Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/77AAD8D082A0D702C202A20E3A672A6C3C58930727D4CDFB75E56F426D4E9C81/0/3137392e36312e38322e302f32342d3234203d3e20323634363536.roa
File:                     3137392e36312e38322e302f32342d3234203d3e20323634363536.roa (raw, json)
Hash identifier:          pOo3VckeZmm54Xe7XBJwM3pk1rum47sTRD2YGtFXnZg=
Subject key identifier:   1F:3F:56:FF:C2:9F:30:1E:BC:61:82:F7:A9:A2:C3:20:38:DE:FB:8F
Certificate issuer:       /CN=69301E5BA9EA83E876294721E029DAB25C9B6192
Certificate serial:       2CFF2524815D5E3145CAC4EC0BF792291E431986
Authority key identifier: 69:30:1E:5B:A9:EA:83:E8:76:29:47:21:E0:29:DA:B2:5C:9B:61:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69301E5BA9EA83E876294721E029DAB25C9B6192.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/77AAD8D082A0D702C202A20E3A672A6C3C58930727D4CDFB75E56F426D4E9C81/0/3137392e36312e38322e302f32342d3234203d3e20323634363536.roa
Signing time:             Wed 28 Oct 2026 13:43:19 +0000
ROA not before:           Wed 28 Oct 2026 13:38:19 +0000
ROA not after:            Wed 27 Oct 2027 13:43:19 +0000
asID:                     264656
IP address blocks:        179.61.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/77AAD8D082A0D702C202A20E3A672A6C3C58930727D4CDFB75E56F426D4E9C81/0/69301E5BA9EA83E876294721E029DAB25C9B6192.crl
                          rsync://repository.lacnic.net/rpki/lacnic/77AAD8D082A0D702C202A20E3A672A6C3C58930727D4CDFB75E56F426D4E9C81/0/69301E5BA9EA83E876294721E029DAB25C9B6192.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69301E5BA9EA83E876294721E029DAB25C9B6192.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 15:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:ff:25:24:81:5d:5e:31:45:ca:c4:ec:0b:f7:92:29:1e:43:19:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69301E5BA9EA83E876294721E029DAB25C9B6192
        Validity
            Not Before: Oct 28 13:38:19 2026 GMT
            Not After : Oct 27 13:43:19 2027 GMT
        Subject: CN=1F3F56FFC29F301EBC6182F7A9A2C32038DEFB8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d2:e3:b3:d7:b2:36:1b:35:24:46:1b:7b:d8:
                    e2:8c:05:62:36:8b:72:9c:5c:d5:ac:87:9d:a6:49:
                    5e:2f:f5:1e:eb:97:0f:82:00:8f:e7:be:de:e1:60:
                    dd:23:2d:be:e8:af:fe:81:71:0f:16:84:d1:54:41:
                    14:76:82:d6:1d:03:30:e5:a7:0f:ac:37:ab:5b:e3:
                    61:4c:23:5e:f7:e1:96:4f:b4:66:4a:33:5c:05:f6:
                    e9:d1:20:ed:8c:23:7b:e7:a8:3b:55:e8:5f:91:cd:
                    4b:44:69:a3:bf:a9:a2:90:d4:f4:85:26:00:d4:86:
                    51:cd:e9:90:9a:55:2e:ed:e3:44:51:b2:25:99:27:
                    d0:c4:76:2f:1d:84:c5:1c:07:33:d1:92:9a:b0:b3:
                    97:bb:54:51:8d:35:93:6b:01:ca:96:8e:00:4a:0f:
                    2e:c0:1d:40:cd:fd:37:91:50:a3:00:66:fe:5e:20:
                    9f:b7:38:9c:4f:6e:9a:be:33:fe:1b:bb:79:83:5f:
                    6d:2b:ab:0e:6c:62:1f:73:14:f6:72:cc:d7:a3:ea:
                    f9:65:1b:cd:06:9d:e9:2b:ee:7c:c5:f3:58:78:96:
                    d5:85:9a:b9:06:88:20:2f:ac:6d:05:73:00:46:2a:
                    69:9c:82:86:01:d9:22:69:6a:7b:d8:e8:65:ee:43:
                    16:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:3F:56:FF:C2:9F:30:1E:BC:61:82:F7:A9:A2:C3:20:38:DE:FB:8F
            X509v3 Authority Key Identifier:
                keyid:69:30:1E:5B:A9:EA:83:E8:76:29:47:21:E0:29:DA:B2:5C:9B:61:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/77AAD8D082A0D702C202A20E3A672A6C3C58930727D4CDFB75E56F426D4E9C81/0/69301E5BA9EA83E876294721E029DAB25C9B6192.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69301E5BA9EA83E876294721E029DAB25C9B6192.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/77AAD8D082A0D702C202A20E3A672A6C3C58930727D4CDFB75E56F426D4E9C81/0/3137392e36312e38322e302f32342d3234203d3e20323634363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d5:70:e0:56:cf:da:86:b6:52:6f:53:5e:1c:d8:c3:9c:11:9a:
         09:74:bf:a2:4e:0a:b5:0a:35:32:19:50:56:73:8a:ae:59:cd:
         17:18:35:00:c4:6f:7f:7f:41:fc:d3:ce:ea:56:89:ae:82:28:
         f2:5e:89:b4:ca:8c:3b:89:f3:09:4a:c1:6d:5b:18:61:83:fe:
         e5:9f:bd:bc:7c:84:34:d4:20:c3:3e:29:6d:41:9d:66:16:96:
         68:dd:be:4e:0b:d9:c2:cb:0e:c8:50:cf:5b:87:bf:cb:06:c1:
         42:23:e0:a4:2c:e4:56:de:93:18:4e:a9:29:24:4c:d7:67:8a:
         34:22:9f:a1:ba:f9:47:8b:4b:79:f3:58:f2:55:84:47:c8:0f:
         af:c7:e3:0c:71:46:3f:89:e4:51:5a:fe:d2:f6:4f:9a:4d:85:
         7a:5a:c9:dd:d0:9f:7d:9a:63:c4:ae:07:d3:ce:a3:2b:7e:a5:
         ea:fc:ef:77:e7:a6:52:77:b2:2c:c4:9e:a6:ee:b9:fc:07:09:
         a7:47:ef:ae:ae:5e:12:22:47:11:e2:77:20:47:2e:12:92:c5:
         6d:e1:3e:ca:49:e4:66:16:75:4e:cb:32:c6:89:47:8d:ac:20:
         6a:0c:3f:a6:b5:5b:e4:be:97:f0:e1:cd:e8:28:83:5b:57:c7:
         a5:3c:78:2b
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIULP8lJIFdXjFFysTsC/eSKR5DGYYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjkzMDFFNUJBOUVBODNFODc2Mjk0NzIxRTAyOURBQjI1
QzlCNjE5MjAeFw0yNjEwMjgxMzM4MTlaFw0yNzEwMjcxMzQzMTlaMDMxMTAvBgNV
BAMTKDFGM0Y1NkZGQzI5RjMwMUVCQzYxODJGN0E5QTJDMzIwMzhERUZCOEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH0uOz17I2GzUkRht72OKMBWI2
i3KcXNWsh52mSV4v9R7rlw+CAI/nvt7hYN0jLb7or/6BcQ8WhNFUQRR2gtYdAzDl
pw+sN6tb42FMI1734ZZPtGZKM1wF9unRIO2MI3vnqDtV6F+RzUtEaaO/qaKQ1PSF
JgDUhlHN6ZCaVS7t40RRsiWZJ9DEdi8dhMUcBzPRkpqws5e7VFGNNZNrAcqWjgBK
Dy7AHUDN/TeRUKMAZv5eIJ+3OJxPbpq+M/4bu3mDX20rqw5sYh9zFPZyzNej6vll
G80Gnekr7nzF81h4ltWFmrkGiCAvrG0FcwBGKmmcgoYB2SJpanvY6GXuQxY5AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUHz9W/8KfMB68YYL3qaLDIDje+48wHwYDVR0j
BBgwFoAUaTAeW6nqg+h2KUch4CnaslybYZIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83N0FBRDhEMDgyQTBENzAyQzIwMkEyMEUzQTY3MkE2QzND
NTg5MzA3MjdENENERkI3NUU1NkY0MjZENEU5QzgxLzAvNjkzMDFFNUJBOUVBODNF
ODc2Mjk0NzIxRTAyOURBQjI1QzlCNjE5Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82OTMwMUU1QkE5RUE4M0U4NzYy
OTQ3MjFFMDI5REFCMjVDOUI2MTkyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzdBQUQ4RDA4MkEwRDcwMkMyMDJBMjBFM0E2NzJBNkMzQzU4OTMwNzI3
RDRDREZCNzVFNTZGNDI2RDRFOUM4MS8wLzMxMzczOTJlMzYzMTJlMzgzMjJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzNDM2MzUzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALM9UjAN
BgkqhkiG9w0BAQsFAAOCAQEA1XDgVs/ahrZSb1NeHNjDnBGaCXS/ok4KtQo1MhlQ
VnOKrlnNFxg1AMRvf39B/NPO6laJroIo8l6JtMqMO4nzCUrBbVsYYYP+5Z+9vHyE
NNQgwz4pbUGdZhaWaN2+TgvZwssOyFDPW4e/ywbBQiPgpCzkVt6TGE6pKSRM12eK
NCKfobr5R4tLefNY8lWER8gPr8fjDHFGP4nkUVr+0vZPmk2FelrJ3dCffZpjxK4H
086jK36l6vzvd+emUneyLMSepu65/AcJp0fvrq5eEiJHEeJ3IEcuEpLFbeE+yknk
ZhZ1TssyxolHjawgagw/prVb5L6X8OHN6CiDW1fHpTx4Kw==
-----END CERTIFICATE-----
Generated at Thu Oct 29 14:13:54 2026 by rpki-client