Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE67CD8C92B1DE114AB4D3B2151D828AB834D06E8A890C1E2548B6BC74F7A9A9/0/3137392e35312e3134312e302f32342d3234203d3e20323633373932.roa
File:                     3137392e35312e3134312e302f32342d3234203d3e20323633373932.roa (raw, json)
Hash identifier:          171pIKZ43SftnQX1ptAAUsh2g8T6Fm7qTMO9cyeie1Q=
Subject key identifier:   39:FB:DE:78:56:45:7D:4D:47:98:90:EA:98:68:81:A1:A1:39:55:8C
Certificate issuer:       /CN=3F3113B81AF3FD2448A47AEA0168935257B94663
Certificate serial:       6F874EE639312B440D1D69FF1762FCF9DBE2BA3D
Authority key identifier: 3F:31:13:B8:1A:F3:FD:24:48:A4:7A:EA:01:68:93:52:57:B9:46:63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F3113B81AF3FD2448A47AEA0168935257B94663.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE67CD8C92B1DE114AB4D3B2151D828AB834D06E8A890C1E2548B6BC74F7A9A9/0/3137392e35312e3134312e302f32342d3234203d3e20323633373932.roa
Signing time:             Tue 17 Feb 2026 13:30:51 +0000
ROA not before:           Tue 17 Feb 2026 13:25:51 +0000
ROA not after:            Tue 16 Feb 2027 13:30:51 +0000
asID:                     263792
IP address blocks:        179.51.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BE67CD8C92B1DE114AB4D3B2151D828AB834D06E8A890C1E2548B6BC74F7A9A9/0/3F3113B81AF3FD2448A47AEA0168935257B94663.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BE67CD8C92B1DE114AB4D3B2151D828AB834D06E8A890C1E2548B6BC74F7A9A9/0/3F3113B81AF3FD2448A47AEA0168935257B94663.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F3113B81AF3FD2448A47AEA0168935257B94663.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:87:4e:e6:39:31:2b:44:0d:1d:69:ff:17:62:fc:f9:db:e2:ba:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F3113B81AF3FD2448A47AEA0168935257B94663
        Validity
            Not Before: Feb 17 13:25:51 2026 GMT
            Not After : Feb 16 13:30:51 2027 GMT
        Subject: CN=39FBDE7856457D4D479890EA986881A1A139558C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:a7:1e:99:68:c4:fa:18:fd:84:93:65:9b:0c:
                    9f:ff:9d:56:b4:28:89:b9:a9:f5:c0:92:b0:66:de:
                    96:6e:b9:da:f8:68:90:b3:16:9e:e4:71:28:60:6d:
                    b2:a2:d6:74:55:29:4d:f2:4f:54:35:04:6b:98:5e:
                    74:af:f8:cf:90:65:32:ca:2f:66:a8:f4:70:b1:0c:
                    8b:d1:96:de:8f:92:46:34:81:0e:3f:e9:c6:88:8d:
                    06:5b:94:a8:8f:ac:50:09:55:da:43:6c:f3:3d:98:
                    b5:31:33:6c:d3:9d:7f:d4:66:5c:8f:54:ae:c4:93:
                    bc:42:f7:10:77:af:74:97:e9:b1:4c:7e:03:8c:5a:
                    43:7e:e9:4e:34:3f:34:ba:ae:b0:6f:ef:b4:02:20:
                    bf:a4:e0:96:f2:82:8b:a3:1c:c8:9e:b6:dc:f0:e4:
                    8a:5e:00:cf:ae:07:60:08:c8:54:39:0e:95:05:9d:
                    ac:da:5c:5d:86:15:d3:16:64:fa:4b:df:dd:ab:9f:
                    66:c5:04:b6:57:23:aa:0e:34:ec:f5:dc:c1:ea:e1:
                    fb:20:a1:6c:19:3a:af:9b:21:83:52:e8:11:24:c3:
                    b7:47:b8:d7:96:9d:7d:d9:c3:38:85:67:af:5d:d2:
                    5f:d1:f8:9a:cf:85:f4:09:23:7c:f6:7f:69:ce:04:
                    1e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:FB:DE:78:56:45:7D:4D:47:98:90:EA:98:68:81:A1:A1:39:55:8C
            X509v3 Authority Key Identifier:
                keyid:3F:31:13:B8:1A:F3:FD:24:48:A4:7A:EA:01:68:93:52:57:B9:46:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE67CD8C92B1DE114AB4D3B2151D828AB834D06E8A890C1E2548B6BC74F7A9A9/0/3F3113B81AF3FD2448A47AEA0168935257B94663.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F3113B81AF3FD2448A47AEA0168935257B94663.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE67CD8C92B1DE114AB4D3B2151D828AB834D06E8A890C1E2548B6BC74F7A9A9/0/3137392e35312e3134312e302f32342d3234203d3e20323633373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.51.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:2e:e3:75:65:3e:69:44:0e:26:e2:a2:02:44:fb:b0:f9:d6:
         ee:8d:e6:a9:fe:64:75:58:e6:7e:96:07:3c:15:98:d6:c8:97:
         ff:b9:e1:17:76:9b:ab:ef:18:26:56:6c:11:97:29:a9:c1:ef:
         fb:b6:67:ac:fe:58:d1:58:61:ba:76:92:94:b6:ba:e8:9e:83:
         67:e3:26:36:b7:0a:b8:51:0d:13:0d:3b:42:78:24:97:fc:8e:
         1c:62:30:0c:68:5a:82:e0:2b:5b:e9:5c:76:e5:b9:12:ef:71:
         ec:03:ea:33:2d:5a:11:f5:cc:8b:fd:7f:d3:90:56:d9:c7:af:
         44:6a:18:1f:60:64:97:05:0e:63:86:45:a1:c4:c5:f0:88:14:
         19:65:37:5d:b3:56:0c:0e:3d:df:c3:18:86:56:27:e2:2a:e9:
         0a:ec:c5:92:03:63:65:eb:fa:2e:a0:7b:b8:dc:26:b3:d5:93:
         98:61:3d:82:f0:d6:52:73:9c:a1:60:86:a2:13:2c:57:cc:91:
         ca:68:3f:ce:ea:20:a7:d4:3a:ad:a2:a9:bf:78:83:46:79:8a:
         65:71:d9:da:46:e6:95:67:78:c8:22:11:6e:c3:66:e9:fb:4f:
         44:03:7f:c8:01:f5:3a:f6:dc:92:fc:2b:ee:1d:22:7c:58:18:
         cf:be:d1:d2
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUb4dO5jkxK0QNHWn/F2L8+dviuj0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0YzMTEzQjgxQUYzRkQyNDQ4QTQ3QUVBMDE2ODkzNTI1
N0I5NDY2MzAeFw0yNjAyMTcxMzI1NTFaFw0yNzAyMTYxMzMwNTFaMDMxMTAvBgNV
BAMTKDM5RkJERTc4NTY0NTdENEQ0Nzk4OTBFQTk4Njg4MUExQTEzOTU1OEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhpx6ZaMT6GP2Ek2WbDJ//nVa0
KIm5qfXAkrBm3pZuudr4aJCzFp7kcShgbbKi1nRVKU3yT1Q1BGuYXnSv+M+QZTLK
L2ao9HCxDIvRlt6PkkY0gQ4/6caIjQZblKiPrFAJVdpDbPM9mLUxM2zTnX/UZlyP
VK7Ek7xC9xB3r3SX6bFMfgOMWkN+6U40PzS6rrBv77QCIL+k4JbygoujHMiettzw
5IpeAM+uB2AIyFQ5DpUFnazaXF2GFdMWZPpL392rn2bFBLZXI6oONOz13MHq4fsg
oWwZOq+bIYNS6BEkw7dHuNeWnX3ZwziFZ69d0l/R+JrPhfQJI3z2f2nOBB73AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUOfveeFZFfU1HmJDqmGiBoaE5VYwwHwYDVR0j
BBgwFoAUPzETuBrz/SRIpHrqAWiTUle5RmMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CRTY3Q0Q4QzkyQjFERTExNEFCNEQzQjIxNTFEODI4QUI4
MzREMDZFOEE4OTBDMUUyNTQ4QjZCQzc0RjdBOUE5LzAvM0YzMTEzQjgxQUYzRkQy
NDQ4QTQ3QUVBMDE2ODkzNTI1N0I5NDY2My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zRjMxMTNCODFBRjNGRDI0NDhB
NDdBRUEwMTY4OTM1MjU3Qjk0NjYzLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQkU2N0NEOEM5MkIxREUxMTRBQjREM0IyMTUxRDgyOEFCODM0RDA2RThB
ODkwQzFFMjU0OEI2QkM3NEY3QTlBOS8wLzMxMzczOTJlMzUzMTJlMzEzNDMxMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMzMzczOTMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAszON
MA0GCSqGSIb3DQEBCwUAA4IBAQDBLuN1ZT5pRA4m4qICRPuw+dbujeap/mR1WOZ+
lgc8FZjWyJf/ueEXdpur7xgmVmwRlympwe/7tmes/ljRWGG6dpKUtrronoNn4yY2
twq4UQ0TDTtCeCSX/I4cYjAMaFqC4Ctb6Vx25bkS73HsA+ozLVoR9cyL/X/TkFbZ
x69EahgfYGSXBQ5jhkWhxMXwiBQZZTdds1YMDj3fwxiGVifiKukK7MWSA2Nl6/ou
oHu43Caz1ZOYYT2C8NZSc5yhYIaiEyxXzJHKaD/O6iCn1Dqtoqm/eINGeYplcdna
RuaVZ3jIIhFuw2bp+09EA3/IAfU69tyS/CvuHSJ8WBjPvtHS
-----END CERTIFICATE-----
Generated at Mon Mar 2 20:19:46 2026 by rpki-client