Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3137392e312e3135322e302f32342d3234203d3e203138363738.roa
File:                     3137392e312e3135322e302f32342d3234203d3e203138363738.roa (raw, json)
Hash identifier:          ZPLYVU1p9CZEyQRJH52x5z+rZOnf+h7vt0hUhAjcsGg=
Subject key identifier:   62:78:DD:9C:3A:3F:82:54:98:5F:EB:75:E0:59:98:77:37:83:71:78
Certificate issuer:       /CN=8E9E896ADF8041E07AB6735225935260B837E74D
Certificate serial:       0B5F46988323FCC7024093D0DC1FC9D3CCC6136A
Authority key identifier: 8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3137392e312e3135322e302f32342d3234203d3e203138363738.roa
Signing time:             Thu 16 Jul 2026 22:00:32 +0000
ROA not before:           Thu 16 Jul 2026 21:55:32 +0000
ROA not after:            Thu 15 Jul 2027 22:00:32 +0000
asID:                     18678
IP address blocks:        179.1.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:5f:46:98:83:23:fc:c7:02:40:93:d0:dc:1f:c9:d3:cc:c6:13:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E9E896ADF8041E07AB6735225935260B837E74D
        Validity
            Not Before: Jul 16 21:55:32 2026 GMT
            Not After : Jul 15 22:00:32 2027 GMT
        Subject: CN=6278DD9C3A3F8254985FEB75E059987737837178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:de:22:75:53:17:ac:a7:37:f0:0c:7a:4a:c7:
                    bf:c6:54:10:53:9d:22:e5:70:ca:c5:94:a4:46:06:
                    57:a9:77:0f:1e:48:ac:52:10:54:4d:c7:ff:ff:62:
                    51:08:b8:23:40:35:0a:4e:02:f6:1e:db:b0:5b:17:
                    05:56:7b:06:46:e2:7e:29:9f:3d:f7:70:c4:11:9f:
                    f3:fe:31:f9:84:bc:41:a6:14:45:86:45:99:14:22:
                    58:03:46:9a:a6:4a:73:81:e6:9d:34:43:ef:68:dd:
                    e0:bb:19:89:10:3c:65:d9:6c:05:0f:95:1f:a1:bd:
                    f7:ac:41:dc:05:a3:b0:ed:74:8f:7f:54:59:ff:b0:
                    ac:07:c3:72:c8:26:5b:e9:1c:ed:33:0a:d1:57:b6:
                    55:c0:37:1f:72:db:31:38:bb:40:f1:93:08:5a:c9:
                    63:53:b6:50:79:06:8a:60:d8:36:43:3f:a1:07:2d:
                    01:ed:64:65:44:2b:10:bb:a1:50:68:4d:0c:09:38:
                    35:33:34:6e:47:65:43:ba:78:cf:e4:83:6b:c2:3f:
                    12:b2:a5:bf:5b:f2:d8:68:f4:ef:35:77:ed:d3:61:
                    8e:0e:e7:c6:d5:d7:5e:68:c5:d6:f1:3c:59:cb:82:
                    f0:6d:49:7d:fe:20:9f:6c:8e:dc:46:fd:e9:80:bc:
                    80:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:78:DD:9C:3A:3F:82:54:98:5F:EB:75:E0:59:98:77:37:83:71:78
            X509v3 Authority Key Identifier:
                keyid:8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3137392e312e3135322e302f32342d3234203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.1.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:9d:ff:f6:b4:2f:a0:dd:e7:11:30:f3:17:6e:07:6f:ac:ff:
         95:58:14:bb:93:a7:1a:4d:02:04:e1:6b:c1:c3:f9:5c:7d:31:
         4a:ab:e9:6a:f4:d9:4f:2c:03:8c:37:d0:c7:fd:fe:36:7b:62:
         2b:ec:8a:33:9c:e7:10:3f:0d:fb:a4:69:9a:64:eb:c5:c5:cf:
         01:44:a5:2a:2d:9a:fd:d3:ae:8e:55:8d:1a:0b:af:e9:70:f4:
         3e:4b:48:f8:df:79:87:23:8b:57:b5:18:3c:a2:88:9c:cc:55:
         3a:80:3b:a4:ca:c7:b4:ae:2c:ae:50:31:1e:85:c5:8a:32:a1:
         11:e2:dc:25:8a:5f:84:08:b4:22:73:4c:8b:a2:50:e6:95:d1:
         2a:50:f9:59:e5:cf:42:9f:3d:60:e7:b8:12:4e:0c:c9:d5:c3:
         44:17:47:ec:ee:35:b8:f4:f7:1c:da:d8:48:34:59:b9:07:1e:
         6a:20:7b:e5:da:a2:3e:f5:8a:63:59:ca:0e:61:20:a8:63:d8:
         7c:54:6c:1a:de:b0:da:14:e9:ba:92:94:a4:b7:88:b3:e6:fa:
         9c:cf:fe:01:f3:07:81:95:68:e9:1a:20:1e:55:31:72:07:c1:
         92:b3:c9:97:0e:d3:0f:c1:30:64:1b:18:f1:9c:c3:8c:9d:aa:
         96:de:48:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:55:44 2026 by rpki-client