Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/77AAD8D082A0D702C202A20E3A672A6C3C58930727D4CDFB75E56F426D4E9C81/0/3137392e36312e39322e302f32342d3234203d3e20323634363536.roa
File:                     3137392e36312e39322e302f32342d3234203d3e20323634363536.roa (raw, json)
Hash identifier:          Lj0xtskCuD3Yvj1dehI6JxkzijHnFpxwSxyRP/BTLns=
Subject key identifier:   F3:30:46:87:23:C7:5B:A1:D7:CD:57:3C:78:8C:B9:04:3E:1C:F4:FC
Certificate issuer:       /CN=69301E5BA9EA83E876294721E029DAB25C9B6192
Certificate serial:       2F3D27AFDC6222BC3D36F942F35345DB9575F971
Authority key identifier: 69:30:1E:5B:A9:EA:83:E8:76:29:47:21:E0:29:DA:B2:5C:9B:61:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69301E5BA9EA83E876294721E029DAB25C9B6192.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/77AAD8D082A0D702C202A20E3A672A6C3C58930727D4CDFB75E56F426D4E9C81/0/3137392e36312e39322e302f32342d3234203d3e20323634363536.roa
Signing time:             Wed 28 Oct 2026 13:43:18 +0000
ROA not before:           Wed 28 Oct 2026 13:38:18 +0000
ROA not after:            Wed 27 Oct 2027 13:43:18 +0000
asID:                     264656
IP address blocks:        179.61.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/77AAD8D082A0D702C202A20E3A672A6C3C58930727D4CDFB75E56F426D4E9C81/0/69301E5BA9EA83E876294721E029DAB25C9B6192.crl
                          rsync://repository.lacnic.net/rpki/lacnic/77AAD8D082A0D702C202A20E3A672A6C3C58930727D4CDFB75E56F426D4E9C81/0/69301E5BA9EA83E876294721E029DAB25C9B6192.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69301E5BA9EA83E876294721E029DAB25C9B6192.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Nov 2026 18:10:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:3d:27:af:dc:62:22:bc:3d:36:f9:42:f3:53:45:db:95:75:f9:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69301E5BA9EA83E876294721E029DAB25C9B6192
        Validity
            Not Before: Oct 28 13:38:18 2026 GMT
            Not After : Oct 27 13:43:18 2027 GMT
        Subject: CN=F330468723C75BA1D7CD573C788CB9043E1CF4FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:97:aa:f5:7a:d7:ed:cf:b6:81:75:34:29:c7:
                    b0:06:5d:ba:5c:f4:30:2d:72:62:f8:90:e3:ca:3c:
                    78:80:d1:2f:7f:5e:82:d5:c4:98:a7:ca:4d:03:2d:
                    73:69:ff:38:ff:94:6c:e1:82:4e:ce:58:5b:b1:01:
                    89:4e:13:a0:b5:79:97:c7:71:2a:b5:0a:2e:fc:77:
                    33:5b:dd:0a:b1:14:f4:e8:86:c3:e4:c3:62:e9:2a:
                    ee:49:1f:c1:e4:7b:0c:2f:00:e1:95:5a:73:7b:83:
                    4e:a7:ea:74:3a:c2:e3:c5:3f:91:54:33:50:1c:be:
                    0b:70:f2:96:96:28:eb:0a:4e:d3:c2:45:f9:df:74:
                    3e:40:09:53:38:61:f8:64:78:f1:20:d8:3c:b2:98:
                    5a:41:f5:e6:f1:3e:39:2c:b2:59:d6:7e:4b:c6:33:
                    93:f8:7e:8a:12:af:39:39:31:58:53:09:0b:c6:62:
                    a6:5d:0f:f1:ac:55:3e:6f:6d:62:48:9d:91:20:be:
                    53:48:99:58:0e:00:b6:fc:b8:8d:00:d7:9c:8f:52:
                    39:b7:f3:64:1c:1c:5c:3d:cf:0e:f8:7b:89:d1:48:
                    4f:0a:1a:c4:3b:57:c9:50:e2:10:7b:cb:38:4d:75:
                    3e:2a:72:0e:72:30:7d:ab:cc:ba:6a:e3:8e:09:eb:
                    ec:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:30:46:87:23:C7:5B:A1:D7:CD:57:3C:78:8C:B9:04:3E:1C:F4:FC
            X509v3 Authority Key Identifier:
                keyid:69:30:1E:5B:A9:EA:83:E8:76:29:47:21:E0:29:DA:B2:5C:9B:61:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/77AAD8D082A0D702C202A20E3A672A6C3C58930727D4CDFB75E56F426D4E9C81/0/69301E5BA9EA83E876294721E029DAB25C9B6192.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69301E5BA9EA83E876294721E029DAB25C9B6192.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/77AAD8D082A0D702C202A20E3A672A6C3C58930727D4CDFB75E56F426D4E9C81/0/3137392e36312e39322e302f32342d3234203d3e20323634363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:a3:d7:52:cf:4e:c2:0b:7c:af:1e:8f:e3:34:6b:7f:0e:6f:
         60:6d:a6:3b:50:f7:2f:ef:3e:0a:81:e7:fe:ce:3c:bc:2e:a8:
         31:18:31:e9:e1:30:44:86:6a:a2:91:a6:34:50:fb:f8:c0:9b:
         bf:c2:6b:25:7a:48:ca:be:23:5d:75:a5:60:b2:a3:d3:6f:02:
         ec:8a:8a:3d:9b:1c:03:2d:d5:0d:12:b6:ac:20:6e:b2:ea:ac:
         f4:c0:f4:94:f7:44:5e:45:8e:db:47:bc:3a:0d:01:1f:a0:ab:
         26:ac:d9:b9:5f:30:d7:73:9e:c2:8c:b6:bf:6e:de:0f:12:f0:
         16:01:09:8d:6e:c2:47:8a:69:1d:6a:18:bf:0d:2e:bc:14:b5:
         ba:5b:3b:28:a3:ce:6f:03:bc:93:c9:d3:a3:65:cd:e2:e1:c1:
         f3:9a:39:73:72:cc:e4:62:23:a8:c5:af:21:0f:aa:df:69:f8:
         73:4b:d2:cc:b5:41:41:64:72:46:f8:4d:6c:2e:8b:52:af:3b:
         91:aa:05:02:80:08:5e:fd:15:40:d5:fd:6d:8f:84:8d:21:b1:
         1a:86:86:2d:2b:7f:94:c0:a2:f8:ab:7e:fd:c8:ec:e0:0a:4e:
         d6:39:cc:8d:ae:b5:7a:71:5a:14:ff:24:c6:79:07:9d:22:bf:
         1d:7d:58:59
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIULz0nr9xiIrw9NvlC81NF25V1+XEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjkzMDFFNUJBOUVBODNFODc2Mjk0NzIxRTAyOURBQjI1
QzlCNjE5MjAeFw0yNjEwMjgxMzM4MThaFw0yNzEwMjcxMzQzMThaMDMxMTAvBgNV
BAMTKEYzMzA0Njg3MjNDNzVCQTFEN0NENTczQzc4OENCOTA0M0UxQ0Y0RkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHl6r1etftz7aBdTQpx7AGXbpc
9DAtcmL4kOPKPHiA0S9/XoLVxJinyk0DLXNp/zj/lGzhgk7OWFuxAYlOE6C1eZfH
cSq1Ci78dzNb3QqxFPTohsPkw2LpKu5JH8HkewwvAOGVWnN7g06n6nQ6wuPFP5FU
M1Acvgtw8paWKOsKTtPCRfnfdD5ACVM4YfhkePEg2DyymFpB9ebxPjksslnWfkvG
M5P4fooSrzk5MVhTCQvGYqZdD/GsVT5vbWJInZEgvlNImVgOALb8uI0A15yPUjm3
82QcHFw9zw74e4nRSE8KGsQ7V8lQ4hB7yzhNdT4qcg5yMH2rzLpq444J6+w/AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU8zBGhyPHW6HXzVc8eIy5BD4c9PwwHwYDVR0j
BBgwFoAUaTAeW6nqg+h2KUch4CnaslybYZIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83N0FBRDhEMDgyQTBENzAyQzIwMkEyMEUzQTY3MkE2QzND
NTg5MzA3MjdENENERkI3NUU1NkY0MjZENEU5QzgxLzAvNjkzMDFFNUJBOUVBODNF
ODc2Mjk0NzIxRTAyOURBQjI1QzlCNjE5Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82OTMwMUU1QkE5RUE4M0U4NzYy
OTQ3MjFFMDI5REFCMjVDOUI2MTkyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzdBQUQ4RDA4MkEwRDcwMkMyMDJBMjBFM0E2NzJBNkMzQzU4OTMwNzI3
RDRDREZCNzVFNTZGNDI2RDRFOUM4MS8wLzMxMzczOTJlMzYzMTJlMzkzMjJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzNDM2MzUzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALM9XDAN
BgkqhkiG9w0BAQsFAAOCAQEAMKPXUs9Owgt8rx6P4zRrfw5vYG2mO1D3L+8+CoHn
/s48vC6oMRgx6eEwRIZqopGmNFD7+MCbv8JrJXpIyr4jXXWlYLKj028C7IqKPZsc
Ay3VDRK2rCBusuqs9MD0lPdEXkWO20e8Og0BH6CrJqzZuV8w13Oewoy2v27eDxLw
FgEJjW7CR4ppHWoYvw0uvBS1uls7KKPObwO8k8nTo2XN4uHB85o5c3LM5GIjqMWv
IQ+q32n4c0vSzLVBQWRyRvhNbC6LUq87kaoFAoAIXv0VQNX9bY+EjSGxGoaGLSt/
lMCi+Kt+/cjs4ApO1jnMja61enFaFP8kxnkHnSK/HX1YWQ==
-----END CERTIFICATE-----
Generated at Mon Nov 2 14:35:19 2026 by rpki-client