Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3137392e312e33322e302f32302d3234203d3e203138363738.roa
File:                     3137392e312e33322e302f32302d3234203d3e203138363738.roa (raw, json)
Hash identifier:          NbKbDnE+dmu/gWqf0+wR+ZkP/ga3x0V1rMgS2M4KXTg=
Subject key identifier:   98:00:EA:F0:E4:18:BC:0B:31:AE:93:F9:05:FC:F5:E2:E4:B5:42:67
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       79021E3070638793F069C70762CDFF3C2B809D83
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3137392e312e33322e302f32302d3234203d3e203138363738.roa
Signing time:             Mon 09 Feb 2026 16:29:45 +0000
ROA not before:           Mon 09 Feb 2026 16:24:45 +0000
ROA not after:            Mon 08 Feb 2027 16:29:45 +0000
asID:                     18678
IP address blocks:        179.1.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:02:1e:30:70:63:87:93:f0:69:c7:07:62:cd:ff:3c:2b:80:9d:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Feb  9 16:24:45 2026 GMT
            Not After : Feb  8 16:29:45 2027 GMT
        Subject: CN=9800EAF0E418BC0B31AE93F905FCF5E2E4B54267
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:f7:3c:38:4c:54:cf:07:1f:c3:74:f3:13:1d:
                    a2:c6:d7:63:b4:7a:4d:8d:00:10:90:b9:c1:da:fc:
                    d2:6e:ae:05:d9:72:5e:6e:00:77:bb:b1:b2:20:b0:
                    68:41:0a:67:38:f0:d4:03:89:74:ab:60:37:30:ba:
                    03:c1:c3:8a:6e:2e:83:a1:78:c7:84:cd:78:e1:ca:
                    76:1c:89:af:07:9a:fd:e4:6f:de:02:c4:b3:96:19:
                    9a:34:49:99:4b:ab:98:92:15:9e:d4:84:88:71:cf:
                    26:77:9c:05:36:22:67:b6:f5:f4:33:03:e3:dc:81:
                    e4:ea:df:3b:b7:97:80:26:e8:dc:0b:43:d2:53:f4:
                    7b:0d:74:df:e2:8a:8b:27:97:0c:f6:02:3b:eb:f2:
                    84:7a:75:30:f9:b6:c4:6a:79:45:9b:a0:cc:f0:ad:
                    1e:c0:74:d2:5a:2a:81:09:0e:f9:d6:45:c3:50:9c:
                    a0:5a:9b:e4:02:6e:f6:81:6d:31:bc:ac:27:b1:79:
                    12:4f:cc:09:e3:38:9a:89:ca:a5:21:62:92:99:fd:
                    e3:5c:1f:75:a5:65:5a:f4:58:3d:54:41:81:8d:a2:
                    ea:06:43:7c:1b:ed:27:91:3e:d8:63:b7:26:3b:40:
                    77:2f:6f:05:9e:1c:73:23:d2:35:68:d1:05:3f:66:
                    32:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:00:EA:F0:E4:18:BC:0B:31:AE:93:F9:05:FC:F5:E2:E4:B5:42:67
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3137392e312e33322e302f32302d3234203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.1.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         64:a3:83:19:2f:7e:f4:de:fd:b3:c0:0e:73:e0:19:d0:26:fc:
         d4:10:04:c8:0a:0d:fa:9f:d1:8d:cd:5f:07:2d:97:fd:bf:94:
         ff:f2:ca:5a:8b:ea:08:c5:28:84:f7:a4:fc:6d:fe:3f:d7:38:
         f5:b5:55:6a:c8:fa:84:a3:04:5a:43:e5:2e:f7:25:26:d8:4a:
         3f:5b:82:ec:90:43:3c:65:86:0f:7d:19:91:e9:bd:0d:a2:84:
         de:3b:9f:40:58:ec:4a:47:31:7a:9f:e2:98:a1:be:8b:45:88:
         7c:c5:7e:2f:25:ba:22:6d:b1:92:30:67:bc:b3:53:7c:ff:dd:
         fb:73:9b:b7:34:83:f6:9a:73:f0:51:11:e9:16:b5:00:90:2f:
         96:92:0b:78:a4:5e:15:41:49:15:88:6f:98:d9:a6:88:0a:44:
         61:1b:49:c4:36:34:19:52:25:52:8b:64:f9:de:94:22:cc:ad:
         12:1b:33:4b:51:29:4f:99:8a:e1:f9:db:f5:ca:77:6a:b8:df:
         85:78:db:f9:fe:51:52:17:70:47:8e:e4:55:ce:35:cd:59:07:
         09:4a:64:fe:88:52:ef:f3:ea:70:79:fc:fb:1f:e6:e9:3b:15:
         a3:36:71:64:26:3e:e8:e6:fc:08:ea:89:fa:3f:0e:8c:fe:d8:
         77:c4:d5:ee
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUeQIeMHBjh5PwaccHYs3/PCuAnYMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0JERTg4QzY1MzIwRDNFQkQ4RUQyRjU2OEQ4OTZGMzkz
NUU4N0NDNTAeFw0yNjAyMDkxNjI0NDVaFw0yNzAyMDgxNjI5NDVaMDMxMTAvBgNV
BAMTKDk4MDBFQUYwRTQxOEJDMEIzMUFFOTNGOTA1RkNGNUUyRTRCNTQyNjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDo9zw4TFTPBx/DdPMTHaLG12O0
ek2NABCQucHa/NJurgXZcl5uAHe7sbIgsGhBCmc48NQDiXSrYDcwugPBw4puLoOh
eMeEzXjhynYcia8Hmv3kb94CxLOWGZo0SZlLq5iSFZ7UhIhxzyZ3nAU2Ime29fQz
A+PcgeTq3zu3l4Am6NwLQ9JT9HsNdN/iiosnlwz2Ajvr8oR6dTD5tsRqeUWboMzw
rR7AdNJaKoEJDvnWRcNQnKBam+QCbvaBbTG8rCexeRJPzAnjOJqJyqUhYpKZ/eNc
H3WlZVr0WD1UQYGNouoGQ3wb7SeRPthjtyY7QHcvbwWeHHMj0jVo0QU/ZjLnAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUmADq8OQYvAsxrpP5Bfz14uS1QmcwHwYDVR0j
BBgwFoAUy96IxlMg0+vY7S9WjYlvOTXofMUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xRkFFODRDOUQyRUE1QjlFNjgyNjM1NDNCQkQ0OThDM0Yx
Q0VGMUY4N0YzODM0MzQ2N0Y1NTE1RDYwMkI3NTI5LzAvQ0JERTg4QzY1MzIwRDNF
QkQ4RUQyRjU2OEQ4OTZGMzkzNUU4N0NDNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQkRFODhDNjUzMjBEM0VCRDhF
RDJGNTY4RDg5NkYzOTM1RTg3Q0M1LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUZBRTg0QzlEMkVBNUI5RTY4MjYzNTQzQkJENDk4QzNGMUNFRjFGODdG
MzgzNDM0NjdGNTUxNUQ2MDJCNzUyOS8wLzMxMzczOTJlMzEyZTMzMzIyZTMwMmYz
MjMwMmQzMjM0MjAzZDNlMjAzMTM4MzYzNzM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEswEgMA0GCSqG
SIb3DQEBCwUAA4IBAQBko4MZL3703v2zwA5z4BnQJvzUEATICg36n9GNzV8HLZf9
v5T/8spai+oIxSiE96T8bf4/1zj1tVVqyPqEowRaQ+Uu9yUm2Eo/W4LskEM8ZYYP
fRmR6b0NooTeO59AWOxKRzF6n+KYob6LRYh8xX4vJboibbGSMGe8s1N8/937c5u3
NIP2mnPwURHpFrUAkC+Wkgt4pF4VQUkViG+Y2aaICkRhG0nENjQZUiVSi2T53pQi
zK0SGzNLUSlPmYrh+dv1yndquN+FeNv5/lFSF3BHjuRVzjXNWQcJSmT+iFLv8+pw
efz7H+bpOxWjNnFkJj7o5vwI6on6Pw6M/th3xNXu
-----END CERTIFICATE-----
Generated at Mon Mar 2 21:17:36 2026 by rpki-client