Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS270022.roa
File:                     AS270022.roa (raw, json)
Hash identifier:          BRBJraveaSsjbtZoExm57BVSOJ0p/ivSpP1E4kIBcMg=
Subject key identifier:   5B:06:B4:30:3D:DF:10:80:B8:B8:3F:BE:DD:E5:74:7C:FC:35:0B:85
Certificate issuer:       /CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
Certificate serial:       2F70DCEBBB603D5DB607649EBDC211DB22123542
Authority key identifier: 41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS270022.roa
Signing time:             Mon 03 Aug 2026 15:19:38 +0000
ROA not before:           Mon 03 Aug 2026 15:14:38 +0000
ROA not after:            Mon 02 Aug 2027 15:19:38 +0000
asID:                     270022
IP address blocks:        179.40.109.0/24 maxlen: 24
                          186.38.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 08 Aug 2026 19:58:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:70:dc:eb:bb:60:3d:5d:b6:07:64:9e:bd:c2:11:db:22:12:35:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
        Validity
            Not Before: Aug  3 15:14:38 2026 GMT
            Not After : Aug  2 15:19:38 2027 GMT
        Subject: CN=5B06B4303DDF1080B8B83FBEDDE5747CFC350B85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d3:cf:b6:0c:76:a0:90:92:e2:d9:99:bd:f7:
                    c7:23:64:8b:44:85:98:2a:ab:1a:be:e2:d5:a6:56:
                    54:23:05:08:2e:25:ad:04:47:cb:5a:37:a8:9d:7d:
                    87:ee:26:e3:d8:52:df:82:65:7a:bb:a9:70:b8:97:
                    72:ca:69:81:43:7a:d5:ee:e6:f7:45:43:7e:f4:e1:
                    6a:aa:66:ba:8c:80:63:c5:f8:b2:5f:73:9c:6c:44:
                    26:4f:f5:2d:ae:05:0e:81:14:74:02:3a:46:ea:3f:
                    5e:66:33:a4:1a:aa:31:e9:f7:82:6e:13:59:96:81:
                    63:2a:6f:ad:30:54:e1:89:ce:4f:08:95:64:59:df:
                    a5:b7:a9:50:58:33:26:f2:f7:47:61:57:ac:ca:36:
                    c4:ff:cb:fd:b2:37:21:04:f3:1e:fe:16:66:67:f3:
                    a7:0f:44:b4:3e:9c:37:e3:52:f9:4c:75:f9:57:35:
                    57:23:34:43:e2:53:dd:b5:92:10:ff:31:d8:f5:f7:
                    31:03:04:99:eb:ac:78:bf:9b:08:da:99:0b:de:99:
                    76:23:27:46:f7:f2:62:76:55:7e:c3:27:5e:07:92:
                    5e:3a:27:20:8b:18:75:65:f1:3e:9b:1e:98:43:fc:
                    0a:f6:50:fa:f4:3c:dd:15:8d:00:bd:06:85:ec:4b:
                    93:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:06:B4:30:3D:DF:10:80:B8:B8:3F:BE:DD:E5:74:7C:FC:35:0B:85
            X509v3 Authority Key Identifier:
                keyid:41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS270022.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.40.109.0/24
                  186.38.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:78:5d:6e:59:43:b0:df:a5:27:16:76:ca:67:95:d1:5f:27:
         9e:09:bb:27:4e:4d:44:f8:4a:7e:93:5b:48:ea:85:25:d2:e2:
         fb:0d:84:8e:fe:69:e9:e6:0e:df:3c:e9:72:fb:cd:8c:ab:f0:
         6b:26:69:11:b5:4d:f9:fd:e7:4b:57:01:78:e4:39:85:94:93:
         5a:69:9d:f4:a0:da:96:db:ec:6a:a0:f8:36:34:b4:14:3f:76:
         89:87:6b:b4:20:6c:b5:97:8b:3e:1d:a2:ed:64:b7:4c:4e:43:
         77:8e:a6:46:5b:09:61:41:44:fc:e2:56:0c:1d:bf:8e:e2:8e:
         85:db:ac:0f:d5:fe:5e:f8:e8:2c:15:ec:b1:72:fc:89:4c:c2:
         0b:49:8e:d4:7c:79:3d:f3:b4:fb:c2:e9:08:7b:49:03:2a:13:
         e7:a5:d0:d1:3a:f7:c6:90:56:d0:6b:00:21:e6:2e:f4:db:8b:
         e8:f9:e9:3d:2c:83:8f:6c:f7:66:f9:d9:2a:92:8c:03:32:82:
         ff:9c:c3:c3:34:42:78:13:c3:d5:ae:17:79:0d:67:f6:6f:66:
         ea:b8:91:b6:ec:92:61:95:32:4f:f3:8f:20:31:a3:a9:a7:31:
         33:76:c0:7c:53:f2:10:67:83:b3:fd:a5:1b:e1:b9:24:6f:ce:
         b7:5b:e6:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 21:38:54 2026 by rpki-client