Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ABDCDCA69B22CE9202C0915B9223843255955BEB83F9FBE025C45F591DAACCC5/0/3137392e34332e38362e302f32342d3234203d3e20323633313835.roa
File:                     3137392e34332e38362e302f32342d3234203d3e20323633313835.roa (raw, json)
Hash identifier:          9O7DkLaW5zWI/cZj5AiEt788TtOOgtHHQigm/+UB09Q=
Subject key identifier:   22:E9:CB:BB:AC:40:21:BE:35:0C:E4:E5:12:F7:74:34:86:1D:92:5F
Certificate issuer:       /CN=9939CB5D6D59281BA93C774A966843C53619C202
Certificate serial:       525D952C02E4E2C64C575BBD3CD1833B63AC09E7
Authority key identifier: 99:39:CB:5D:6D:59:28:1B:A9:3C:77:4A:96:68:43:C5:36:19:C2:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9939CB5D6D59281BA93C774A966843C53619C202.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ABDCDCA69B22CE9202C0915B9223843255955BEB83F9FBE025C45F591DAACCC5/0/3137392e34332e38362e302f32342d3234203d3e20323633313835.roa
Signing time:             Thu 09 Jul 2026 17:50:01 +0000
ROA not before:           Thu 09 Jul 2026 17:45:01 +0000
ROA not after:            Thu 08 Jul 2027 17:50:01 +0000
asID:                     263185
IP address blocks:        179.43.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ABDCDCA69B22CE9202C0915B9223843255955BEB83F9FBE025C45F591DAACCC5/0/9939CB5D6D59281BA93C774A966843C53619C202.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ABDCDCA69B22CE9202C0915B9223843255955BEB83F9FBE025C45F591DAACCC5/0/9939CB5D6D59281BA93C774A966843C53619C202.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9939CB5D6D59281BA93C774A966843C53619C202.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:5d:95:2c:02:e4:e2:c6:4c:57:5b:bd:3c:d1:83:3b:63:ac:09:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9939CB5D6D59281BA93C774A966843C53619C202
        Validity
            Not Before: Jul  9 17:45:01 2026 GMT
            Not After : Jul  8 17:50:01 2027 GMT
        Subject: CN=22E9CBBBAC4021BE350CE4E512F77434861D925F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9c:de:7e:fa:ed:3c:c9:dc:a4:34:3d:d6:01:
                    2a:e8:b0:8d:cb:ab:8f:a0:83:56:b2:63:60:30:25:
                    f5:ba:a8:d7:f0:56:f5:22:5a:1a:94:9b:2c:f2:92:
                    2f:a7:5e:e4:1c:e7:68:a8:2c:fc:3f:26:a0:1d:04:
                    5b:b6:fa:6b:63:13:81:78:cf:c5:e8:fc:95:65:a9:
                    52:2d:84:b0:0b:31:bc:c5:85:c6:55:99:40:65:ca:
                    24:ea:53:4d:b1:ad:9a:1e:4e:42:63:c2:42:48:1f:
                    be:7d:28:46:39:5c:5e:1a:2f:cd:ae:3e:0c:4e:55:
                    52:56:c4:05:a4:91:18:5b:ef:94:cc:f4:84:66:44:
                    cc:14:4d:af:99:8e:40:a6:31:8e:28:f0:6f:1e:e0:
                    9f:e7:b0:13:c1:11:32:ca:10:76:9c:fb:71:ca:16:
                    c8:c4:a0:ab:0c:89:cd:19:1c:b5:d4:e7:0a:90:62:
                    75:18:35:a8:6a:3a:c2:8d:08:30:70:9a:d8:3c:9a:
                    be:f2:bc:c4:a8:ed:94:48:29:f4:11:13:d3:ec:60:
                    18:e4:09:28:e4:a3:ce:96:cd:54:09:ab:0d:08:d1:
                    43:97:a2:f2:09:dc:15:f0:1f:5d:28:98:2c:3f:38:
                    f9:a9:a4:eb:4f:41:00:69:1d:35:24:de:05:b1:3d:
                    4f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:E9:CB:BB:AC:40:21:BE:35:0C:E4:E5:12:F7:74:34:86:1D:92:5F
            X509v3 Authority Key Identifier:
                keyid:99:39:CB:5D:6D:59:28:1B:A9:3C:77:4A:96:68:43:C5:36:19:C2:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ABDCDCA69B22CE9202C0915B9223843255955BEB83F9FBE025C45F591DAACCC5/0/9939CB5D6D59281BA93C774A966843C53619C202.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9939CB5D6D59281BA93C774A966843C53619C202.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ABDCDCA69B22CE9202C0915B9223843255955BEB83F9FBE025C45F591DAACCC5/0/3137392e34332e38362e302f32342d3234203d3e20323633313835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.43.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:8a:f1:3f:e5:ea:5f:ba:1b:d3:e4:56:ca:ef:84:66:22:13:
         71:ab:2b:73:58:2a:eb:41:7b:ef:0b:06:d5:2a:37:78:a5:d3:
         2e:50:53:a5:01:9d:ed:d2:a6:4d:a6:d9:e2:7d:2b:0a:82:c3:
         0a:80:6b:88:ba:01:64:21:23:3a:22:e0:cd:88:27:30:96:a5:
         60:17:dd:2e:a9:f4:3d:69:f7:86:ff:d2:95:61:da:03:bc:00:
         4a:52:0a:3b:77:e6:d0:f3:94:a5:5d:9b:f6:ad:eb:04:f8:fb:
         46:af:4b:b6:2e:e7:80:84:d4:79:9a:4d:e4:94:a5:09:b9:79:
         21:2f:e1:23:fc:d6:e7:aa:ff:dd:33:9c:de:56:00:29:41:1a:
         81:22:27:77:a4:54:32:cd:6b:ef:83:62:6a:ed:08:61:0e:3a:
         92:6c:61:fa:11:38:ff:e4:85:28:66:7b:85:b5:aa:df:04:21:
         12:7a:95:53:71:19:1f:72:44:1e:a9:11:0a:13:38:b9:5d:cd:
         63:21:48:fa:81:94:66:88:03:0e:fb:07:19:cd:5d:b3:9f:e4:
         2e:a3:17:ab:90:7e:64:4d:39:da:d4:9c:2e:a7:7f:1c:72:12:
         ba:d4:0d:47:f8:4d:57:ed:85:a8:a2:c2:f3:70:9e:17:d6:f3:
         d2:5f:a9:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:10:24 2026 by rpki-client