Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/3137392e35312e38382e302f32322d3232203d3e203134323332.roa
File:                     3137392e35312e38382e302f32322d3232203d3e203134323332.roa (raw, json)
Hash identifier:          61HSXuDwLWdnQX0kO1LGdOk6oi3CFDKdz+i3/XJrktg=
Subject key identifier:   DE:E4:89:99:95:72:2E:F7:3D:18:D9:69:BD:57:EA:49:77:A8:7F:D9
Certificate issuer:       /CN=9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5
Certificate serial:       146A0C46FC02F212070390526378B28BBD4FD6B0
Authority key identifier: 9A:9F:16:48:A3:D8:E4:9E:1B:52:84:F8:6C:E1:C3:48:F3:A7:28:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/3137392e35312e38382e302f32322d3232203d3e203134323332.roa
Signing time:             Fri 16 Oct 2026 16:00:08 +0000
ROA not before:           Fri 16 Oct 2026 15:55:08 +0000
ROA not after:            Fri 15 Oct 2027 16:00:08 +0000
asID:                     14232
IP address blocks:        179.51.88.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 04:12:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:6a:0c:46:fc:02:f2:12:07:03:90:52:63:78:b2:8b:bd:4f:d6:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5
        Validity
            Not Before: Oct 16 15:55:08 2026 GMT
            Not After : Oct 15 16:00:08 2027 GMT
        Subject: CN=DEE4899995722EF73D18D969BD57EA4977A87FD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:fe:df:66:00:30:c7:14:4e:f7:43:4d:67:da:
                    db:d3:bc:a8:96:52:d4:55:e7:1a:42:1b:ec:2a:c2:
                    15:e7:9e:e2:67:38:8b:0c:79:07:9b:e3:3a:56:1a:
                    35:4f:19:a0:14:e6:37:d7:64:12:6f:0d:ba:61:cb:
                    5a:ff:f3:e1:f2:e9:10:ad:d6:f3:73:8c:5b:c6:73:
                    50:f6:4e:52:c7:d2:a0:e7:c4:c1:dc:92:76:a2:3f:
                    89:c5:b1:1e:0f:ab:a0:96:76:ee:76:f1:8b:94:11:
                    22:6e:eb:87:a0:3c:7b:67:b4:eb:06:6e:89:a7:32:
                    33:9c:1e:ae:4a:31:37:48:62:4e:35:63:e2:ce:44:
                    16:45:f1:b7:23:4c:8d:1b:7f:b4:e2:92:76:8c:72:
                    18:05:31:d8:75:7e:5c:b2:23:29:e7:56:19:94:ab:
                    1d:5b:2e:f7:e7:9b:27:98:5e:25:0c:78:73:86:db:
                    d2:79:62:ad:a7:b1:6e:73:27:f2:f1:5a:a6:a9:76:
                    a3:82:20:fd:2c:ae:f7:cb:0b:cf:b3:be:50:25:73:
                    ca:7f:ec:bf:cc:73:b1:e1:5a:16:c8:32:62:2c:e2:
                    8b:34:83:22:56:21:fa:17:e4:c3:48:d7:7b:f3:67:
                    d7:b7:dc:52:a9:6f:af:ec:24:a9:13:75:e7:c9:43:
                    d5:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:E4:89:99:95:72:2E:F7:3D:18:D9:69:BD:57:EA:49:77:A8:7F:D9
            X509v3 Authority Key Identifier:
                keyid:9A:9F:16:48:A3:D8:E4:9E:1B:52:84:F8:6C:E1:C3:48:F3:A7:28:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/3137392e35312e38382e302f32322d3232203d3e203134323332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.51.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:2e:3f:e3:61:3e:12:0d:73:d1:63:e5:9c:ff:90:38:7e:3f:
         5f:d8:0b:9f:d6:21:60:96:85:c5:c7:3d:fa:81:43:5a:cf:8e:
         d0:31:6c:2a:2b:d1:29:44:bc:4c:2a:fa:1a:20:87:a1:49:48:
         4c:a9:b8:15:bc:87:df:3d:96:d2:fc:de:59:25:ba:3d:2c:8a:
         54:cd:9e:29:94:96:95:f9:85:02:25:a6:89:71:46:e6:0f:b9:
         3b:15:b0:63:55:b4:08:42:4b:37:bf:d9:d6:84:48:d4:78:4d:
         70:b3:f1:40:14:4e:3e:13:3a:a8:ce:00:33:2d:bb:f0:15:2c:
         de:47:50:9f:45:8e:fc:72:71:fe:30:bb:bf:84:91:b3:25:b6:
         95:e6:04:2e:95:bf:39:df:f1:c8:cc:54:35:ca:10:10:da:96:
         45:48:af:f2:23:c3:8c:07:30:79:70:91:4c:37:1b:71:c5:fe:
         7f:ea:b2:d9:3b:b7:88:73:65:82:4b:4e:7e:2c:06:ea:29:11:
         85:8b:56:2d:29:5a:ab:75:f1:68:c3:fd:a6:1e:ea:98:9a:9d:
         4c:94:2e:d7:85:7c:09:1e:fb:2e:3e:7b:68:9d:a8:f5:c2:50:
         0d:6f:f2:c9:2f:8a:fb:76:d1:c6:56:ae:f6:d6:92:2b:50:d4:
         7e:80:62:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 23:10:21 2026 by rpki-client