Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3137392e36332e3231312e302f32342d3234203d3e203237393736.roa
File:                     3137392e36332e3231312e302f32342d3234203d3e203237393736.roa (raw, json)
Hash identifier:          HSvLjDxC1WjOsdAkLc6qmH+Iym4VXh1BUU6p0HUKTW8=
Subject key identifier:   5D:C9:23:FA:65:7B:0D:2F:E0:7C:1B:09:18:4A:21:FB:A9:6B:6E:5C
Certificate issuer:       /CN=C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39
Certificate serial:       08DCC007949192A1BE9BD7F9C3B4123C08D2C944
Authority key identifier: C4:E4:73:26:7C:7E:D8:DB:FC:CD:20:9A:C0:9A:1C:A7:B8:4A:7C:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3137392e36332e3231312e302f32342d3234203d3e203237393736.roa
Signing time:             Fri 02 Oct 2026 18:37:58 +0000
ROA not before:           Fri 02 Oct 2026 18:32:58 +0000
ROA not after:            Fri 01 Oct 2027 18:37:58 +0000
asID:                     27976
IP address blocks:        179.63.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 18:47:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:dc:c0:07:94:91:92:a1:be:9b:d7:f9:c3:b4:12:3c:08:d2:c9:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39
        Validity
            Not Before: Oct  2 18:32:58 2026 GMT
            Not After : Oct  1 18:37:58 2027 GMT
        Subject: CN=5DC923FA657B0D2FE07C1B09184A21FBA96B6E5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:64:22:11:e7:59:72:e3:e4:76:cc:fa:f3:1f:
                    c0:2d:1a:6b:71:3b:59:f4:a5:58:ad:02:d1:d0:8e:
                    bd:7b:87:69:00:c9:c6:76:2b:2c:5c:90:18:22:aa:
                    80:00:52:c4:68:77:8a:84:a2:46:2c:fd:ad:af:d4:
                    5a:e0:74:4a:a3:04:6a:63:60:f1:3e:21:c1:de:ea:
                    57:d9:54:d7:b4:e3:e4:35:d2:1d:fe:0d:9e:3e:52:
                    53:6f:c3:ea:5f:60:e7:42:37:a2:54:78:18:4c:8f:
                    51:e5:de:e4:d7:d9:0f:aa:aa:ef:d8:61:1c:15:95:
                    87:d1:92:0f:2c:3c:13:ce:bb:8a:ba:69:49:fe:dd:
                    ca:1e:23:f1:98:c0:59:d5:79:bd:58:71:d5:1c:01:
                    b9:72:eb:95:44:80:3f:e0:f1:73:03:03:dc:25:3e:
                    79:1d:bb:a0:72:1d:51:1b:43:99:e8:36:67:f7:b3:
                    e8:58:da:a4:f4:d7:91:52:57:c4:46:8a:27:c8:e8:
                    9d:22:e6:e3:41:60:cc:49:d7:b1:a4:2d:92:cc:ce:
                    ef:a4:a7:5a:44:cc:e5:c5:f6:63:60:1e:ea:ad:57:
                    3a:8e:73:4c:58:6e:85:ff:05:da:06:90:ba:d0:ac:
                    da:23:27:08:91:08:68:a2:66:4b:e2:cb:39:ab:18:
                    d6:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:C9:23:FA:65:7B:0D:2F:E0:7C:1B:09:18:4A:21:FB:A9:6B:6E:5C
            X509v3 Authority Key Identifier:
                keyid:C4:E4:73:26:7C:7E:D8:DB:FC:CD:20:9A:C0:9A:1C:A7:B8:4A:7C:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3137392e36332e3231312e302f32342d3234203d3e203237393736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:9a:16:30:4a:08:96:4a:a7:fb:3b:2c:b4:69:b2:9b:78:5c:
         de:cd:bb:6b:ef:2b:aa:26:e5:92:41:fb:a8:14:be:60:53:06:
         36:d6:79:9f:d7:b7:ef:f7:11:ad:4d:01:a0:8c:b2:ae:9d:1d:
         28:4b:a2:14:2f:01:61:a8:ab:a0:ec:37:f4:81:43:f6:01:84:
         a5:8a:1c:a0:cd:34:b9:e4:2c:ed:62:bd:99:04:0d:c1:f6:11:
         e3:9b:8b:29:50:4c:24:bc:1a:b6:95:eb:d8:99:e0:04:dd:d1:
         b5:b0:99:90:bf:4b:4d:12:1e:ab:ed:a6:28:eb:eb:b6:86:1d:
         76:c9:45:f3:a8:4e:fc:e4:a7:ce:ce:87:1e:fe:29:71:fc:de:
         cb:21:5b:16:1e:6a:94:22:28:49:4b:ad:cf:2e:c8:aa:c8:b2:
         30:0d:0a:13:ac:c9:1b:85:6e:02:d4:91:30:73:49:63:63:38:
         be:a5:f7:c8:d5:49:86:72:d5:0c:fa:d1:47:f3:19:cf:08:e9:
         e6:43:c1:b5:a3:c4:fd:9f:fd:8b:a8:0f:55:c8:da:d0:ce:e5:
         5e:19:8e:03:7e:fd:e7:f1:1a:79:ad:a9:c1:33:49:f4:bd:79:
         12:b9:f0:74:18:9f:68:b5:7a:f0:a3:4e:18:80:8b:8a:16:a3:
         5d:e0:fe:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 17:16:08 2026 by rpki-client