Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3137392e312e38302e302f32302d3234203d3e203138363738.roa
File:                     3137392e312e38302e302f32302d3234203d3e203138363738.roa (raw, json)
Hash identifier:          3Kd5yfFrsAKt35bub54kmKohRdypfWlUPZJZM3qgwW4=
Subject key identifier:   D6:67:A8:69:4D:05:DF:88:13:CD:3E:4F:98:97:7E:35:64:C9:CD:2C
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       7BDB6D17A0842C5F511A781BC584B225B8476647
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3137392e312e38302e302f32302d3234203d3e203138363738.roa
Signing time:             Tue 10 Feb 2026 02:29:52 +0000
ROA not before:           Tue 10 Feb 2026 02:24:52 +0000
ROA not after:            Tue 09 Feb 2027 02:29:52 +0000
asID:                     18678
IP address blocks:        179.1.80.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:db:6d:17:a0:84:2c:5f:51:1a:78:1b:c5:84:b2:25:b8:47:66:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Feb 10 02:24:52 2026 GMT
            Not After : Feb  9 02:29:52 2027 GMT
        Subject: CN=D667A8694D05DF8813CD3E4F98977E3564C9CD2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:65:6f:b5:e8:e6:be:9e:ff:68:92:03:93:b8:
                    6c:c5:5b:40:ff:b1:a3:6d:e7:3b:3b:2d:2d:05:7f:
                    fe:9c:00:2f:c7:66:ae:5a:43:6b:f7:9f:74:32:9b:
                    9d:f3:df:f1:ea:36:6c:56:b4:40:34:92:8a:40:7c:
                    05:29:b4:f0:ae:76:4c:ae:3c:5b:63:6c:37:90:57:
                    56:25:88:55:d1:da:28:b5:f4:d9:89:53:ae:9f:af:
                    48:4c:2b:c0:9d:ee:45:1b:5a:67:f8:79:cb:f6:25:
                    53:3e:f3:3e:ee:83:cb:c9:dd:56:4f:bf:66:68:77:
                    62:4b:25:03:76:2b:55:cd:91:83:76:93:05:01:65:
                    d6:48:84:66:15:9c:cc:c4:0d:ea:fa:f0:bc:52:c7:
                    f3:8e:7a:6b:66:db:5d:38:31:a7:37:19:1d:3a:07:
                    52:9b:8c:2f:24:8d:4e:61:d4:86:54:28:d8:df:c8:
                    ed:f4:58:99:2d:ea:e2:17:8b:00:a7:9d:2d:2f:5b:
                    c0:6e:85:c0:b4:67:92:42:82:a4:bb:cd:fe:95:d0:
                    82:1d:34:4f:df:94:70:7e:1b:5f:9a:f4:74:86:21:
                    99:8e:1b:cb:3e:87:fa:8f:81:2b:e0:8d:ff:97:3a:
                    2f:c1:bb:b3:1c:dc:f2:2f:9c:2f:67:93:88:28:94:
                    b3:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:67:A8:69:4D:05:DF:88:13:CD:3E:4F:98:97:7E:35:64:C9:CD:2C
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3137392e312e38302e302f32302d3234203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.1.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         80:7d:b8:ac:7f:10:c4:08:17:1a:77:26:1a:ee:f1:9a:0e:36:
         24:a1:c9:cf:55:1f:7f:e2:75:2b:55:04:d3:51:09:3e:97:af:
         f1:28:97:60:a4:2f:51:cc:46:14:a1:7c:70:bb:c3:67:b7:32:
         46:f2:76:a6:5b:c9:06:0e:af:1d:4e:b4:5e:fa:b9:15:95:9b:
         97:8a:58:c7:87:a4:04:2f:0e:f4:55:06:19:23:53:c4:20:fd:
         ab:e8:1c:95:02:2c:6f:fe:05:60:72:4a:fd:b8:d7:22:46:dd:
         e3:34:53:7f:24:92:f8:d2:ca:ef:4d:62:e2:e3:82:ae:20:a9:
         bb:4d:a6:3f:29:b2:43:92:ac:bf:3e:62:4f:b9:a3:8c:5d:9f:
         ed:8a:d7:ea:35:d1:c2:c3:de:22:d5:05:1d:3e:ed:7b:ca:38:
         c6:6a:36:34:b7:25:4c:83:9c:e8:53:0b:f6:fc:a5:0f:70:dc:
         21:99:bb:a9:ba:f8:9b:f5:84:26:a8:4f:1a:fd:85:27:76:3e:
         94:6c:b3:2e:70:2a:b0:69:49:7b:d3:d0:f1:97:28:63:31:2e:
         ca:2d:fc:7c:1e:2b:02:4d:40:9f:d3:0e:8b:55:d7:32:b9:a8:
         52:24:45:4e:a3:37:09:eb:c5:46:5f:72:ff:80:10:f2:b9:24:
         f4:4c:cc:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:17:12 2026 by rpki-client