Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3137392e312e3131322e302f32302d3234203d3e203138363738.roa
File:                     3137392e312e3131322e302f32302d3234203d3e203138363738.roa (raw, json)
Hash identifier:          coNFf1zxA8Ak8s3EuzqCKCUBixFhfsVpQx5hp+L96ds=
Subject key identifier:   3A:C8:24:41:0A:F4:F2:80:68:02:AB:51:38:E5:71:4B:E8:62:F5:F1
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       657B27D06BF41853A249CBE2EC2A78EE72ADC470
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3137392e312e3131322e302f32302d3234203d3e203138363738.roa
Signing time:             Wed 18 Feb 2026 16:31:07 +0000
ROA not before:           Wed 18 Feb 2026 16:26:07 +0000
ROA not after:            Wed 17 Feb 2027 16:31:07 +0000
asID:                     18678
IP address blocks:        179.1.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:7b:27:d0:6b:f4:18:53:a2:49:cb:e2:ec:2a:78:ee:72:ad:c4:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Feb 18 16:26:07 2026 GMT
            Not After : Feb 17 16:31:07 2027 GMT
        Subject: CN=3AC824410AF4F2806802AB5138E5714BE862F5F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:5c:d0:a5:aa:d1:0d:b4:82:e2:23:29:2d:c4:
                    ee:9c:9e:35:86:02:93:3b:9d:47:5a:74:90:ec:cf:
                    72:45:f0:c1:2a:74:60:a4:b0:52:78:69:7d:e0:07:
                    75:e0:43:60:4c:f6:9b:ee:d0:11:69:e3:8a:d1:7d:
                    a2:81:72:88:65:67:d4:b5:88:e1:e0:25:c2:13:2d:
                    62:18:6c:da:38:f6:a3:58:8f:bd:9d:50:9f:51:94:
                    03:08:77:d4:10:c9:01:4c:20:5a:48:ad:d1:15:8f:
                    42:1b:e6:dd:b0:c2:93:b5:6a:cd:2a:bd:ae:6e:a2:
                    92:bf:b5:94:d1:42:43:be:3d:ee:ad:78:0f:db:b0:
                    2a:06:9f:ae:58:4e:e5:82:f4:89:bc:d5:61:47:47:
                    35:61:60:60:ee:d1:17:93:13:ed:72:fd:a9:fb:58:
                    0d:cf:47:06:3c:44:c8:8f:f7:93:d2:42:8c:77:39:
                    ca:5d:3b:a0:72:bf:6d:f0:ae:13:28:b5:75:5c:c6:
                    f3:38:01:eb:ed:61:24:c6:f8:25:79:ce:a4:3a:b8:
                    67:9e:00:bb:4c:f3:50:43:8a:d8:f1:2e:7d:f7:68:
                    14:8b:f2:c1:78:a7:ed:cd:be:af:83:d7:bb:7e:b0:
                    76:b9:dd:f0:ce:21:a0:66:d7:b4:51:bf:99:a8:40:
                    53:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:C8:24:41:0A:F4:F2:80:68:02:AB:51:38:E5:71:4B:E8:62:F5:F1
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3137392e312e3131322e302f32302d3234203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.1.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         07:41:3e:1e:40:7e:78:ba:f4:2c:a1:42:d8:98:4a:8a:9a:84:
         32:98:3d:44:5d:72:81:f8:99:7d:e3:c3:72:7e:bf:d2:6e:97:
         bc:a0:21:68:75:e3:20:b8:69:b6:79:5b:6c:57:9e:bd:f4:0c:
         45:e9:9d:74:34:03:0e:70:57:f1:58:ac:cf:45:55:77:99:59:
         11:5a:a2:3b:d2:e9:8b:2f:89:7e:43:39:c3:8a:80:74:56:66:
         f7:04:7d:d3:98:14:5b:b1:99:33:c6:bb:e1:fa:80:c5:47:cc:
         53:00:db:3b:9f:e9:6c:b1:92:ee:42:f1:85:91:1e:2a:9c:d3:
         ee:83:ba:3d:a8:a0:ab:16:20:e3:ea:35:b2:f0:81:b6:aa:f2:
         f9:40:a4:aa:cd:7a:0b:3f:bd:72:d5:da:47:64:ae:ea:03:04:
         21:75:91:45:9f:a7:33:b7:c0:a9:08:41:c3:b3:a3:01:b6:b1:
         6c:90:78:9d:8a:ac:73:c1:d0:58:e4:3f:50:ce:7c:86:40:eb:
         95:c1:da:c0:6c:9e:63:75:69:cb:50:e9:a2:1a:62:03:f2:f3:
         b6:24:1f:77:81:50:cc:c7:14:15:3b:f5:c9:8e:92:43:79:dc:
         aa:8d:e0:ca:5a:a1:92:ab:22:0f:8c:f7:53:08:98:53:22:88:
         e0:df:82:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:18:28 2026 by rpki-client