Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS4967.roa
File:                     AS4967.roa (raw, json)
Hash identifier:          3LVvY+GPfqX2L+5VhmU4Gfl4cBT6TyB1GndQNWYE+V0=
Subject key identifier:   89:44:91:F7:79:EA:80:73:E2:66:85:D5:26:90:1F:82:DE:EB:99:DC
Certificate issuer:       /CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
Certificate serial:       03278D17BDA7A2A9B95F0FBBC5E4BB947157B75D
Authority key identifier: 41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS4967.roa
Signing time:             Thu 29 Oct 2026 19:35:00 +0000
ROA not before:           Thu 29 Oct 2026 19:30:00 +0000
ROA not after:            Thu 28 Oct 2027 19:35:00 +0000
asID:                     4967
IP address blocks:        179.38.0.0/17 maxlen: 24
                          186.132.0.0/14 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Nov 2026 20:48:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:27:8d:17:bd:a7:a2:a9:b9:5f:0f:bb:c5:e4:bb:94:71:57:b7:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
        Validity
            Not Before: Oct 29 19:30:00 2026 GMT
            Not After : Oct 28 19:35:00 2027 GMT
        Subject: CN=894491F779EA8073E26685D526901F82DEEB99DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:7a:48:6b:4f:c3:6d:59:c1:de:29:03:2b:ad:
                    26:dd:fd:22:84:24:96:3b:25:f3:c2:83:4b:18:8a:
                    fc:2f:1e:ae:c1:e8:e4:42:3c:97:5c:3d:7f:87:0a:
                    d3:da:ef:0c:08:ed:bc:3e:24:ee:2b:34:df:35:c3:
                    34:f6:1f:8f:4b:bd:73:94:f2:50:b9:ab:71:b0:c1:
                    aa:fc:c4:f4:bd:6b:2e:3d:c6:12:06:88:97:ec:fb:
                    fe:01:8a:ce:2f:9c:cd:bf:44:4f:bc:d1:3f:4b:eb:
                    61:7b:71:9c:9f:9f:b3:13:ca:1d:ca:d6:02:d2:9b:
                    1f:08:92:5d:b7:57:8a:97:db:a4:ea:59:a6:8d:77:
                    49:de:c8:76:89:da:5b:9d:04:cc:cc:94:5f:5a:af:
                    65:57:15:80:7a:c2:88:41:96:04:7c:c2:c8:ed:ae:
                    e6:c4:30:71:e4:58:05:7c:ba:b7:8c:8a:40:08:67:
                    de:7b:ca:a4:3f:54:06:c8:bc:ad:4f:89:a3:52:31:
                    dc:cf:dd:cd:bb:53:bf:a6:8e:f9:fb:7c:3f:0a:11:
                    a1:74:66:0d:6c:1f:9c:89:c7:e2:c9:e1:53:91:f5:
                    47:90:45:93:69:e3:8c:29:13:83:4b:f9:8b:d6:78:
                    21:53:06:fb:69:30:3a:2d:bf:23:b2:73:02:fb:4f:
                    5e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:44:91:F7:79:EA:80:73:E2:66:85:D5:26:90:1F:82:DE:EB:99:DC
            X509v3 Authority Key Identifier:
                keyid:41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS4967.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.38.0.0/17
                  186.132.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         b0:7b:4e:57:51:b3:0d:d7:cf:03:6f:9e:f3:f7:0d:01:98:00:
         0a:21:b9:6f:69:a9:26:e9:cb:0d:1d:9e:d3:f7:57:02:8b:99:
         39:8f:ba:53:0b:c5:48:32:73:cc:0b:0f:54:eb:06:82:ad:39:
         ac:91:08:76:9b:b1:07:0d:39:32:d6:a0:43:37:26:16:4a:c6:
         4a:1e:4a:3a:d5:7c:12:dd:e2:1c:c6:3c:77:1e:28:94:a0:8c:
         82:86:e8:39:2a:79:db:85:2b:a5:ae:2d:cc:15:25:cd:01:7e:
         06:87:69:05:62:81:93:b5:52:67:24:54:f8:40:11:48:98:aa:
         de:26:a2:80:05:fd:22:b8:0b:b9:83:aa:13:26:d3:97:b9:89:
         3c:32:da:b7:f3:26:30:e8:28:26:0d:7b:1f:09:3c:76:d3:00:
         0b:50:ae:f4:21:79:98:47:f8:c7:1a:b4:39:56:00:1a:c5:0d:
         4b:f7:d7:8a:98:d4:f4:e6:08:fb:83:45:88:ee:3a:e4:8c:84:
         d5:aa:1e:a1:85:1a:a0:cb:eb:ab:a2:1f:1c:d5:51:70:24:0f:
         87:c8:f0:d6:74:b7:3b:fe:05:dc:25:08:7c:55:74:a6:df:1d:
         52:6a:af:1c:e2:88:2c:1f:64:95:12:1c:b0:86:87:3d:1e:fc:
         82:ff:9d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 07:50:56 2026 by rpki-client