Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3137392e302e3135362e302f32322d3232203d3e2037373737.roa
File:                     3137392e302e3135362e302f32322d3232203d3e2037373737.roa (raw, json)
Hash identifier:          2i2JQvV59eNhAzKd3NbJj1uCbywtZwOkdFjQcjWKDn4=
Subject key identifier:   BF:CA:5D:DA:53:67:CC:09:24:85:59:D9:56:20:70:B2:CC:EA:1B:DE
Certificate issuer:       /CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
Certificate serial:       3BA545FB6249BDC44642A18413FE6418BD25EEC1
Authority key identifier: 1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3137392e302e3135362e302f32322d3232203d3e2037373737.roa
Signing time:             Mon 16 Feb 2026 15:30:46 +0000
ROA not before:           Mon 16 Feb 2026 15:25:46 +0000
ROA not after:            Mon 15 Feb 2027 15:30:46 +0000
asID:                     7777
IP address blocks:        179.0.156.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Mar 2026 21:36:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:a5:45:fb:62:49:bd:c4:46:42:a1:84:13:fe:64:18:bd:25:ee:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
        Validity
            Not Before: Feb 16 15:25:46 2026 GMT
            Not After : Feb 15 15:30:46 2027 GMT
        Subject: CN=BFCA5DDA5367CC09248559D9562070B2CCEA1BDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:25:0f:42:5a:48:69:de:47:02:78:29:64:f0:
                    1a:0a:ce:62:36:31:18:ae:3c:c3:e1:01:5b:7a:d5:
                    42:1e:96:38:0f:e7:39:f1:1b:e0:19:19:6d:ed:22:
                    c4:ae:7d:9f:fe:bb:e1:af:89:43:af:33:a9:4a:77:
                    0a:5e:f4:f4:52:07:7d:37:2f:76:44:62:cc:7f:b0:
                    2e:9b:4b:b6:10:8d:fd:82:c3:3d:18:25:c3:ef:35:
                    f9:fc:87:62:c0:5f:a8:d7:77:0b:46:4d:79:d3:3d:
                    06:ec:7f:74:75:f5:13:8c:e6:80:20:87:22:ee:97:
                    3c:2e:13:2d:3f:a2:ab:dc:97:5e:c9:b0:aa:52:0a:
                    12:eb:3b:70:e2:b5:1d:83:c6:07:73:a8:fc:aa:34:
                    d0:d1:e1:3e:5e:a7:8f:47:be:63:b9:2d:0e:a6:04:
                    30:6a:66:81:07:08:c6:ec:ab:b7:1b:94:d9:a7:3b:
                    3c:55:a5:0d:9f:df:0c:ce:a3:df:4f:9a:64:ef:e9:
                    32:60:ed:d3:a9:be:e2:a0:f6:25:e2:4b:ca:9a:96:
                    17:c2:c9:c1:d8:b8:ec:2b:7e:b4:77:cb:fc:1d:69:
                    e0:24:f8:d0:c2:40:12:96:04:cb:2a:7f:47:a7:39:
                    c8:7c:5a:d3:18:3a:40:d8:cb:30:b1:07:62:a4:e6:
                    49:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:CA:5D:DA:53:67:CC:09:24:85:59:D9:56:20:70:B2:CC:EA:1B:DE
            X509v3 Authority Key Identifier:
                keyid:1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3137392e302e3135362e302f32322d3232203d3e2037373737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:26:a1:47:da:40:51:aa:c4:63:21:90:d3:76:68:50:35:7d:
         ef:be:85:82:7e:dc:7f:d1:a8:3e:23:67:d2:0d:88:8a:21:1d:
         7e:65:05:2d:a4:0d:c9:4e:bd:b4:6e:1d:ed:8f:40:5a:6f:a8:
         89:25:bb:6d:f8:1e:7c:5b:46:5e:3f:0c:52:51:0f:0c:92:5b:
         45:a6:a1:24:bd:2a:6d:59:aa:6f:00:e2:0e:b8:1a:9a:cc:59:
         3a:58:8e:e4:08:bf:f9:4b:eb:39:b1:51:4e:63:f2:86:27:e6:
         bd:dc:4b:87:5f:2a:bb:a5:11:65:ba:82:cb:c5:f6:a5:1f:e4:
         5b:9c:58:2a:09:30:2a:37:89:c1:1f:b5:dd:43:4e:71:c9:1d:
         79:40:21:83:06:ac:2b:6e:46:54:80:6a:0b:b3:f1:01:53:71:
         cf:42:db:b9:0f:79:08:e6:d3:d0:a7:22:81:7b:60:7e:c7:b6:
         e8:07:10:2b:81:6f:4f:87:89:4e:33:4e:c7:09:4d:12:e9:83:
         db:be:96:c5:a8:f8:a6:c5:b6:2e:e9:cf:26:db:ab:91:8c:e1:
         61:f1:1e:e1:ca:f8:b4:8a:dd:3d:65:c9:22:ea:e3:85:6b:b0:
         81:8d:06:9f:b2:a2:43:af:6f:68:57:0f:75:c0:12:21:49:69:
         18:c1:5f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 02:32:06 2026 by rpki-client