Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ABDCDCA69B22CE9202C0915B9223843255955BEB83F9FBE025C45F591DAACCC5/0/3137392e34332e38302e302f32342d3234203d3e20323633313835.roa
File:                     3137392e34332e38302e302f32342d3234203d3e20323633313835.roa (raw, json)
Hash identifier:          zgkbzjeYm62rwE4ApxXHb0+Wt9TFIsa14gCUxLez2Po=
Subject key identifier:   72:92:EE:F1:CA:38:D9:16:05:86:14:A2:40:02:F9:E2:ED:7D:57:6B
Certificate issuer:       /CN=9939CB5D6D59281BA93C774A966843C53619C202
Certificate serial:       0B2EFCC151D703C2DBDC17220E0FB3E7F9549AFA
Authority key identifier: 99:39:CB:5D:6D:59:28:1B:A9:3C:77:4A:96:68:43:C5:36:19:C2:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9939CB5D6D59281BA93C774A966843C53619C202.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ABDCDCA69B22CE9202C0915B9223843255955BEB83F9FBE025C45F591DAACCC5/0/3137392e34332e38302e302f32342d3234203d3e20323633313835.roa
Signing time:             Thu 09 Jul 2026 17:50:02 +0000
ROA not before:           Thu 09 Jul 2026 17:45:02 +0000
ROA not after:            Thu 08 Jul 2027 17:50:02 +0000
asID:                     263185
IP address blocks:        179.43.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ABDCDCA69B22CE9202C0915B9223843255955BEB83F9FBE025C45F591DAACCC5/0/9939CB5D6D59281BA93C774A966843C53619C202.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ABDCDCA69B22CE9202C0915B9223843255955BEB83F9FBE025C45F591DAACCC5/0/9939CB5D6D59281BA93C774A966843C53619C202.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9939CB5D6D59281BA93C774A966843C53619C202.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:2e:fc:c1:51:d7:03:c2:db:dc:17:22:0e:0f:b3:e7:f9:54:9a:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9939CB5D6D59281BA93C774A966843C53619C202
        Validity
            Not Before: Jul  9 17:45:02 2026 GMT
            Not After : Jul  8 17:50:02 2027 GMT
        Subject: CN=7292EEF1CA38D916058614A24002F9E2ED7D576B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:74:80:9d:d7:7e:a7:f8:53:28:3f:90:6d:fe:
                    eb:df:69:f8:01:b4:3c:b0:8e:38:42:89:f6:9f:21:
                    c9:b4:6a:44:12:6f:97:02:aa:1b:6a:b9:c8:82:39:
                    cc:ff:0f:23:c7:28:24:9f:be:32:30:5d:2c:59:c9:
                    f3:bf:12:db:c7:5e:09:a0:f6:bd:17:fc:6a:2f:09:
                    2f:dd:6e:9d:d7:ec:57:63:da:97:7d:f4:36:a6:ff:
                    b1:0f:62:4b:7b:27:03:fd:54:f2:2d:07:8c:b3:ac:
                    ea:6b:3b:df:f8:71:a4:23:77:ac:db:3f:d0:b6:16:
                    d4:85:7d:a9:fa:13:38:b2:e1:0f:97:f7:57:35:00:
                    56:ca:30:2b:35:5b:3d:3f:f8:02:1d:e4:ed:46:08:
                    30:66:18:e9:b1:92:46:76:5e:26:c0:95:6c:15:ae:
                    05:42:2e:89:88:fd:c4:d5:7f:af:d3:0c:91:15:bb:
                    8c:a7:5b:d6:82:f8:ea:d8:0f:52:a1:2d:c0:c0:44:
                    24:27:50:69:55:e2:58:b0:e7:c7:9a:43:cf:72:03:
                    d3:b2:01:27:a9:f3:8f:91:92:49:21:dd:90:30:e7:
                    72:38:0c:e0:f2:d4:f4:b7:f0:88:58:4d:73:66:dd:
                    6c:80:66:ad:96:39:27:0a:41:23:a8:81:f7:30:17:
                    45:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:92:EE:F1:CA:38:D9:16:05:86:14:A2:40:02:F9:E2:ED:7D:57:6B
            X509v3 Authority Key Identifier:
                keyid:99:39:CB:5D:6D:59:28:1B:A9:3C:77:4A:96:68:43:C5:36:19:C2:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ABDCDCA69B22CE9202C0915B9223843255955BEB83F9FBE025C45F591DAACCC5/0/9939CB5D6D59281BA93C774A966843C53619C202.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9939CB5D6D59281BA93C774A966843C53619C202.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ABDCDCA69B22CE9202C0915B9223843255955BEB83F9FBE025C45F591DAACCC5/0/3137392e34332e38302e302f32342d3234203d3e20323633313835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.43.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:ee:b5:42:0f:91:dc:76:21:c6:60:b9:79:df:54:07:57:d3:
         13:66:46:92:b1:70:9c:7b:ba:ac:eb:38:40:68:a5:31:d4:e9:
         09:3b:e8:c7:29:6d:12:bc:ec:d9:8a:60:71:1f:da:ab:99:de:
         99:01:2e:03:f6:5d:d6:61:e2:0e:9f:38:9e:06:11:6e:03:4b:
         1b:06:2a:bf:4c:88:7d:41:51:35:76:b4:22:4e:5e:02:59:a8:
         d7:9b:07:b0:83:78:b7:a7:af:0e:dd:87:6c:1d:e4:18:c5:58:
         9a:33:ff:b0:ed:e9:ec:14:2e:d3:f2:c6:68:14:9a:25:c2:06:
         4a:57:26:f4:63:a6:ba:48:62:41:81:5f:58:61:e5:08:a8:ea:
         9f:85:0b:47:db:14:5b:90:0e:14:a0:8b:0a:48:bd:97:bd:fe:
         ef:02:dc:67:0a:22:70:07:da:de:a2:2a:c9:a2:b3:60:ce:f4:
         ee:db:36:25:bb:e0:99:40:74:39:34:f3:2f:42:5c:60:6d:a5:
         75:43:67:d1:27:be:c3:62:47:77:a2:b2:6c:60:bb:3a:5b:21:
         17:9f:87:97:03:6c:41:1f:4e:1b:20:6c:95:a6:82:3d:5c:f1:
         02:39:c4:85:ad:5b:4b:6b:bd:f3:96:43:30:55:59:3a:f7:b0:
         3a:01:69:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:09:42 2026 by rpki-client