Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4343B2828241D18D49CED12666F5034D90C1A11663270CCFE62C8E67AE1937D7/0/3137392e36302e3232302e302f32322d3234203d3e203237383730.roa
File:                     3137392e36302e3232302e302f32322d3234203d3e203237383730.roa (raw, json)
Hash identifier:          kEy+6zOaGHqhH5Jd+4xCENBTl/6/n0Uf6bu3nFtQpGg=
Subject key identifier:   0A:FF:97:26:EC:58:F3:B1:71:36:19:9B:95:31:25:DE:5C:EE:84:71
Certificate issuer:       /CN=7A06C1864524D4D6B3F3D941A758895DEA60A24F
Certificate serial:       0B96790457D5A424B05875459A7449CFE05A3206
Authority key identifier: 7A:06:C1:86:45:24:D4:D6:B3:F3:D9:41:A7:58:89:5D:EA:60:A2:4F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7A06C1864524D4D6B3F3D941A758895DEA60A24F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4343B2828241D18D49CED12666F5034D90C1A11663270CCFE62C8E67AE1937D7/0/3137392e36302e3232302e302f32322d3234203d3e203237383730.roa
Signing time:             Fri 30 Jan 2026 17:28:27 +0000
ROA not before:           Fri 30 Jan 2026 17:23:27 +0000
ROA not after:            Fri 29 Jan 2027 17:28:27 +0000
asID:                     27870
IP address blocks:        179.60.220.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4343B2828241D18D49CED12666F5034D90C1A11663270CCFE62C8E67AE1937D7/0/7A06C1864524D4D6B3F3D941A758895DEA60A24F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4343B2828241D18D49CED12666F5034D90C1A11663270CCFE62C8E67AE1937D7/0/7A06C1864524D4D6B3F3D941A758895DEA60A24F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7A06C1864524D4D6B3F3D941A758895DEA60A24F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:96:79:04:57:d5:a4:24:b0:58:75:45:9a:74:49:cf:e0:5a:32:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A06C1864524D4D6B3F3D941A758895DEA60A24F
        Validity
            Not Before: Jan 30 17:23:27 2026 GMT
            Not After : Jan 29 17:28:27 2027 GMT
        Subject: CN=0AFF9726EC58F3B17136199B953125DE5CEE8471
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:04:f4:7c:bf:f3:bb:38:41:d0:c1:14:9c:d8:
                    c3:4d:7a:82:e7:bb:45:98:0a:87:b8:cd:0f:b6:39:
                    3f:65:c3:40:9a:8d:53:74:99:e1:15:83:a4:f6:d1:
                    77:6a:fc:75:22:02:9d:1c:b1:b0:54:82:59:d3:48:
                    0c:4f:6c:73:61:f5:a5:92:7a:a8:e3:ae:5a:0f:cb:
                    a7:17:42:cb:30:d1:ea:80:25:50:a2:41:27:61:18:
                    4c:ae:77:a7:c4:b7:16:f4:c5:67:86:f5:37:46:57:
                    28:98:43:ad:c2:51:23:31:45:47:8b:04:70:70:9b:
                    9c:92:b1:f2:10:5a:13:b0:9b:6b:3b:5b:48:50:1c:
                    34:3c:c1:a0:39:b9:14:9d:cb:24:32:f2:62:50:cb:
                    cf:e9:8e:a4:ef:bd:c2:6d:d3:a6:d1:f9:4c:6a:2b:
                    a9:d6:d4:01:44:d9:7d:f0:36:b9:07:60:4b:7d:62:
                    dc:44:f5:ec:c0:94:42:47:64:f9:f4:08:cb:f7:ba:
                    90:27:3e:83:f6:a0:fe:ed:25:3e:54:5d:3d:b4:d8:
                    53:03:14:59:cc:07:1d:c1:11:bc:e2:c9:a3:c1:47:
                    10:62:2d:b2:c1:21:70:38:04:12:f7:6b:00:34:fe:
                    16:fe:14:a3:81:8d:9c:83:66:11:08:52:a1:ec:04:
                    df:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:FF:97:26:EC:58:F3:B1:71:36:19:9B:95:31:25:DE:5C:EE:84:71
            X509v3 Authority Key Identifier:
                keyid:7A:06:C1:86:45:24:D4:D6:B3:F3:D9:41:A7:58:89:5D:EA:60:A2:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4343B2828241D18D49CED12666F5034D90C1A11663270CCFE62C8E67AE1937D7/0/7A06C1864524D4D6B3F3D941A758895DEA60A24F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7A06C1864524D4D6B3F3D941A758895DEA60A24F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4343B2828241D18D49CED12666F5034D90C1A11663270CCFE62C8E67AE1937D7/0/3137392e36302e3232302e302f32322d3234203d3e203237383730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:c4:ae:dc:89:09:bd:5e:38:e6:5c:fd:8d:00:e8:29:ab:9f:
         27:e8:d7:84:54:e4:c5:6b:4e:e3:f9:a3:b9:82:4e:34:3d:3f:
         3d:d1:d9:d0:2d:5a:8b:8a:09:e3:6b:07:45:78:08:bc:77:77:
         7a:3e:34:63:56:a5:65:4e:91:5e:7a:73:41:07:da:cc:c6:2c:
         d8:9e:48:7b:c3:a0:5d:66:21:b8:83:18:25:f2:74:a3:ae:86:
         48:49:5d:92:f9:ca:f0:b1:c3:ac:08:c2:27:f5:c2:36:27:e2:
         d6:20:16:66:85:2f:09:2e:7d:8d:f5:ab:ae:e4:6f:b1:df:d6:
         f6:63:bb:ac:cb:d1:09:2e:18:49:f7:85:32:a3:f7:cc:ba:ac:
         f1:06:3a:2f:ff:fe:74:9b:66:b3:92:d9:56:dd:61:1a:25:00:
         a8:ec:d3:eb:1e:ea:48:50:7c:c7:b9:35:5c:7d:b5:ed:1f:bc:
         0a:6a:ee:a6:f8:6e:09:a7:d9:e1:f2:8c:f1:53:c2:8e:80:0f:
         69:f5:cb:b7:2c:70:eb:1f:f0:da:24:5d:77:cc:dd:86:19:00:
         8e:8d:4a:2f:89:f7:d7:de:80:a3:08:6e:f1:f9:90:6b:35:71:
         47:dd:8a:c3:be:54:f8:cb:a8:06:ae:e1:c0:0b:18:90:59:92:
         fc:fd:a5:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 02:46:03 2026 by rpki-client