Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3137392e312e3135372e302f32342d3234203d3e203138363738.roa
File:                     3137392e312e3135372e302f32342d3234203d3e203138363738.roa (raw, json)
Hash identifier:          Ge78bdUo8CbSDuH0pVxfas6ahdslBMGyZ5YuPoydE3Q=
Subject key identifier:   AA:B8:19:71:34:A2:5C:ED:37:E0:D8:C8:6C:A2:B2:6B:34:06:6E:C7
Certificate issuer:       /CN=8E9E896ADF8041E07AB6735225935260B837E74D
Certificate serial:       39E91F77B4AA53BFF71BB6AF27ADFDDA62772630
Authority key identifier: 8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3137392e312e3135372e302f32342d3234203d3e203138363738.roa
Signing time:             Fri 17 Jul 2026 15:00:37 +0000
ROA not before:           Fri 17 Jul 2026 14:55:37 +0000
ROA not after:            Fri 16 Jul 2027 15:00:37 +0000
asID:                     18678
IP address blocks:        179.1.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:e9:1f:77:b4:aa:53:bf:f7:1b:b6:af:27:ad:fd:da:62:77:26:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E9E896ADF8041E07AB6735225935260B837E74D
        Validity
            Not Before: Jul 17 14:55:37 2026 GMT
            Not After : Jul 16 15:00:37 2027 GMT
        Subject: CN=AAB8197134A25CED37E0D8C86CA2B26B34066EC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:bc:4a:50:c6:43:ce:82:65:3b:2f:c7:5a:bc:
                    d9:6d:b8:a3:21:c6:2a:64:88:3e:9a:70:92:96:05:
                    ac:8b:03:f5:be:ce:39:4c:ff:82:6c:67:f1:13:7d:
                    72:bd:55:9e:f4:b9:cd:bd:da:3c:14:5e:33:79:4d:
                    fa:16:17:38:38:f1:83:68:18:0f:d8:46:e6:c1:00:
                    c8:26:b1:bb:42:86:1b:84:85:64:e9:f4:13:31:ae:
                    23:35:5a:87:1a:74:fa:b6:b8:93:a2:f7:fd:d6:0a:
                    ee:a5:95:fd:a1:3f:6d:fa:13:b8:c0:ec:4b:86:d7:
                    43:5a:e7:b2:b8:ca:29:b6:f3:f4:f4:dc:0d:1a:fe:
                    05:7e:06:0d:74:3f:8b:d0:81:35:33:bc:45:ba:77:
                    f1:dc:e5:8c:67:c8:4e:55:f8:b8:0d:59:7b:f0:20:
                    f4:79:f5:65:e2:b1:4c:0b:a9:38:c1:94:d3:97:b9:
                    f1:87:db:29:d0:37:02:34:24:76:9e:47:aa:77:bd:
                    de:a0:70:7a:dc:1b:58:ba:37:48:6e:57:4b:64:04:
                    ac:cf:c7:a2:6b:7f:f0:6a:d3:d6:93:83:d1:2f:70:
                    30:77:b2:14:0b:60:a5:93:ee:8a:e5:b8:65:ce:e9:
                    14:a7:82:76:5e:8b:8f:3d:9c:0c:1f:07:c8:62:fe:
                    71:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:B8:19:71:34:A2:5C:ED:37:E0:D8:C8:6C:A2:B2:6B:34:06:6E:C7
            X509v3 Authority Key Identifier:
                keyid:8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3137392e312e3135372e302f32342d3234203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.1.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:ad:bd:e9:46:05:7b:b8:5b:ea:53:8a:58:4c:a2:ee:ef:b9:
         f2:ed:c7:e4:43:d4:95:ad:b1:fa:17:24:1d:6f:da:bf:78:80:
         7a:45:29:98:67:bc:e7:79:8c:a2:97:6a:6f:fe:14:20:0e:81:
         85:88:45:ff:28:b7:9f:a4:7b:77:10:1b:7d:9e:1d:9a:67:0e:
         ec:22:19:5e:3f:f8:04:43:b4:bd:3e:79:b1:c6:bf:34:9b:5e:
         e7:87:2e:2d:c1:c5:8e:73:75:80:8e:fb:14:4e:70:07:f6:b0:
         9b:34:f6:9f:eb:c3:94:95:f3:f0:b4:6c:32:64:6a:7f:a3:af:
         25:1d:0a:ed:a4:06:95:20:f1:e8:e1:f8:17:3a:ae:d8:eb:bb:
         d8:d6:e0:b2:74:aa:c6:54:e2:5d:e5:80:6c:62:51:d6:15:bc:
         1d:91:7b:18:9e:c8:16:c5:3f:ba:9b:ba:5c:4f:12:92:15:df:
         de:04:3d:9e:47:70:a9:d5:6e:4a:64:fc:cb:14:98:b0:c1:6e:
         6b:d2:57:9f:f4:4e:fe:06:fb:d3:1c:db:8a:c9:60:a2:47:8f:
         8a:1f:86:a2:f3:97:80:85:99:13:20:dd:92:a1:3a:f4:b1:38:
         8d:e7:a3:05:17:6e:cd:bf:9e:49:1c:23:e7:97:a5:bd:ce:60:
         20:2b:a0:5d
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUOekfd7SqU7/3G7avJ6392mJ3JjAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEU5RTg5NkFERjgwNDFFMDdBQjY3MzUyMjU5MzUyNjBC
ODM3RTc0RDAeFw0yNjA3MTcxNDU1MzdaFw0yNzA3MTYxNTAwMzdaMDMxMTAvBgNV
BAMTKEFBQjgxOTcxMzRBMjVDRUQzN0UwRDhDODZDQTJCMjZCMzQwNjZFQzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCevEpQxkPOgmU7L8davNltuKMh
xipkiD6acJKWBayLA/W+zjlM/4JsZ/ETfXK9VZ70uc292jwUXjN5TfoWFzg48YNo
GA/YRubBAMgmsbtChhuEhWTp9BMxriM1WocadPq2uJOi9/3WCu6llf2hP236E7jA
7EuG10Na57K4yim28/T03A0a/gV+Bg10P4vQgTUzvEW6d/Hc5YxnyE5V+LgNWXvw
IPR59WXisUwLqTjBlNOXufGH2ynQNwI0JHaeR6p3vd6gcHrcG1i6N0huV0tkBKzP
x6Jrf/Bq09aTg9EvcDB3shQLYKWT7orluGXO6RSngnZei489nAwfB8hi/nE5AgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUqrgZcTSiXO034NjIbKKyazQGbscwHwYDVR0j
BBgwFoAUjp6Jat+AQeB6tnNSJZNSYLg3500wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CQUEzRUUwQUUwNjI1OTNBREJBNUNFQUI2RUE0MTRFOTQy
RUUyRDlCQTIzNDZCRDAyQjFERDFBRkU5NDE1MzQwLzAvOEU5RTg5NkFERjgwNDFF
MDdBQjY3MzUyMjU5MzUyNjBCODM3RTc0RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84RTlFODk2QURGODA0MUUwN0FC
NjczNTIyNTkzNTI2MEI4MzdFNzRELmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQkFBM0VFMEFFMDYyNTkzQURCQTVDRUFCNkVBNDE0RTk0MkVFMkQ5QkEy
MzQ2QkQwMkIxREQxQUZFOTQxNTM0MC8wLzMxMzczOTJlMzEyZTMxMzUzNzJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzgzNjM3Mzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACzAZ0wDQYJ
KoZIhvcNAQELBQADggEBADGtvelGBXu4W+pTilhMou7vufLtx+RD1JWtsfoXJB1v
2r94gHpFKZhnvOd5jKKXam/+FCAOgYWIRf8ot5+ke3cQG32eHZpnDuwiGV4/+ARD
tL0+ebHGvzSbXueHLi3BxY5zdYCO+xROcAf2sJs09p/rw5SV8/C0bDJkan+jryUd
Cu2kBpUg8ejh+Bc6rtjru9jW4LJ0qsZU4l3lgGxiUdYVvB2RexieyBbFP7qbulxP
EpIV394EPZ5HcKnVbkpk/MsUmLDBbmvSV5/0Tv4G+9Mc24rJYKJHj4ofhqLzl4CF
mRMg3ZKhOvSxOI3nowUXbs2/nkkcI+eXpb3OYCAroF0=
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:38:35 2026 by rpki-client