Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B71DF8E839AF34312DD7D71FB39907842FD27DE7EC1B331829FF182E1A10C3E9/0/3137392e36332e3138382e302f32342d3234203d3e20323733323434.roa
File:                     3137392e36332e3138382e302f32342d3234203d3e20323733323434.roa (raw, json)
Hash identifier:          sF87lQ6oiO21VC2XXouNlSmQqRzv19sdFLPdVRmn/wo=
Subject key identifier:   73:52:12:F3:84:42:A1:F9:B6:7D:70:07:6D:38:5C:F4:81:90:A3:30
Certificate issuer:       /CN=4B167B483874A127B2C4F0C2ACD9F1EFCDB0210A
Certificate serial:       25E64629F43AE08C1A84A1FDDF2E3BB2975EAF5B
Authority key identifier: 4B:16:7B:48:38:74:A1:27:B2:C4:F0:C2:AC:D9:F1:EF:CD:B0:21:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B167B483874A127B2C4F0C2ACD9F1EFCDB0210A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B71DF8E839AF34312DD7D71FB39907842FD27DE7EC1B331829FF182E1A10C3E9/0/3137392e36332e3138382e302f32342d3234203d3e20323733323434.roa
Signing time:             Fri 10 Apr 2026 19:15:00 +0000
ROA not before:           Fri 10 Apr 2026 19:10:00 +0000
ROA not after:            Fri 09 Apr 2027 19:15:00 +0000
asID:                     273244
IP address blocks:        179.63.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B71DF8E839AF34312DD7D71FB39907842FD27DE7EC1B331829FF182E1A10C3E9/0/4B167B483874A127B2C4F0C2ACD9F1EFCDB0210A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B71DF8E839AF34312DD7D71FB39907842FD27DE7EC1B331829FF182E1A10C3E9/0/4B167B483874A127B2C4F0C2ACD9F1EFCDB0210A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B167B483874A127B2C4F0C2ACD9F1EFCDB0210A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Apr 2026 23:13:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:e6:46:29:f4:3a:e0:8c:1a:84:a1:fd:df:2e:3b:b2:97:5e:af:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B167B483874A127B2C4F0C2ACD9F1EFCDB0210A
        Validity
            Not Before: Apr 10 19:10:00 2026 GMT
            Not After : Apr  9 19:15:00 2027 GMT
        Subject: CN=735212F38442A1F9B67D70076D385CF48190A330
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:0e:7d:e3:3b:7f:53:b9:a9:12:f8:1f:de:eb:
                    93:e8:1e:67:7c:46:03:40:e4:11:35:55:57:24:69:
                    4d:c7:ad:1e:33:d3:cf:21:8f:32:fd:2d:fb:85:67:
                    8f:2f:fd:d6:8a:2f:d3:c3:09:2c:71:17:bd:cb:9d:
                    69:af:11:30:13:c7:bc:0f:95:35:bd:ae:0b:04:04:
                    9a:24:00:a9:14:02:45:13:cb:3b:b4:ab:8b:7c:69:
                    55:74:66:4e:03:94:ca:9e:21:a7:1b:e0:c9:46:36:
                    b5:3e:84:c2:79:7b:78:d6:94:29:b5:02:3d:40:68:
                    7a:40:27:7c:03:74:f5:be:55:82:a0:ac:43:e6:a9:
                    78:2f:75:93:0b:2b:85:29:9d:2d:65:f8:50:c3:9e:
                    bc:bb:60:d2:ac:7b:0a:91:cd:02:64:36:da:56:1b:
                    10:37:5e:38:c2:c3:dc:88:db:bd:cc:10:fb:f8:41:
                    72:ca:a2:92:7f:bb:f7:4a:bc:c2:6f:6f:f0:a9:13:
                    a7:32:f4:f4:95:70:6b:f6:15:af:ca:00:53:ca:62:
                    5b:9c:c9:ac:b6:83:fc:77:89:7e:9c:ec:35:20:ac:
                    ed:79:a8:13:62:64:57:0d:9b:6a:55:09:ec:fb:1a:
                    ed:c3:2c:c8:86:8a:01:2d:39:1c:05:31:a0:77:0e:
                    65:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:52:12:F3:84:42:A1:F9:B6:7D:70:07:6D:38:5C:F4:81:90:A3:30
            X509v3 Authority Key Identifier:
                keyid:4B:16:7B:48:38:74:A1:27:B2:C4:F0:C2:AC:D9:F1:EF:CD:B0:21:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B71DF8E839AF34312DD7D71FB39907842FD27DE7EC1B331829FF182E1A10C3E9/0/4B167B483874A127B2C4F0C2ACD9F1EFCDB0210A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B167B483874A127B2C4F0C2ACD9F1EFCDB0210A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B71DF8E839AF34312DD7D71FB39907842FD27DE7EC1B331829FF182E1A10C3E9/0/3137392e36332e3138382e302f32342d3234203d3e20323733323434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:ad:ac:e4:ee:d0:bd:60:cb:99:b9:e8:23:88:44:f4:e2:95:
         f2:76:e5:43:91:a8:e4:ce:cf:8f:60:b4:93:58:f0:a7:45:1e:
         db:cf:49:2e:77:f0:c7:0e:5c:54:cf:e8:d4:e8:a1:b7:44:80:
         ca:88:2e:d4:14:05:b9:b1:56:2d:9d:76:07:54:f9:75:7f:bf:
         b7:9d:1c:55:d8:36:ac:c7:11:76:3a:06:1f:8e:8e:7d:2f:4e:
         70:76:89:ab:f3:ba:9e:48:ec:a9:63:6a:ba:c9:55:08:54:e5:
         b7:e2:93:ab:98:43:dc:1f:0a:d3:9f:cc:01:01:78:46:be:d8:
         db:34:f2:3c:16:ae:7f:54:c8:b3:e7:cc:69:70:de:72:9c:50:
         9a:66:a6:51:a2:20:12:93:8f:ce:f8:9f:55:8d:f9:e4:b9:96:
         d4:d0:21:ca:20:a7:ba:fc:f2:dd:9e:0c:1d:ec:e0:d0:c4:4f:
         43:31:e1:d8:52:7f:7e:1e:83:a4:8b:d1:c5:59:e3:e2:99:2e:
         01:20:9a:95:17:f7:9d:47:cf:c0:88:37:36:a6:6a:9d:58:4b:
         41:71:72:f2:44:d1:17:c0:01:13:0b:b9:bd:60:c1:5b:bf:88:
         78:b0:ee:ba:9c:d0:07:ec:93:4d:36:74:30:0e:d9:c2:38:c9:
         4a:b6:d3:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:39:42 2026 by rpki-client