Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05985ED27A8125BBA401250FB751C7B25EE08D4144467D815B7FEB6D544BC162/0/3137392e36332e3233322e302f32322d3234203d3e20323635363432.roa
File:                     3137392e36332e3233322e302f32322d3234203d3e20323635363432.roa (raw, json)
Hash identifier:          1tXLOCiVC1urDN7GS2KrN+2PoAXwbXJRJdpyHWhiO8E=
Subject key identifier:   E1:84:0B:3C:CD:5B:26:2C:D6:4C:6C:B3:38:9E:67:67:22:3A:D1:9E
Certificate issuer:       /CN=F180E837FD7EADABAAE544FD4C3108402270D287
Certificate serial:       4DBD3015E300C61BA9CE74EF0BDD4B4BF128B805
Authority key identifier: F1:80:E8:37:FD:7E:AD:AB:AA:E5:44:FD:4C:31:08:40:22:70:D2:87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F180E837FD7EADABAAE544FD4C3108402270D287.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05985ED27A8125BBA401250FB751C7B25EE08D4144467D815B7FEB6D544BC162/0/3137392e36332e3233322e302f32322d3234203d3e20323635363432.roa
Signing time:             Tue 14 Apr 2026 03:38:42 +0000
ROA not before:           Tue 14 Apr 2026 03:33:42 +0000
ROA not after:            Tue 13 Apr 2027 03:38:42 +0000
asID:                     265642
IP address blocks:        179.63.232.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/05985ED27A8125BBA401250FB751C7B25EE08D4144467D815B7FEB6D544BC162/0/F180E837FD7EADABAAE544FD4C3108402270D287.crl
                          rsync://repository.lacnic.net/rpki/lacnic/05985ED27A8125BBA401250FB751C7B25EE08D4144467D815B7FEB6D544BC162/0/F180E837FD7EADABAAE544FD4C3108402270D287.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F180E837FD7EADABAAE544FD4C3108402270D287.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Apr 2026 01:41:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:bd:30:15:e3:00:c6:1b:a9:ce:74:ef:0b:dd:4b:4b:f1:28:b8:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F180E837FD7EADABAAE544FD4C3108402270D287
        Validity
            Not Before: Apr 14 03:33:42 2026 GMT
            Not After : Apr 13 03:38:42 2027 GMT
        Subject: CN=E1840B3CCD5B262CD64C6CB3389E6767223AD19E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:46:50:37:1b:91:f8:4d:f9:e0:18:2f:ec:76:
                    36:ef:a1:c0:31:52:d1:b6:62:1b:b6:33:83:7b:5b:
                    9b:bc:53:4f:35:18:1d:05:73:11:ea:40:bf:19:43:
                    b3:0e:2d:14:0c:70:38:7a:21:64:a0:2a:28:2b:49:
                    bf:c4:a4:a0:c5:a3:46:9b:75:a6:0b:ce:82:24:2b:
                    b8:f1:e1:55:28:e0:2d:67:b3:55:e7:e0:06:2f:d6:
                    73:cd:1d:5b:fb:39:f6:30:72:32:21:83:3e:d2:de:
                    41:5f:9e:5b:69:44:03:a7:05:98:4c:06:15:a6:c4:
                    da:60:a1:42:f8:73:48:81:ac:9e:72:18:62:21:f4:
                    4c:f4:fa:0a:45:01:e8:f7:46:ff:12:2c:77:99:db:
                    0f:5d:89:36:a7:39:c3:2d:bc:c2:0d:5b:56:13:e1:
                    74:31:8b:a2:43:ea:6a:e6:1c:8d:6a:e5:b8:c8:41:
                    dc:6e:3a:36:40:03:2e:7f:e6:f6:f4:e7:eb:5b:23:
                    7c:2b:e9:66:8d:5c:58:27:18:02:35:f7:a6:2a:10:
                    74:b3:09:36:ce:6e:45:5e:53:b3:e9:83:3d:0e:72:
                    a8:1d:98:c3:5b:35:fd:02:dc:be:3e:c0:e1:8b:2d:
                    1d:fe:7d:42:af:93:c8:08:57:87:58:4b:02:ed:07:
                    a3:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:84:0B:3C:CD:5B:26:2C:D6:4C:6C:B3:38:9E:67:67:22:3A:D1:9E
            X509v3 Authority Key Identifier:
                keyid:F1:80:E8:37:FD:7E:AD:AB:AA:E5:44:FD:4C:31:08:40:22:70:D2:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05985ED27A8125BBA401250FB751C7B25EE08D4144467D815B7FEB6D544BC162/0/F180E837FD7EADABAAE544FD4C3108402270D287.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F180E837FD7EADABAAE544FD4C3108402270D287.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05985ED27A8125BBA401250FB751C7B25EE08D4144467D815B7FEB6D544BC162/0/3137392e36332e3233322e302f32322d3234203d3e20323635363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a1:88:38:fe:f9:74:7a:86:ad:1c:34:98:10:2a:15:1d:b9:1c:
         a5:22:94:3c:26:19:c4:f6:26:56:1b:a8:22:06:80:63:f4:b5:
         10:36:8c:6f:2b:53:01:44:d6:b8:f6:e5:90:f2:2d:33:55:59:
         83:87:ab:4b:47:95:e0:86:d9:cf:82:e7:51:dd:fd:3d:fb:57:
         b6:d9:4e:b7:5d:59:ba:66:5d:0f:ec:fb:a2:bd:53:45:78:b7:
         2a:bb:f2:1b:8f:3b:b6:cd:7c:86:ae:5e:bd:b6:a1:4b:a0:fd:
         a2:ec:f0:b1:e0:e5:29:99:9c:fa:61:59:dc:eb:17:96:c7:08:
         01:cc:3b:d4:51:8e:1f:54:de:e5:28:5d:20:a6:a3:8b:b2:e3:
         71:61:6f:1f:f6:1d:1a:c4:58:90:75:1a:fa:8e:d0:bd:de:0e:
         4a:f0:5f:b4:50:db:e9:8a:45:7c:6f:37:a9:33:c0:5c:57:7b:
         82:25:51:32:c9:f0:90:57:f0:69:21:0c:43:73:6f:bf:6b:63:
         29:12:14:56:e5:d0:dd:a9:6c:7b:4c:92:76:77:dc:63:81:c2:
         76:46:11:ec:37:df:51:77:dc:10:e1:9d:b1:ac:03:58:c8:9d:
         60:a2:79:7b:20:66:31:ab:98:f3:74:9a:27:f4:27:f4:ed:4a:
         ff:4d:8e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:37:23 2026 by rpki-client