Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/D6C0CE8CFCA14141C3AE42DE6EFC6BBC7716894DF4542224014E417E2E14AB2B/0/3137392e35362e3232342e302f31392d3234203d3e203134313137.roa
File:                     3137392e35362e3232342e302f31392d3234203d3e203134313137.roa (raw, json)
Hash identifier:          f0eaiIIF0MhrW9gJdyl+r3fr7aA1MekVXI/myg6nhmI=
Subject key identifier:   9D:CB:69:D7:1B:E7:B8:E3:63:15:65:FB:02:52:98:83:0C:84:38:7E
Certificate issuer:       /CN=8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3
Certificate serial:       0C4D3FFA985841B8284082B265A6AA98E38459F6
Authority key identifier: 8D:B2:82:B3:47:40:BD:99:CD:F8:94:30:62:B7:DC:EC:3C:4B:1F:F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D6C0CE8CFCA14141C3AE42DE6EFC6BBC7716894DF4542224014E417E2E14AB2B/0/3137392e35362e3232342e302f31392d3234203d3e203134313137.roa
Signing time:             Tue 13 Oct 2026 11:35:01 +0000
ROA not before:           Tue 13 Oct 2026 11:30:01 +0000
ROA not after:            Tue 12 Oct 2027 11:35:01 +0000
asID:                     14117
IP address blocks:        179.56.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D6C0CE8CFCA14141C3AE42DE6EFC6BBC7716894DF4542224014E417E2E14AB2B/0/8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D6C0CE8CFCA14141C3AE42DE6EFC6BBC7716894DF4542224014E417E2E14AB2B/0/8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 09:25:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:4d:3f:fa:98:58:41:b8:28:40:82:b2:65:a6:aa:98:e3:84:59:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3
        Validity
            Not Before: Oct 13 11:30:01 2026 GMT
            Not After : Oct 12 11:35:01 2027 GMT
        Subject: CN=9DCB69D71BE7B8E3631565FB025298830C84387E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b7:5d:51:08:af:aa:ae:e9:d6:88:6d:f2:bd:
                    2c:33:26:1a:33:a4:89:3a:75:93:43:c6:8d:56:f7:
                    92:26:58:c4:84:3f:b7:1c:a3:1f:79:7d:15:a6:00:
                    20:36:be:88:22:ac:8b:93:2e:79:35:3a:38:08:2d:
                    09:47:d9:49:43:76:69:7e:20:4e:55:03:3d:74:2a:
                    ae:d6:36:14:ac:e6:e7:31:74:12:3e:e2:9a:05:06:
                    e6:d1:42:1f:4e:2f:7c:85:69:d4:67:30:c7:c7:7b:
                    a4:0f:08:73:8b:1a:82:88:48:ad:00:37:ba:e7:50:
                    f1:10:43:42:8d:56:a4:56:ec:91:6d:8e:cf:4f:2c:
                    e0:40:d5:6a:da:54:41:67:30:5e:1a:e1:bd:2c:3c:
                    a7:81:18:ef:96:f5:f4:3c:95:c3:a0:15:a5:14:b6:
                    c3:78:91:e4:0d:14:23:50:64:a8:8d:91:78:2f:cd:
                    6a:4b:c4:9e:c4:db:1b:8c:d5:62:21:4e:2f:86:e3:
                    3e:f2:89:2a:cd:7b:49:6d:4d:46:6e:82:ed:fb:76:
                    ff:34:83:4e:7c:b1:f2:89:5e:31:ea:43:2b:d2:91:
                    c8:19:dc:46:21:2c:de:11:3e:07:7b:cb:a1:8b:aa:
                    ef:db:08:54:e6:7d:b2:12:bb:01:35:a2:75:c0:9e:
                    18:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:CB:69:D7:1B:E7:B8:E3:63:15:65:FB:02:52:98:83:0C:84:38:7E
            X509v3 Authority Key Identifier:
                keyid:8D:B2:82:B3:47:40:BD:99:CD:F8:94:30:62:B7:DC:EC:3C:4B:1F:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D6C0CE8CFCA14141C3AE42DE6EFC6BBC7716894DF4542224014E417E2E14AB2B/0/8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D6C0CE8CFCA14141C3AE42DE6EFC6BBC7716894DF4542224014E417E2E14AB2B/0/3137392e35362e3232342e302f31392d3234203d3e203134313137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.56.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         00:29:1e:66:7f:5b:5d:e8:33:0b:77:aa:cd:c9:ac:2c:e5:13:
         a0:f7:09:c7:58:ce:f2:7d:90:8d:76:fe:6e:01:f3:60:a3:cc:
         f8:39:8f:76:bf:3b:41:82:d0:09:e3:b1:22:d1:03:b5:51:22:
         aa:d2:d8:b7:1a:bf:b3:7d:1f:99:68:75:4b:e5:2a:a2:bc:b5:
         9d:51:2a:3e:17:97:f4:ba:15:81:a1:99:99:1a:96:90:a1:ab:
         b3:9e:c9:66:97:c4:87:96:aa:80:78:bb:d7:22:49:42:b9:b5:
         be:8a:38:eb:a1:87:0f:48:86:7f:31:ca:10:25:32:01:17:8d:
         35:64:37:02:62:8a:f6:a5:e7:3f:07:3d:3c:9b:bb:00:28:7d:
         ac:ca:c6:73:4e:dd:ba:a7:ba:07:7f:72:4e:8c:a2:9f:60:87:
         80:82:83:c5:b0:23:87:fb:e0:7b:a4:42:27:61:a0:fa:4c:22:
         78:09:e8:24:c4:61:66:76:f5:07:09:1b:86:73:f2:5e:c5:dd:
         10:c7:63:e5:d3:c1:73:2e:00:c4:87:21:51:be:43:ba:dc:3a:
         db:30:42:31:fe:c8:21:77:25:f1:95:7e:6c:8b:66:9f:8f:5a:
         08:59:52:ae:d4:f2:16:86:6b:eb:de:84:b6:4a:e1:ba:a2:b3:
         af:3a:2d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 09:01:22 2026 by rpki-client