Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/D6C0CE8CFCA14141C3AE42DE6EFC6BBC7716894DF4542224014E417E2E14AB2B/0/3137392e35362e3139342e302f32342d3234203d3e20323632313832.roa
File:                     3137392e35362e3139342e302f32342d3234203d3e20323632313832.roa (raw, json)
Hash identifier:          xErLBdQjT+ilqv5yXProN1mHJbC1ViOvBvF/r/wk1+k=
Subject key identifier:   D0:0E:18:09:FF:70:AB:3E:D4:12:FF:BF:58:B9:C6:AD:E4:24:F5:5D
Certificate issuer:       /CN=8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3
Certificate serial:       5AE3CD8ED2404C03CB3A738F328AA16DA9AD1E
Authority key identifier: 8D:B2:82:B3:47:40:BD:99:CD:F8:94:30:62:B7:DC:EC:3C:4B:1F:F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D6C0CE8CFCA14141C3AE42DE6EFC6BBC7716894DF4542224014E417E2E14AB2B/0/3137392e35362e3139342e302f32342d3234203d3e20323632313832.roa
Signing time:             Tue 13 Oct 2026 11:45:00 +0000
ROA not before:           Tue 13 Oct 2026 11:40:00 +0000
ROA not after:            Tue 12 Oct 2027 11:45:00 +0000
asID:                     262182
IP address blocks:        179.56.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D6C0CE8CFCA14141C3AE42DE6EFC6BBC7716894DF4542224014E417E2E14AB2B/0/8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D6C0CE8CFCA14141C3AE42DE6EFC6BBC7716894DF4542224014E417E2E14AB2B/0/8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 30 Oct 2026 07:18:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:e3:cd:8e:d2:40:4c:03:cb:3a:73:8f:32:8a:a1:6d:a9:ad:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3
        Validity
            Not Before: Oct 13 11:40:00 2026 GMT
            Not After : Oct 12 11:45:00 2027 GMT
        Subject: CN=D00E1809FF70AB3ED412FFBF58B9C6ADE424F55D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:00:5e:69:9e:73:fb:50:5c:b0:62:09:25:20:
                    46:5d:d0:d4:93:63:3e:6e:05:9c:8a:0e:49:b6:42:
                    ed:cb:2a:2d:49:df:35:2b:af:3b:ec:47:e5:65:4e:
                    e3:ef:33:07:6b:f3:2b:58:d2:b4:ce:90:1f:9f:42:
                    fd:9a:d0:db:ce:66:79:d1:e3:32:94:a7:32:92:40:
                    3d:04:2f:b0:b2:6b:24:fe:3e:78:cb:ac:41:b2:b1:
                    a5:00:16:63:d3:85:7e:98:ae:f8:28:64:9e:f9:0f:
                    3d:9c:09:7f:fb:60:e4:91:2d:19:e8:8e:b6:f7:8e:
                    ec:df:e5:73:9c:7c:d1:82:74:0e:b8:e4:b3:4c:8f:
                    5e:43:14:65:b7:2a:f7:a4:8f:36:c3:98:52:ac:5b:
                    a8:68:5c:8b:31:87:3b:66:37:b2:eb:05:64:94:b4:
                    22:75:50:6f:19:e5:21:0a:49:51:90:2d:a4:3f:4d:
                    13:eb:fc:45:b2:0c:e6:ed:4a:35:fc:0d:25:2e:ea:
                    84:ef:12:74:9a:34:1e:e2:0b:bc:be:30:09:9e:f2:
                    2d:44:b4:2c:c9:9c:bd:04:67:73:f1:65:57:47:6b:
                    7b:82:a1:84:3e:18:51:ae:e0:84:70:e4:c8:7d:2b:
                    de:0c:9f:f4:57:7b:f7:ba:c6:9a:e7:1d:ea:eb:18:
                    08:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:0E:18:09:FF:70:AB:3E:D4:12:FF:BF:58:B9:C6:AD:E4:24:F5:5D
            X509v3 Authority Key Identifier:
                keyid:8D:B2:82:B3:47:40:BD:99:CD:F8:94:30:62:B7:DC:EC:3C:4B:1F:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D6C0CE8CFCA14141C3AE42DE6EFC6BBC7716894DF4542224014E417E2E14AB2B/0/8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D6C0CE8CFCA14141C3AE42DE6EFC6BBC7716894DF4542224014E417E2E14AB2B/0/3137392e35362e3139342e302f32342d3234203d3e20323632313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.56.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:45:de:3f:2d:c0:4e:4e:09:6b:98:84:c9:0b:fa:86:f0:88:
         a5:c0:9f:67:d6:9b:f3:4d:15:84:f9:f1:76:d9:43:c5:c4:d2:
         db:db:e9:a3:38:b6:77:11:81:95:77:53:76:44:ed:4e:d2:52:
         a2:b5:1b:43:04:95:3e:cb:12:23:a4:cf:c4:72:50:3c:27:f3:
         1d:c4:44:6e:2b:a2:05:95:7e:49:5c:7f:e3:5c:3c:10:c0:45:
         2e:6a:50:7d:4c:cb:ed:a1:5a:6a:a7:61:6e:ed:c1:4a:fa:4a:
         80:35:f9:bc:5b:fb:4e:83:3d:33:87:5f:3c:65:9d:51:a4:61:
         e0:80:19:89:69:75:f9:16:aa:97:36:44:6b:85:72:58:a9:a7:
         e5:69:2c:0b:37:09:a3:a0:57:4c:92:c9:33:6f:7e:3a:59:1d:
         44:cb:b0:5a:d4:b6:71:d7:ea:1a:a6:45:a3:33:39:19:82:b8:
         34:55:73:6a:60:a4:08:dc:26:21:f0:55:11:8d:64:8a:90:fb:
         93:80:98:af:e4:f0:16:72:d2:90:77:ea:b1:67:84:c6:11:30:
         07:af:ca:91:a7:b8:d7:54:1b:1c:81:39:19:60:f2:f1:de:d5:
         54:72:27:24:fe:2b:6d:0c:72:c0:05:f4:af:b7:36:93:91:9c:
         bf:4a:10:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 19:45:26 2026 by rpki-client