfAfOQ3mfOCYfsr5vqqN8E0eJw=
Subject key identifier:   D1:2D:DC:9A:B7:C0:8A:87:A9:A2:8E:20:E4:62:F3:65:61:52:59:52
Certificate issuer:       /CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Certificate serial:       01DF111B21D15F0BD07EE0F6858F05DD6677987C
Authority key identifier: 9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3137392e35312e31362e302f32342d3234203d3e203137303739.roa
Signing time:             Thu 26 Mar 2026 16:50:00 +0000
ROA not before:           Thu 26 Mar 2026 16:45:00 +0000
ROA not after:            Thu 25 Mar 2027 16:50:00 +0000
asID:                     17079
IP address blocks:        179.51.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:df:11:1b:21:d1:5f:0b:d0:7e:e0:f6:85:8f:05:dd:66:77:98:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
        Validity
            Not Before: Mar 26 16:45:00 2026 GMT
            Not After : Mar 25 16:50:00 2027 GMT
        Subject: CN=D12DDC9AB7C08A87A9A28E20E462F36561525952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d5:b3:94:70:3d:cb:12:e1:ed:98:9d:b7:6f:
                    15:9b:9f:52:b4:06:3e:5d:4f:16:84:af:11:16:c7:
                    ef:1d:f1:bd:9d:c0:68:9f:46:a0:6d:59:46:3d:0c:
                    a4:21:b5:b9:17:86:b3:01:44:85:e9:f3:08:25:5b:
                    b5:c6:da:eb:da:b8:25:45:86:67:7e:a4:65:43:09:
                    9e:1c:07:c9:d8:ab:07:b9:3c:c8:13:42:9e:26:39:
                    9c:88:45:0a:15:05:11:ff:5f:c7:3c:00:fb:f2:26:
                    1d:3f:a7:d9:09:c2:16:09:8b:6d:50:d3:ba:cd:ae:
                    26:3a:38:5e:c5:6a:e9:e9:8f:93:03:72:f7:23:d4:
                    02:3b:7d:aa:8e:dd:55:81:a8:a1:30:3f:5d:2e:f4:
                    92:14:8a:ff:0f:3f:d7:3e:95:8d:12:07:d7:e3:5b:
                    a9:5e:1c:4c:e7:7d:f2:59:42:e2:67:7c:08:f8:b0:
                    1a:f6:33:1e:6d:09:f2:da:a3:9b:ec:5d:67:8d:39:
                    d6:a0:89:4e:99:ff:68:4c:26:b0:8f:5a:9d:46:77:
                    d9:73:86:eb:66:25:1f:b2:70:6a:69:bd:d2:2e:45:
                    34:10:7b:e2:95:83:df:12:fd:a6:19:b5:2c:4f:b6:
                    df:23:93:d3:c3:38:2e:bd:26:e0:40:7a:68:d0:f0:
                    08:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:2D:DC:9A:B7:C0:8A:87:A9:A2:8E:20:E4:62:F3:65:61:52:59:52
            X509v3 Authority Key Identifier:
                keyid:9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3137392e35312e31362e302f32342d3234203d3e203137303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.51.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:6b:5f:a9:9f:f5:ba:2a:d5:fa:cf:0b:eb:b6:8f:a9:ef:da:
         77:ca:86:69:c1:1c:64:ff:e1:bd:69:da:b6:64:ac:56:05:7c:
         4a:00:02:df:06:c4:d4:71:1a:1a:9b:3a:9f:25:01:05:df:74:
         88:65:88:34:38:66:61:85:d1:6e:6b:2c:9d:d3:89:01:de:50:
         2a:fd:58:51:15:13:3e:dd:71:84:6e:7a:7b:1e:d1:28:51:de:
         89:3c:7d:d3:56:b0:7c:4b:5f:8c:6c:d4:92:8d:53:3b:40:3a:
         d6:11:fe:17:f2:01:42:bc:83:b2:d1:9e:38:48:9d:89:22:89:
         4e:53:b8:87:2f:5e:b7:55:8e:23:fa:4f:22:b0:cc:13:5a:8c:
         14:e2:e5:3a:fd:19:2a:70:c3:7a:52:d0:93:10:a4:dc:6f:ba:
         cb:c7:42:c3:6a:21:fb:75:88:f4:7c:0f:72:eb:3f:bb:6c:1d:
         3f:73:f8:bc:c6:66:db:20:28:9e:53:2c:ac:59:0e:5b:e3:e4:
         cb:74:6e:6e:5f:45:26:54:1b:9b:d7:72:cd:3c:b6:6f:d7:dd:
         cf:25:48:ca:b4:29:cc:3f:a1:f2:9d:86:6f:5f:ac:91:f0:d5:
         57:48:89:b3:e3:bf:b4:31:58:cb:5b:4b:a2:fc:67:a4:ef:87:
         7f:2a:49:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:48:51 2026 by rpki-client