Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/3137392e31382e302e302f31362d3234203d3e20323731373733.roa
File:                     3137392e31382e302e302f31362d3234203d3e20323731373733.roa (raw, json)
Hash identifier:          SvqTdLz5gvLJGNMsCfGt750s2adeWOCC/U4v32Xvajg=
Subject key identifier:   47:53:19:E6:31:03:58:18:C3:B8:50:49:CE:6D:D7:CE:49:28:CF:B3
Certificate issuer:       /CN=928052F0CB3F37ACD3ABCCCBC8A740B04DA13237
Certificate serial:       0811DF18F48C0D6E0059EB93267A8F1492FC8066
Authority key identifier: 92:80:52:F0:CB:3F:37:AC:D3:AB:CC:CB:C8:A7:40:B0:4D:A1:32:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/3137392e31382e302e302f31362d3234203d3e20323731373733.roa
Signing time:             Fri 15 May 2026 16:42:42 +0000
ROA not before:           Fri 15 May 2026 16:37:42 +0000
ROA not after:            Fri 14 May 2027 16:42:42 +0000
asID:                     271773
IP address blocks:        179.18.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 02 Jun 2026 02:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:11:df:18:f4:8c:0d:6e:00:59:eb:93:26:7a:8f:14:92:fc:80:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=928052F0CB3F37ACD3ABCCCBC8A740B04DA13237
        Validity
            Not Before: May 15 16:37:42 2026 GMT
            Not After : May 14 16:42:42 2027 GMT
        Subject: CN=475319E631035818C3B85049CE6DD7CE4928CFB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6d:14:f6:77:04:19:27:02:d0:0b:2c:2f:1b:
                    44:3c:35:5e:ce:fd:5d:6e:33:62:15:29:bb:6d:5c:
                    1d:e0:a1:26:13:f8:63:3d:d2:6b:49:89:f7:0b:9a:
                    47:20:b2:e7:b7:c1:a4:85:b7:ef:fb:d3:d6:5f:99:
                    56:b5:05:9d:93:31:18:07:64:a3:0c:36:5e:58:2a:
                    8b:8d:6b:dd:a3:88:a1:80:fa:68:a9:b0:9a:c9:49:
                    70:1e:b0:ef:d8:6d:4f:87:b7:37:05:7c:54:c9:ad:
                    54:b5:7a:d2:6a:12:a3:8e:4a:70:fe:2c:7f:0c:f0:
                    70:a6:de:eb:f0:5e:e1:dc:2d:34:e0:df:d2:90:e9:
                    99:8e:6f:53:66:e8:9a:f8:b4:eb:2b:4b:9f:40:b5:
                    c6:96:c3:f9:47:67:9c:83:c2:bc:77:37:41:fa:87:
                    c6:37:2f:96:d8:6f:54:f3:be:f9:33:e9:17:52:db:
                    21:74:77:c2:e9:cd:81:a3:b2:d4:d8:7e:bd:03:94:
                    71:e0:f9:f9:c1:3a:2a:c5:71:b3:02:2e:64:2d:e8:
                    3a:30:fe:67:fd:a3:be:ee:ae:be:c6:b5:72:7b:72:
                    bd:7d:28:54:82:d1:47:d7:21:44:b6:ca:92:c2:f7:
                    7d:02:c5:72:87:89:7f:51:af:52:61:21:41:e9:b3:
                    af:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:53:19:E6:31:03:58:18:C3:B8:50:49:CE:6D:D7:CE:49:28:CF:B3
            X509v3 Authority Key Identifier:
                keyid:92:80:52:F0:CB:3F:37:AC:D3:AB:CC:CB:C8:A7:40:B0:4D:A1:32:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/3137392e31382e302e302f31362d3234203d3e20323731373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.18.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         2a:2c:0b:aa:79:d9:32:e7:10:94:f1:78:20:ae:94:aa:04:9c:
         e5:47:d1:e1:9f:9b:36:b4:e1:8b:53:11:fa:66:9a:25:68:93:
         37:13:ed:29:2e:20:41:97:03:b4:b7:af:83:ff:6a:8f:70:9c:
         e0:e4:60:17:7b:3c:f6:42:08:18:55:55:b9:42:88:0a:98:ac:
         ff:89:7c:74:91:ac:dd:e7:b3:fe:09:9b:57:b2:37:87:f6:25:
         b9:4f:30:bd:fa:57:16:69:42:77:90:3f:4e:0e:20:20:bc:cb:
         e7:ae:99:44:72:d6:ea:6c:f1:ea:03:48:ed:78:f6:15:41:a5:
         b5:5a:7c:05:d0:34:e8:9f:b1:4c:eb:0e:a5:4d:af:a0:1a:8e:
         68:f2:b5:73:b9:af:4f:bd:6e:85:9b:32:b9:de:9d:50:9d:13:
         9f:2b:4f:18:4e:da:a7:35:bc:b9:9e:95:59:e6:61:e3:f5:30:
         7e:fa:7a:ef:93:d2:69:d0:fe:86:90:8a:3e:82:01:09:e5:ea:
         51:20:23:c7:b8:a9:7d:a9:92:ae:40:5b:06:fd:93:cd:fb:e9:
         1d:95:95:40:f9:3b:3c:bf:ea:fe:14:78:94:2e:d0:e8:8e:e9:
         5a:38:ec:9c:7c:08:c6:25:d1:fb:0b:ab:be:cb:ed:42:d4:5d:
         82:9e:e9:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:05:53 2026 by rpki-client