Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3137392e312e3135312e302f32342d3234203d3e203138363738.roa
File:                     3137392e312e3135312e302f32342d3234203d3e203138363738.roa (raw, json)
Hash identifier:          sdRFMiH2TVBJ4BGXfRRJ0Kit86KPWZM7Ou8Se7o/S0Y=
Subject key identifier:   A0:82:52:35:23:19:87:85:6C:F7:1A:32:69:60:F8:72:E3:19:59:7D
Certificate issuer:       /CN=8E9E896ADF8041E07AB6735225935260B837E74D
Certificate serial:       557659E7D2DE059E7359DE5C08991B0766230EDB
Authority key identifier: 8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3137392e312e3135312e302f32342d3234203d3e203138363738.roa
Signing time:             Wed 13 May 2026 20:10:00 +0000
ROA not before:           Wed 13 May 2026 20:05:00 +0000
ROA not after:            Wed 12 May 2027 20:10:00 +0000
asID:                     18678
IP address blocks:        179.1.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:76:59:e7:d2:de:05:9e:73:59:de:5c:08:99:1b:07:66:23:0e:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E9E896ADF8041E07AB6735225935260B837E74D
        Validity
            Not Before: May 13 20:05:00 2026 GMT
            Not After : May 12 20:10:00 2027 GMT
        Subject: CN=A0825235231987856CF71A326960F872E319597D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2e:42:7e:18:bf:34:51:47:c2:c5:aa:66:c0:
                    89:38:6b:12:92:b6:e7:01:96:db:46:04:bb:cb:36:
                    dc:a8:a8:f9:4a:67:79:0b:d2:c4:a1:0d:e6:76:ce:
                    93:97:06:fc:5e:cb:c7:67:a8:8f:9e:eb:d6:e9:00:
                    d2:09:3b:cd:ab:f5:3a:e0:3e:e7:69:d8:d0:1d:47:
                    06:bf:47:8a:d8:4a:e6:ab:b5:92:5f:e4:89:db:ce:
                    66:f8:96:54:87:61:0a:0a:f7:64:65:f3:7d:d2:5a:
                    ad:86:5e:23:92:6a:00:ea:77:8b:fe:44:83:cc:64:
                    63:70:fa:ff:7c:30:22:2e:39:f1:d0:1d:c3:52:10:
                    9d:6a:04:98:b7:3a:69:73:71:86:95:18:29:e0:a9:
                    c8:9e:b4:ad:1f:aa:53:19:65:c3:de:e4:e8:8b:54:
                    5e:b8:7c:bb:ca:37:73:47:e5:94:71:be:cc:1a:0a:
                    a2:cb:be:5c:fc:25:12:76:69:78:32:f8:83:c5:a7:
                    41:5e:90:77:ff:84:42:78:68:cb:e7:69:b0:c0:1c:
                    da:e2:fe:fc:fc:a7:8e:31:50:ce:41:cf:eb:19:9e:
                    13:5b:8d:48:e1:f3:36:e2:c5:7a:b5:55:8a:73:af:
                    37:6b:ae:b7:d2:a4:87:c5:5d:df:87:c9:7a:b4:3d:
                    61:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:82:52:35:23:19:87:85:6C:F7:1A:32:69:60:F8:72:E3:19:59:7D
            X509v3 Authority Key Identifier:
                keyid:8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3137392e312e3135312e302f32342d3234203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.1.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:81:bb:a6:b4:aa:7b:ae:4f:48:5f:8e:1f:b6:1c:42:53:1b:
         e2:db:65:b9:aa:8b:fa:a4:81:c6:c7:b7:12:d8:a5:42:a6:b4:
         90:9b:6f:a5:0b:69:0e:40:99:99:d4:44:73:d6:9c:d2:5f:46:
         c4:a9:fd:84:55:7f:fa:55:c3:eb:60:7f:ed:71:d5:44:57:a3:
         6e:3f:c2:c2:bb:a2:fe:b8:70:7a:74:2d:f0:c3:cc:62:36:be:
         e0:0f:e2:8c:81:ed:ea:8e:a9:71:c2:eb:fb:5c:4a:1d:d9:41:
         63:65:10:fc:f3:81:ea:7d:45:69:f3:00:6e:11:85:c6:67:3b:
         49:a7:54:03:43:66:9b:cb:02:e1:1a:fc:60:2b:92:b5:fb:1a:
         f2:d1:4f:3e:06:7b:7c:89:ac:3d:d1:05:c1:23:3e:43:16:7b:
         55:3b:52:fa:65:16:15:dd:b4:27:5c:b5:7c:42:0c:fe:17:e9:
         47:e5:03:00:43:4c:a3:58:92:e2:95:63:57:2f:dc:40:32:c9:
         eb:43:3f:06:a6:e8:7d:14:12:d6:63:21:7d:68:03:ce:38:07:
         48:70:70:93:ea:51:37:ef:78:64:39:03:dc:7d:66:0d:fc:69:
         c0:f0:fd:12:16:57:fe:90:f0:ba:41:2a:ae:af:c8:ae:3d:2a:
         04:39:5f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 12:03:59 2026 by rpki-client