Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B2640994DAD0823F46C2F5E1B731C06AA780E636136AFA402B63199EC1364364/0/3137372e37332e3135342e302f32342d3234203d3e20323634363436.roa
File:                     3137372e37332e3135342e302f32342d3234203d3e20323634363436.roa (raw, json)
Hash identifier:          ibjOS7v3RDyBWhHathJ8OCxuqEoX4Ity0uSPUA9TKXE=
Subject key identifier:   09:3C:21:48:13:3C:43:B5:A1:DA:E1:F1:CE:CD:7C:75:85:05:FF:67
Certificate issuer:       /CN=1EC7B31A1AB1BBCD343A42B4F1AC4D6EDB3B3DC8
Certificate serial:       1257C689C967324C8B14C3B1E7DB9D1F6D4FCD6A
Authority key identifier: 1E:C7:B3:1A:1A:B1:BB:CD:34:3A:42:B4:F1:AC:4D:6E:DB:3B:3D:C8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EC7B31A1AB1BBCD343A42B4F1AC4D6EDB3B3DC8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B2640994DAD0823F46C2F5E1B731C06AA780E636136AFA402B63199EC1364364/0/3137372e37332e3135342e302f32342d3234203d3e20323634363436.roa
Signing time:             Tue 17 Feb 2026 22:30:59 +0000
ROA not before:           Tue 17 Feb 2026 22:25:59 +0000
ROA not after:            Tue 16 Feb 2027 22:30:59 +0000
asID:                     264646
IP address blocks:        177.73.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B2640994DAD0823F46C2F5E1B731C06AA780E636136AFA402B63199EC1364364/0/1EC7B31A1AB1BBCD343A42B4F1AC4D6EDB3B3DC8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B2640994DAD0823F46C2F5E1B731C06AA780E636136AFA402B63199EC1364364/0/1EC7B31A1AB1BBCD343A42B4F1AC4D6EDB3B3DC8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EC7B31A1AB1BBCD343A42B4F1AC4D6EDB3B3DC8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 03:06:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:57:c6:89:c9:67:32:4c:8b:14:c3:b1:e7:db:9d:1f:6d:4f:cd:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1EC7B31A1AB1BBCD343A42B4F1AC4D6EDB3B3DC8
        Validity
            Not Before: Feb 17 22:25:59 2026 GMT
            Not After : Feb 16 22:30:59 2027 GMT
        Subject: CN=093C2148133C43B5A1DAE1F1CECD7C758505FF67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b6:50:dc:6f:f1:bf:5b:28:61:ba:0e:bb:c6:
                    1d:dc:86:c0:36:a7:a5:21:a6:b2:dd:82:5c:d2:e9:
                    0c:4a:a3:3f:77:9e:2b:47:af:b7:db:87:d1:5f:c4:
                    d2:45:e6:13:ae:9b:b7:31:f1:05:bb:be:59:99:72:
                    25:30:82:59:8d:91:af:4f:7b:84:0a:47:e5:e3:85:
                    23:6c:3e:ec:37:a0:76:b6:01:72:77:57:3b:67:b2:
                    66:27:fc:cc:96:18:92:17:2d:50:90:d3:b5:72:9f:
                    ea:93:de:7a:a8:34:25:cf:5d:61:41:8a:d2:2a:76:
                    c7:fb:91:5a:5e:32:37:b3:ae:6a:f9:f4:80:b6:8a:
                    37:ad:a4:99:8f:25:b2:7c:30:ba:84:26:eb:b9:bf:
                    18:e8:5c:18:96:13:95:73:58:bf:6c:f9:61:2f:3a:
                    35:01:43:f0:da:0e:32:d5:7f:bd:55:86:05:40:b5:
                    2f:4a:e7:58:11:28:10:fa:5a:2c:25:55:da:1f:85:
                    3d:f7:56:38:3e:e7:1c:38:24:b0:85:fe:6e:68:9f:
                    fd:57:98:47:fd:90:96:7e:f1:7d:1a:9c:cf:90:6a:
                    4b:44:f4:c0:c8:b7:13:8d:1b:f1:b9:63:8a:48:63:
                    bf:11:ed:f7:c0:87:9a:22:be:24:b3:32:1a:b1:b9:
                    e5:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:3C:21:48:13:3C:43:B5:A1:DA:E1:F1:CE:CD:7C:75:85:05:FF:67
            X509v3 Authority Key Identifier:
                keyid:1E:C7:B3:1A:1A:B1:BB:CD:34:3A:42:B4:F1:AC:4D:6E:DB:3B:3D:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B2640994DAD0823F46C2F5E1B731C06AA780E636136AFA402B63199EC1364364/0/1EC7B31A1AB1BBCD343A42B4F1AC4D6EDB3B3DC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EC7B31A1AB1BBCD343A42B4F1AC4D6EDB3B3DC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B2640994DAD0823F46C2F5E1B731C06AA780E636136AFA402B63199EC1364364/0/3137372e37332e3135342e302f32342d3234203d3e20323634363436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:f5:65:0e:ba:71:11:eb:91:33:08:c1:91:64:af:96:3b:cc:
         2b:9b:25:f7:37:fe:41:d4:7c:0b:4d:b5:c9:24:3b:b1:d2:59:
         88:ed:e8:49:fb:71:ed:0d:ad:7d:69:b8:ec:cc:3d:67:93:c1:
         c9:04:cb:9a:9a:7e:b7:a0:38:d4:ba:d2:15:d3:59:79:aa:b0:
         c3:9c:c7:97:52:f4:9b:36:0d:81:7b:c3:40:42:71:8e:a0:a5:
         dd:38:1d:1d:fa:45:73:84:fb:f9:25:5b:60:ec:54:a7:71:4a:
         07:f7:c8:60:bc:3c:d0:ac:f2:20:46:cb:62:2c:99:65:63:a5:
         db:16:76:cf:29:53:76:27:f0:1f:46:44:bb:1e:36:b2:92:b2:
         64:fd:94:5f:3a:43:ca:5c:e5:66:6f:f3:23:ec:28:02:34:8d:
         d1:d0:83:05:f5:e8:9a:10:bf:2d:1b:78:e6:aa:41:ac:d8:52:
         3d:fb:4c:0f:31:bd:83:ef:4a:8f:41:98:bf:7a:6c:96:91:f0:
         c1:4b:94:85:7a:e3:60:30:3c:9b:e8:b1:5b:43:87:8d:62:2a:
         5f:cf:ca:70:2b:56:b3:46:71:5e:79:89:28:23:09:54:f0:73:
         05:e2:c7:2f:82:ff:a9:f7:11:e3:45:3c:80:3e:1a:6d:9b:e9:
         05:d9:a3:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:16:38 2026 by rpki-client