Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9BF1002C9E31D1B526FABE60CC81CC5A203BEB8DF84C3441F29CF9E07584DAEC/0/3137392e34332e39362e302f32322d3234203d3e20323633313839.roa
File:                     3137392e34332e39362e302f32322d3234203d3e20323633313839.roa (raw, json)
Hash identifier:          efg/HrqYJzkLWEAGFsz4y/h+T80An0xBgaMvaKlQGzw=
Subject key identifier:   BB:77:72:3E:49:13:F6:85:01:65:5F:99:B7:C7:B0:2A:7F:70:08:2E
Certificate issuer:       /CN=7F6F76355591EF78F2876F224A9DA4EC3D1F7C75
Certificate serial:       3AB8FC25570E0EA61EC41628D70D08337AF2DD2B
Authority key identifier: 7F:6F:76:35:55:91:EF:78:F2:87:6F:22:4A:9D:A4:EC:3D:1F:7C:75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F6F76355591EF78F2876F224A9DA4EC3D1F7C75.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9BF1002C9E31D1B526FABE60CC81CC5A203BEB8DF84C3441F29CF9E07584DAEC/0/3137392e34332e39362e302f32322d3234203d3e20323633313839.roa
Signing time:             Fri 29 May 2026 20:10:00 +0000
ROA not before:           Fri 29 May 2026 20:05:00 +0000
ROA not after:            Fri 28 May 2027 20:10:00 +0000
asID:                     263189
IP address blocks:        179.43.96.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9BF1002C9E31D1B526FABE60CC81CC5A203BEB8DF84C3441F29CF9E07584DAEC/0/7F6F76355591EF78F2876F224A9DA4EC3D1F7C75.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9BF1002C9E31D1B526FABE60CC81CC5A203BEB8DF84C3441F29CF9E07584DAEC/0/7F6F76355591EF78F2876F224A9DA4EC3D1F7C75.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F6F76355591EF78F2876F224A9DA4EC3D1F7C75.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:b8:fc:25:57:0e:0e:a6:1e:c4:16:28:d7:0d:08:33:7a:f2:dd:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F6F76355591EF78F2876F224A9DA4EC3D1F7C75
        Validity
            Not Before: May 29 20:05:00 2026 GMT
            Not After : May 28 20:10:00 2027 GMT
        Subject: CN=BB77723E4913F68501655F99B7C7B02A7F70082E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d6:8d:63:df:3d:52:e1:b1:4f:27:16:db:e6:
                    ea:55:ce:e5:21:31:99:52:6f:b7:74:fa:e5:05:7e:
                    15:98:44:55:ed:81:9d:a3:fd:b1:27:c2:16:07:d3:
                    ef:0a:81:7c:5a:a3:34:50:c4:f3:ba:41:a5:c6:0d:
                    d0:82:53:8e:bc:1f:22:51:db:ef:f0:24:3f:28:d2:
                    4c:1c:09:c0:da:58:16:74:8c:7a:cd:56:b6:5e:fd:
                    d0:83:3b:c8:8f:d6:55:c5:36:56:b7:55:f6:b1:04:
                    ab:b6:ac:ad:79:00:f4:56:c9:0b:01:61:bd:b4:a7:
                    06:c6:82:fd:5f:cc:4b:9f:35:84:e2:c0:86:3a:8c:
                    c3:99:b0:f2:d4:bf:77:02:0e:78:ac:64:58:6c:f8:
                    c9:67:54:f1:4d:aa:f7:d5:c8:c9:6c:42:b1:ad:cf:
                    b7:d3:81:19:9d:12:b7:00:8f:1c:8f:ef:7d:06:8e:
                    da:0d:0a:9c:83:f2:a1:46:8b:65:c7:61:ae:ac:17:
                    1e:cd:57:65:0e:81:34:19:93:e3:46:c6:a0:d6:ef:
                    be:fb:10:84:4c:14:70:a5:b7:b8:96:52:86:73:25:
                    e3:ed:c6:59:a4:85:99:5a:17:52:96:4f:c8:48:ce:
                    cd:a2:f2:80:16:66:63:f1:cf:4c:1a:9b:d4:52:98:
                    69:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:77:72:3E:49:13:F6:85:01:65:5F:99:B7:C7:B0:2A:7F:70:08:2E
            X509v3 Authority Key Identifier:
                keyid:7F:6F:76:35:55:91:EF:78:F2:87:6F:22:4A:9D:A4:EC:3D:1F:7C:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9BF1002C9E31D1B526FABE60CC81CC5A203BEB8DF84C3441F29CF9E07584DAEC/0/7F6F76355591EF78F2876F224A9DA4EC3D1F7C75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F6F76355591EF78F2876F224A9DA4EC3D1F7C75.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9BF1002C9E31D1B526FABE60CC81CC5A203BEB8DF84C3441F29CF9E07584DAEC/0/3137392e34332e39362e302f32322d3234203d3e20323633313839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.43.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:14:ce:d6:02:84:d4:16:d3:b9:7f:de:35:9d:f0:fa:b0:77:
         cb:63:63:98:69:d6:e5:d5:37:ce:36:68:da:6a:86:3d:ec:d9:
         5c:74:e1:14:4c:77:57:6c:0a:71:e7:77:36:7d:53:41:d3:1c:
         d0:45:b7:a8:b1:75:21:34:6e:43:5a:38:be:20:b7:20:a0:77:
         80:82:bf:39:e7:a6:4e:8d:82:d6:e9:08:f7:1c:0a:c1:dc:49:
         c6:85:2b:53:c9:ec:5c:81:66:fc:04:5e:74:85:4d:29:45:74:
         ef:17:a1:f2:51:fc:27:35:b3:b8:c8:43:d5:4f:f0:d6:1b:10:
         35:17:55:d6:ad:03:09:48:2f:c6:62:e7:bf:4d:93:1e:81:92:
         e8:d5:fe:f7:b8:05:69:95:07:45:97:30:79:da:fc:0b:d2:ab:
         4d:40:27:d3:aa:74:ea:d4:e0:7c:e8:32:cb:08:30:17:38:7a:
         2f:6c:f7:2f:8c:fc:99:d1:f0:da:2a:e6:17:4c:7e:b4:d7:35:
         d9:27:48:3b:8e:19:2b:46:bd:e7:24:86:2c:78:90:9d:5d:ed:
         cc:b3:1b:2d:f4:67:b5:d5:22:89:2b:a0:44:7d:d9:f6:b3:4a:
         95:bc:0a:bc:60:80:ec:48:f5:70:73:72:55:22:da:c7:fd:48:
         5f:57:c2:55
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUOrj8JVcODqYexBYo1w0IM3ry3SswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0Y2Rjc2MzU1NTkxRUY3OEYyODc2RjIyNEE5REE0RUMz
RDFGN0M3NTAeFw0yNjA1MjkyMDA1MDBaFw0yNzA1MjgyMDEwMDBaMDMxMTAvBgNV
BAMTKEJCNzc3MjNFNDkxM0Y2ODUwMTY1NUY5OUI3QzdCMDJBN0Y3MDA4MkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV1o1j3z1S4bFPJxbb5upVzuUh
MZlSb7d0+uUFfhWYRFXtgZ2j/bEnwhYH0+8KgXxaozRQxPO6QaXGDdCCU468HyJR
2+/wJD8o0kwcCcDaWBZ0jHrNVrZe/dCDO8iP1lXFNla3VfaxBKu2rK15APRWyQsB
Yb20pwbGgv1fzEufNYTiwIY6jMOZsPLUv3cCDnisZFhs+MlnVPFNqvfVyMlsQrGt
z7fTgRmdErcAjxyP730GjtoNCpyD8qFGi2XHYa6sFx7NV2UOgTQZk+NGxqDW7777
EIRMFHClt7iWUoZzJePtxlmkhZlaF1KWT8hIzs2i8oAWZmPxz0wam9RSmGkvAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUu3dyPkkT9oUBZV+Zt8ewKn9wCC4wHwYDVR0j
BBgwFoAUf292NVWR73jyh28iSp2k7D0ffHUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85QkYxMDAyQzlFMzFEMUI1MjZGQUJFNjBDQzgxQ0M1QTIw
M0JFQjhERjg0QzM0NDFGMjlDRjlFMDc1ODREQUVDLzAvN0Y2Rjc2MzU1NTkxRUY3
OEYyODc2RjIyNEE5REE0RUMzRDFGN0M3NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83RjZGNzYzNTU1OTFFRjc4RjI4
NzZGMjI0QTlEQTRFQzNEMUY3Qzc1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOUJGMTAwMkM5RTMxRDFCNTI2RkFCRTYwQ0M4MUNDNUEyMDNCRUI4REY4
NEMzNDQxRjI5Q0Y5RTA3NTg0REFFQy8wLzMxMzczOTJlMzQzMzJlMzkzNjJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzMzMxMzgzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArMrYDAN
BgkqhkiG9w0BAQsFAAOCAQEAURTO1gKE1BbTuX/eNZ3w+rB3y2NjmGnW5dU3zjZo
2mqGPezZXHThFEx3V2wKced3Nn1TQdMc0EW3qLF1ITRuQ1o4viC3IKB3gIK/Oeem
To2C1ukI9xwKwdxJxoUrU8nsXIFm/ARedIVNKUV07xeh8lH8JzWzuMhD1U/w1hsQ
NRdV1q0DCUgvxmLnv02THoGS6NX+97gFaZUHRZcwedr8C9KrTUAn06p06tTgfOgy
ywgwFzh6L2z3L4z8mdHw2irmF0x+tNc12SdIO44ZK0a95ySGLHiQnV3tzLMbLfRn
tdUiiSugRH3Z9rNKlbwKvGCA7Ej1cHNyVSLax/1IX1fCVQ==
-----END CERTIFICATE-----
Generated at Sun Jun 14 09:23:05 2026 by rpki-client