Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/77AAD8D082A0D702C202A20E3A672A6C3C58930727D4CDFB75E56F426D4E9C81/0/3137392e36312e39342e302f32342d3234203d3e20323634363536.roa
File:                     3137392e36312e39342e302f32342d3234203d3e20323634363536.roa (raw, json)
Hash identifier:          dw0JpAOyRmc71NcJcJu/LsI1gYMHiIJGKdJtzX1opdc=
Subject key identifier:   3F:99:AC:9B:F2:87:97:31:EC:9E:FF:EC:8B:AE:0E:B6:70:02:60:84
Certificate issuer:       /CN=69301E5BA9EA83E876294721E029DAB25C9B6192
Certificate serial:       51C3B23A9EA31525F25B234F6A9ACCE94461B179
Authority key identifier: 69:30:1E:5B:A9:EA:83:E8:76:29:47:21:E0:29:DA:B2:5C:9B:61:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69301E5BA9EA83E876294721E029DAB25C9B6192.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/77AAD8D082A0D702C202A20E3A672A6C3C58930727D4CDFB75E56F426D4E9C81/0/3137392e36312e39342e302f32342d3234203d3e20323634363536.roa
Signing time:             Wed 28 Oct 2026 13:43:19 +0000
ROA not before:           Wed 28 Oct 2026 13:38:19 +0000
ROA not after:            Wed 27 Oct 2027 13:43:19 +0000
asID:                     264656
IP address blocks:        179.61.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/77AAD8D082A0D702C202A20E3A672A6C3C58930727D4CDFB75E56F426D4E9C81/0/69301E5BA9EA83E876294721E029DAB25C9B6192.crl
                          rsync://repository.lacnic.net/rpki/lacnic/77AAD8D082A0D702C202A20E3A672A6C3C58930727D4CDFB75E56F426D4E9C81/0/69301E5BA9EA83E876294721E029DAB25C9B6192.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69301E5BA9EA83E876294721E029DAB25C9B6192.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 04 Nov 2026 19:51:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:c3:b2:3a:9e:a3:15:25:f2:5b:23:4f:6a:9a:cc:e9:44:61:b1:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69301E5BA9EA83E876294721E029DAB25C9B6192
        Validity
            Not Before: Oct 28 13:38:19 2026 GMT
            Not After : Oct 27 13:43:19 2027 GMT
        Subject: CN=3F99AC9BF2879731EC9EFFEC8BAE0EB670026084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:8a:f6:90:f8:05:6b:8d:02:dd:d4:e2:52:25:
                    f2:6e:19:58:73:4b:b8:97:27:5b:79:9b:fb:51:d2:
                    26:64:fc:64:43:66:dc:f7:4e:21:da:0b:4a:dd:39:
                    00:98:14:cd:77:dd:c9:b9:6f:24:c6:35:bd:24:20:
                    6f:9e:7b:78:1c:0d:bd:fa:d3:72:d4:cb:12:31:63:
                    57:23:3f:81:6f:eb:12:48:73:69:00:16:e2:03:0e:
                    c0:90:64:e8:ea:9e:88:52:27:c7:a1:45:4b:d0:11:
                    ca:e3:a0:cb:32:5d:12:30:45:1f:9d:d8:05:19:80:
                    df:56:08:c2:7a:dd:32:ad:11:f3:ac:0f:ac:db:e2:
                    04:59:01:90:b1:1f:39:0b:a6:ba:f3:ea:0e:5e:f9:
                    bf:8c:e2:a9:f3:59:5b:e0:2f:f4:de:ab:34:f0:6e:
                    97:fd:bd:c9:61:d8:1e:50:8e:d4:2e:1c:e8:6b:c2:
                    ac:a8:81:91:ca:dd:32:94:7d:2d:d2:23:43:40:c0:
                    c0:5c:b5:87:dc:78:6b:a4:8e:91:47:f3:de:32:32:
                    45:fc:5b:24:19:0d:e4:5c:e7:b1:e4:cd:f9:c4:57:
                    ea:10:78:bf:3c:b1:5d:b6:97:be:81:b0:da:39:86:
                    fa:80:ad:d6:db:aa:fc:37:f9:5e:1c:b4:3e:09:c8:
                    00:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:99:AC:9B:F2:87:97:31:EC:9E:FF:EC:8B:AE:0E:B6:70:02:60:84
            X509v3 Authority Key Identifier:
                keyid:69:30:1E:5B:A9:EA:83:E8:76:29:47:21:E0:29:DA:B2:5C:9B:61:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/77AAD8D082A0D702C202A20E3A672A6C3C58930727D4CDFB75E56F426D4E9C81/0/69301E5BA9EA83E876294721E029DAB25C9B6192.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69301E5BA9EA83E876294721E029DAB25C9B6192.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/77AAD8D082A0D702C202A20E3A672A6C3C58930727D4CDFB75E56F426D4E9C81/0/3137392e36312e39342e302f32342d3234203d3e20323634363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:a5:3d:5d:fc:9f:e6:77:93:4e:f7:0b:d1:9c:d4:65:fd:ef:
         63:a4:36:dd:2d:ac:23:d7:af:51:0c:42:24:99:c7:d0:49:11:
         f6:01:69:b4:ba:70:ee:d0:94:4c:0f:66:fd:17:3b:97:6b:21:
         e6:79:e7:6d:b6:61:ca:e0:c0:e7:b5:97:d1:76:54:58:1b:b1:
         93:d8:42:02:ac:03:6e:33:88:39:8e:a3:71:b6:ad:11:43:fb:
         7d:42:19:c2:20:12:db:41:74:e9:3c:0b:e0:41:44:13:46:d4:
         7d:f4:7d:09:0a:96:7c:eb:6a:f2:ec:2f:4c:48:c8:8c:38:d6:
         58:24:80:b3:71:e3:92:49:82:73:4c:5a:f0:e5:d7:4b:b1:6e:
         3a:78:1f:1b:6a:d1:a7:1f:f0:36:fa:38:ac:39:02:22:2a:42:
         6c:e4:6b:2e:53:ab:76:1f:0b:7a:13:88:3a:46:04:69:89:d2:
         1e:ba:9b:c0:8c:7c:01:de:53:2e:58:67:37:5a:fa:11:25:f0:
         bb:7b:b2:04:12:b0:f4:53:b3:9e:2d:31:85:c4:e4:1d:25:c3:
         2c:55:df:1e:8b:e4:aa:0b:0e:5e:56:5c:70:18:38:e7:44:f3:
         95:30:e1:9a:92:f2:74:c6:14:df:8d:af:74:07:8b:be:40:6d:
         da:d2:ce:20
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUUcOyOp6jFSXyWyNPaprM6URhsXkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjkzMDFFNUJBOUVBODNFODc2Mjk0NzIxRTAyOURBQjI1
QzlCNjE5MjAeFw0yNjEwMjgxMzM4MTlaFw0yNzEwMjcxMzQzMTlaMDMxMTAvBgNV
BAMTKDNGOTlBQzlCRjI4Nzk3MzFFQzlFRkZFQzhCQUUwRUI2NzAwMjYwODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQivaQ+AVrjQLd1OJSJfJuGVhz
S7iXJ1t5m/tR0iZk/GRDZtz3TiHaC0rdOQCYFM133cm5byTGNb0kIG+ee3gcDb36
03LUyxIxY1cjP4Fv6xJIc2kAFuIDDsCQZOjqnohSJ8ehRUvQEcrjoMsyXRIwRR+d
2AUZgN9WCMJ63TKtEfOsD6zb4gRZAZCxHzkLprrz6g5e+b+M4qnzWVvgL/TeqzTw
bpf9vclh2B5QjtQuHOhrwqyogZHK3TKUfS3SI0NAwMBctYfceGukjpFH894yMkX8
WyQZDeRc57HkzfnEV+oQeL88sV22l76BsNo5hvqArdbbqvw3+V4ctD4JyAAPAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUP5msm/KHlzHsnv/si64OtnACYIQwHwYDVR0j
BBgwFoAUaTAeW6nqg+h2KUch4CnaslybYZIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83N0FBRDhEMDgyQTBENzAyQzIwMkEyMEUzQTY3MkE2QzND
NTg5MzA3MjdENENERkI3NUU1NkY0MjZENEU5QzgxLzAvNjkzMDFFNUJBOUVBODNF
ODc2Mjk0NzIxRTAyOURBQjI1QzlCNjE5Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82OTMwMUU1QkE5RUE4M0U4NzYy
OTQ3MjFFMDI5REFCMjVDOUI2MTkyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzdBQUQ4RDA4MkEwRDcwMkMyMDJBMjBFM0E2NzJBNkMzQzU4OTMwNzI3
RDRDREZCNzVFNTZGNDI2RDRFOUM4MS8wLzMxMzczOTJlMzYzMTJlMzkzNDJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzNDM2MzUzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALM9XjAN
BgkqhkiG9w0BAQsFAAOCAQEAQqU9Xfyf5neTTvcL0ZzUZf3vY6Q23S2sI9evUQxC
JJnH0EkR9gFptLpw7tCUTA9m/Rc7l2sh5nnnbbZhyuDA57WX0XZUWBuxk9hCAqwD
bjOIOY6jcbatEUP7fUIZwiAS20F06TwL4EFEE0bUffR9CQqWfOtq8uwvTEjIjDjW
WCSAs3HjkkmCc0xa8OXXS7FuOngfG2rRpx/wNvo4rDkCIipCbORrLlOrdh8LehOI
OkYEaYnSHrqbwIx8Ad5TLlhnN1r6ESXwu3uyBBKw9FOzni0xhcTkHSXDLFXfHovk
qgsOXlZccBg450TzlTDhmpLydMYU342vdAeLvkBt2tLOIA==
-----END CERTIFICATE-----
Generated at Sun Nov 1 13:21:39 2026 by rpki-client