Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/77AAD8D082A0D702C202A20E3A672A6C3C58930727D4CDFB75E56F426D4E9C81/0/3137392e36312e38352e302f32342d3234203d3e20323634363536.roa
File:                     3137392e36312e38352e302f32342d3234203d3e20323634363536.roa (raw, json)
Hash identifier:          17IwbXXR5IaAhAsVllI+9DmLpEQ5kwfv6xnYuJ9uK30=
Subject key identifier:   22:04:11:1A:86:2F:8E:C4:ED:C1:D3:77:21:74:D7:AB:AF:CD:36:C5
Certificate issuer:       /CN=69301E5BA9EA83E876294721E029DAB25C9B6192
Certificate serial:       45CAA8189565AA27DF8E534C0C00381B432952F0
Authority key identifier: 69:30:1E:5B:A9:EA:83:E8:76:29:47:21:E0:29:DA:B2:5C:9B:61:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69301E5BA9EA83E876294721E029DAB25C9B6192.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/77AAD8D082A0D702C202A20E3A672A6C3C58930727D4CDFB75E56F426D4E9C81/0/3137392e36312e38352e302f32342d3234203d3e20323634363536.roa
Signing time:             Wed 28 Oct 2026 13:43:20 +0000
ROA not before:           Wed 28 Oct 2026 13:38:20 +0000
ROA not after:            Wed 27 Oct 2027 13:43:20 +0000
asID:                     264656
IP address blocks:        179.61.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/77AAD8D082A0D702C202A20E3A672A6C3C58930727D4CDFB75E56F426D4E9C81/0/69301E5BA9EA83E876294721E029DAB25C9B6192.crl
                          rsync://repository.lacnic.net/rpki/lacnic/77AAD8D082A0D702C202A20E3A672A6C3C58930727D4CDFB75E56F426D4E9C81/0/69301E5BA9EA83E876294721E029DAB25C9B6192.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69301E5BA9EA83E876294721E029DAB25C9B6192.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Nov 2026 18:10:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:ca:a8:18:95:65:aa:27:df:8e:53:4c:0c:00:38:1b:43:29:52:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69301E5BA9EA83E876294721E029DAB25C9B6192
        Validity
            Not Before: Oct 28 13:38:20 2026 GMT
            Not After : Oct 27 13:43:20 2027 GMT
        Subject: CN=2204111A862F8EC4EDC1D3772174D7ABAFCD36C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:24:cf:8c:d7:b9:e8:19:b7:f4:0c:73:4e:e9:
                    bf:48:dd:fa:25:d1:e4:3d:7d:02:19:95:ee:41:23:
                    6c:95:a2:cc:4f:96:fc:aa:1b:28:8a:87:23:cd:c3:
                    be:f6:23:e8:e8:97:77:3f:ad:e8:ca:6e:d6:78:b1:
                    9b:01:b9:4c:6d:85:66:b0:63:0b:d5:bf:11:f3:ca:
                    5c:3d:37:39:d3:57:b7:09:7c:9e:62:e4:ef:d2:60:
                    05:f2:c4:11:99:86:69:41:c8:fe:44:64:b0:36:fd:
                    e5:f1:b9:aa:42:1b:e1:56:a5:83:7f:eb:fa:6c:dd:
                    3d:1a:3b:15:55:a4:da:5e:d3:92:f3:43:20:eb:43:
                    f3:c5:e0:94:49:5d:01:74:8a:2d:14:d6:b7:ed:a0:
                    70:0f:d1:c9:9e:62:fb:5a:c9:57:32:ee:e6:38:bd:
                    9e:3f:f0:7b:5b:a4:33:99:15:93:da:61:5a:ca:c4:
                    8b:a7:35:e2:9c:f1:f7:af:32:b6:cf:9e:6d:fb:ab:
                    ea:7f:ae:3f:c4:03:15:36:60:25:31:a3:3d:44:62:
                    48:87:9a:a8:38:88:dc:66:9d:e5:ed:99:7c:8e:97:
                    9f:28:db:fe:09:13:49:bd:41:cf:fb:5f:5f:28:3a:
                    c6:7a:03:40:b8:87:2d:61:e8:9c:ff:51:fb:b2:1f:
                    a0:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:04:11:1A:86:2F:8E:C4:ED:C1:D3:77:21:74:D7:AB:AF:CD:36:C5
            X509v3 Authority Key Identifier:
                keyid:69:30:1E:5B:A9:EA:83:E8:76:29:47:21:E0:29:DA:B2:5C:9B:61:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/77AAD8D082A0D702C202A20E3A672A6C3C58930727D4CDFB75E56F426D4E9C81/0/69301E5BA9EA83E876294721E029DAB25C9B6192.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69301E5BA9EA83E876294721E029DAB25C9B6192.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/77AAD8D082A0D702C202A20E3A672A6C3C58930727D4CDFB75E56F426D4E9C81/0/3137392e36312e38352e302f32342d3234203d3e20323634363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:21:74:37:9c:f2:a8:0b:7d:61:69:e7:02:24:f3:03:3e:07:
         18:18:5c:ca:a4:c1:9a:5f:0d:0f:51:cf:b1:f2:1a:49:b0:b0:
         8a:9f:e8:1d:44:dc:22:bb:be:04:6c:7e:4d:7d:7c:b2:37:4e:
         ff:c9:32:8b:09:2b:19:57:07:d7:a3:6a:47:4b:26:97:93:81:
         3c:58:72:24:f6:23:91:d8:ea:24:fa:46:01:5a:9a:4b:ae:05:
         d2:f3:54:7e:2c:3c:85:2e:b3:24:b2:ee:a2:66:06:82:3a:12:
         75:92:61:2a:aa:34:a2:ba:44:bf:47:4e:13:4a:92:0f:96:22:
         4d:47:b1:c9:4b:34:d6:0d:c8:d8:51:37:a7:ff:3c:37:83:1d:
         34:9c:2d:d5:87:d4:58:cc:56:b2:0d:0f:b0:a6:cd:f8:ee:c2:
         15:d2:aa:2b:2f:b9:d4:29:69:71:a3:ef:b0:11:06:6e:70:02:
         95:43:ef:9d:ed:0b:d0:6d:f1:5c:b3:51:e5:17:9e:f4:ca:2d:
         46:a2:b5:9b:da:1a:87:33:46:c4:12:0a:a5:72:e5:34:23:06:
         e4:2f:3d:eb:0e:3a:02:a5:bf:9d:a5:48:77:c6:c8:bb:0d:bb:
         2b:81:42:15:9e:3c:81:65:ec:2b:45:8c:a7:a6:be:65:4f:e9:
         07:d4:88:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 15:38:51 2026 by rpki-client