Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3137392e312e382e302f32312d3234203d3e203138363738.roa
File:                     3137392e312e382e302f32312d3234203d3e203138363738.roa (raw, json)
Hash identifier:          f5t6+c16Tj4/AigGFyuWQehTEcn+85Nf7wXJ9edknaY=
Subject key identifier:   21:D8:74:62:B7:8C:2B:91:0B:8C:FF:93:49:6B:E8:2C:28:EF:CD:91
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       13D3E210CC7A634B8D81C1454E1EB59628D6C367
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3137392e312e382e302f32312d3234203d3e203138363738.roa
Signing time:             Mon 09 Feb 2026 15:29:44 +0000
ROA not before:           Mon 09 Feb 2026 15:24:44 +0000
ROA not after:            Mon 08 Feb 2027 15:29:44 +0000
asID:                     18678
IP address blocks:        179.1.8.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:d3:e2:10:cc:7a:63:4b:8d:81:c1:45:4e:1e:b5:96:28:d6:c3:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Feb  9 15:24:44 2026 GMT
            Not After : Feb  8 15:29:44 2027 GMT
        Subject: CN=21D87462B78C2B910B8CFF93496BE82C28EFCD91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:15:e2:50:29:a0:b5:76:d9:87:ec:4c:ec:c8:
                    3d:f9:28:d6:89:38:72:f5:a2:bb:2a:8c:e3:ef:82:
                    b4:3c:c5:10:ff:76:72:a2:0b:33:cd:28:1b:48:f0:
                    8a:68:62:57:12:a5:e2:bb:69:9c:f3:b1:27:f3:42:
                    49:91:6a:c0:6e:8f:83:4c:06:97:36:c7:b4:89:d0:
                    a8:e8:e0:d0:72:78:ea:5c:0f:e1:59:eb:8d:1f:13:
                    2f:06:cd:ff:79:55:34:0e:b5:53:0f:9b:70:c3:27:
                    c1:ac:31:b9:22:28:d0:22:cb:24:45:22:42:1e:b6:
                    94:6a:9a:b2:14:58:c7:02:0b:67:3e:d8:e4:f5:98:
                    ac:af:50:ff:a2:ed:a0:c6:d5:0e:ad:21:5c:1a:23:
                    37:ae:56:3a:ed:a3:33:73:54:9d:d9:a8:4b:27:e9:
                    c5:7e:db:7d:cb:f9:78:25:f1:e6:0a:bc:23:b3:7d:
                    d8:2d:f4:be:9b:f5:e2:11:e0:17:24:2e:06:80:20:
                    d9:c9:1f:5b:8f:06:d3:4a:d3:42:02:77:b7:a5:ca:
                    a2:60:e6:67:eb:4f:ac:71:8a:e6:ea:02:5d:c0:c4:
                    f9:46:e3:75:18:24:24:02:54:59:8d:7a:75:36:ce:
                    f7:72:72:2d:96:1b:04:fb:2b:56:3e:cf:8b:17:21:
                    89:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:D8:74:62:B7:8C:2B:91:0B:8C:FF:93:49:6B:E8:2C:28:EF:CD:91
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3137392e312e382e302f32312d3234203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.1.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         32:d6:e4:67:e1:bb:07:f2:71:f9:a0:fa:bf:b7:7c:03:dd:7e:
         3a:e4:4d:1a:b0:3e:49:db:0b:86:bb:ba:b0:c6:26:ff:ea:1b:
         ca:a9:09:ec:30:c7:67:ea:7f:d0:87:26:bb:ce:2b:d9:2b:fb:
         78:35:91:82:c5:a2:e7:c4:a8:12:d5:52:d1:89:f2:eb:82:38:
         fa:0a:22:af:3c:ca:f2:4b:24:c9:85:0e:11:58:0d:6f:24:49:
         30:52:4e:5c:73:68:3d:c8:6f:1f:5d:f6:7c:2d:56:a7:58:7f:
         d2:1d:93:99:68:17:98:ad:15:58:ad:c3:40:df:05:b1:9f:d7:
         e7:a3:23:90:96:1a:60:19:76:24:2a:27:5e:32:eb:a8:12:87:
         a9:c7:d2:7f:5d:8e:6d:40:6f:df:7e:36:cd:78:b0:32:57:6f:
         f6:4b:1c:d1:2c:85:a8:86:51:a3:f3:40:bd:1f:a2:59:f6:b1:
         da:84:1f:17:2b:64:da:bf:40:a8:1c:6c:64:17:f3:55:c8:a6:
         93:47:79:3e:2b:8d:5b:3f:db:1d:f0:6b:e2:5f:54:17:db:e8:
         9e:ff:62:56:ce:ad:53:ca:8e:6a:2e:28:3e:b2:6e:25:17:2f:
         82:e0:dc:ac:dc:23:c0:b9:88:74:c7:cf:4d:90:47:af:42:52:
         8f:f0:39:bc
-----BEGIN CERTIFICATE-----
MIIFuDCCBKCgAwIBAgIUE9PiEMx6Y0uNgcFFTh61lijWw2cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0JERTg4QzY1MzIwRDNFQkQ4RUQyRjU2OEQ4OTZGMzkz
NUU4N0NDNTAeFw0yNjAyMDkxNTI0NDRaFw0yNzAyMDgxNTI5NDRaMDMxMTAvBgNV
BAMTKDIxRDg3NDYyQjc4QzJCOTEwQjhDRkY5MzQ5NkJFODJDMjhFRkNEOTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIFeJQKaC1dtmH7EzsyD35KNaJ
OHL1orsqjOPvgrQ8xRD/dnKiCzPNKBtI8IpoYlcSpeK7aZzzsSfzQkmRasBuj4NM
Bpc2x7SJ0Kjo4NByeOpcD+FZ640fEy8Gzf95VTQOtVMPm3DDJ8GsMbkiKNAiyyRF
IkIetpRqmrIUWMcCC2c+2OT1mKyvUP+i7aDG1Q6tIVwaIzeuVjrtozNzVJ3ZqEsn
6cV+233L+Xgl8eYKvCOzfdgt9L6b9eIR4BckLgaAINnJH1uPBtNK00ICd7elyqJg
5mfrT6xxiubqAl3AxPlG43UYJCQCVFmNenU2zvdyci2WGwT7K1Y+z4sXIYnJAgMB
AAGjggLCMIICvjAdBgNVHQ4EFgQUIdh0YreMK5ELjP+TSWvoLCjvzZEwHwYDVR0j
BBgwFoAUy96IxlMg0+vY7S9WjYlvOTXofMUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xRkFFODRDOUQyRUE1QjlFNjgyNjM1NDNCQkQ0OThDM0Yx
Q0VGMUY4N0YzODM0MzQ2N0Y1NTE1RDYwMkI3NTI5LzAvQ0JERTg4QzY1MzIwRDNF
QkQ4RUQyRjU2OEQ4OTZGMzkzNUU4N0NDNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQkRFODhDNjUzMjBEM0VCRDhF
RDJGNTY4RDg5NkYzOTM1RTg3Q0M1LmNlcjCBwQYIKwYBBQUHAQsEgbQwgbEwga4G
CCsGAQUFBzALhoGhcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUZBRTg0QzlEMkVBNUI5RTY4MjYzNTQzQkJENDk4QzNGMUNFRjFGODdG
MzgzNDM0NjdGNTUxNUQ2MDJCNzUyOS8wLzMxMzczOTJlMzEyZTM4MmUzMDJmMzIz
MTJkMzIzNDIwM2QzZTIwMzEzODM2MzczOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA7MBCDANBgkqhkiG
9w0BAQsFAAOCAQEAMtbkZ+G7B/Jx+aD6v7d8A91+OuRNGrA+SdsLhru6sMYm/+ob
yqkJ7DDHZ+p/0Icmu84r2Sv7eDWRgsWi58SoEtVS0Yny64I4+goirzzK8kskyYUO
EVgNbyRJMFJOXHNoPchvH132fC1Wp1h/0h2TmWgXmK0VWK3DQN8FsZ/X56MjkJYa
YBl2JConXjLrqBKHqcfSf12ObUBv3342zXiwMldv9ksc0SyFqIZRo/NAvR+iWfax
2oQfFytk2r9AqBxsZBfzVcimk0d5PiuNWz/bHfBr4l9UF9vonv9iVs6tU8qOai4o
PrJuJRcvguDcrNwjwLmIdMfPTZBHr0JSj/A5vA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 21:17:32 2026 by rpki-client