Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/53363A3E2E26F6C6ED0FE15654876A85AE69CB74593096D00D14040295D299F4/0/3137392e34392e3230332e302f32342d3234203d3e20323732313132.roa
File:                     3137392e34392e3230332e302f32342d3234203d3e20323732313132.roa (raw, json)
Hash identifier:          5sOmw1hs9iiCctYso5ndw9/pPfSZF7pt6lxQjOZ+0LI=
Subject key identifier:   D0:09:0D:AD:E4:B9:94:05:E0:D0:A3:BE:3E:05:19:75:6D:C8:DB:FB
Certificate issuer:       /CN=25D394E1B00C22B26AB000202E7D9DCB3A00BA81
Certificate serial:       3C14BB03601905716FD075D4DA251CC6D9CDF990
Authority key identifier: 25:D3:94:E1:B0:0C:22:B2:6A:B0:00:20:2E:7D:9D:CB:3A:00:BA:81
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25D394E1B00C22B26AB000202E7D9DCB3A00BA81.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/53363A3E2E26F6C6ED0FE15654876A85AE69CB74593096D00D14040295D299F4/0/3137392e34392e3230332e302f32342d3234203d3e20323732313132.roa
Signing time:             Sat 26 Sep 2026 00:37:06 +0000
ROA not before:           Sat 26 Sep 2026 00:32:06 +0000
ROA not after:            Sat 25 Sep 2027 00:37:06 +0000
asID:                     272112
IP address blocks:        179.49.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/53363A3E2E26F6C6ED0FE15654876A85AE69CB74593096D00D14040295D299F4/0/25D394E1B00C22B26AB000202E7D9DCB3A00BA81.crl
                          rsync://repository.lacnic.net/rpki/lacnic/53363A3E2E26F6C6ED0FE15654876A85AE69CB74593096D00D14040295D299F4/0/25D394E1B00C22B26AB000202E7D9DCB3A00BA81.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25D394E1B00C22B26AB000202E7D9DCB3A00BA81.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 23 Oct 2026 14:34:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:14:bb:03:60:19:05:71:6f:d0:75:d4:da:25:1c:c6:d9:cd:f9:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25D394E1B00C22B26AB000202E7D9DCB3A00BA81
        Validity
            Not Before: Sep 26 00:32:06 2026 GMT
            Not After : Sep 25 00:37:06 2027 GMT
        Subject: CN=D0090DADE4B99405E0D0A3BE3E0519756DC8DBFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:3e:d0:e5:5a:f2:50:da:32:41:8a:70:e5:1b:
                    47:3f:13:a2:80:8c:fb:f0:e6:61:e5:27:6a:ea:4e:
                    c2:ac:3d:63:23:67:e2:f6:ef:5b:4a:83:5d:df:de:
                    98:cf:3a:90:35:95:cc:23:02:68:cd:eb:b5:bb:fe:
                    9c:7c:fc:58:df:d6:f1:7f:f3:bb:99:65:c1:9f:2e:
                    a1:20:b9:9a:83:19:7a:7e:3a:d4:65:df:de:61:d5:
                    38:5e:5f:21:13:e4:e2:60:7c:b6:7f:d9:ee:92:c4:
                    87:08:a8:d5:0e:5c:d9:d4:25:bb:5e:6a:e5:06:96:
                    40:01:82:d8:84:76:73:4b:79:e8:b3:8b:ac:98:f8:
                    a0:de:cc:09:29:d7:1d:33:8a:57:cf:76:fb:51:41:
                    5b:cb:08:53:96:08:81:c8:e5:91:63:ba:e1:0a:c8:
                    6e:27:65:17:bd:62:3f:89:2d:da:b4:8c:7e:00:5b:
                    6e:e6:59:c8:1e:50:bc:33:ea:9f:30:cf:77:a3:d9:
                    a4:c9:1e:fb:d8:5f:c1:27:f3:fd:18:60:f8:96:3f:
                    a7:cd:5f:6c:0f:08:58:86:4e:fd:87:8e:07:2a:01:
                    67:dc:d3:30:58:7e:69:88:1a:7c:a3:e9:17:16:a1:
                    78:8e:48:e8:09:cc:85:fc:eb:dc:01:e3:7b:d7:1c:
                    bf:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:09:0D:AD:E4:B9:94:05:E0:D0:A3:BE:3E:05:19:75:6D:C8:DB:FB
            X509v3 Authority Key Identifier:
                keyid:25:D3:94:E1:B0:0C:22:B2:6A:B0:00:20:2E:7D:9D:CB:3A:00:BA:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/53363A3E2E26F6C6ED0FE15654876A85AE69CB74593096D00D14040295D299F4/0/25D394E1B00C22B26AB000202E7D9DCB3A00BA81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25D394E1B00C22B26AB000202E7D9DCB3A00BA81.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/53363A3E2E26F6C6ED0FE15654876A85AE69CB74593096D00D14040295D299F4/0/3137392e34392e3230332e302f32342d3234203d3e20323732313132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:bf:aa:1f:a2:78:d4:79:39:dd:d9:93:d2:bd:6b:3e:1c:78:
         ab:2b:ea:cd:99:80:0e:9a:b0:82:45:30:92:80:cb:08:00:bf:
         c7:59:dc:cb:0a:0c:a5:eb:28:0f:f7:ba:76:ca:98:bc:c7:1b:
         26:92:b5:12:60:41:b5:c0:c6:ab:dd:c5:b6:1d:60:5a:e7:bf:
         41:d6:0f:47:5a:b4:03:b7:4b:e3:9a:3e:ef:9f:6e:c4:fa:08:
         91:41:23:c7:b9:f3:f2:8a:91:48:b9:8a:82:cf:8b:76:76:11:
         df:b5:14:74:7c:58:9d:b5:a9:6e:a3:ac:54:a3:79:cf:eb:49:
         9f:30:1d:9b:b7:57:ef:1f:19:a8:10:ab:7c:df:a4:ab:07:fa:
         1d:d2:78:fd:de:03:c8:fc:23:f9:e6:fc:19:fc:f5:25:f5:02:
         d4:a9:63:c4:e0:a7:b9:d9:72:ac:d9:9a:0f:28:30:ac:45:3d:
         75:2f:31:09:46:5b:70:80:d3:33:a0:7e:77:91:09:a8:17:2a:
         e8:cc:8c:96:b2:89:53:94:fe:90:bb:37:0b:dc:ca:32:96:cf:
         07:26:f9:33:ad:c2:6b:5a:f9:14:99:b5:51:9b:0c:65:31:5a:
         87:85:63:f2:22:04:67:4a:df:40:07:3d:8a:10:6a:c9:37:5a:
         70:71:71:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 04:25:34 2026 by rpki-client