Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/77AAD8D082A0D702C202A20E3A672A6C3C58930727D4CDFB75E56F426D4E9C81/0/3137392e36312e38312e302f32342d3234203d3e20323634363536.roa
File:                     3137392e36312e38312e302f32342d3234203d3e20323634363536.roa (raw, json)
Hash identifier:          aPz6XgJpK0rk38orsqv1cfI8eWO1QuerBetveyDQEl8=
Subject key identifier:   CF:E3:3C:D5:D8:DA:34:95:06:51:AF:DC:E3:4C:FA:76:B2:F2:29:0B
Certificate issuer:       /CN=69301E5BA9EA83E876294721E029DAB25C9B6192
Certificate serial:       559D68F61CD02AC2A4E4B8BC85947E0880404A7B
Authority key identifier: 69:30:1E:5B:A9:EA:83:E8:76:29:47:21:E0:29:DA:B2:5C:9B:61:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69301E5BA9EA83E876294721E029DAB25C9B6192.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/77AAD8D082A0D702C202A20E3A672A6C3C58930727D4CDFB75E56F426D4E9C81/0/3137392e36312e38312e302f32342d3234203d3e20323634363536.roa
Signing time:             Tue 27 Oct 2026 16:43:17 +0000
ROA not before:           Tue 27 Oct 2026 16:38:17 +0000
ROA not after:            Tue 26 Oct 2027 16:43:17 +0000
asID:                     264656
IP address blocks:        179.61.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/77AAD8D082A0D702C202A20E3A672A6C3C58930727D4CDFB75E56F426D4E9C81/0/69301E5BA9EA83E876294721E029DAB25C9B6192.crl
                          rsync://repository.lacnic.net/rpki/lacnic/77AAD8D082A0D702C202A20E3A672A6C3C58930727D4CDFB75E56F426D4E9C81/0/69301E5BA9EA83E876294721E029DAB25C9B6192.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69301E5BA9EA83E876294721E029DAB25C9B6192.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Nov 2026 13:40:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:9d:68:f6:1c:d0:2a:c2:a4:e4:b8:bc:85:94:7e:08:80:40:4a:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69301E5BA9EA83E876294721E029DAB25C9B6192
        Validity
            Not Before: Oct 27 16:38:17 2026 GMT
            Not After : Oct 26 16:43:17 2027 GMT
        Subject: CN=CFE33CD5D8DA34950651AFDCE34CFA76B2F2290B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:46:dc:06:fb:f9:22:47:b4:79:f9:aa:7f:e5:
                    7c:94:e9:9d:ab:7b:29:78:32:6b:8f:69:21:d7:06:
                    a9:fb:a2:b3:88:4d:03:69:06:cb:3c:77:d6:03:78:
                    7b:c9:1e:35:1a:60:f3:47:a7:a1:28:2b:b9:98:90:
                    4d:92:bc:3f:a7:0b:c5:17:d1:da:9f:1e:72:b0:ce:
                    8e:b5:d3:57:29:1d:41:83:1f:a4:5d:3c:06:d5:a1:
                    df:46:2b:64:fa:c9:b0:5e:d2:fc:c9:39:02:34:86:
                    44:0a:9d:03:d7:e8:08:a3:68:96:84:5c:40:a0:7c:
                    a1:83:1f:74:e0:8a:90:aa:02:92:46:38:6c:42:86:
                    2a:ef:91:2d:4c:54:b4:1d:fc:14:ec:5e:2d:20:7f:
                    67:aa:39:ac:a8:5c:b0:d2:ed:00:a7:61:2c:8c:6f:
                    b8:e1:3a:05:67:6e:02:ff:30:5c:a9:30:41:bd:53:
                    09:17:1d:4d:38:9c:04:60:a7:d9:a6:23:d1:a8:22:
                    e5:dc:96:51:9a:25:b1:c6:cb:3f:66:ee:d8:b5:ef:
                    ee:76:79:49:de:85:e7:fc:02:ee:77:34:4f:0f:78:
                    42:f8:90:58:a8:40:03:c7:af:6a:ee:af:0a:b3:3b:
                    2f:4c:e0:a5:25:97:e1:f8:d2:85:6a:18:4d:7f:55:
                    2e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:E3:3C:D5:D8:DA:34:95:06:51:AF:DC:E3:4C:FA:76:B2:F2:29:0B
            X509v3 Authority Key Identifier:
                keyid:69:30:1E:5B:A9:EA:83:E8:76:29:47:21:E0:29:DA:B2:5C:9B:61:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/77AAD8D082A0D702C202A20E3A672A6C3C58930727D4CDFB75E56F426D4E9C81/0/69301E5BA9EA83E876294721E029DAB25C9B6192.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69301E5BA9EA83E876294721E029DAB25C9B6192.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/77AAD8D082A0D702C202A20E3A672A6C3C58930727D4CDFB75E56F426D4E9C81/0/3137392e36312e38312e302f32342d3234203d3e20323634363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:e9:2a:65:d8:37:b7:85:2c:e6:94:60:9e:71:00:16:3f:35:
         bf:92:89:ec:46:6a:bc:3b:53:57:64:7d:2b:be:05:d5:96:5a:
         75:ae:28:53:a0:1d:d8:82:39:51:94:82:35:06:9b:a0:17:af:
         c5:3f:c2:64:88:0f:2f:06:7c:a1:70:e6:38:05:06:09:c0:22:
         a4:f5:62:e6:eb:d7:f2:c3:c2:04:86:10:5a:0a:34:ff:19:c4:
         3a:cc:78:45:34:f2:61:ff:58:00:33:78:c8:64:a6:cc:44:aa:
         f4:02:54:d5:c4:fe:ac:dd:4c:f0:81:a3:86:39:f3:2d:c6:66:
         8d:fb:c1:2f:5f:fd:f3:2d:a1:6c:97:53:2c:23:5e:68:3a:f9:
         c1:8c:9b:70:42:02:f5:79:d9:71:d2:91:c8:fe:c8:1b:56:d6:
         fe:d7:c3:4c:1f:4c:17:e8:04:e6:5b:60:d4:1a:ed:ac:2d:0f:
         a3:56:57:92:c9:10:9f:80:5d:44:78:ec:be:9c:25:a6:be:18:
         b0:d5:8f:e2:21:ca:24:53:4f:32:50:23:a1:69:ba:fa:a1:52:
         ba:33:13:22:40:65:0f:97:0f:95:76:32:e7:19:d9:43:0b:92:
         c5:dc:2f:a6:92:e7:26:1c:74:fe:82:57:ce:e9:d2:f6:1a:17:
         5e:52:de:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 21:25:58 2026 by rpki-client