Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ABDCDCA69B22CE9202C0915B9223843255955BEB83F9FBE025C45F591DAACCC5/0/3137392e34332e38332e302f32342d3234203d3e20323633313835.roa
File:                     3137392e34332e38332e302f32342d3234203d3e20323633313835.roa (raw, json)
Hash identifier:          PVTnT8gLMRy1zdHmxHRHl5Jj9d/AcrEtbppqiIMIjRw=
Subject key identifier:   82:31:ED:9B:56:A9:6D:4B:11:EF:0C:FE:CA:EF:BD:D2:B5:4A:C0:13
Certificate issuer:       /CN=9939CB5D6D59281BA93C774A966843C53619C202
Certificate serial:       026993922F30BFE93276422A20C8D9D5199F0A0C
Authority key identifier: 99:39:CB:5D:6D:59:28:1B:A9:3C:77:4A:96:68:43:C5:36:19:C2:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9939CB5D6D59281BA93C774A966843C53619C202.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ABDCDCA69B22CE9202C0915B9223843255955BEB83F9FBE025C45F591DAACCC5/0/3137392e34332e38332e302f32342d3234203d3e20323633313835.roa
Signing time:             Thu 09 Jul 2026 17:50:00 +0000
ROA not before:           Thu 09 Jul 2026 17:45:00 +0000
ROA not after:            Thu 08 Jul 2027 17:50:00 +0000
asID:                     263185
IP address blocks:        179.43.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ABDCDCA69B22CE9202C0915B9223843255955BEB83F9FBE025C45F591DAACCC5/0/9939CB5D6D59281BA93C774A966843C53619C202.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ABDCDCA69B22CE9202C0915B9223843255955BEB83F9FBE025C45F591DAACCC5/0/9939CB5D6D59281BA93C774A966843C53619C202.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9939CB5D6D59281BA93C774A966843C53619C202.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:69:93:92:2f:30:bf:e9:32:76:42:2a:20:c8:d9:d5:19:9f:0a:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9939CB5D6D59281BA93C774A966843C53619C202
        Validity
            Not Before: Jul  9 17:45:00 2026 GMT
            Not After : Jul  8 17:50:00 2027 GMT
        Subject: CN=8231ED9B56A96D4B11EF0CFECAEFBDD2B54AC013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:62:9d:45:72:8f:a2:83:42:f4:ca:31:9f:77:
                    6d:d7:85:40:20:2b:70:bf:39:30:80:6f:3c:25:79:
                    ab:ef:66:80:16:27:64:b3:a4:7c:26:cc:1a:88:57:
                    08:8a:87:d6:59:6b:a9:26:74:76:51:34:72:f9:45:
                    c7:f1:7c:61:84:50:5f:24:eb:cb:71:0c:dd:ff:c2:
                    f6:f5:f8:38:0d:01:97:47:6e:d6:c6:99:89:1d:f9:
                    94:aa:94:5f:e6:4f:6b:0a:e4:5f:94:a5:81:19:77:
                    8b:35:17:b2:48:21:ef:d4:71:26:93:5c:56:19:dc:
                    f1:72:ed:01:5e:82:29:91:84:d8:ce:88:41:1e:7c:
                    9f:66:a5:fc:c4:86:c9:07:bc:6d:fe:8e:c8:24:93:
                    f0:44:42:11:93:37:ad:a9:dc:7a:71:87:b9:e3:9a:
                    ca:cc:d6:11:86:b6:5e:d0:d5:b6:6e:96:43:7c:50:
                    6d:70:34:ac:48:b7:4d:43:4f:96:1f:ea:ed:9f:d1:
                    90:b2:8d:21:9d:16:a2:aa:68:3d:09:42:80:92:cc:
                    10:b0:95:45:53:b0:1d:bf:84:44:e5:45:c5:3d:bb:
                    27:e1:9e:e0:23:dc:e4:b2:7f:38:cc:1b:9e:48:13:
                    5b:1e:e1:c7:40:a8:4e:0d:16:b1:fa:7b:cb:e4:19:
                    d8:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:31:ED:9B:56:A9:6D:4B:11:EF:0C:FE:CA:EF:BD:D2:B5:4A:C0:13
            X509v3 Authority Key Identifier:
                keyid:99:39:CB:5D:6D:59:28:1B:A9:3C:77:4A:96:68:43:C5:36:19:C2:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ABDCDCA69B22CE9202C0915B9223843255955BEB83F9FBE025C45F591DAACCC5/0/9939CB5D6D59281BA93C774A966843C53619C202.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9939CB5D6D59281BA93C774A966843C53619C202.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ABDCDCA69B22CE9202C0915B9223843255955BEB83F9FBE025C45F591DAACCC5/0/3137392e34332e38332e302f32342d3234203d3e20323633313835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.43.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:1c:5f:86:e3:84:be:c6:d9:d7:f8:b6:90:22:2f:29:c5:69:
         8b:c6:84:66:aa:56:fb:98:82:9a:28:20:6a:d3:e5:d2:50:26:
         84:45:ad:a0:e8:0e:60:93:4a:59:53:21:37:04:b6:92:97:ff:
         e8:af:4e:0d:22:fa:9e:6c:76:87:6b:89:bb:ee:1c:8a:fc:a7:
         f4:23:14:43:52:a5:87:46:9b:c2:e5:4b:5a:3f:70:90:a3:74:
         82:7b:7b:73:81:04:db:78:4f:ee:af:18:8d:f8:65:29:21:be:
         25:43:d4:0b:ee:0d:c1:78:7f:97:df:aa:d8:07:72:0b:6f:0f:
         be:b6:ea:e6:68:48:2e:78:6c:4b:18:9d:bf:90:e6:62:4a:17:
         74:6a:f3:dd:5b:9d:88:8a:66:67:38:31:ec:8d:da:bc:3d:21:
         34:f1:59:b3:88:1f:b2:2f:f1:b4:2b:da:28:9d:f8:12:03:a8:
         66:85:f7:94:60:3d:4d:95:58:5b:c9:1a:70:0a:ba:a6:e5:2c:
         53:e9:bb:3e:2a:20:3c:a8:b2:e9:5c:30:2b:a1:1b:94:35:24:
         29:ec:98:7d:ed:89:b7:e9:34:cc:99:41:0b:a1:c9:5b:f9:04:
         3a:29:fd:d4:be:e7:28:57:04:15:9d:fe:00:18:81:d4:6c:64:
         c1:b7:0a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:10:27 2026 by rpki-client