Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/3137392e36302e3230362e302f32342d3239203d3e203634313230.roa
File:                     3137392e36302e3230362e302f32342d3239203d3e203634313230.roa (raw, json)
Hash identifier:          nmqRMdPl+n/HA/q9WPpQyHA3Icl/ZM6G3s3WyUYR2gY=
Subject key identifier:   CF:FC:4C:99:35:3B:63:8F:D2:F8:0D:7B:5A:7E:55:ED:25:4A:56:A3
Certificate issuer:       /CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
Certificate serial:       678FFD8F7FD1CA4FEFF530AAC06330D038641347
Authority key identifier: D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/3137392e36302e3230362e302f32342d3239203d3e203634313230.roa
Signing time:             Fri 20 Feb 2026 21:31:30 +0000
ROA not before:           Fri 20 Feb 2026 21:26:30 +0000
ROA not after:            Fri 19 Feb 2027 21:31:30 +0000
asID:                     64120
IP address blocks:        179.60.206.0/24 maxlen: 29
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Mar 2026 05:55:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:8f:fd:8f:7f:d1:ca:4f:ef:f5:30:aa:c0:63:30:d0:38:64:13:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
        Validity
            Not Before: Feb 20 21:26:30 2026 GMT
            Not After : Feb 19 21:31:30 2027 GMT
        Subject: CN=CFFC4C99353B638FD2F80D7B5A7E55ED254A56A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:67:a2:9a:36:16:3f:ec:8b:8f:68:03:23:23:
                    18:61:cb:f2:42:30:a8:1a:74:01:fc:6f:5e:b9:b7:
                    6f:d3:9a:af:09:fb:24:61:ce:6f:66:fb:6b:41:20:
                    ef:29:85:d5:ff:1c:c4:ee:0c:62:0d:73:af:bf:a9:
                    86:75:c9:b6:c3:07:d4:20:ce:57:6d:c5:15:f0:46:
                    3f:6f:36:ba:2d:2d:8c:2c:53:61:c9:84:8d:0a:b2:
                    bd:ce:b5:f2:36:64:9a:02:de:a2:f1:51:92:28:da:
                    13:bb:c8:f2:10:e5:25:48:8f:b1:95:92:93:b9:e0:
                    72:77:5d:d1:e3:a5:0e:ce:e6:6e:8a:db:7b:60:a2:
                    5b:0f:58:f6:72:ff:00:1d:2f:16:3e:76:94:bd:e7:
                    41:28:9a:49:0b:3b:f8:6d:4c:46:89:2b:05:4a:3f:
                    f8:a0:7a:0b:ac:03:84:28:33:b3:7e:c1:76:64:a7:
                    0c:af:e5:b0:0a:5f:71:2f:57:6b:8c:b6:75:d1:df:
                    86:f8:20:61:94:e1:2f:ea:95:41:88:45:ae:d3:25:
                    9a:94:c0:e0:b2:f3:54:90:2d:7a:3c:db:5f:96:ca:
                    e2:87:30:59:87:94:c9:7a:41:a4:ac:38:be:b9:19:
                    e6:d3:a8:96:53:b1:38:ad:b7:5b:65:a5:44:30:8c:
                    a8:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:FC:4C:99:35:3B:63:8F:D2:F8:0D:7B:5A:7E:55:ED:25:4A:56:A3
            X509v3 Authority Key Identifier:
                keyid:D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/3137392e36302e3230362e302f32342d3239203d3e203634313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:e5:1f:a1:5d:db:62:aa:6d:41:b9:75:50:a8:d9:e0:a8:67:
         02:88:07:45:f2:ea:1d:f4:5c:1e:80:53:0c:b9:6c:e7:cd:49:
         e9:52:d7:b0:13:8c:18:51:ff:e7:65:45:c5:85:7e:a9:a0:be:
         83:13:31:84:72:5f:eb:8d:4c:66:18:19:cf:f7:af:85:23:6a:
         51:a4:13:03:5f:26:7e:8d:a8:66:a4:a8:79:62:a1:2a:ed:56:
         60:51:27:e5:70:d1:f2:3a:ea:29:d0:96:a6:f6:ee:d8:66:5c:
         c2:2e:68:b6:9c:2c:a5:e4:87:65:b3:67:6e:9d:e5:b0:ff:aa:
         d6:36:c1:77:14:bd:89:68:60:07:3b:16:15:b3:3f:aa:0f:56:
         4d:63:7e:76:72:68:eb:fa:f1:35:d5:de:c0:83:33:e7:60:77:
         c6:a8:22:c4:cb:80:fd:f1:f8:e1:f7:da:17:2f:e6:38:98:76:
         8f:d9:11:e3:c2:bd:ff:02:5e:fe:8f:e8:97:61:b0:62:ac:b1:
         e1:5b:71:bb:5c:6d:f5:8c:44:d0:86:6a:05:97:64:57:15:97:
         d8:a5:a0:6b:cf:6b:4b:c4:35:52:4f:a0:8d:de:0c:e4:a4:1b:
         81:76:12:87:8b:41:ee:3b:ef:a7:12:5a:81:2d:b0:21:c6:7b:
         6d:c9:f0:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:57:45 2026 by rpki-client