Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3137392e312e3132312e36342f32392d3239203d3e20323734303039.roa
File:                     3137392e312e3132312e36342f32392d3239203d3e20323734303039.roa (raw, json)
Hash identifier:          VoEkY7zq2LfZcqFpeCEBYfhLjLfXNWud22naH3qqc6w=
Subject key identifier:   AD:67:95:BF:92:8B:6B:B7:43:E0:3F:AB:D2:50:91:74:BF:F2:CC:20
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       726561DF89903B526AAEF8B54846F90711E3A12D
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3137392e312e3132312e36342f32392d3239203d3e20323734303039.roa
Signing time:             Sat 18 Apr 2026 01:15:00 +0000
ROA not before:           Sat 18 Apr 2026 01:10:00 +0000
ROA not after:            Sat 17 Apr 2027 01:15:00 +0000
asID:                     274009
IP address blocks:        179.1.121.64/29 maxlen: 29
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 26 Apr 2026 18:48:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:65:61:df:89:90:3b:52:6a:ae:f8:b5:48:46:f9:07:11:e3:a1:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Apr 18 01:10:00 2026 GMT
            Not After : Apr 17 01:15:00 2027 GMT
        Subject: CN=AD6795BF928B6BB743E03FABD2509174BFF2CC20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:05:c0:19:8f:a8:55:28:b0:74:4d:85:b5:fc:
                    c3:a5:a5:3b:cc:f6:96:71:c1:a5:d6:d6:b2:30:0c:
                    93:e8:14:a3:fd:76:4b:25:3e:a0:c6:2b:1a:84:43:
                    bc:1e:95:88:60:31:c3:1e:5b:2e:c9:85:06:0d:0a:
                    cd:72:22:c9:2f:2a:69:a7:e0:c8:8d:39:1d:ab:f1:
                    82:08:42:67:7d:b2:6a:09:73:c0:f5:a7:7e:45:dd:
                    c8:b2:b7:48:1d:e1:7e:46:e8:c1:93:3a:95:31:90:
                    e6:68:28:be:5e:d5:6f:5a:68:bc:4b:95:d8:0b:36:
                    07:dc:cd:af:c6:35:72:25:22:04:b9:12:06:c9:ed:
                    49:d1:3e:61:e6:35:c2:b5:fc:8a:cd:48:6e:84:26:
                    ee:ab:f0:52:73:6b:fb:30:a0:2f:69:5a:76:be:ff:
                    38:d9:b7:17:89:5b:0c:07:ea:33:01:48:0e:43:67:
                    be:ff:4d:17:de:8b:d3:ed:b5:98:7d:37:c6:b6:ab:
                    ac:8e:fc:78:0f:7d:67:65:cd:8f:b0:1a:af:35:98:
                    8e:e4:8a:c9:12:78:0b:72:52:93:3b:55:ae:18:74:
                    9a:7c:68:54:0a:d0:a3:ac:52:cb:a6:f6:9c:58:12:
                    51:f8:80:38:4c:68:a3:16:db:4b:ba:34:d6:52:4a:
                    fd:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:67:95:BF:92:8B:6B:B7:43:E0:3F:AB:D2:50:91:74:BF:F2:CC:20
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3137392e312e3132312e36342f32392d3239203d3e20323734303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.1.121.64/29

    Signature Algorithm: sha256WithRSAEncryption
         46:ac:a5:5f:26:10:0c:66:13:3c:1d:cf:e1:ca:d7:d0:dd:66:
         d1:bc:b9:fc:6d:88:27:4c:e1:a2:19:a4:a8:cc:90:5f:fd:c4:
         63:e8:48:0f:95:fd:14:22:c0:bc:e1:11:44:af:f7:95:8c:af:
         37:04:c4:6c:38:0b:76:46:26:ff:5a:52:a0:12:9b:09:99:08:
         a1:57:6d:2d:fb:09:34:ec:c1:97:72:84:e4:37:72:b5:0d:44:
         5b:c4:05:9b:25:cc:ef:57:3f:65:83:4d:08:f4:c7:c9:fe:e4:
         71:b0:83:65:e1:3e:07:ba:81:9c:e2:96:a3:9d:07:ca:c3:ac:
         0c:7d:8d:98:8e:29:df:65:24:fd:f5:47:bb:29:a7:4a:be:52:
         99:29:ae:9d:3d:8b:2b:ed:fe:4e:35:0e:e5:9e:8e:74:b5:4b:
         d8:4d:00:ed:27:4f:c0:bf:d0:0e:44:2f:ce:47:a2:a9:2b:98:
         0f:99:d4:76:fa:de:e0:a4:fc:a2:b0:7e:40:74:b5:99:d4:c4:
         10:9a:ed:fe:f2:d1:92:5a:03:76:13:be:26:8e:fc:0b:14:d2:
         b2:e7:0b:d3:81:b4:c0:90:c0:7b:34:d8:08:ca:9b:53:c0:43:
         67:61:34:39:29:47:ba:0d:db:3e:ea:cf:f4:96:f7:4e:5f:03:
         3b:c2:0c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 12:31:22 2026 by rpki-client