Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/77AAD8D082A0D702C202A20E3A672A6C3C58930727D4CDFB75E56F426D4E9C81/0/3137392e36312e38372e302f32342d3234203d3e20323634363536.roa
File:                     3137392e36312e38372e302f32342d3234203d3e20323634363536.roa (raw, json)
Hash identifier:          0zox9fArWmNKyBcQil3yn/hUOnQlQBHUfVVJAqBJaaM=
Subject key identifier:   05:AB:A9:51:C9:3F:46:99:A2:5C:14:21:EC:A6:0B:4F:47:6C:64:87
Certificate issuer:       /CN=69301E5BA9EA83E876294721E029DAB25C9B6192
Certificate serial:       51ED653540AA438B2A3E7985347BCDBB63B22B38
Authority key identifier: 69:30:1E:5B:A9:EA:83:E8:76:29:47:21:E0:29:DA:B2:5C:9B:61:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69301E5BA9EA83E876294721E029DAB25C9B6192.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/77AAD8D082A0D702C202A20E3A672A6C3C58930727D4CDFB75E56F426D4E9C81/0/3137392e36312e38372e302f32342d3234203d3e20323634363536.roa
Signing time:             Wed 28 Oct 2026 13:43:18 +0000
ROA not before:           Wed 28 Oct 2026 13:38:18 +0000
ROA not after:            Wed 27 Oct 2027 13:43:18 +0000
asID:                     264656
IP address blocks:        179.61.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/77AAD8D082A0D702C202A20E3A672A6C3C58930727D4CDFB75E56F426D4E9C81/0/69301E5BA9EA83E876294721E029DAB25C9B6192.crl
                          rsync://repository.lacnic.net/rpki/lacnic/77AAD8D082A0D702C202A20E3A672A6C3C58930727D4CDFB75E56F426D4E9C81/0/69301E5BA9EA83E876294721E029DAB25C9B6192.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69301E5BA9EA83E876294721E029DAB25C9B6192.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 04 Nov 2026 02:32:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:ed:65:35:40:aa:43:8b:2a:3e:79:85:34:7b:cd:bb:63:b2:2b:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69301E5BA9EA83E876294721E029DAB25C9B6192
        Validity
            Not Before: Oct 28 13:38:18 2026 GMT
            Not After : Oct 27 13:43:18 2027 GMT
        Subject: CN=05ABA951C93F4699A25C1421ECA60B4F476C6487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:56:04:78:00:4b:ee:05:83:31:d5:a6:b3:af:
                    87:20:26:dd:c8:6e:f2:0d:17:d4:13:dd:5b:b4:87:
                    80:61:8e:41:ba:31:08:8a:98:27:a1:b1:9d:00:45:
                    0a:dc:fa:2b:52:74:b7:7e:41:28:7d:bd:6e:b4:20:
                    3e:a4:2f:e2:c2:1b:6a:e4:1b:c9:6d:f9:ab:a2:31:
                    66:7b:96:ef:c2:60:62:1f:be:42:c0:6c:9c:81:52:
                    77:47:f6:f1:28:73:99:cf:03:3b:e2:71:80:e3:eb:
                    50:76:de:f7:4b:c9:46:30:76:a4:e4:0e:f1:ab:2b:
                    46:59:f6:64:ea:f8:7f:6f:c3:eb:1d:69:51:bc:b6:
                    f6:39:4d:3e:c2:c3:03:19:56:49:f9:3e:92:12:c9:
                    d9:96:c7:e8:25:90:d9:1a:a6:fd:03:1c:1c:60:00:
                    bc:e8:bd:0d:39:5b:42:93:95:10:d3:b3:1e:a1:2c:
                    c5:ab:16:e2:75:01:5b:bb:da:62:fd:bd:e8:a4:4c:
                    79:33:9a:94:76:97:df:cb:1f:2f:25:f5:f3:38:79:
                    44:d4:2a:86:9c:3d:fc:8a:26:79:c3:ab:69:41:a0:
                    d2:de:49:76:7b:10:b8:81:19:77:ae:e4:53:a8:08:
                    3f:2b:7a:6e:8a:16:f6:58:ce:d5:a1:e3:1e:b3:5f:
                    eb:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:AB:A9:51:C9:3F:46:99:A2:5C:14:21:EC:A6:0B:4F:47:6C:64:87
            X509v3 Authority Key Identifier:
                keyid:69:30:1E:5B:A9:EA:83:E8:76:29:47:21:E0:29:DA:B2:5C:9B:61:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/77AAD8D082A0D702C202A20E3A672A6C3C58930727D4CDFB75E56F426D4E9C81/0/69301E5BA9EA83E876294721E029DAB25C9B6192.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69301E5BA9EA83E876294721E029DAB25C9B6192.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/77AAD8D082A0D702C202A20E3A672A6C3C58930727D4CDFB75E56F426D4E9C81/0/3137392e36312e38372e302f32342d3234203d3e20323634363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e7:80:40:8c:d6:32:a2:18:93:ab:9e:7c:34:c1:20:fe:5a:ec:
         dc:60:57:d4:8c:b9:72:b0:75:05:9c:b7:b0:cf:e5:e0:46:69:
         9a:f7:d4:bb:56:2b:0d:be:18:29:06:7a:0a:e8:bb:b4:8b:ca:
         ce:fe:2c:06:55:82:e9:13:62:ee:ff:d9:d5:cb:52:8d:79:33:
         a5:a5:e3:d8:ba:2c:2f:c2:9b:25:46:09:81:50:94:a1:e1:cd:
         86:76:8d:42:d6:b8:b1:73:8a:a9:b0:87:78:b7:38:fa:7f:61:
         da:f5:38:21:a9:cd:f1:97:d6:1c:fd:aa:66:6e:0b:4d:f5:6d:
         71:2b:b8:d6:2a:03:b6:f8:7a:c9:e7:1b:4b:54:7d:fe:64:09:
         11:9d:a1:b2:fd:32:5d:e4:e0:1d:1d:bc:73:c7:61:84:21:10:
         eb:d7:6b:a4:a3:99:5f:5d:16:11:ca:41:88:d4:8b:69:42:cf:
         4c:70:b3:9a:be:a5:85:22:5a:4b:38:a6:07:54:3b:f3:79:86:
         b5:f9:9b:a8:97:f8:59:a4:19:9d:09:98:d7:a7:7f:99:db:50:
         a3:9a:cf:89:7c:9c:ca:db:cc:74:63:b9:19:96:35:c9:aa:e5:
         8e:b7:b8:c4:db:7f:54:78:12:24:4e:8d:33:c6:75:57:25:d7:
         70:85:ac:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 17:28:56 2026 by rpki-client