Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/69902A30F10F8ADA321C31A3F647B13D510B7FC17870C5F2945606707C4BBE88/0/3137392e36332e3231362e302f32312d3234203d3e203532343638.roa
File:                     3137392e36332e3231362e302f32312d3234203d3e203532343638.roa (raw, json)
Hash identifier:          EL5U9nLz2MylqHXejONDIrmH4GLnAVyPchSH2CPmC3c=
Subject key identifier:   6F:E8:C6:14:45:B9:63:61:B5:61:EF:D2:E8:95:27:9F:F5:C0:3E:3C
Certificate issuer:       /CN=871A5F48AD8A83C183DB3624AEA05825D749DDF7
Certificate serial:       23920565DEA376E0F77F875D5878D7BB2859FFAD
Authority key identifier: 87:1A:5F:48:AD:8A:83:C1:83:DB:36:24:AE:A0:58:25:D7:49:DD:F7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/871A5F48AD8A83C183DB3624AEA05825D749DDF7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/69902A30F10F8ADA321C31A3F647B13D510B7FC17870C5F2945606707C4BBE88/0/3137392e36332e3231362e302f32312d3234203d3e203532343638.roa
Signing time:             Wed 13 May 2026 18:42:21 +0000
ROA not before:           Wed 13 May 2026 18:37:21 +0000
ROA not after:            Wed 12 May 2027 18:42:21 +0000
asID:                     52468
IP address blocks:        179.63.216.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/69902A30F10F8ADA321C31A3F647B13D510B7FC17870C5F2945606707C4BBE88/0/871A5F48AD8A83C183DB3624AEA05825D749DDF7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/69902A30F10F8ADA321C31A3F647B13D510B7FC17870C5F2945606707C4BBE88/0/871A5F48AD8A83C183DB3624AEA05825D749DDF7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/871A5F48AD8A83C183DB3624AEA05825D749DDF7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 May 2026 02:38:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:92:05:65:de:a3:76:e0:f7:7f:87:5d:58:78:d7:bb:28:59:ff:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871A5F48AD8A83C183DB3624AEA05825D749DDF7
        Validity
            Not Before: May 13 18:37:21 2026 GMT
            Not After : May 12 18:42:21 2027 GMT
        Subject: CN=6FE8C61445B96361B561EFD2E895279FF5C03E3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c4:a2:86:c4:e1:8c:14:64:c4:2a:28:25:bd:
                    cf:af:8a:34:c1:da:96:dd:58:bd:1d:07:33:f5:2a:
                    72:72:02:c0:1f:e2:d9:9a:23:ce:f1:4d:dc:eb:58:
                    39:e9:ef:fd:96:b4:55:db:86:fe:34:87:1c:c7:86:
                    4c:f6:7b:b9:2a:1f:ca:a5:32:49:ad:67:a6:84:a4:
                    66:32:37:dd:5e:a7:27:bc:82:62:88:cb:5c:af:ea:
                    8f:9a:8b:d7:a5:ab:4e:16:cf:1e:2d:62:1c:ad:c7:
                    9c:93:a7:d4:38:a7:46:4b:18:70:64:a8:bd:64:50:
                    f1:96:76:c4:47:37:43:75:81:06:f6:c8:b4:b5:d1:
                    74:59:fa:41:a0:38:de:79:af:a4:ab:a3:ee:35:d8:
                    82:56:1a:91:50:2c:65:84:f7:93:28:c3:a8:0c:bf:
                    75:a1:4f:ea:4d:b1:dc:04:c3:7b:cf:51:af:2b:67:
                    cd:81:c4:3b:78:41:8f:59:bc:90:e0:6e:10:fa:66:
                    68:1a:78:0b:27:06:90:7a:a5:19:f8:ef:54:7c:5a:
                    80:0e:8b:84:2c:59:66:d6:28:03:37:ec:ce:2b:c0:
                    80:a1:da:48:4e:1e:7f:b5:20:64:bb:f9:88:91:7c:
                    f5:4a:bd:2d:fa:28:69:67:01:b8:55:83:c1:a5:29:
                    73:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:E8:C6:14:45:B9:63:61:B5:61:EF:D2:E8:95:27:9F:F5:C0:3E:3C
            X509v3 Authority Key Identifier:
                keyid:87:1A:5F:48:AD:8A:83:C1:83:DB:36:24:AE:A0:58:25:D7:49:DD:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/69902A30F10F8ADA321C31A3F647B13D510B7FC17870C5F2945606707C4BBE88/0/871A5F48AD8A83C183DB3624AEA05825D749DDF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/871A5F48AD8A83C183DB3624AEA05825D749DDF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/69902A30F10F8ADA321C31A3F647B13D510B7FC17870C5F2945606707C4BBE88/0/3137392e36332e3231362e302f32312d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4d:77:28:c6:c7:3b:80:e4:9d:2e:39:2c:b0:72:13:4b:18:c3:
         d8:b7:b3:5d:61:56:02:a3:8a:d0:db:75:a7:5c:d8:e0:bc:f0:
         8b:f3:33:e4:49:a6:b9:f9:5c:b7:a5:cc:f9:f8:94:05:7b:0a:
         f2:19:39:e7:b0:bd:69:f2:60:8c:2e:45:0b:a0:7c:22:60:d3:
         1d:ce:7f:ec:ca:37:da:d2:73:35:c9:42:83:fe:61:08:17:85:
         7b:54:e5:6f:af:35:f3:49:c2:c4:0e:85:7a:cb:31:a9:e2:1b:
         0f:fa:c0:46:9e:1b:eb:0e:80:5d:13:bd:ff:30:45:c7:c2:2b:
         db:f2:5d:22:71:00:0a:c4:67:ce:e4:1c:97:f2:61:ea:e6:cb:
         84:81:68:43:5d:8b:e5:8d:f0:86:08:ba:54:24:c7:ee:4a:ff:
         96:e7:eb:22:84:a5:7a:1f:96:19:1c:3b:95:e2:62:92:e0:1d:
         63:9b:a1:49:db:a2:ed:42:1b:d8:14:be:3d:95:d2:26:90:d2:
         a5:71:b1:ff:c0:d7:bc:e0:dc:a3:f6:e2:59:8d:a1:26:5f:67:
         be:e4:9c:82:23:55:a4:75:20:a1:a4:81:52:2d:f7:2b:6c:81:
         a5:bf:42:ee:d8:f8:4a:b1:a8:39:cc:e8:62:61:77:9f:95:94:
         b5:2b:74:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 11:13:59 2026 by rpki-client