Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3137392e312e3139322e302f31382d3234203d3e203138363738.roa
File:                     3137392e312e3139322e302f31382d3234203d3e203138363738.roa (raw, json)
Hash identifier:          J1vyDQye4l8JMDxOB0Z6kDz4C78sQSGBnL+aUaBPAMU=
Subject key identifier:   98:5B:2F:AB:11:34:7C:FA:AB:5C:0B:C1:72:36:70:27:CA:6D:27:A7
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       617DFF20CFD248E4EEF4E44443642A7B9005142D
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3137392e312e3139322e302f31382d3234203d3e203138363738.roa
Signing time:             Wed 18 Feb 2026 20:31:10 +0000
ROA not before:           Wed 18 Feb 2026 20:26:10 +0000
ROA not after:            Wed 17 Feb 2027 20:31:10 +0000
asID:                     18678
IP address blocks:        179.1.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:7d:ff:20:cf:d2:48:e4:ee:f4:e4:44:43:64:2a:7b:90:05:14:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Feb 18 20:26:10 2026 GMT
            Not After : Feb 17 20:31:10 2027 GMT
        Subject: CN=985B2FAB11347CFAAB5C0BC172367027CA6D27A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5e:fa:d2:de:02:ab:be:5d:ec:07:3e:90:b6:
                    30:7b:a6:6a:35:87:eb:18:cb:f6:fe:45:64:f2:48:
                    cf:d2:ff:4d:8a:92:a8:00:85:ce:89:29:8d:61:8c:
                    48:9b:71:38:fe:dc:43:62:3b:20:0f:e0:6e:24:52:
                    ea:61:3f:72:56:39:53:7a:fc:59:97:e8:3c:3d:a4:
                    29:cc:a1:8a:08:fe:07:3d:a8:1f:ef:d1:a1:20:8c:
                    9c:3d:da:10:d7:18:00:42:9e:1a:ef:68:00:ca:57:
                    1b:78:45:ca:c6:d5:df:d2:d9:93:15:8e:e1:1a:6b:
                    23:1e:35:81:8c:49:6c:6a:a2:ed:2f:15:cb:49:45:
                    dd:d6:1a:c3:57:23:cf:42:3c:bc:0e:b7:18:48:56:
                    d2:2d:3c:98:b2:5e:bd:07:22:fc:47:01:d4:50:29:
                    c8:2b:01:b0:81:03:dc:48:38:c2:e7:d9:4c:ad:c0:
                    35:89:65:74:14:bd:9f:09:5f:9c:ac:25:cd:f2:81:
                    88:c2:a5:11:db:51:d8:bd:10:2a:05:8d:5d:16:16:
                    b0:78:6e:fe:67:56:39:d1:a6:ee:27:40:ee:38:38:
                    47:dc:26:06:1a:47:8c:09:6b:ab:f3:c2:43:28:8c:
                    5c:cf:a4:5f:13:91:69:88:3f:64:d5:db:8b:50:75:
                    4f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:5B:2F:AB:11:34:7C:FA:AB:5C:0B:C1:72:36:70:27:CA:6D:27:A7
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3137392e312e3139322e302f31382d3234203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.1.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         4c:57:ba:79:96:6e:af:dc:15:71:45:c7:5e:27:aa:ef:f3:68:
         06:f0:6c:cc:4a:27:3a:7b:60:f9:ce:fc:64:5a:0f:d0:3c:be:
         fe:1a:e8:d5:49:cc:dd:2c:ba:fa:29:a7:cc:d8:56:1e:a7:59:
         7b:26:1a:ae:7c:58:ec:6a:8d:29:a4:a8:11:fe:73:b8:c0:4e:
         64:8e:2e:fd:f9:38:62:f1:6d:fd:6c:a5:04:5b:50:eb:d8:08:
         af:47:c6:6a:79:4a:1a:70:ff:1d:a3:18:1d:c0:b4:a5:6c:35:
         43:7f:b6:33:73:e2:a5:95:18:d5:2e:98:b1:da:81:06:82:a0:
         77:dc:8d:67:ec:9e:2f:37:88:e1:77:9c:34:f4:a6:1a:a1:09:
         95:9b:1e:14:b2:1d:1d:da:70:f9:9b:3d:63:59:cb:5e:9d:bd:
         dd:b0:b0:95:07:87:2d:75:31:70:67:07:f2:dc:b0:1a:76:23:
         68:24:c4:13:23:44:3b:90:f2:89:b4:c3:2d:1f:a2:cd:6a:94:
         77:60:5c:c5:03:6f:29:55:c5:df:b1:24:7a:c2:64:eb:a1:47:
         f7:aa:17:7d:ac:ec:45:c7:03:a1:24:ea:4b:aa:2f:94:df:6d:
         c4:c8:f5:f2:94:d1:e2:35:40:72:89:e2:4c:5c:16:66:f5:dc:
         75:14:73:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:33:38 2026 by rpki-client