Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/FFC11D0666EE8615632B0485AF13B704F517650650D14050E586094E0CD40751/0/3137392e36302e3232302e302f32322d3234203d3e20323639373935.roa
File:                     3137392e36302e3232302e302f32322d3234203d3e20323639373935.roa (raw, json)
Hash identifier:          n1V/on1uOBzKZhGwowWhF2kf+Mcc51o9HXg1n4Z2Smg=
Subject key identifier:   F7:E2:3A:E4:04:21:96:C7:FE:74:EE:31:23:57:CF:3F:7F:8C:13:2E
Certificate issuer:       /CN=30ED07863C181BF1D567F4D620AAD22FA5076551
Certificate serial:       4AF3DEB2D7789F3EECA575FF9307B71E4465CCC4
Authority key identifier: 30:ED:07:86:3C:18:1B:F1:D5:67:F4:D6:20:AA:D2:2F:A5:07:65:51
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30ED07863C181BF1D567F4D620AAD22FA5076551.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FFC11D0666EE8615632B0485AF13B704F517650650D14050E586094E0CD40751/0/3137392e36302e3232302e302f32322d3234203d3e20323639373935.roa
Signing time:             Mon 24 Aug 2026 16:15:00 +0000
ROA not before:           Mon 24 Aug 2026 16:10:00 +0000
ROA not after:            Mon 23 Aug 2027 16:15:00 +0000
asID:                     269795
IP address blocks:        179.60.220.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FFC11D0666EE8615632B0485AF13B704F517650650D14050E586094E0CD40751/0/30ED07863C181BF1D567F4D620AAD22FA5076551.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FFC11D0666EE8615632B0485AF13B704F517650650D14050E586094E0CD40751/0/30ED07863C181BF1D567F4D620AAD22FA5076551.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30ED07863C181BF1D567F4D620AAD22FA5076551.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Sep 2026 03:11:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:f3:de:b2:d7:78:9f:3e:ec:a5:75:ff:93:07:b7:1e:44:65:cc:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30ED07863C181BF1D567F4D620AAD22FA5076551
        Validity
            Not Before: Aug 24 16:10:00 2026 GMT
            Not After : Aug 23 16:15:00 2027 GMT
        Subject: CN=F7E23AE4042196C7FE74EE312357CF3F7F8C132E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:05:37:5f:23:e0:c6:d0:eb:77:66:25:b3:e4:
                    36:ad:ae:c3:ef:9c:4b:62:0d:c8:76:2a:ed:f1:45:
                    c0:ae:6a:00:cc:55:a6:57:e3:1b:1c:b3:34:45:f8:
                    47:f9:5c:6b:d7:6d:2c:e1:41:fc:39:af:27:05:82:
                    4a:6b:46:09:b1:83:6b:12:60:11:b4:70:a4:c4:b1:
                    28:7c:39:75:46:a1:3a:a8:82:1a:0b:2f:49:ee:d8:
                    44:5f:e9:14:f6:e2:7a:96:77:21:e0:e8:b5:07:5f:
                    c5:e3:36:f4:e3:1a:93:65:2c:b7:5c:b5:5e:ab:54:
                    b9:8c:06:bb:b5:e6:b8:c5:0a:61:b3:4c:e6:62:bd:
                    66:87:5a:9a:0c:dc:37:ab:a8:75:fd:a9:f5:ea:02:
                    07:26:32:1c:3c:f5:62:dd:da:1b:7c:c0:d8:92:db:
                    5e:c9:54:c0:b1:46:af:8b:97:2c:f1:63:95:ef:b4:
                    8b:b3:16:5c:ee:d8:62:b6:90:1a:05:2e:6a:d4:1f:
                    5b:0e:1f:b4:82:0c:74:64:2b:f3:fa:06:83:d7:22:
                    aa:8d:83:9a:76:23:a2:7a:6c:79:21:e7:5f:72:0e:
                    71:72:ab:c1:a2:33:eb:f0:3e:51:c3:cc:3a:47:4b:
                    89:46:de:b2:be:ac:83:95:3f:10:2a:e3:84:0e:70:
                    f1:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:E2:3A:E4:04:21:96:C7:FE:74:EE:31:23:57:CF:3F:7F:8C:13:2E
            X509v3 Authority Key Identifier:
                keyid:30:ED:07:86:3C:18:1B:F1:D5:67:F4:D6:20:AA:D2:2F:A5:07:65:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FFC11D0666EE8615632B0485AF13B704F517650650D14050E586094E0CD40751/0/30ED07863C181BF1D567F4D620AAD22FA5076551.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30ED07863C181BF1D567F4D620AAD22FA5076551.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FFC11D0666EE8615632B0485AF13B704F517650650D14050E586094E0CD40751/0/3137392e36302e3232302e302f32322d3234203d3e20323639373935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:83:cd:68:65:67:2b:a4:81:17:c5:89:09:5c:69:44:7f:dc:
         b3:53:43:57:cb:7b:83:2e:4f:68:3d:22:92:4f:47:ec:01:4b:
         ad:95:27:0f:d4:99:1d:7d:96:28:b3:3a:ac:33:97:99:c9:7e:
         11:89:d0:05:22:47:4e:3c:96:fd:a2:90:20:75:a6:92:eb:b0:
         f2:ea:bb:a7:ab:a0:dc:cf:9a:26:9b:1f:bd:0f:39:82:8e:cb:
         f1:1a:b6:e6:6e:ec:6f:e3:2c:26:73:fc:33:4b:7a:3f:c0:f5:
         48:04:5e:5e:3e:aa:0e:09:7a:c1:a6:59:f9:4b:a2:c6:b0:d2:
         19:d1:23:06:36:ee:98:2e:28:e1:86:d4:11:1d:a1:24:28:c6:
         2f:92:f4:87:cc:ae:8e:a9:29:81:d5:46:3f:c7:7a:e5:19:7a:
         62:e5:fb:c0:1a:e8:40:bc:a5:b8:5e:90:e5:5e:32:10:5d:a6:
         04:bb:8d:2b:e2:93:d4:17:76:8c:ee:8f:06:6a:2c:a6:80:83:
         32:0b:71:a5:8b:a1:f0:17:41:2e:af:0f:e8:d1:0d:01:43:5a:
         69:cd:ac:a0:ad:be:8a:c1:cd:56:38:ee:c3:60:6e:da:35:78:
         8e:33:46:97:10:40:09:80:fa:41:ea:a5:25:6b:1c:f6:ee:88:
         b5:28:dd:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 03:26:52 2026 by rpki-client