Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/3137392e35312e38302e302f32302d3230203d3e203134323332.roa
File:                     3137392e35312e38302e302f32302d3230203d3e203134323332.roa (raw, json)
Hash identifier:          7SyzRxfHuBv/YAh5i9qR7UqAAgtR36gMORIwIDS4j9I=
Subject key identifier:   5D:03:D0:55:6D:AC:A2:C1:12:B3:F2:F2:BC:DF:FA:87:E9:87:1D:0F
Certificate issuer:       /CN=9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5
Certificate serial:       087FC2903DACD9CE4F257D1740422E06CA7AEAB1
Authority key identifier: 9A:9F:16:48:A3:D8:E4:9E:1B:52:84:F8:6C:E1:C3:48:F3:A7:28:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/3137392e35312e38302e302f32302d3230203d3e203134323332.roa
Signing time:             Fri 16 Oct 2026 16:00:07 +0000
ROA not before:           Fri 16 Oct 2026 15:55:07 +0000
ROA not after:            Fri 15 Oct 2027 16:00:07 +0000
asID:                     14232
IP address blocks:        179.51.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 23 Oct 2026 18:46:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:7f:c2:90:3d:ac:d9:ce:4f:25:7d:17:40:42:2e:06:ca:7a:ea:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5
        Validity
            Not Before: Oct 16 15:55:07 2026 GMT
            Not After : Oct 15 16:00:07 2027 GMT
        Subject: CN=5D03D0556DACA2C112B3F2F2BCDFFA87E9871D0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cc:4f:69:54:78:5e:b1:54:10:05:bf:61:3b:
                    87:68:cb:c4:88:0c:d2:2e:6c:4e:16:19:02:1c:a1:
                    46:6a:c3:73:31:ac:77:49:a5:08:f7:85:e6:53:1e:
                    f5:13:d7:98:ff:c7:77:94:61:c4:e3:4c:9f:d2:cc:
                    28:0d:22:41:2a:71:c8:b7:f0:cf:57:b1:cb:ba:ce:
                    ae:3b:e9:45:31:7e:34:0a:5b:16:87:0b:96:55:29:
                    1e:db:f4:83:94:b6:40:4a:2f:b7:65:aa:e2:8e:4f:
                    b4:7d:ae:a0:b8:09:71:eb:7d:48:1a:8e:25:0a:f7:
                    b7:1d:c2:73:e4:97:96:52:e6:98:19:21:44:40:f7:
                    86:b4:8d:2e:2c:32:df:1b:66:bb:9e:cb:65:c3:5f:
                    3e:c3:b7:6b:49:2b:fb:80:7b:8f:2f:f6:7a:04:27:
                    cd:91:f3:b8:86:db:4c:d6:8b:22:7d:66:a8:5b:88:
                    00:41:51:12:cb:27:fe:bd:68:c2:23:97:fc:35:0e:
                    16:a4:a8:6f:64:47:41:8a:28:8d:81:c9:e5:7f:ee:
                    0a:76:d7:ab:ed:75:cf:e1:79:b9:ee:ab:da:81:2e:
                    27:14:5f:93:88:59:e6:b1:9e:ab:3d:65:9d:19:2b:
                    79:9b:78:f9:00:3b:64:8c:cb:84:06:54:53:ee:da:
                    a9:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:03:D0:55:6D:AC:A2:C1:12:B3:F2:F2:BC:DF:FA:87:E9:87:1D:0F
            X509v3 Authority Key Identifier:
                keyid:9A:9F:16:48:A3:D8:E4:9E:1B:52:84:F8:6C:E1:C3:48:F3:A7:28:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/3137392e35312e38302e302f32302d3230203d3e203134323332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.51.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         46:0c:02:ad:3b:25:cb:f2:87:d8:df:03:c6:28:de:e4:d8:22:
         bd:41:04:5c:f9:97:a3:74:22:b0:c1:2a:ce:d0:f9:b2:e2:e2:
         cf:ac:e2:03:f2:af:35:84:72:f9:6b:d6:7e:56:73:17:9c:70:
         13:4f:8f:58:32:26:df:0d:08:ec:76:78:77:d6:af:d7:77:f3:
         0b:88:c8:c9:16:54:93:0b:62:c8:23:42:a1:d0:f8:14:f7:11:
         6c:be:a1:fe:4e:6f:18:ba:6d:b5:20:43:67:1f:f9:1c:5d:08:
         4f:46:39:3c:9a:8b:ee:7b:5a:ba:ee:b5:be:1d:df:27:76:64:
         f5:48:10:69:25:94:36:6c:e0:16:49:98:b1:ab:81:bd:9c:a5:
         dd:cc:8b:b8:72:ab:d1:6d:bb:87:b0:a0:fe:6d:4d:14:c8:24:
         bf:8d:cb:96:a2:b9:3a:cc:8d:7c:97:07:d2:1d:8a:9d:f9:85:
         08:13:12:06:8c:b4:9b:19:25:d0:ca:ac:f7:87:6f:0c:cf:5e:
         ea:04:21:ea:2c:62:f3:41:41:7f:75:c0:fa:92:c9:01:2b:34:
         06:36:34:27:c2:c6:56:26:ca:75:f2:c9:64:e9:4f:71:0c:0b:
         d3:50:35:8c:94:3e:35:aa:82:6c:d0:9f:ea:1c:1a:73:25:6c:
         1c:ef:94:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 05:06:45 2026 by rpki-client