Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4343B2828241D18D49CED12666F5034D90C1A11663270CCFE62C8E67AE1937D7/0/3137392e36302e3232302e302f32322d3232203d3e203237383730.roa
File:                     3137392e36302e3232302e302f32322d3232203d3e203237383730.roa (raw, json)
Hash identifier:          PklnYlZDUcJwW4tLqOkv5Q1ugd6wzEY935k2MH6A5bQ=
Subject key identifier:   CB:51:F5:9F:8D:09:05:CA:99:88:1A:80:05:19:CC:1B:C0:9D:54:29
Certificate issuer:       /CN=7A06C1864524D4D6B3F3D941A758895DEA60A24F
Certificate serial:       0C20753350C7F0E44A137DBBCAFA34E14CAC1B4C
Authority key identifier: 7A:06:C1:86:45:24:D4:D6:B3:F3:D9:41:A7:58:89:5D:EA:60:A2:4F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7A06C1864524D4D6B3F3D941A758895DEA60A24F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4343B2828241D18D49CED12666F5034D90C1A11663270CCFE62C8E67AE1937D7/0/3137392e36302e3232302e302f32322d3232203d3e203237383730.roa
Signing time:             Fri 30 Jan 2026 15:28:25 +0000
ROA not before:           Fri 30 Jan 2026 15:23:25 +0000
ROA not after:            Fri 29 Jan 2027 15:28:25 +0000
asID:                     27870
IP address blocks:        179.60.220.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4343B2828241D18D49CED12666F5034D90C1A11663270CCFE62C8E67AE1937D7/0/7A06C1864524D4D6B3F3D941A758895DEA60A24F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4343B2828241D18D49CED12666F5034D90C1A11663270CCFE62C8E67AE1937D7/0/7A06C1864524D4D6B3F3D941A758895DEA60A24F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7A06C1864524D4D6B3F3D941A758895DEA60A24F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:20:75:33:50:c7:f0:e4:4a:13:7d:bb:ca:fa:34:e1:4c:ac:1b:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A06C1864524D4D6B3F3D941A758895DEA60A24F
        Validity
            Not Before: Jan 30 15:23:25 2026 GMT
            Not After : Jan 29 15:28:25 2027 GMT
        Subject: CN=CB51F59F8D0905CA99881A800519CC1BC09D5429
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:cc:bb:76:5e:5b:a9:be:a7:ff:e2:5f:ff:ea:
                    99:2a:d2:14:7a:dc:6f:2b:f3:be:3b:2c:5f:23:82:
                    c7:c1:21:f7:98:2c:6f:3c:db:8d:5d:dd:74:1c:7d:
                    03:45:f1:f5:05:3e:e3:57:33:40:bd:f4:90:12:5a:
                    8c:e8:02:dd:0f:da:df:f1:f8:20:d1:b2:55:21:1f:
                    1c:bb:1b:8a:28:3e:1c:11:01:ce:7e:50:74:87:0c:
                    2a:be:fa:28:a1:c0:85:cf:73:9f:0e:1f:49:1a:44:
                    59:9c:ad:0c:7b:3c:17:61:83:aa:97:f0:0f:53:fa:
                    d6:6c:b2:d2:75:a7:38:f4:a9:bb:60:81:00:37:76:
                    31:06:2b:53:01:68:d8:83:a7:84:cf:1b:97:2e:e5:
                    65:96:e3:3e:1a:36:04:ce:49:8b:99:06:91:2d:2b:
                    ae:7b:f8:11:d6:17:22:40:8d:45:b1:d7:cc:15:d7:
                    5d:08:15:ef:20:e0:96:e6:8d:33:a2:fd:f9:87:95:
                    2a:8d:53:00:5e:83:cf:ed:85:20:70:57:11:65:df:
                    4b:ee:2f:88:d9:cc:ba:58:5c:38:f7:14:56:d9:c5:
                    b8:bc:7a:fc:47:ff:99:6d:1e:7f:79:d9:cc:e9:b3:
                    24:ac:59:ca:1e:10:44:2e:4c:0f:dc:cf:45:35:4a:
                    a7:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:51:F5:9F:8D:09:05:CA:99:88:1A:80:05:19:CC:1B:C0:9D:54:29
            X509v3 Authority Key Identifier:
                keyid:7A:06:C1:86:45:24:D4:D6:B3:F3:D9:41:A7:58:89:5D:EA:60:A2:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4343B2828241D18D49CED12666F5034D90C1A11663270CCFE62C8E67AE1937D7/0/7A06C1864524D4D6B3F3D941A758895DEA60A24F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7A06C1864524D4D6B3F3D941A758895DEA60A24F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4343B2828241D18D49CED12666F5034D90C1A11663270CCFE62C8E67AE1937D7/0/3137392e36302e3232302e302f32322d3232203d3e203237383730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a5:c4:d3:8b:ab:fc:bd:e3:4e:52:a7:62:90:ef:4a:35:25:e3:
         a3:39:82:c3:0d:09:82:a4:40:f1:e1:38:e7:86:d9:9f:08:7d:
         a6:da:5d:8d:b4:4d:be:03:fd:a7:4b:dd:fd:f7:d6:e8:07:8f:
         bb:27:b3:53:a5:9a:4e:64:b2:c5:3d:7f:3a:82:28:54:ab:2a:
         5c:c4:56:57:11:72:fc:12:db:94:24:32:63:41:df:62:75:c5:
         0c:81:65:d4:b5:29:37:6d:2c:c6:9b:24:6d:d9:ec:f9:5b:26:
         d6:b3:f5:02:65:27:4c:df:ee:ae:89:70:e2:d1:cc:0e:93:5b:
         e6:c7:67:8c:86:86:ec:b1:e8:a6:44:eb:62:58:60:50:0b:f2:
         4d:25:aa:4e:76:aa:02:58:6e:cc:e6:cc:19:e4:49:a8:9e:83:
         b1:1d:6d:c4:b9:9a:0d:c9:3e:d0:88:db:01:c1:f1:b0:75:6a:
         08:61:37:a2:83:1e:a0:a0:4d:c7:e9:8e:07:9b:bc:d0:bb:0c:
         b6:cf:51:0e:75:88:c3:e1:81:2a:10:fc:14:c3:f7:69:15:7f:
         93:ca:51:57:bf:f6:36:8f:8b:79:21:1b:c8:8e:53:67:80:62:
         3a:b2:ee:df:7d:52:c3:03:65:3d:53:7a:94:fb:e1:e0:38:be:
         45:b5:33:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:27:33 2026 by rpki-client