Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3137392e312e39362e302f32302d3234203d3e203138363738.roa
File:                     3137392e312e39362e302f32302d3234203d3e203138363738.roa (raw, json)
Hash identifier:          1Bdn74tl9wqr9AY4uuPgZzCIamqaYgbDOByLYsb9B6w=
Subject key identifier:   16:02:E3:78:A5:1D:B9:A3:48:3B:25:FA:45:8B:B0:45:8F:D7:01:5F
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       0DCD6C81A6F720A0AA239224FC96C6ACF321A0B7
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3137392e312e39362e302f32302d3234203d3e203138363738.roa
Signing time:             Tue 10 Feb 2026 20:30:05 +0000
ROA not before:           Tue 10 Feb 2026 20:25:05 +0000
ROA not after:            Tue 09 Feb 2027 20:30:05 +0000
asID:                     18678
IP address blocks:        179.1.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:cd:6c:81:a6:f7:20:a0:aa:23:92:24:fc:96:c6:ac:f3:21:a0:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Feb 10 20:25:05 2026 GMT
            Not After : Feb  9 20:30:05 2027 GMT
        Subject: CN=1602E378A51DB9A3483B25FA458BB0458FD7015F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8f:62:ac:00:4f:8d:97:a7:01:f7:b4:80:b6:
                    c9:e6:35:74:3e:c3:5a:ef:74:63:25:5f:ba:bd:35:
                    35:b7:58:f8:e5:85:25:fc:9e:36:87:84:a0:11:fc:
                    c4:22:05:ea:d8:a5:0b:c7:64:63:a5:ab:8a:29:ed:
                    6f:2e:d0:80:38:b0:40:f9:2d:58:ca:a0:55:95:ee:
                    4b:62:fd:59:8a:6e:71:0f:41:b3:7c:0c:30:27:70:
                    91:19:e5:b6:e3:ce:08:e2:e7:74:39:82:c8:cf:2d:
                    46:a6:c2:aa:11:1e:cb:58:6c:b4:5c:e6:91:ca:e2:
                    2d:5f:b6:0f:de:29:a0:57:8e:95:12:c8:22:21:ef:
                    63:71:b9:dd:64:d2:58:8a:4f:52:b4:e7:c3:52:f2:
                    86:27:b7:4a:0c:65:29:c0:6a:d2:8f:53:5e:42:cd:
                    19:4c:f9:6d:46:04:c4:0b:b6:ff:85:7c:6c:b1:41:
                    7d:37:4e:90:6f:f3:b3:a4:aa:0b:79:8e:94:3f:e6:
                    44:83:75:cd:2e:a9:ae:77:66:64:24:30:7d:e9:da:
                    e7:ab:f8:79:2b:6d:95:06:89:19:d0:5f:ca:9a:7c:
                    54:fb:24:3c:fe:be:64:19:f8:87:83:b4:63:85:9a:
                    75:6f:4b:bf:a3:42:64:31:09:5b:3e:a4:5b:6c:63:
                    16:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:02:E3:78:A5:1D:B9:A3:48:3B:25:FA:45:8B:B0:45:8F:D7:01:5F
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3137392e312e39362e302f32302d3234203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.1.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         09:7c:bf:81:03:d6:b4:86:1e:f3:7f:f6:1f:e1:7d:de:76:14:
         31:39:a2:41:de:cb:a6:ed:bd:1e:35:dc:6c:df:3a:8a:e1:2a:
         fc:80:ea:2f:af:61:c1:10:ff:61:30:ba:04:13:f0:47:87:35:
         41:fc:79:f6:95:aa:49:38:6d:48:ef:8d:5f:ea:ea:fe:c6:b0:
         03:85:c7:cd:9a:ec:df:26:dc:b3:77:d0:64:f4:82:52:5c:ed:
         4b:f1:f5:af:11:29:8a:77:61:16:db:27:1b:5f:60:67:43:43:
         4a:30:8f:34:cf:5b:6b:88:14:c7:6b:b0:10:a6:7e:15:b9:12:
         ff:46:b1:05:91:1d:e7:a3:bb:e7:3c:16:8e:47:c5:93:e3:8d:
         77:d2:b0:14:b1:0b:46:47:4d:29:08:a4:98:51:45:16:89:a7:
         3d:7b:05:58:37:d8:e1:84:d0:f2:2f:52:4a:52:ef:01:38:b7:
         5b:b8:f0:fc:7a:bc:c0:af:a6:ba:61:ff:7f:23:0a:f3:76:9b:
         38:6c:5e:7b:00:3a:ea:c1:c5:40:31:54:6b:23:11:5d:a1:dd:
         62:01:68:2e:ea:61:62:26:40:b5:60:8c:b2:28:12:17:86:4d:
         0a:74:f0:b5:58:93:85:0c:54:f7:48:3a:2b:3f:ba:d9:b0:68:
         93:ef:fb:03
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUDc1sgab3IKCqI5Ik/JbGrPMhoLcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0JERTg4QzY1MzIwRDNFQkQ4RUQyRjU2OEQ4OTZGMzkz
NUU4N0NDNTAeFw0yNjAyMTAyMDI1MDVaFw0yNzAyMDkyMDMwMDVaMDMxMTAvBgNV
BAMTKDE2MDJFMzc4QTUxREI5QTM0ODNCMjVGQTQ1OEJCMDQ1OEZENzAxNUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+j2KsAE+Nl6cB97SAtsnmNXQ+
w1rvdGMlX7q9NTW3WPjlhSX8njaHhKAR/MQiBerYpQvHZGOlq4op7W8u0IA4sED5
LVjKoFWV7kti/VmKbnEPQbN8DDAncJEZ5bbjzgji53Q5gsjPLUamwqoRHstYbLRc
5pHK4i1ftg/eKaBXjpUSyCIh72Nxud1k0liKT1K058NS8oYnt0oMZSnAatKPU15C
zRlM+W1GBMQLtv+FfGyxQX03TpBv87Okqgt5jpQ/5kSDdc0uqa53ZmQkMH3p2uer
+HkrbZUGiRnQX8qafFT7JDz+vmQZ+IeDtGOFmnVvS7+jQmQxCVs+pFtsYxYpAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUFgLjeKUduaNIOyX6RYuwRY/XAV8wHwYDVR0j
BBgwFoAUy96IxlMg0+vY7S9WjYlvOTXofMUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xRkFFODRDOUQyRUE1QjlFNjgyNjM1NDNCQkQ0OThDM0Yx
Q0VGMUY4N0YzODM0MzQ2N0Y1NTE1RDYwMkI3NTI5LzAvQ0JERTg4QzY1MzIwRDNF
QkQ4RUQyRjU2OEQ4OTZGMzkzNUU4N0NDNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQkRFODhDNjUzMjBEM0VCRDhF
RDJGNTY4RDg5NkYzOTM1RTg3Q0M1LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUZBRTg0QzlEMkVBNUI5RTY4MjYzNTQzQkJENDk4QzNGMUNFRjFGODdG
MzgzNDM0NjdGNTUxNUQ2MDJCNzUyOS8wLzMxMzczOTJlMzEyZTM5MzYyZTMwMmYz
MjMwMmQzMjM0MjAzZDNlMjAzMTM4MzYzNzM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEswFgMA0GCSqG
SIb3DQEBCwUAA4IBAQAJfL+BA9a0hh7zf/Yf4X3edhQxOaJB3sum7b0eNdxs3zqK
4Sr8gOovr2HBEP9hMLoEE/BHhzVB/Hn2lapJOG1I741f6ur+xrADhcfNmuzfJtyz
d9Bk9IJSXO1L8fWvESmKd2EW2ycbX2BnQ0NKMI80z1triBTHa7AQpn4VuRL/RrEF
kR3no7vnPBaOR8WT44130rAUsQtGR00pCKSYUUUWiac9ewVYN9jhhNDyL1JKUu8B
OLdbuPD8erzAr6a6Yf9/Iwrzdps4bF57ADrqwcVAMVRrIxFdod1iAWgu6mFiJkC1
YIyyKBIXhk0KdPC1WJOFDFT3SDorP7rZsGiT7/sD
-----END CERTIFICATE-----
Generated at Mon Mar 2 21:17:02 2026 by rpki-client