Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4AC3B1B198FAE406D3579932F3C110EDE68CBC9D714EC9105EF3CE3CBDDEA731/0/3137392e36332e3130382e302f32322d3234203d3e20323731393034.roa
File:                     3137392e36332e3130382e302f32322d3234203d3e20323731393034.roa (raw, json)
Hash identifier:          5QY5lx1AZF8IkzTjQqRRJsAcAxc4VRQp+DF7xML/JLE=
Subject key identifier:   F7:BE:91:35:2E:C3:26:DF:7D:5E:C3:C0:C1:71:94:E6:63:8E:82:35
Certificate issuer:       /CN=0C2A24BE5DC7AFF9F5D90A6191F49D2F2C8EA3A8
Certificate serial:       681E564A3B1A3B12B689CF54D50507859FA35F3A
Authority key identifier: 0C:2A:24:BE:5D:C7:AF:F9:F5:D9:0A:61:91:F4:9D:2F:2C:8E:A3:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0C2A24BE5DC7AFF9F5D90A6191F49D2F2C8EA3A8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4AC3B1B198FAE406D3579932F3C110EDE68CBC9D714EC9105EF3CE3CBDDEA731/0/3137392e36332e3130382e302f32322d3234203d3e20323731393034.roa
Signing time:             Tue 06 Jan 2026 19:28:08 +0000
ROA not before:           Tue 06 Jan 2026 19:23:08 +0000
ROA not after:            Tue 05 Jan 2027 19:28:08 +0000
asID:                     271904
IP address blocks:        179.63.108.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4AC3B1B198FAE406D3579932F3C110EDE68CBC9D714EC9105EF3CE3CBDDEA731/0/0C2A24BE5DC7AFF9F5D90A6191F49D2F2C8EA3A8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4AC3B1B198FAE406D3579932F3C110EDE68CBC9D714EC9105EF3CE3CBDDEA731/0/0C2A24BE5DC7AFF9F5D90A6191F49D2F2C8EA3A8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0C2A24BE5DC7AFF9F5D90A6191F49D2F2C8EA3A8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Mar 2026 11:41:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:1e:56:4a:3b:1a:3b:12:b6:89:cf:54:d5:05:07:85:9f:a3:5f:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C2A24BE5DC7AFF9F5D90A6191F49D2F2C8EA3A8
        Validity
            Not Before: Jan  6 19:23:08 2026 GMT
            Not After : Jan  5 19:28:08 2027 GMT
        Subject: CN=F7BE91352EC326DF7D5EC3C0C17194E6638E8235
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a7:e7:6e:88:1d:85:aa:a6:cd:b5:ad:03:ed:
                    59:b1:94:ae:07:97:b9:0b:e8:2a:c3:3e:df:e5:c3:
                    9a:28:3f:8e:43:b1:bf:a1:9b:f7:92:09:07:c5:0e:
                    7b:18:f2:35:1d:79:f5:34:b0:2d:b4:4b:c7:92:be:
                    a9:25:b9:25:8b:ef:5a:f2:7c:a6:4f:fe:2c:dc:d5:
                    66:55:76:34:ef:b2:f9:c6:f2:e2:55:17:78:f0:e6:
                    96:aa:31:cb:09:ea:2e:57:a9:05:ad:8f:3a:69:39:
                    2d:04:a1:d6:ac:6a:93:01:59:07:dd:98:8a:61:9f:
                    3e:49:c6:8b:8b:29:43:02:88:c2:0e:64:da:bc:c0:
                    dd:25:5a:41:85:79:42:1b:80:a5:a4:3a:8e:8b:a8:
                    c3:76:25:16:af:0b:71:6e:26:80:89:81:61:21:ac:
                    94:eb:91:f1:e6:32:74:f3:7c:b8:7d:97:b9:44:a5:
                    c8:63:55:47:90:7f:2f:d6:97:70:d4:86:88:5c:4d:
                    34:14:51:f4:45:fa:df:3c:3f:c8:e7:8b:86:22:8b:
                    11:65:40:84:22:d1:34:2d:e7:5a:8c:48:92:fb:c0:
                    a6:25:7e:29:9a:f3:15:3f:24:0a:d4:64:fc:fd:9f:
                    32:69:6c:1a:ce:f6:c1:af:68:f7:0f:95:0a:f2:a9:
                    85:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:BE:91:35:2E:C3:26:DF:7D:5E:C3:C0:C1:71:94:E6:63:8E:82:35
            X509v3 Authority Key Identifier:
                keyid:0C:2A:24:BE:5D:C7:AF:F9:F5:D9:0A:61:91:F4:9D:2F:2C:8E:A3:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4AC3B1B198FAE406D3579932F3C110EDE68CBC9D714EC9105EF3CE3CBDDEA731/0/0C2A24BE5DC7AFF9F5D90A6191F49D2F2C8EA3A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0C2A24BE5DC7AFF9F5D90A6191F49D2F2C8EA3A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4AC3B1B198FAE406D3579932F3C110EDE68CBC9D714EC9105EF3CE3CBDDEA731/0/3137392e36332e3130382e302f32322d3234203d3e20323731393034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:08:57:b7:58:20:c7:34:46:33:48:85:76:ae:1a:eb:03:53:
         70:ce:ab:0c:7e:b6:39:da:4e:d3:05:2e:c7:dd:0e:0f:38:71:
         e6:01:00:84:dc:d7:8b:f8:da:42:a8:0d:bf:5c:79:a0:9b:14:
         7a:c0:85:40:bb:53:56:fa:71:b7:b5:c4:5b:ef:a6:18:24:d5:
         3b:7f:3c:79:cb:75:d4:ad:58:1a:aa:92:cf:62:a6:84:3d:45:
         75:43:36:09:ba:ee:46:39:1d:2c:05:0d:84:72:5c:47:dc:73:
         cd:f8:3e:4c:d1:7e:37:d1:2f:86:70:6d:89:20:eb:aa:14:ff:
         c8:6a:1c:9f:3b:6c:ef:97:2b:ca:ea:6e:4b:2e:3c:b6:d4:a3:
         96:c6:42:72:7f:47:46:b3:c6:bb:91:31:17:bc:07:3c:53:ee:
         6f:68:5e:7e:36:87:4e:98:7d:80:e1:cc:0a:5a:aa:a1:27:c6:
         c4:35:7f:05:14:e1:45:12:d2:b4:21:6b:cd:b5:ce:29:6c:b5:
         14:c9:92:e6:5f:d9:95:b4:cb:4f:5c:09:73:f3:5c:a8:31:6b:
         0c:92:19:66:79:a4:73:c0:55:4f:8a:d8:2b:f7:e0:4b:d0:d3:
         24:75:22:19:81:9e:17:ef:08:0e:95:70:42:b4:c4:c6:87:90:
         d6:cf:df:14
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUaB5WSjsaOxK2ic9U1QUHhZ+jXzowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEMyQTI0QkU1REM3QUZGOUY1RDkwQTYxOTFGNDlEMkYy
QzhFQTNBODAeFw0yNjAxMDYxOTIzMDhaFw0yNzAxMDUxOTI4MDhaMDMxMTAvBgNV
BAMTKEY3QkU5MTM1MkVDMzI2REY3RDVFQzNDMEMxNzE5NEU2NjM4RTgyMzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3p+duiB2FqqbNta0D7VmxlK4H
l7kL6CrDPt/lw5ooP45Dsb+hm/eSCQfFDnsY8jUdefU0sC20S8eSvqkluSWL71ry
fKZP/izc1WZVdjTvsvnG8uJVF3jw5paqMcsJ6i5XqQWtjzppOS0EodasapMBWQfd
mIphnz5JxouLKUMCiMIOZNq8wN0lWkGFeUIbgKWkOo6LqMN2JRavC3FuJoCJgWEh
rJTrkfHmMnTzfLh9l7lEpchjVUeQfy/Wl3DUhohcTTQUUfRF+t88P8jni4YiixFl
QIQi0TQt51qMSJL7wKYlfima8xU/JArUZPz9nzJpbBrO9sGvaPcPlQryqYXrAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU976RNS7DJt99XsPAwXGU5mOOgjUwHwYDVR0j
BBgwFoAUDCokvl3Hr/n12QphkfSdLyyOo6gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80QUMzQjFCMTk4RkFFNDA2RDM1Nzk5MzJGM0MxMTBFREU2
OENCQzlENzE0RUM5MTA1RUYzQ0UzQ0JEREVBNzMxLzAvMEMyQTI0QkU1REM3QUZG
OUY1RDkwQTYxOTFGNDlEMkYyQzhFQTNBOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wQzJBMjRCRTVEQzdBRkY5RjVE
OTBBNjE5MUY0OUQyRjJDOEVBM0E4LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNEFDM0IxQjE5OEZBRTQwNkQzNTc5OTMyRjNDMTEwRURFNjhDQkM5RDcx
NEVDOTEwNUVGM0NFM0NCRERFQTczMS8wLzMxMzczOTJlMzYzMzJlMzEzMDM4MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNzMxMzkzMDM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCsz9s
MA0GCSqGSIb3DQEBCwUAA4IBAQCYCFe3WCDHNEYzSIV2rhrrA1NwzqsMfrY52k7T
BS7H3Q4POHHmAQCE3NeL+NpCqA2/XHmgmxR6wIVAu1NW+nG3tcRb76YYJNU7fzx5
y3XUrVgaqpLPYqaEPUV1QzYJuu5GOR0sBQ2EclxH3HPN+D5M0X430S+GcG2JIOuq
FP/IahyfO2zvlyvK6m5LLjy21KOWxkJyf0dGs8a7kTEXvAc8U+5vaF5+NodOmH2A
4cwKWqqhJ8bENX8FFOFFEtK0IWvNtc4pbLUUyZLmX9mVtMtPXAlz81yoMWsMkhlm
eaRzwFVPitgr9+BL0NMkdSIZgZ4X7wgOlXBCtMTGh5DWz98U
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:12:57 2026 by rpki-client