Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3137392e312e302e302f32312d3234203d3e203138363738.roa
File:                     3137392e312e302e302f32312d3234203d3e203138363738.roa (raw, json)
Hash identifier:          yNTJFHDqHft1no1zNgI+m0nSnqGUtunehdBjbKL1lZE=
Subject key identifier:   0A:33:50:0A:D9:E6:D0:37:D4:35:DD:BB:E0:88:95:1C:B6:70:1A:A5
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       17A35223DC5F47292DEBCB7E5318AA32F2527967
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3137392e312e302e302f32312d3234203d3e203138363738.roa
Signing time:             Mon 09 Feb 2026 15:29:44 +0000
ROA not before:           Mon 09 Feb 2026 15:24:44 +0000
ROA not after:            Mon 08 Feb 2027 15:29:44 +0000
asID:                     18678
IP address blocks:        179.1.0.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:a3:52:23:dc:5f:47:29:2d:eb:cb:7e:53:18:aa:32:f2:52:79:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Feb  9 15:24:44 2026 GMT
            Not After : Feb  8 15:29:44 2027 GMT
        Subject: CN=0A33500AD9E6D037D435DDBBE088951CB6701AA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:bb:63:64:f5:60:05:dc:52:bf:12:ad:eb:12:
                    b0:04:4c:05:38:9b:cc:db:9b:ad:43:93:be:ae:f5:
                    16:17:2a:b9:77:75:fb:ed:39:c9:6b:0b:3d:c2:ab:
                    f9:d8:ad:1e:70:7c:04:07:55:80:00:ef:c4:88:62:
                    c8:2e:71:c5:0e:d3:0a:17:ee:74:0b:02:d1:79:61:
                    3a:53:17:89:ef:8b:e3:65:de:61:59:d1:0a:5b:7d:
                    8c:70:be:7c:5e:5a:95:1d:07:0b:1c:69:5b:16:5a:
                    2c:85:5f:2c:f9:46:4f:58:ae:d1:64:ff:82:24:94:
                    b1:67:ee:53:33:e7:b7:cf:6a:40:b1:05:78:40:6b:
                    25:8e:20:42:c6:75:df:ba:73:84:0f:0d:5f:66:a4:
                    43:69:7b:64:bb:25:d3:79:fd:95:ad:0b:f7:66:40:
                    c2:ab:db:ff:f5:c8:85:e3:de:3e:bc:ad:64:51:b2:
                    9c:88:66:e8:1c:bc:c9:01:a0:f3:86:a0:a2:e2:bf:
                    34:fc:26:ea:a4:cd:70:fc:e1:21:29:a9:1c:74:f5:
                    34:e6:ff:5d:74:e2:5f:59:88:ca:cb:42:26:8e:3e:
                    50:55:69:64:1b:f0:c2:c7:2a:3f:88:97:34:d0:05:
                    68:72:37:11:de:3a:bb:59:21:94:96:46:44:c0:64:
                    8f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:33:50:0A:D9:E6:D0:37:D4:35:DD:BB:E0:88:95:1C:B6:70:1A:A5
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3137392e312e302e302f32312d3234203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.1.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7b:18:b9:aa:36:13:ba:33:a3:64:d3:40:65:4b:f5:f9:43:6a:
         93:7d:f2:8b:56:1e:69:1e:6d:42:16:b8:11:1f:96:a2:c4:2c:
         c4:d9:f7:f3:a1:06:76:89:01:19:4b:f3:54:45:b7:c1:db:8d:
         f5:2d:9a:0a:5b:8e:2f:fb:e5:1a:75:5b:1d:02:60:77:d3:0e:
         d0:a9:92:c6:cb:35:eb:15:5f:05:44:e8:49:86:03:81:87:6c:
         d4:a9:74:0d:8e:2b:fb:60:d5:cc:83:ec:11:45:72:15:37:e4:
         b2:4d:e3:28:3f:11:21:94:13:06:80:39:99:7a:ca:38:8b:2a:
         be:fe:bf:91:30:d2:9d:53:b0:9c:38:07:32:9e:6a:a7:88:73:
         18:66:0f:09:f8:0b:71:e6:18:58:94:8a:0d:3e:9b:85:66:30:
         71:10:69:b9:b3:3d:b6:9d:8e:4d:2e:47:1c:d4:ea:c5:54:7b:
         20:2e:fa:67:9d:6c:06:4c:9a:cc:7b:dc:0e:0a:d6:8d:e8:06:
         08:df:5a:8c:c4:a3:83:43:cf:94:73:56:b4:3e:b0:ea:2a:72:
         d1:3c:cf:ac:6d:02:dd:52:19:af:c6:89:f2:93:56:f0:43:54:
         98:df:c2:05:0a:bf:20:ed:e1:5d:14:be:f2:b7:de:6c:b0:7e:
         97:45:bd:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:17:06 2026 by rpki-client