Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/3137392e302e34332e302f32342d3234203d3e20323731393239.roa
File:                     3137392e302e34332e302f32342d3234203d3e20323731393239.roa (raw, json)
Hash identifier:          YLO5M/co1DwUMyX8cr017PLU09Ds7dkxiD9OcB61qIU=
Subject key identifier:   21:10:D4:7C:3F:52:27:2E:A4:C4:2B:1A:69:D5:88:27:39:D5:49:8B
Certificate issuer:       /CN=906C41A68E3475138AF53A5B55627EDE35432068
Certificate serial:       128E988858A18C7802242CBBB2C60108AD8C62DD
Authority key identifier: 90:6C:41:A6:8E:34:75:13:8A:F5:3A:5B:55:62:7E:DE:35:43:20:68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/906C41A68E3475138AF53A5B55627EDE35432068.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/3137392e302e34332e302f32342d3234203d3e20323731393239.roa
Signing time:             Tue 11 Aug 2026 18:25:05 +0000
ROA not before:           Tue 11 Aug 2026 18:20:05 +0000
ROA not after:            Tue 10 Aug 2027 18:25:05 +0000
asID:                     271929
IP address blocks:        179.0.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/906C41A68E3475138AF53A5B55627EDE35432068.crl
                          rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/906C41A68E3475138AF53A5B55627EDE35432068.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/906C41A68E3475138AF53A5B55627EDE35432068.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Sep 2026 11:29:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:8e:98:88:58:a1:8c:78:02:24:2c:bb:b2:c6:01:08:ad:8c:62:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=906C41A68E3475138AF53A5B55627EDE35432068
        Validity
            Not Before: Aug 11 18:20:05 2026 GMT
            Not After : Aug 10 18:25:05 2027 GMT
        Subject: CN=2110D47C3F52272EA4C42B1A69D5882739D5498B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:df:6e:33:d1:ba:ea:d6:9f:e6:10:da:cf:35:
                    47:61:e2:d2:43:42:d8:64:7e:15:e6:96:12:8e:84:
                    b1:4c:ad:4c:93:0b:f8:eb:1a:48:31:21:8b:42:5a:
                    89:7c:eb:3c:fa:fb:ef:a4:5e:30:e3:20:ae:02:76:
                    fa:7e:aa:7b:04:55:33:21:33:8b:ad:32:27:8c:29:
                    83:33:9d:1a:0b:5c:78:f4:1c:3c:c0:59:98:f0:8f:
                    26:3b:8e:e3:53:a8:f7:5a:ca:f3:39:9b:5f:29:30:
                    25:e7:8e:c4:d6:5f:98:0d:90:c2:35:87:b2:61:f5:
                    09:2c:85:98:71:75:a2:de:df:64:14:08:b6:8d:e4:
                    c9:a9:88:bb:b2:6d:9c:46:21:84:a5:a3:aa:5c:be:
                    15:0d:2d:5d:97:54:52:5c:53:7a:bd:4b:d6:63:c6:
                    ce:27:f7:ab:4a:e7:b8:9b:00:66:df:fb:40:8c:09:
                    7a:04:8b:4a:52:c1:51:cf:f3:1a:69:bc:76:be:82:
                    33:e9:62:1d:95:e3:5b:fb:98:8f:7c:be:35:45:4f:
                    28:92:23:a7:eb:57:c6:1d:c5:70:f4:7c:70:90:f9:
                    f1:00:b2:00:3c:f7:47:8b:85:c3:02:34:b5:1e:73:
                    7e:1f:32:b8:82:0a:64:22:95:b5:3d:c7:b4:69:f8:
                    cc:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:10:D4:7C:3F:52:27:2E:A4:C4:2B:1A:69:D5:88:27:39:D5:49:8B
            X509v3 Authority Key Identifier:
                keyid:90:6C:41:A6:8E:34:75:13:8A:F5:3A:5B:55:62:7E:DE:35:43:20:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/906C41A68E3475138AF53A5B55627EDE35432068.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/906C41A68E3475138AF53A5B55627EDE35432068.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/3137392e302e34332e302f32342d3234203d3e20323731393239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:bf:f3:a4:57:d1:5d:97:5a:63:b7:42:57:65:61:00:b2:f0:
         90:5a:e1:fd:1b:9c:0a:75:cd:18:78:bd:bc:45:80:dc:dc:65:
         5f:12:c9:be:dd:27:ce:15:85:68:97:32:8d:27:ac:62:4c:99:
         a5:12:1c:37:ee:09:18:db:f6:18:12:67:48:ed:23:4a:8d:46:
         38:11:a4:2c:8d:5e:64:84:8a:72:32:01:9b:27:8d:63:9c:b7:
         05:34:9e:1b:d1:44:f9:54:2c:ad:19:67:13:77:d1:46:7f:f4:
         95:f4:45:93:42:29:03:c8:08:d0:3d:fc:ce:9e:64:6c:54:66:
         e2:60:5d:5c:e5:6e:a4:e3:73:66:de:5f:db:f0:50:c3:a6:d8:
         66:3b:e5:c8:bc:d4:41:6a:81:8f:c7:f1:ec:fb:a2:f4:63:cb:
         7b:e6:aa:49:a9:d6:94:c7:69:88:cd:43:ac:a8:5f:20:cb:12:
         e8:99:05:48:41:a7:63:38:08:ca:08:8d:9a:0e:03:28:ab:81:
         56:db:03:90:59:d4:36:5b:65:3e:47:7c:cc:4f:85:e0:4e:8f:
         5f:84:18:57:58:1b:aa:63:09:0b:0f:f0:c9:64:b6:b7:0f:56:
         44:1c:e3:7e:a4:c2:9a:3f:a4:27:68:ae:b7:f0:e6:02:56:3e:
         44:8e:1d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 02:55:08 2026 by rpki-client