Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/2E5C475E9D16D1A38449B99D75EEA096F5AF7158A4E6B273E485D6DC957BDFD2/0/3137392e34322e37372e302f32342d3234203d3e20323734313731.roa
File:                     3137392e34322e37372e302f32342d3234203d3e20323734313731.roa (raw, json)
Hash identifier:          1ifAXGz7th3Xm6aY9ASGjfVeO+t4nLj0/WRBNVmLwro=
Subject key identifier:   6F:07:5B:EF:AB:07:41:56:5A:42:10:4C:23:2E:26:6B:04:6C:99:ED
Certificate issuer:       /CN=CE01D4BCB10FB13F148DD75C0851F408D98BF9A4
Certificate serial:       5E0F2A41A6062C012CB27D694C6D0BA48A605082
Authority key identifier: CE:01:D4:BC:B1:0F:B1:3F:14:8D:D7:5C:08:51:F4:08:D9:8B:F9:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CE01D4BCB10FB13F148DD75C0851F408D98BF9A4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2E5C475E9D16D1A38449B99D75EEA096F5AF7158A4E6B273E485D6DC957BDFD2/0/3137392e34322e37372e302f32342d3234203d3e20323734313731.roa
Signing time:             Tue 04 Aug 2026 13:19:53 +0000
ROA not before:           Tue 04 Aug 2026 13:14:53 +0000
ROA not after:            Tue 03 Aug 2027 13:19:53 +0000
asID:                     274171
IP address blocks:        179.42.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2E5C475E9D16D1A38449B99D75EEA096F5AF7158A4E6B273E485D6DC957BDFD2/0/CE01D4BCB10FB13F148DD75C0851F408D98BF9A4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2E5C475E9D16D1A38449B99D75EEA096F5AF7158A4E6B273E485D6DC957BDFD2/0/CE01D4BCB10FB13F148DD75C0851F408D98BF9A4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CE01D4BCB10FB13F148DD75C0851F408D98BF9A4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 15 Sep 2026 07:33:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:0f:2a:41:a6:06:2c:01:2c:b2:7d:69:4c:6d:0b:a4:8a:60:50:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE01D4BCB10FB13F148DD75C0851F408D98BF9A4
        Validity
            Not Before: Aug  4 13:14:53 2026 GMT
            Not After : Aug  3 13:19:53 2027 GMT
        Subject: CN=6F075BEFAB0741565A42104C232E266B046C99ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ca:8a:73:62:10:85:d5:f5:2a:c7:5a:c5:c2:
                    1e:d1:7c:18:96:86:5c:84:e5:b8:b7:00:0c:00:b3:
                    32:65:59:dd:5c:0c:51:8d:e7:fb:8e:78:fd:aa:f9:
                    a1:b2:a1:d3:35:27:5a:7a:2b:4f:f4:81:1a:94:6f:
                    c8:25:94:76:6b:24:69:55:48:95:9d:39:63:e7:46:
                    c2:db:5c:a1:d2:dd:36:03:21:4f:a9:20:fd:4f:c9:
                    16:d3:dd:cd:09:12:1f:0a:ae:92:ff:de:ba:78:a5:
                    ac:26:80:8d:0d:c6:3e:9e:3d:17:f9:66:b5:82:ed:
                    75:8b:1c:18:e0:85:bd:e3:ac:af:cb:af:80:e7:1a:
                    7a:f0:b1:ba:bc:c3:e7:c5:96:1d:58:00:aa:5c:06:
                    2a:fa:dd:23:fa:61:a0:1b:bb:d0:24:79:91:ba:78:
                    f6:c6:d6:0d:28:11:e7:0c:11:40:e5:af:3a:69:00:
                    c1:16:fa:f3:3b:42:19:7a:6a:c6:89:9d:ff:e6:2c:
                    ec:df:b3:0c:62:08:f7:6b:84:5b:ac:41:3f:3d:47:
                    a2:cc:88:e9:3e:f2:8f:2a:4d:ab:ef:97:b7:6b:ad:
                    ba:63:ad:5d:bc:b2:2e:42:6b:a8:f3:94:1f:93:80:
                    fb:f1:6e:ca:cf:fd:11:ba:a4:1b:6e:03:49:7f:f4:
                    d4:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:07:5B:EF:AB:07:41:56:5A:42:10:4C:23:2E:26:6B:04:6C:99:ED
            X509v3 Authority Key Identifier:
                keyid:CE:01:D4:BC:B1:0F:B1:3F:14:8D:D7:5C:08:51:F4:08:D9:8B:F9:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2E5C475E9D16D1A38449B99D75EEA096F5AF7158A4E6B273E485D6DC957BDFD2/0/CE01D4BCB10FB13F148DD75C0851F408D98BF9A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CE01D4BCB10FB13F148DD75C0851F408D98BF9A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2E5C475E9D16D1A38449B99D75EEA096F5AF7158A4E6B273E485D6DC957BDFD2/0/3137392e34322e37372e302f32342d3234203d3e20323734313731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:fe:6b:53:78:18:59:c0:65:77:cd:8b:31:d9:ce:51:32:92:
         80:cc:27:ac:55:78:01:b2:96:d1:e0:94:a4:01:1e:b4:e6:a2:
         bf:52:f4:ab:44:d2:3f:a3:c3:6a:17:62:cf:cf:2c:83:1c:c5:
         33:d7:c4:c8:cb:ca:59:c3:37:69:e3:2f:20:47:58:79:f3:39:
         3e:d1:88:b0:18:08:1b:83:0b:c7:76:a4:9c:2a:91:b6:2d:61:
         58:62:3d:d3:fa:ea:ec:d8:db:3a:a1:5e:30:02:61:28:6e:48:
         98:53:20:86:22:3e:54:7d:77:26:4f:65:53:5c:f0:34:17:c1:
         6f:12:4b:92:0d:ff:e7:cd:94:92:a0:dc:12:89:eb:00:66:22:
         28:33:20:7d:ea:3e:e1:59:6c:14:00:ba:e2:7d:a5:c7:29:4d:
         2b:25:2b:2c:f4:46:31:ca:29:31:ec:09:b2:2b:73:fa:ec:32:
         fe:8f:a9:be:1f:f4:32:d6:89:b6:45:7e:ea:39:74:13:9c:47:
         7d:27:74:47:35:9b:4c:41:e5:84:2a:bd:2b:1d:27:90:2e:de:
         70:7c:3d:0d:64:80:c8:f5:ea:57:5c:fd:15:fa:ae:e8:41:89:
         a4:41:0b:66:7e:2e:87:3c:75:42:a7:14:8a:6e:d7:d1:6c:6c:
         a1:fb:44:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 08:30:46 2026 by rpki-client