Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3137392e36322e3136352e302f32342d3234203d3e203631353233.roa
File:                     3137392e36322e3136352e302f32342d3234203d3e203631353233.roa (raw, json)
Hash identifier:          QRs7zKqf1H2k0pQS0it9V0Xtv/gu5chpXmk0yd9D7JQ=
Subject key identifier:   26:30:3B:ED:A9:A6:96:11:6E:3F:21:8D:D9:A5:8B:0B:AF:69:88:50
Certificate issuer:       /CN=F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA
Certificate serial:       6B20A4937E8280879EE764FAC0634EF2E3E43229
Authority key identifier: F1:C3:5B:9C:F4:5B:DD:AB:E8:29:A9:F7:8B:C2:4D:C5:8A:FD:7E:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3137392e36322e3136352e302f32342d3234203d3e203631353233.roa
Signing time:             Thu 07 May 2026 14:41:33 +0000
ROA not before:           Thu 07 May 2026 14:36:33 +0000
ROA not after:            Thu 06 May 2027 14:41:33 +0000
asID:                     61523
IP address blocks:        179.62.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 09:16:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:20:a4:93:7e:82:80:87:9e:e7:64:fa:c0:63:4e:f2:e3:e4:32:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA
        Validity
            Not Before: May  7 14:36:33 2026 GMT
            Not After : May  6 14:41:33 2027 GMT
        Subject: CN=26303BEDA9A696116E3F218DD9A58B0BAF698850
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5f:80:ea:40:e9:21:29:34:1b:3b:6b:a8:fe:
                    3c:4a:fa:8b:74:0d:a3:f8:4b:b6:15:ed:0c:78:3a:
                    78:39:b2:8e:1e:37:c7:45:62:53:e1:7f:0c:a9:1a:
                    4b:e4:42:b3:4e:c3:0d:4f:4b:45:39:2e:92:c2:f8:
                    79:95:f0:b8:f2:5b:ea:c3:cc:55:77:02:ed:35:a3:
                    0b:69:12:b4:cc:ab:9d:40:12:48:e4:05:fe:86:fa:
                    87:5f:24:77:51:e4:14:36:10:45:d8:6c:f1:30:9d:
                    d8:e8:61:5f:32:8d:c7:f5:25:4f:23:98:30:76:6b:
                    ee:5b:b4:2c:33:3e:dc:80:21:b4:24:06:0d:be:2f:
                    34:ca:3f:39:e4:03:90:5a:96:5c:32:85:74:f1:91:
                    41:e4:39:d5:d2:2c:ef:36:1a:82:f5:11:d4:f8:0c:
                    9b:f1:e4:f4:11:20:c2:da:a7:c2:8a:91:1b:7a:61:
                    b3:e6:43:4c:ae:cc:02:d2:82:15:43:af:1f:31:7b:
                    78:82:73:ab:bb:f9:09:40:b8:13:e2:9e:ef:d0:0e:
                    2f:b5:60:e7:2e:8f:9c:cc:24:f1:8a:25:15:4f:a7:
                    70:3b:f2:d8:7e:64:6c:a3:4b:e6:92:b0:2b:5d:5d:
                    79:a8:bf:88:de:0e:4a:c1:cb:d6:26:d1:a1:0a:53:
                    71:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:30:3B:ED:A9:A6:96:11:6E:3F:21:8D:D9:A5:8B:0B:AF:69:88:50
            X509v3 Authority Key Identifier:
                keyid:F1:C3:5B:9C:F4:5B:DD:AB:E8:29:A9:F7:8B:C2:4D:C5:8A:FD:7E:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3137392e36322e3136352e302f32342d3234203d3e203631353233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.62.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:3d:f2:b2:93:6b:55:d0:68:47:c4:fc:0a:f9:aa:46:4b:3a:
         c3:94:4b:bc:1f:3a:5f:80:6e:c1:38:05:56:3a:07:15:e8:8e:
         8a:07:ca:19:2e:32:a8:51:22:69:6a:ab:03:3b:fa:1c:07:b7:
         e0:d1:34:67:26:58:3d:55:41:a2:c9:9b:ce:4e:6e:5b:46:4c:
         e0:b9:5a:89:0c:fa:64:99:56:2e:a9:36:59:f6:ae:31:64:b3:
         4e:82:74:17:ca:da:ac:5e:f7:36:16:9c:48:70:e3:e5:bb:50:
         4f:c7:24:4a:50:87:10:0d:9e:7e:f6:39:32:7a:14:76:1a:99:
         91:3b:2f:00:d3:7e:6f:45:ec:0f:9d:ac:ba:34:1e:d4:ec:38:
         c5:60:64:7b:e3:a3:69:b7:b0:06:db:e4:bd:e8:73:35:fa:3e:
         58:fc:a5:c0:a2:80:02:e5:78:45:5c:f9:a6:32:0e:46:a6:e4:
         15:28:e4:22:35:03:01:8d:41:bd:44:bc:10:3e:9a:7d:2e:4d:
         98:73:72:ff:79:f6:b2:42:47:69:87:1e:65:bd:28:04:bd:d8:
         32:4a:c7:b8:7c:1b:ed:99:ce:c4:ae:d1:ed:6e:6d:a0:db:90:
         b6:4c:b8:86:9e:58:a9:dd:9e:80:0f:11:f2:16:88:5d:b6:1e:
         b2:f1:43:a0
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUayCkk36CgIee52T6wGNO8uPkMikwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjFDMzVCOUNGNDVCRERBQkU4MjlBOUY3OEJDMjREQzU4
QUZEN0VDQTAeFw0yNjA1MDcxNDM2MzNaFw0yNzA1MDYxNDQxMzNaMDMxMTAvBgNV
BAMTKDI2MzAzQkVEQTlBNjk2MTE2RTNGMjE4REQ5QTU4QjBCQUY2OTg4NTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6X4DqQOkhKTQbO2uo/jxK+ot0
DaP4S7YV7Qx4Ong5so4eN8dFYlPhfwypGkvkQrNOww1PS0U5LpLC+HmV8LjyW+rD
zFV3Au01owtpErTMq51AEkjkBf6G+odfJHdR5BQ2EEXYbPEwndjoYV8yjcf1JU8j
mDB2a+5btCwzPtyAIbQkBg2+LzTKPznkA5BallwyhXTxkUHkOdXSLO82GoL1EdT4
DJvx5PQRIMLap8KKkRt6YbPmQ0yuzALSghVDrx8xe3iCc6u7+QlAuBPinu/QDi+1
YOcuj5zMJPGKJRVPp3A78th+ZGyjS+aSsCtdXXmov4jeDkrBy9Ym0aEKU3G3AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUJjA77ammlhFuPyGN2aWLC69piFAwHwYDVR0j
BBgwFoAU8cNbnPRb3avoKan3i8JNxYr9fsowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zQThEMzJEREVCNDcyN0EzNEQ3ODFFNDJGODFFMzA4NDY5
MkU5QTMyQ0EwMkM2QzUyQTVCQTQxMENFMTkwRjRCLzAvRjFDMzVCOUNGNDVCRERB
QkU4MjlBOUY3OEJDMjREQzU4QUZEN0VDQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GMUMzNUI5Q0Y0NUJEREFCRTgy
OUE5Rjc4QkMyNERDNThBRkQ3RUNBLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0E4RDMyRERFQjQ3MjdBMzRENzgxRTQyRjgxRTMwODQ2OTJFOUEzMkNB
MDJDNkM1MkE1QkE0MTBDRTE5MEY0Qi8wLzMxMzczOTJlMzYzMjJlMzEzNjM1MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMTM1MzIzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALM+pTAN
BgkqhkiG9w0BAQsFAAOCAQEAXD3yspNrVdBoR8T8CvmqRks6w5RLvB86X4BuwTgF
VjoHFeiOigfKGS4yqFEiaWqrAzv6HAe34NE0ZyZYPVVBosmbzk5uW0ZM4LlaiQz6
ZJlWLqk2WfauMWSzToJ0F8rarF73NhacSHDj5btQT8ckSlCHEA2efvY5MnoUdhqZ
kTsvANN+b0XsD52sujQe1Ow4xWBke+OjabewBtvkvehzNfo+WPylwKKAAuV4RVz5
pjIORqbkFSjkIjUDAY1BvUS8ED6afS5NmHNy/3n2skJHaYceZb0oBL3YMkrHuHwb
7ZnOxK7R7W5toNuQtky4hp5Yqd2egA8R8haIXbYesvFDoA==
-----END CERTIFICATE-----
Generated at Wed May 13 17:21:35 2026 by rpki-client