Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A8DEBA3AEF36A65CA66BCE01252476696412E76E1D9F044FF626A994961CAF2E/0/3137392e36302e35362e302f32342d3234203d3e20323633383035.roa
File:                     3137392e36302e35362e302f32342d3234203d3e20323633383035.roa (raw, json)
Hash identifier:          vAN3hQsHaQFSQIzY7Bc3gG0rO1GzTCuy0bIFk7ZC5a8=
Subject key identifier:   06:71:86:0C:A3:9B:EB:CB:91:15:81:98:B6:9B:29:41:9D:E4:9D:80
Certificate issuer:       /CN=08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF
Certificate serial:       1A557D9C2E5196EDF2D020AA8A85422EFCBBDD5A
Authority key identifier: 08:06:8D:F7:BE:8B:7B:50:27:B2:FC:A1:92:7A:DB:4C:9E:65:D3:CF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A8DEBA3AEF36A65CA66BCE01252476696412E76E1D9F044FF626A994961CAF2E/0/3137392e36302e35362e302f32342d3234203d3e20323633383035.roa
Signing time:             Thu 05 Mar 2026 14:32:50 +0000
ROA not before:           Thu 05 Mar 2026 14:27:50 +0000
ROA not after:            Thu 04 Mar 2027 14:32:50 +0000
asID:                     263805
IP address blocks:        179.60.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A8DEBA3AEF36A65CA66BCE01252476696412E76E1D9F044FF626A994961CAF2E/0/08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A8DEBA3AEF36A65CA66BCE01252476696412E76E1D9F044FF626A994961CAF2E/0/08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:55:7d:9c:2e:51:96:ed:f2:d0:20:aa:8a:85:42:2e:fc:bb:dd:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF
        Validity
            Not Before: Mar  5 14:27:50 2026 GMT
            Not After : Mar  4 14:32:50 2027 GMT
        Subject: CN=0671860CA39BEBCB91158198B69B29419DE49D80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:72:4b:12:0e:cc:87:a7:47:e3:ba:93:43:05:
                    9e:62:de:fd:4b:fb:f6:a3:8c:34:c2:d8:7b:93:76:
                    80:7f:ef:b2:4d:b1:b9:ec:ae:16:f8:8a:72:95:25:
                    56:5c:cf:3d:b5:65:8e:05:4a:b4:e0:04:ed:a3:ac:
                    7a:da:10:d3:c0:03:31:51:7d:67:02:7f:03:ad:62:
                    d9:34:9d:0c:77:75:21:8e:00:d4:3d:f9:ba:38:da:
                    c6:91:f2:40:cf:b3:cf:18:24:fb:26:c2:42:b8:da:
                    64:3b:8d:b8:33:e0:52:d0:d4:36:84:6e:b4:16:f6:
                    e2:78:62:02:62:85:33:81:f8:f4:36:8e:82:fb:64:
                    49:db:45:ea:02:d4:3f:b0:57:a1:28:a6:e5:c2:08:
                    d0:51:a5:5e:6d:89:89:61:9a:e7:7d:a7:83:b5:49:
                    ad:8e:a8:52:4d:b0:ba:9c:a2:4e:12:52:68:13:ac:
                    98:b2:b5:a6:ec:f5:8f:a5:0b:5c:df:6f:c8:94:10:
                    4f:5c:0c:bf:f1:d0:7c:f9:a6:f6:cb:0b:37:3d:2b:
                    14:a1:8f:b2:2e:21:99:f4:18:e8:98:c3:88:47:00:
                    84:9b:1e:08:e4:aa:4e:2f:40:01:57:8a:d4:86:98:
                    09:d9:e2:8e:e4:43:45:c4:60:eb:77:46:8a:0e:e9:
                    30:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:71:86:0C:A3:9B:EB:CB:91:15:81:98:B6:9B:29:41:9D:E4:9D:80
            X509v3 Authority Key Identifier:
                keyid:08:06:8D:F7:BE:8B:7B:50:27:B2:FC:A1:92:7A:DB:4C:9E:65:D3:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A8DEBA3AEF36A65CA66BCE01252476696412E76E1D9F044FF626A994961CAF2E/0/08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A8DEBA3AEF36A65CA66BCE01252476696412E76E1D9F044FF626A994961CAF2E/0/3137392e36302e35362e302f32342d3234203d3e20323633383035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:5f:5a:35:80:8b:77:e5:ce:bf:70:23:be:66:23:bf:2d:24:
         74:10:3c:97:27:64:d7:0c:6f:7d:65:2e:19:7c:ee:de:a7:73:
         70:a4:9e:cb:10:95:06:05:4d:b1:c9:f7:95:dc:d7:7b:29:16:
         36:22:eb:95:34:08:68:24:13:34:0d:47:5a:6d:17:9e:99:03:
         fe:45:cd:5c:31:3e:f8:f8:f6:87:5b:26:b4:b5:af:a9:54:e8:
         cd:be:33:21:68:b6:34:76:0d:b0:48:6b:b6:a5:9d:52:85:95:
         37:29:cf:97:5b:8c:aa:74:7f:08:0f:35:64:38:f4:e9:b6:bd:
         27:2b:28:9a:80:2b:f4:48:a8:7d:32:87:4a:0b:19:b2:45:9f:
         b5:5e:fe:da:65:5b:6e:1e:7e:c5:35:d1:29:77:77:e4:eb:5c:
         41:36:04:87:f0:f0:df:8e:e2:d7:cc:ec:81:ce:79:40:41:6b:
         11:aa:25:b4:07:7b:f2:b3:d6:29:76:c3:b3:cd:98:62:b4:6b:
         f1:c9:43:c0:2b:25:a8:60:7c:64:a2:24:8a:d6:7d:a2:04:74:
         13:ac:50:3b:d3:c7:46:66:ed:93:fa:8e:f0:fc:32:1c:1a:39:
         d0:38:d5:05:c2:fd:2d:d1:87:90:b8:72:79:f7:f1:e2:c5:76:
         c8:d9:e7:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:09:38 2026 by rpki-client