Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3137392e312e3135342e302f32342d3234203d3e203138363738.roa
File:                     3137392e312e3135342e302f32342d3234203d3e203138363738.roa (raw, json)
Hash identifier:          cXFoO0QNuLoik8u4JlBVEEZtk3xB/jkXEXErVZfghrY=
Subject key identifier:   0B:67:73:A6:78:B6:C3:37:A2:B1:F1:8E:1B:53:B8:E2:D3:94:83:23
Certificate issuer:       /CN=8E9E896ADF8041E07AB6735225935260B837E74D
Certificate serial:       029B2C356FBB6E81A74564F7E18C98F7669485DD
Authority key identifier: 8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3137392e312e3135342e302f32342d3234203d3e203138363738.roa
Signing time:             Thu 16 Jul 2026 22:00:32 +0000
ROA not before:           Thu 16 Jul 2026 21:55:32 +0000
ROA not after:            Thu 15 Jul 2027 22:00:32 +0000
asID:                     18678
IP address blocks:        179.1.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:9b:2c:35:6f:bb:6e:81:a7:45:64:f7:e1:8c:98:f7:66:94:85:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E9E896ADF8041E07AB6735225935260B837E74D
        Validity
            Not Before: Jul 16 21:55:32 2026 GMT
            Not After : Jul 15 22:00:32 2027 GMT
        Subject: CN=0B6773A678B6C337A2B1F18E1B53B8E2D3948323
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:0b:67:07:d5:b9:86:00:b7:de:ac:0b:8c:dd:
                    5b:24:cc:88:b5:5f:2c:7c:10:d1:83:34:1e:78:42:
                    e0:54:f9:4d:87:5f:a7:f4:8e:01:f8:63:ec:0b:41:
                    b7:6a:ce:6e:ac:ed:96:6b:dc:d1:45:b1:d9:31:31:
                    66:87:8b:3b:2b:a6:15:e0:64:44:2e:86:2b:1a:16:
                    4f:0d:50:36:91:bd:99:7f:9b:b0:fb:17:e6:b6:1b:
                    76:6d:5a:70:eb:96:c2:3e:eb:65:11:de:7b:8c:61:
                    a1:5a:96:d7:79:46:1f:8d:54:8b:a2:81:dd:3a:83:
                    a7:a2:df:ac:76:a3:86:d7:24:f7:b6:31:29:44:ca:
                    9f:40:f2:5a:3c:21:95:0a:ab:f9:ce:8f:d7:36:0d:
                    2c:e0:e2:df:d6:f0:3f:be:5e:83:04:34:4e:1b:44:
                    54:e0:60:f6:eb:82:98:09:b9:8f:c3:aa:de:43:00:
                    01:dc:6a:7b:76:a0:59:ae:c6:fe:3c:8d:19:58:0d:
                    21:08:ad:79:4a:7b:2b:85:52:4e:4a:6b:c2:b1:82:
                    18:b8:0a:af:00:fe:9d:71:27:4f:dc:3d:36:76:e9:
                    22:52:79:60:01:e3:ba:44:be:f3:98:88:1a:56:1f:
                    02:fa:08:2e:ad:9f:cd:34:97:1b:b0:58:35:35:60:
                    07:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:67:73:A6:78:B6:C3:37:A2:B1:F1:8E:1B:53:B8:E2:D3:94:83:23
            X509v3 Authority Key Identifier:
                keyid:8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3137392e312e3135342e302f32342d3234203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.1.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:48:59:ac:36:f3:77:13:7a:0c:0e:51:18:df:6e:0f:39:74:
         71:e0:ab:39:bd:a0:bb:36:06:4a:95:86:52:1a:ee:63:81:e6:
         a7:71:98:0a:04:fd:98:40:5a:12:6e:ee:d6:4d:a4:96:c8:cd:
         e8:4a:11:a0:f6:0a:48:a9:87:62:6c:30:96:5d:df:53:5d:08:
         bf:54:75:3f:1d:33:b7:3d:ba:30:90:6a:bd:16:53:10:bd:0e:
         fc:08:f6:0d:bf:51:2e:71:b4:17:18:26:b0:b7:88:20:1f:27:
         8b:8f:68:2c:27:1a:35:d9:f8:c6:24:2d:26:69:30:56:47:f9:
         98:43:dc:85:de:78:c6:99:f7:e6:c5:f7:39:65:44:ec:59:9f:
         d6:e6:51:26:52:46:2e:dc:52:20:d3:e6:63:fc:fd:11:da:d1:
         ec:49:c4:b0:4c:08:3c:e2:33:b7:a9:26:b4:68:15:be:93:f0:
         9e:db:a2:2a:db:62:54:b1:02:94:eb:df:a9:35:a3:f4:29:0a:
         88:6c:35:75:e3:78:a5:07:98:d1:55:bd:95:7c:90:af:26:f2:
         76:fe:50:3c:0c:c6:fb:28:c8:fe:03:07:ef:c9:44:f4:0a:e3:
         e0:9c:66:e9:4d:07:e1:94:30:ee:31:33:03:aa:bd:9d:05:1f:
         72:aa:66:30
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUApssNW+7boGnRWT34YyY92aUhd0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEU5RTg5NkFERjgwNDFFMDdBQjY3MzUyMjU5MzUyNjBC
ODM3RTc0RDAeFw0yNjA3MTYyMTU1MzJaFw0yNzA3MTUyMjAwMzJaMDMxMTAvBgNV
BAMTKDBCNjc3M0E2NzhCNkMzMzdBMkIxRjE4RTFCNTNCOEUyRDM5NDgzMjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxC2cH1bmGALferAuM3VskzIi1
Xyx8ENGDNB54QuBU+U2HX6f0jgH4Y+wLQbdqzm6s7ZZr3NFFsdkxMWaHizsrphXg
ZEQuhisaFk8NUDaRvZl/m7D7F+a2G3ZtWnDrlsI+62UR3nuMYaFaltd5Rh+NVIui
gd06g6ei36x2o4bXJPe2MSlEyp9A8lo8IZUKq/nOj9c2DSzg4t/W8D++XoMENE4b
RFTgYPbrgpgJuY/Dqt5DAAHcant2oFmuxv48jRlYDSEIrXlKeyuFUk5Ka8Kxghi4
Cq8A/p1xJ0/cPTZ26SJSeWAB47pEvvOYiBpWHwL6CC6tn800lxuwWDU1YAcJAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUC2dzpni2wzeisfGOG1O44tOUgyMwHwYDVR0j
BBgwFoAUjp6Jat+AQeB6tnNSJZNSYLg3500wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CQUEzRUUwQUUwNjI1OTNBREJBNUNFQUI2RUE0MTRFOTQy
RUUyRDlCQTIzNDZCRDAyQjFERDFBRkU5NDE1MzQwLzAvOEU5RTg5NkFERjgwNDFF
MDdBQjY3MzUyMjU5MzUyNjBCODM3RTc0RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84RTlFODk2QURGODA0MUUwN0FC
NjczNTIyNTkzNTI2MEI4MzdFNzRELmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQkFBM0VFMEFFMDYyNTkzQURCQTVDRUFCNkVBNDE0RTk0MkVFMkQ5QkEy
MzQ2QkQwMkIxREQxQUZFOTQxNTM0MC8wLzMxMzczOTJlMzEyZTMxMzUzNDJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzgzNjM3Mzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACzAZowDQYJ
KoZIhvcNAQELBQADggEBAH1IWaw283cTegwOURjfbg85dHHgqzm9oLs2BkqVhlIa
7mOB5qdxmAoE/ZhAWhJu7tZNpJbIzehKEaD2Ckiph2JsMJZd31NdCL9UdT8dM7c9
ujCQar0WUxC9DvwI9g2/US5xtBcYJrC3iCAfJ4uPaCwnGjXZ+MYkLSZpMFZH+ZhD
3IXeeMaZ9+bF9zllROxZn9bmUSZSRi7cUiDT5mP8/RHa0exJxLBMCDziM7epJrRo
Fb6T8J7boirbYlSxApTr36k1o/QpCohsNXXjeKUHmNFVvZV8kK8m8nb+UDwMxvso
yP4DB+/JRPQK4+CcZulNB+GUMO4xMwOqvZ0FH3KqZjA=
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:11:32 2026 by rpki-client