Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/3137392e302e34312e302f32342d3234203d3e20323734313434.roa
File:                     3137392e302e34312e302f32342d3234203d3e20323734313434.roa (raw, json)
Hash identifier:          qNAZFblkrtELvw5krSNjH9r2wu0uImpgCBBYyGCTsVA=
Subject key identifier:   B2:67:4C:50:46:A5:AA:88:3A:F3:3E:40:78:AD:A8:8B:2F:C7:01:4F
Certificate issuer:       /CN=906C41A68E3475138AF53A5B55627EDE35432068
Certificate serial:       528054E4AD2353A2003B5A7F33E1F92B606D39D7
Authority key identifier: 90:6C:41:A6:8E:34:75:13:8A:F5:3A:5B:55:62:7E:DE:35:43:20:68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/906C41A68E3475138AF53A5B55627EDE35432068.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/3137392e302e34312e302f32342d3234203d3e20323734313434.roa
Signing time:             Sat 10 Oct 2026 01:39:47 +0000
ROA not before:           Sat 10 Oct 2026 01:34:47 +0000
ROA not after:            Sat 09 Oct 2027 01:39:47 +0000
asID:                     274144
IP address blocks:        179.0.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/906C41A68E3475138AF53A5B55627EDE35432068.crl
                          rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/906C41A68E3475138AF53A5B55627EDE35432068.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/906C41A68E3475138AF53A5B55627EDE35432068.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 23 Oct 2026 16:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:80:54:e4:ad:23:53:a2:00:3b:5a:7f:33:e1:f9:2b:60:6d:39:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=906C41A68E3475138AF53A5B55627EDE35432068
        Validity
            Not Before: Oct 10 01:34:47 2026 GMT
            Not After : Oct  9 01:39:47 2027 GMT
        Subject: CN=B2674C5046A5AA883AF33E4078ADA88B2FC7014F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a6:e6:79:59:bb:04:17:bc:26:ba:00:bb:f5:
                    00:50:20:b4:78:4e:19:70:32:22:47:4a:0d:a0:a2:
                    d0:e2:e7:67:db:7c:57:f0:9c:f0:24:a6:b0:09:52:
                    62:2a:65:3b:d4:0f:70:56:2f:68:34:e9:89:b1:05:
                    95:5d:12:1c:e7:20:29:44:b7:2e:a3:a4:18:2d:52:
                    78:f1:e1:f2:b1:61:95:2c:00:7c:0e:0e:45:27:40:
                    ca:3f:3f:44:32:a6:4c:74:e4:d3:19:d5:5f:63:10:
                    9d:98:ca:56:d8:af:03:3e:9d:39:93:03:fc:74:37:
                    83:32:71:15:8f:f8:8b:d7:58:ba:ef:9b:19:b7:2a:
                    e7:53:1c:06:42:ac:b9:81:7e:ed:79:4f:96:f8:7a:
                    db:70:a9:53:82:aa:9b:2f:ab:6c:8c:73:5d:2c:94:
                    a8:e2:44:ad:cb:ba:0b:c5:9c:b5:79:5f:2f:c3:59:
                    da:f0:0c:67:b3:0f:2e:73:b3:fe:1d:5c:7f:ac:eb:
                    63:f3:b1:7e:a4:0c:ee:1f:9f:c4:0e:8e:c2:de:0c:
                    03:1f:32:5c:07:5c:43:ff:13:bb:f7:69:1c:c7:b5:
                    8c:58:5f:45:1f:61:77:40:59:39:29:e7:8a:77:52:
                    06:44:0e:66:39:4a:9d:e1:57:68:9f:b0:62:d6:5f:
                    bf:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:67:4C:50:46:A5:AA:88:3A:F3:3E:40:78:AD:A8:8B:2F:C7:01:4F
            X509v3 Authority Key Identifier:
                keyid:90:6C:41:A6:8E:34:75:13:8A:F5:3A:5B:55:62:7E:DE:35:43:20:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/906C41A68E3475138AF53A5B55627EDE35432068.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/906C41A68E3475138AF53A5B55627EDE35432068.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/3137392e302e34312e302f32342d3234203d3e20323734313434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:c4:4c:2b:22:4d:31:e1:93:86:7e:c4:d4:14:66:59:84:1a:
         49:3c:07:ff:ac:ec:70:35:93:e4:ae:94:29:8e:75:70:b2:78:
         b6:1d:70:fb:32:9a:bc:2c:f9:80:b1:f3:13:71:1a:f8:29:05:
         7e:a2:94:ed:e5:54:8d:04:f8:1e:9a:79:14:47:4b:40:79:a7:
         d7:9f:b2:50:dc:43:13:30:00:f0:d3:c2:43:62:23:98:99:28:
         80:c0:c0:de:b6:c4:ea:eb:18:a5:a3:6a:98:a7:43:3b:db:88:
         5d:50:ec:86:02:e3:a0:47:73:a8:a6:58:9f:6d:29:31:41:63:
         72:7f:e2:36:1e:94:ea:77:3c:e7:f3:b9:af:8b:b5:1b:c4:d3:
         f1:0a:f6:d9:d4:09:61:ed:70:e0:a3:c7:86:de:48:75:11:30:
         a0:90:25:70:b9:a8:5e:45:15:07:49:4f:20:6f:c2:8b:25:38:
         e6:9c:dc:28:72:d7:55:d7:aa:57:69:dd:f5:cd:88:c4:91:b2:
         23:9c:76:43:80:ba:a9:da:b3:15:6f:1d:72:a5:a5:e9:65:cb:
         87:30:41:39:35:45:fa:55:fc:c9:e5:b1:ca:a8:bd:dd:3e:06:
         0d:4e:49:f9:8b:87:55:b3:3e:7a:45:d0:4b:d1:4a:9b:20:a6:
         d4:64:a0:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 20:38:37 2026 by rpki-client