Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3137392e36322e34302e302f32322d3234203d3e203631353233.roa
File:                     3137392e36322e34302e302f32322d3234203d3e203631353233.roa (raw, json)
Hash identifier:          ZF6S8ZlkM5n2ntsUl86croXYrCp9+dUjeIO3FyklpeM=
Subject key identifier:   21:28:64:17:FD:86:49:B5:B3:CC:E4:B7:70:0A:34:A2:30:5A:35:02
Certificate issuer:       /CN=F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA
Certificate serial:       559F730D06851159CF62E2B27676D51D2BA5A86C
Authority key identifier: F1:C3:5B:9C:F4:5B:DD:AB:E8:29:A9:F7:8B:C2:4D:C5:8A:FD:7E:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3137392e36322e34302e302f32322d3234203d3e203631353233.roa
Signing time:             Fri 03 Jul 2026 20:20:00 +0000
ROA not before:           Fri 03 Jul 2026 20:15:00 +0000
ROA not after:            Fri 02 Jul 2027 20:20:00 +0000
asID:                     61523
IP address blocks:        179.62.40.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:9f:73:0d:06:85:11:59:cf:62:e2:b2:76:76:d5:1d:2b:a5:a8:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA
        Validity
            Not Before: Jul  3 20:15:00 2026 GMT
            Not After : Jul  2 20:20:00 2027 GMT
        Subject: CN=21286417FD8649B5B3CCE4B7700A34A2305A3502
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:21:35:63:70:e3:82:b5:bb:b9:a0:e1:45:d2:
                    ac:c0:f8:e1:25:af:0c:30:d8:6c:e7:c5:f8:20:94:
                    c8:d7:44:92:d6:49:2a:5f:4a:6f:b9:e3:ae:c4:26:
                    e2:be:18:ac:64:25:71:6a:fd:b1:b2:3e:7f:2e:97:
                    a5:0b:2c:3f:91:39:c0:19:49:cf:62:4a:50:24:bb:
                    15:65:80:81:23:9b:ad:82:e5:32:42:d6:fd:d2:d9:
                    ce:a4:6e:2c:cd:2e:a5:24:a9:9a:bd:d1:63:9e:6c:
                    f8:0a:07:69:76:70:d9:1a:42:a9:1a:7f:0e:83:2f:
                    b4:29:c6:0c:0d:4d:3d:23:33:4f:6b:e4:ee:a8:d2:
                    02:9b:b5:d5:a7:63:b8:bd:47:ea:64:b5:0f:6a:d1:
                    83:6e:1b:f3:51:e1:2c:0e:94:a7:c6:03:01:60:b9:
                    21:37:76:37:d6:3a:f2:36:57:9c:90:02:1e:c5:f2:
                    95:6d:47:21:ca:00:c0:d4:9a:63:c9:e1:14:29:f0:
                    28:36:69:0b:f0:e0:80:5f:36:cb:76:cf:71:6c:53:
                    78:69:5e:35:15:f4:6e:a1:1f:71:8e:bb:6f:8a:06:
                    22:f8:ec:c7:ed:f8:d6:9d:99:0d:57:9a:89:e5:ae:
                    46:39:fc:31:f4:ba:34:54:2d:c8:7a:a3:26:92:ed:
                    39:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:28:64:17:FD:86:49:B5:B3:CC:E4:B7:70:0A:34:A2:30:5A:35:02
            X509v3 Authority Key Identifier:
                keyid:F1:C3:5B:9C:F4:5B:DD:AB:E8:29:A9:F7:8B:C2:4D:C5:8A:FD:7E:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3137392e36322e34302e302f32322d3234203d3e203631353233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.62.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:cb:f1:60:22:9e:3b:b7:f5:73:5e:78:23:da:8f:63:1f:dc:
         a8:10:fe:6e:23:ef:14:05:9f:10:ad:6c:e8:54:a1:2e:fc:16:
         7b:e2:a6:45:6d:8e:57:0a:a7:46:4c:3c:25:d8:70:e0:aa:54:
         fe:ee:74:47:f1:23:b6:6e:ef:75:9d:1b:91:5e:4d:8f:88:db:
         a3:a8:44:c6:57:21:8c:2f:07:2e:e7:b1:f5:6a:fa:ff:b9:f1:
         5a:5e:e0:18:26:57:87:b3:a1:3e:26:c4:c9:72:fc:c6:ff:42:
         69:c3:f2:27:27:f0:69:f4:59:da:18:9d:1f:7a:ad:f2:e0:c2:
         fe:09:55:c0:de:2d:03:b2:93:4d:14:8a:4d:37:7c:f1:35:cf:
         f9:8c:fe:50:54:0f:48:98:0d:25:08:87:5e:16:b9:1a:88:64:
         5b:8b:99:35:24:73:8b:ae:02:6b:12:f0:dd:75:fd:d5:5f:81:
         0c:4a:e3:e2:7f:b2:c2:9a:c4:66:dd:83:c5:35:b9:44:6f:43:
         37:8d:b1:43:65:b4:8f:84:51:3b:4c:27:fa:40:61:7c:45:d1:
         c2:3e:d0:4f:e0:91:c8:72:5d:da:fa:58:3e:08:2b:89:fd:d6:
         7c:3b:05:c2:cc:fd:e2:70:9e:9b:3b:ca:0b:a3:0d:c7:32:34:
         68:66:67:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:49:27 2026 by rpki-client