Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3137392e312e302e302f31372d3234203d3e203138363738.roa
File:                     3137392e312e302e302f31372d3234203d3e203138363738.roa (raw, json)
Hash identifier:          r7FEgy1lu3jT4MjspLHt+OawDw59B39dntGziYpHrRY=
Subject key identifier:   D0:BD:A6:11:B1:05:63:C1:8C:03:34:27:D5:B3:B1:A7:6A:F3:DF:BE
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       606FE967ABC72196095D54C7496BC800F96FFEB7
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3137392e312e302e302f31372d3234203d3e203138363738.roa
Signing time:             Wed 18 Feb 2026 20:31:09 +0000
ROA not before:           Wed 18 Feb 2026 20:26:09 +0000
ROA not after:            Wed 17 Feb 2027 20:31:09 +0000
asID:                     18678
IP address blocks:        179.1.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:6f:e9:67:ab:c7:21:96:09:5d:54:c7:49:6b:c8:00:f9:6f:fe:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Feb 18 20:26:09 2026 GMT
            Not After : Feb 17 20:31:09 2027 GMT
        Subject: CN=D0BDA611B10563C18C033427D5B3B1A76AF3DFBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:8b:da:2d:c3:ab:5a:1d:23:52:8f:e0:1e:ee:
                    6a:4e:a9:cf:e9:a4:69:09:c2:60:ca:2d:83:3a:2d:
                    30:f6:d0:e1:8f:0c:70:7f:9e:65:ba:f9:8c:d2:23:
                    22:68:a0:53:e3:97:06:e2:8b:90:06:73:ef:f8:a9:
                    db:ca:98:d0:40:96:04:c2:3c:03:c6:d0:d3:21:44:
                    df:9e:be:37:46:9c:55:ee:bf:f0:f1:58:cf:d1:49:
                    16:01:9d:77:8d:31:84:a6:e8:0c:80:b5:38:1d:23:
                    ba:64:34:f2:c1:47:fb:9d:20:b1:b2:18:02:d2:8f:
                    e4:47:50:a2:dd:6c:92:f9:be:81:76:0b:fe:17:f3:
                    a2:67:5f:24:20:2a:02:a7:a5:1f:4d:39:36:b0:f6:
                    e6:5f:28:ba:07:5e:c8:7e:a8:07:ac:12:3d:48:1f:
                    0a:86:bf:6f:8c:79:74:60:e0:9b:1a:d4:94:d6:11:
                    2e:bb:1f:af:3c:2f:65:14:cf:39:35:6f:c1:25:53:
                    86:d2:e2:26:21:80:44:4c:3e:d6:7e:91:c5:bc:07:
                    73:37:1d:d8:35:73:fb:0e:0c:29:59:db:83:22:4a:
                    d8:42:73:4f:80:86:7c:95:3d:7c:88:ed:8d:63:22:
                    32:39:e4:b1:16:4e:af:a8:32:b9:9d:3d:9e:ea:6a:
                    ba:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:BD:A6:11:B1:05:63:C1:8C:03:34:27:D5:B3:B1:A7:6A:F3:DF:BE
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3137392e312e302e302f31372d3234203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.1.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         30:14:7d:96:4b:18:32:b4:5c:7e:79:3a:87:18:37:e4:cd:32:
         24:0a:96:82:e1:5c:a6:a2:93:bd:e9:fb:31:d0:59:b0:b6:89:
         a0:68:80:60:1e:87:46:47:a2:63:6f:2a:f5:d7:11:d8:18:6a:
         d4:52:48:42:82:06:39:a8:ae:48:65:ee:5b:4c:12:4f:6a:1b:
         c4:1c:55:73:87:91:7c:d7:83:50:2d:6b:4f:75:b0:ef:2d:e6:
         37:03:04:7e:14:45:08:0d:85:11:f7:2a:02:63:29:aa:6e:ea:
         25:7f:16:db:5d:25:11:fe:e5:69:67:25:7b:eb:27:b2:9f:3c:
         e7:3c:59:32:63:97:1d:b2:7d:5e:8c:e9:95:55:9b:c1:70:bb:
         1b:32:08:1c:dd:a0:ec:40:03:03:b8:38:a0:62:be:91:ea:78:
         b7:94:ef:09:b0:10:98:cd:49:6c:3d:41:3e:18:8c:a9:ed:c7:
         ad:56:a8:b5:94:95:16:62:a1:b6:53:43:86:13:bd:aa:48:d1:
         65:34:73:fa:af:a6:bc:42:91:20:df:42:5a:fa:f7:46:78:f0:
         18:58:5b:58:7b:79:57:72:79:e3:61:c4:c4:02:05:03:f7:cd:
         8d:0e:dc:4b:63:83:e2:1d:c8:99:f0:82:d3:53:ce:93:ea:c0:
         dd:9b:2c:17
-----BEGIN CERTIFICATE-----
MIIFuDCCBKCgAwIBAgIUYG/pZ6vHIZYJXVTHSWvIAPlv/rcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0JERTg4QzY1MzIwRDNFQkQ4RUQyRjU2OEQ4OTZGMzkz
NUU4N0NDNTAeFw0yNjAyMTgyMDI2MDlaFw0yNzAyMTcyMDMxMDlaMDMxMTAvBgNV
BAMTKEQwQkRBNjExQjEwNTYzQzE4QzAzMzQyN0Q1QjNCMUE3NkFGM0RGQkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZi9otw6taHSNSj+Ae7mpOqc/p
pGkJwmDKLYM6LTD20OGPDHB/nmW6+YzSIyJooFPjlwbii5AGc+/4qdvKmNBAlgTC
PAPG0NMhRN+evjdGnFXuv/DxWM/RSRYBnXeNMYSm6AyAtTgdI7pkNPLBR/udILGy
GALSj+RHUKLdbJL5voF2C/4X86JnXyQgKgKnpR9NOTaw9uZfKLoHXsh+qAesEj1I
HwqGv2+MeXRg4Jsa1JTWES67H688L2UUzzk1b8ElU4bS4iYhgERMPtZ+kcW8B3M3
Hdg1c/sODClZ24MiSthCc0+AhnyVPXyI7Y1jIjI55LEWTq+oMrmdPZ7qarrBAgMB
AAGjggLCMIICvjAdBgNVHQ4EFgQU0L2mEbEFY8GMAzQn1bOxp2rz374wHwYDVR0j
BBgwFoAUy96IxlMg0+vY7S9WjYlvOTXofMUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xRkFFODRDOUQyRUE1QjlFNjgyNjM1NDNCQkQ0OThDM0Yx
Q0VGMUY4N0YzODM0MzQ2N0Y1NTE1RDYwMkI3NTI5LzAvQ0JERTg4QzY1MzIwRDNF
QkQ4RUQyRjU2OEQ4OTZGMzkzNUU4N0NDNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQkRFODhDNjUzMjBEM0VCRDhF
RDJGNTY4RDg5NkYzOTM1RTg3Q0M1LmNlcjCBwQYIKwYBBQUHAQsEgbQwgbEwga4G
CCsGAQUFBzALhoGhcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUZBRTg0QzlEMkVBNUI5RTY4MjYzNTQzQkJENDk4QzNGMUNFRjFGODdG
MzgzNDM0NjdGNTUxNUQ2MDJCNzUyOS8wLzMxMzczOTJlMzEyZTMwMmUzMDJmMzEz
NzJkMzIzNDIwM2QzZTIwMzEzODM2MzczOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEB7MBADANBgkqhkiG
9w0BAQsFAAOCAQEAMBR9lksYMrRcfnk6hxg35M0yJAqWguFcpqKTven7MdBZsLaJ
oGiAYB6HRkeiY28q9dcR2Bhq1FJIQoIGOaiuSGXuW0wST2obxBxVc4eRfNeDUC1r
T3Ww7y3mNwMEfhRFCA2FEfcqAmMpqm7qJX8W210lEf7laWcle+snsp885zxZMmOX
HbJ9XozplVWbwXC7GzIIHN2g7EADA7g4oGK+kep4t5TvCbAQmM1JbD1BPhiMqe3H
rVaotZSVFmKhtlNDhhO9qkjRZTRz+q+mvEKRIN9CWvr3RnjwGFhbWHt5V3J542HE
xAIFA/fNjQ7cS2OD4h3ImfCC01POk+rA3ZssFw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 21:16:09 2026 by rpki-client