Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3137392e3138392e3231392e302f32342d3234203d3e203238313033.roa
File:                     3137392e3138392e3231392e302f32342d3234203d3e203238313033.roa (raw, json)
Hash identifier:          t2/idaYK0VYDBgArpY6By362qkhQ3dTTQfyJpjNo7CA=
Subject key identifier:   BC:7F:25:3B:01:BB:C6:F5:88:85:AA:11:DB:7D:6F:5B:92:06:02:71
Certificate issuer:       /CN=310B6E7E481FA87B7B29582BAD1348FE7F657C57
Certificate serial:       5CF8FFBEB5164659895D80EC59F2F983BC9D4F05
Authority key identifier: 31:0B:6E:7E:48:1F:A8:7B:7B:29:58:2B:AD:13:48:FE:7F:65:7C:57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3137392e3138392e3231392e302f32342d3234203d3e203238313033.roa
Signing time:             Mon 15 Jun 2026 13:47:42 +0000
ROA not before:           Mon 15 Jun 2026 13:42:42 +0000
ROA not after:            Mon 14 Jun 2027 13:47:42 +0000
asID:                     28103
IP address blocks:        179.189.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Jul 2026 07:06:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:f8:ff:be:b5:16:46:59:89:5d:80:ec:59:f2:f9:83:bc:9d:4f:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=310B6E7E481FA87B7B29582BAD1348FE7F657C57
        Validity
            Not Before: Jun 15 13:42:42 2026 GMT
            Not After : Jun 14 13:47:42 2027 GMT
        Subject: CN=BC7F253B01BBC6F58885AA11DB7D6F5B92060271
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:5b:5a:ce:f1:55:9c:09:6f:09:82:de:23:1b:
                    e1:33:d3:2c:d3:b5:1e:f4:5b:5c:68:1f:bd:31:c9:
                    9a:ca:16:5c:84:60:9e:46:d4:9a:56:4f:67:db:71:
                    dd:fd:ef:fa:93:ba:14:c8:2d:88:63:04:0f:59:d1:
                    d8:20:13:18:3c:30:25:9a:1e:f8:ce:fd:c0:1f:c4:
                    48:f7:b6:e7:70:1d:45:00:d7:36:57:7a:e6:7c:08:
                    72:2d:26:15:d7:08:73:46:bb:ae:2e:d3:3d:3f:d7:
                    34:33:e7:43:5a:51:c1:f7:3d:82:a4:6f:86:9a:98:
                    e4:41:34:a9:b6:d3:f5:93:22:94:21:8f:94:63:5d:
                    7c:d3:97:76:d2:07:1f:c5:af:1b:8d:0d:58:f2:6e:
                    c3:bc:a3:60:58:ef:36:8e:dc:6a:27:55:1f:05:f6:
                    9a:d8:73:d6:5c:9e:d7:25:72:7f:6d:b9:59:ab:f6:
                    a0:ea:6a:e5:8f:4f:b2:8c:a7:26:d3:ba:29:21:8d:
                    04:2e:06:7d:f9:f9:1f:9b:f2:61:69:07:ed:54:37:
                    9c:50:33:18:11:64:d8:73:fd:11:62:db:7b:34:7f:
                    bd:06:36:47:8d:a9:a6:be:c1:57:a3:eb:1f:62:34:
                    76:bf:2c:a0:c2:98:85:de:c7:0b:08:8f:64:43:27:
                    86:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:7F:25:3B:01:BB:C6:F5:88:85:AA:11:DB:7D:6F:5B:92:06:02:71
            X509v3 Authority Key Identifier:
                keyid:31:0B:6E:7E:48:1F:A8:7B:7B:29:58:2B:AD:13:48:FE:7F:65:7C:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3137392e3138392e3231392e302f32342d3234203d3e203238313033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.189.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:61:4f:62:fc:61:d6:99:0e:6f:07:ef:34:b7:4d:a3:25:bc:
         c4:45:d6:8f:48:b5:25:bb:09:93:da:cf:34:57:55:1b:c2:f3:
         a8:0e:bf:cd:c6:8f:30:76:e8:d7:5e:12:86:5e:df:bb:9f:24:
         59:dd:f5:97:3c:33:87:a3:78:57:a3:2f:79:b8:c4:64:aa:54:
         89:2c:ac:04:65:9f:f7:72:58:d3:77:f6:8d:7f:5c:6d:2c:11:
         f6:44:5e:c8:0c:b7:63:98:f8:bb:bc:1f:ff:48:d7:d3:cb:0e:
         33:fb:61:69:0a:67:a3:b2:7f:2e:04:16:83:cf:da:49:32:d4:
         45:c7:0b:c7:40:a3:6a:66:6b:71:fe:4e:44:6d:2e:3d:25:cc:
         fb:aa:83:22:97:2a:c4:c8:ee:3c:e7:35:d1:95:fd:a0:d9:9b:
         75:6a:20:e5:08:b8:d6:e8:40:34:62:16:dd:a5:03:61:8d:ad:
         1a:91:ea:a9:16:20:d5:ca:4d:92:80:8b:81:99:50:62:fc:59:
         6f:7c:2c:fe:dd:72:ae:e9:e4:0f:a4:03:bb:f2:72:04:ee:6b:
         50:3c:5b:a4:58:e2:98:c3:3f:10:49:8e:2d:cb:33:a3:fa:90:
         d3:11:5e:6d:e4:b5:9b:ee:77:6a:be:3f:b2:04:83:6e:0d:f0:
         f0:92:62:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:07:09 2026 by rpki-client