Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9A62D1E160895B622E0571FC04E5E243858CBA398C4252448BC41E61DC011C46/0/3137392e36312e3131322e302f32302d3230203d3e20323632313931.roa
File:                     3137392e36312e3131322e302f32302d3230203d3e20323632313931.roa (raw, json)
Hash identifier:          1pTAUxuoWNKgt6DtcDn65y4C5zO25W/HGW3hssltSyU=
Subject key identifier:   26:CD:B1:41:AA:25:D7:2C:3A:B6:8C:35:50:8A:F2:0F:2E:45:EE:95
Certificate issuer:       /CN=B865FE2F6CF3E2282391568212399A0ABBAA6FDD
Certificate serial:       5606315387B8C43BF978DAAA022B25558B586CA2
Authority key identifier: B8:65:FE:2F:6C:F3:E2:28:23:91:56:82:12:39:9A:0A:BB:AA:6F:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B865FE2F6CF3E2282391568212399A0ABBAA6FDD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9A62D1E160895B622E0571FC04E5E243858CBA398C4252448BC41E61DC011C46/0/3137392e36312e3131322e302f32302d3230203d3e20323632313931.roa
Signing time:             Tue 02 Jun 2026 21:46:15 +0000
ROA not before:           Tue 02 Jun 2026 21:41:15 +0000
ROA not after:            Tue 01 Jun 2027 21:46:15 +0000
asID:                     262191
IP address blocks:        179.61.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9A62D1E160895B622E0571FC04E5E243858CBA398C4252448BC41E61DC011C46/0/B865FE2F6CF3E2282391568212399A0ABBAA6FDD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9A62D1E160895B622E0571FC04E5E243858CBA398C4252448BC41E61DC011C46/0/B865FE2F6CF3E2282391568212399A0ABBAA6FDD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B865FE2F6CF3E2282391568212399A0ABBAA6FDD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 04:46:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:06:31:53:87:b8:c4:3b:f9:78:da:aa:02:2b:25:55:8b:58:6c:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B865FE2F6CF3E2282391568212399A0ABBAA6FDD
        Validity
            Not Before: Jun  2 21:41:15 2026 GMT
            Not After : Jun  1 21:46:15 2027 GMT
        Subject: CN=26CDB141AA25D72C3AB68C35508AF20F2E45EE95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7a:aa:7a:77:9e:64:93:77:97:67:96:b8:81:
                    a9:e3:09:3a:b0:4c:16:27:21:4b:26:34:5c:44:5e:
                    8c:44:41:88:f4:03:0c:73:50:4d:16:44:80:35:b6:
                    f8:10:e1:aa:2d:f2:35:16:5d:ea:25:e1:4b:33:1b:
                    88:22:cd:67:2a:ea:33:54:2f:08:a8:cf:3a:f7:28:
                    61:07:2f:0a:84:fa:ec:2c:b4:00:bf:2d:69:97:f1:
                    d1:8b:c1:d0:99:68:c5:bd:8a:f4:10:29:27:70:55:
                    95:c1:b4:6c:ff:34:97:d4:9a:c4:4b:b2:cd:d4:30:
                    f6:68:7c:b4:e4:7d:4d:40:01:2f:ed:01:3a:c9:6b:
                    ca:9a:17:19:40:58:c8:f4:4c:cd:e4:0f:10:37:59:
                    e5:37:a3:27:0a:56:3a:52:89:9c:c8:84:3d:5e:1e:
                    e1:ec:7c:68:54:bf:b3:11:55:30:47:1b:07:d9:e6:
                    f5:2f:b4:24:a6:76:dd:cc:1f:8a:23:e5:d1:f5:75:
                    8b:a1:1c:14:66:5e:bd:2d:8b:14:ad:b1:87:a6:ae:
                    9e:41:3a:1f:de:64:ba:b2:2d:63:eb:19:0b:be:99:
                    06:4c:0d:fb:df:1c:39:4a:09:af:51:09:89:e6:f4:
                    f9:96:1f:e1:60:06:2e:8f:5d:e2:fd:ce:44:c9:05:
                    27:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:CD:B1:41:AA:25:D7:2C:3A:B6:8C:35:50:8A:F2:0F:2E:45:EE:95
            X509v3 Authority Key Identifier:
                keyid:B8:65:FE:2F:6C:F3:E2:28:23:91:56:82:12:39:9A:0A:BB:AA:6F:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9A62D1E160895B622E0571FC04E5E243858CBA398C4252448BC41E61DC011C46/0/B865FE2F6CF3E2282391568212399A0ABBAA6FDD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B865FE2F6CF3E2282391568212399A0ABBAA6FDD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9A62D1E160895B622E0571FC04E5E243858CBA398C4252448BC41E61DC011C46/0/3137392e36312e3131322e302f32302d3230203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2d:f9:07:12:25:db:a3:4b:3a:53:11:77:41:96:b1:f2:af:29:
         86:98:71:49:80:f5:8a:e8:60:0f:3f:9c:1d:7c:42:66:db:37:
         8a:4d:18:ec:3f:92:e8:da:bc:7a:06:e3:b9:1f:25:69:47:8d:
         57:38:c6:67:73:40:bc:f7:e7:61:76:00:0e:b8:5b:14:e7:a8:
         20:1e:92:cb:f6:7d:0d:3c:0f:6a:44:4c:0a:bc:fe:08:ad:a4:
         ee:ad:b4:71:f2:e4:ca:78:e0:2a:5b:38:e5:14:e6:67:11:7e:
         ba:e6:73:6a:4e:57:70:62:3d:be:33:11:7a:d9:7c:28:66:41:
         13:32:35:de:2e:f9:c2:5d:54:32:07:64:08:89:9b:29:a7:15:
         46:95:de:44:7e:cf:07:60:52:d1:ae:23:96:ee:da:48:2e:11:
         e9:70:80:18:5e:fb:e4:ba:de:a5:c8:6d:6c:c3:0f:a9:69:74:
         68:e0:3e:89:b1:01:f6:80:89:b4:b2:94:29:11:67:3f:4e:de:
         63:e8:1d:95:3a:be:0c:d0:a1:bd:1c:88:f7:f9:09:4e:8f:6b:
         80:e0:4f:c3:33:bd:68:2f:07:53:7c:97:37:38:40:20:4c:b2:
         66:64:af:12:40:ca:ce:7d:3d:cd:7d:67:68:b1:85:32:f3:d4:
         0d:75:b6:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:36:20 2026 by rpki-client