Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3137392e312e34382e302f32302d3234203d3e203138363738.roa
File:                     3137392e312e34382e302f32302d3234203d3e203138363738.roa (raw, json)
Hash identifier:          i3bKtB3wfo7Qre12EMfc0MvUQYzm3w8jbm92PDdPR58=
Subject key identifier:   05:DA:FE:74:7D:55:B9:2B:6A:17:96:5B:EB:DE:D6:BB:33:7A:0C:F1
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       5B6C5B51D86CC67F5E20AE68C59569135ECD0132
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3137392e312e34382e302f32302d3234203d3e203138363738.roa
Signing time:             Mon 09 Feb 2026 16:29:45 +0000
ROA not before:           Mon 09 Feb 2026 16:24:45 +0000
ROA not after:            Mon 08 Feb 2027 16:29:45 +0000
asID:                     18678
IP address blocks:        179.1.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:6c:5b:51:d8:6c:c6:7f:5e:20:ae:68:c5:95:69:13:5e:cd:01:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Feb  9 16:24:45 2026 GMT
            Not After : Feb  8 16:29:45 2027 GMT
        Subject: CN=05DAFE747D55B92B6A17965BEBDED6BB337A0CF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:27:ab:eb:37:0f:e6:60:05:98:89:e7:2c:54:
                    ff:2f:7a:a4:76:dd:c5:ef:a4:91:c1:91:e8:39:d0:
                    dd:20:13:6f:77:2a:f5:1f:d1:c5:5f:a7:47:a9:80:
                    38:d6:3e:80:fd:1e:d7:3e:98:bb:a8:5f:4c:6c:ad:
                    8d:e2:bc:29:7d:b8:97:9e:f4:bf:93:06:48:7f:95:
                    80:7e:3d:54:aa:4e:e3:5e:07:a0:25:e2:20:59:b8:
                    50:ed:3d:e7:51:6d:24:05:8e:6d:f7:9f:f0:23:1d:
                    20:65:8b:64:a5:8a:9e:4b:ea:d6:5c:2b:35:45:ca:
                    2c:14:1d:d7:1c:80:b0:74:7a:71:d9:e0:84:a6:8e:
                    09:4c:ce:10:eb:6d:1a:f4:e4:56:e6:dc:5f:a7:7b:
                    a3:4f:b4:ef:10:a6:20:57:b6:a1:43:49:d6:af:6c:
                    2d:66:f0:c3:f8:92:aa:d5:ae:98:fd:86:7a:be:09:
                    94:25:5c:a3:ab:26:ab:21:30:89:19:b8:45:5b:3d:
                    f4:7b:36:50:5c:a1:8b:24:9e:83:aa:3e:a8:27:5e:
                    f2:c9:17:30:03:87:70:7b:4e:62:84:a0:28:b1:f7:
                    d2:fc:7f:9d:2b:e8:bc:fd:9a:1c:a8:c0:e0:09:bc:
                    14:19:71:b1:1b:65:53:12:b2:59:04:66:68:ea:4c:
                    b0:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:DA:FE:74:7D:55:B9:2B:6A:17:96:5B:EB:DE:D6:BB:33:7A:0C:F1
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3137392e312e34382e302f32302d3234203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.1.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         65:c9:bb:d7:d5:44:13:c7:0d:3a:13:f9:d3:57:20:2b:41:08:
         db:b9:fa:e0:c4:c0:b4:a5:f1:0e:46:84:d9:20:49:36:ce:41:
         7f:fb:11:1e:62:06:b1:02:3b:f7:b8:05:9a:b3:d4:f4:23:cb:
         f2:ec:f2:f9:f5:b9:9b:43:ff:39:c7:60:ac:0d:15:8d:f1:0b:
         32:87:cd:05:79:37:40:b6:8c:1f:5c:20:3c:46:ba:48:05:96:
         2b:e9:ab:bd:7e:68:1f:4b:d6:c2:61:e3:94:2a:5a:ea:9d:f5:
         4b:f9:75:30:c1:9e:ba:1c:07:46:0a:1c:42:67:64:31:6b:01:
         b2:4f:26:eb:b9:16:4f:1e:64:4e:08:ff:09:a6:66:fd:90:85:
         08:f5:3d:80:e7:1a:d3:be:12:7f:44:2c:9f:8f:4b:2a:12:14:
         de:cc:bb:16:0d:e5:9f:76:3d:70:14:04:32:93:de:8b:f3:62:
         6c:1b:3a:49:dc:1c:65:a2:57:85:08:1b:57:82:38:b8:46:3d:
         d5:17:61:58:61:df:d9:92:df:8a:66:d1:e7:e2:5c:72:16:d2:
         c5:5b:2d:43:e2:f1:2e:23:91:1f:b7:cd:c5:a1:ac:4d:8d:0b:
         6a:99:94:90:ff:d4:ae:9b:b1:47:3d:c8:08:f5:07:1c:09:59:
         2f:56:d2:67
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUW2xbUdhsxn9eIK5oxZVpE17NATIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0JERTg4QzY1MzIwRDNFQkQ4RUQyRjU2OEQ4OTZGMzkz
NUU4N0NDNTAeFw0yNjAyMDkxNjI0NDVaFw0yNzAyMDgxNjI5NDVaMDMxMTAvBgNV
BAMTKDA1REFGRTc0N0Q1NUI5MkI2QTE3OTY1QkVCREVENkJCMzM3QTBDRjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfJ6vrNw/mYAWYiecsVP8veqR2
3cXvpJHBkeg50N0gE293KvUf0cVfp0epgDjWPoD9Htc+mLuoX0xsrY3ivCl9uJee
9L+TBkh/lYB+PVSqTuNeB6Al4iBZuFDtPedRbSQFjm33n/AjHSBli2Slip5L6tZc
KzVFyiwUHdccgLB0enHZ4ISmjglMzhDrbRr05Fbm3F+ne6NPtO8QpiBXtqFDSdav
bC1m8MP4kqrVrpj9hnq+CZQlXKOrJqshMIkZuEVbPfR7NlBcoYsknoOqPqgnXvLJ
FzADh3B7TmKEoCix99L8f50r6Lz9mhyowOAJvBQZcbEbZVMSslkEZmjqTLA5AgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUBdr+dH1VuStqF5Zb697WuzN6DPEwHwYDVR0j
BBgwFoAUy96IxlMg0+vY7S9WjYlvOTXofMUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xRkFFODRDOUQyRUE1QjlFNjgyNjM1NDNCQkQ0OThDM0Yx
Q0VGMUY4N0YzODM0MzQ2N0Y1NTE1RDYwMkI3NTI5LzAvQ0JERTg4QzY1MzIwRDNF
QkQ4RUQyRjU2OEQ4OTZGMzkzNUU4N0NDNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQkRFODhDNjUzMjBEM0VCRDhF
RDJGNTY4RDg5NkYzOTM1RTg3Q0M1LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUZBRTg0QzlEMkVBNUI5RTY4MjYzNTQzQkJENDk4QzNGMUNFRjFGODdG
MzgzNDM0NjdGNTUxNUQ2MDJCNzUyOS8wLzMxMzczOTJlMzEyZTM0MzgyZTMwMmYz
MjMwMmQzMjM0MjAzZDNlMjAzMTM4MzYzNzM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEswEwMA0GCSqG
SIb3DQEBCwUAA4IBAQBlybvX1UQTxw06E/nTVyArQQjbufrgxMC0pfEORoTZIEk2
zkF/+xEeYgaxAjv3uAWas9T0I8vy7PL59bmbQ/85x2CsDRWN8Qsyh80FeTdAtowf
XCA8RrpIBZYr6au9fmgfS9bCYeOUKlrqnfVL+XUwwZ66HAdGChxCZ2QxawGyTybr
uRZPHmROCP8Jpmb9kIUI9T2A5xrTvhJ/RCyfj0sqEhTezLsWDeWfdj1wFAQyk96L
82JsGzpJ3BxloleFCBtXgji4Rj3VF2FYYd/Zkt+KZtHn4lxyFtLFWy1D4vEuI5Ef
t83FoaxNjQtqmZSQ/9Sum7FHPcgI9QccCVkvVtJn
-----END CERTIFICATE-----
Generated at Mon Mar 2 21:16:54 2026 by rpki-client