Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE67CD8C92B1DE114AB4D3B2151D828AB834D06E8A890C1E2548B6BC74F7A9A9/0/3137392e35312e3134322e302f32342d3234203d3e20323633373932.roa
File:                     3137392e35312e3134322e302f32342d3234203d3e20323633373932.roa (raw, json)
Hash identifier:          lOkAVHFr+sGbB6tGTCueQswO0AfUUz8PG6ep4Wr8AlU=
Subject key identifier:   63:27:80:58:63:AC:68:2A:F6:1B:EF:C1:EA:6B:09:B8:96:D8:D3:5E
Certificate issuer:       /CN=3F3113B81AF3FD2448A47AEA0168935257B94663
Certificate serial:       2B47AFE9099F4A4C6F5CF03C97CC943EC9F7E183
Authority key identifier: 3F:31:13:B8:1A:F3:FD:24:48:A4:7A:EA:01:68:93:52:57:B9:46:63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F3113B81AF3FD2448A47AEA0168935257B94663.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE67CD8C92B1DE114AB4D3B2151D828AB834D06E8A890C1E2548B6BC74F7A9A9/0/3137392e35312e3134322e302f32342d3234203d3e20323633373932.roa
Signing time:             Tue 17 Feb 2026 13:30:51 +0000
ROA not before:           Tue 17 Feb 2026 13:25:51 +0000
ROA not after:            Tue 16 Feb 2027 13:30:51 +0000
asID:                     263792
IP address blocks:        179.51.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BE67CD8C92B1DE114AB4D3B2151D828AB834D06E8A890C1E2548B6BC74F7A9A9/0/3F3113B81AF3FD2448A47AEA0168935257B94663.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BE67CD8C92B1DE114AB4D3B2151D828AB834D06E8A890C1E2548B6BC74F7A9A9/0/3F3113B81AF3FD2448A47AEA0168935257B94663.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F3113B81AF3FD2448A47AEA0168935257B94663.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:47:af:e9:09:9f:4a:4c:6f:5c:f0:3c:97:cc:94:3e:c9:f7:e1:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F3113B81AF3FD2448A47AEA0168935257B94663
        Validity
            Not Before: Feb 17 13:25:51 2026 GMT
            Not After : Feb 16 13:30:51 2027 GMT
        Subject: CN=6327805863AC682AF61BEFC1EA6B09B896D8D35E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:ff:8f:1d:32:11:31:56:37:4c:a7:7a:c3:f3:
                    fb:b8:0f:5a:26:6d:a3:72:94:90:ff:60:b6:0b:85:
                    e1:72:10:d8:83:5f:88:dc:8d:42:55:5f:93:30:ba:
                    9b:ef:d0:42:e3:5d:3a:02:6e:7b:37:b5:00:3c:2a:
                    57:aa:d5:21:c1:1b:9f:c9:a9:0b:13:3a:1e:92:fa:
                    4e:f7:f7:5f:71:70:08:e7:79:c1:d2:00:5c:9d:01:
                    66:f7:04:15:26:aa:77:14:bf:c8:91:1c:4a:33:1b:
                    26:d7:61:55:07:75:95:9a:2b:13:04:10:92:f2:43:
                    7b:3d:90:27:42:0e:0e:4b:37:79:2e:b9:10:5c:76:
                    86:77:2a:7f:2e:82:ac:d0:70:29:57:72:0c:fa:ae:
                    31:c8:e2:66:4a:d4:60:89:08:f6:1c:93:40:81:df:
                    9b:80:48:d0:2b:ea:84:4e:ca:44:63:a4:11:40:e5:
                    f0:7c:ba:64:09:9d:b6:63:25:c2:43:85:a4:b5:b4:
                    45:c9:a5:bb:87:e7:b0:ef:a0:12:a5:ba:ed:11:ca:
                    94:80:c2:24:c5:f7:8d:aa:a9:b5:48:51:81:19:23:
                    78:06:4c:06:ec:e8:d7:86:34:45:d8:41:63:74:e0:
                    95:8a:f6:5c:9d:20:37:28:67:3b:9f:b0:41:c5:ed:
                    46:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:27:80:58:63:AC:68:2A:F6:1B:EF:C1:EA:6B:09:B8:96:D8:D3:5E
            X509v3 Authority Key Identifier:
                keyid:3F:31:13:B8:1A:F3:FD:24:48:A4:7A:EA:01:68:93:52:57:B9:46:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE67CD8C92B1DE114AB4D3B2151D828AB834D06E8A890C1E2548B6BC74F7A9A9/0/3F3113B81AF3FD2448A47AEA0168935257B94663.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F3113B81AF3FD2448A47AEA0168935257B94663.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE67CD8C92B1DE114AB4D3B2151D828AB834D06E8A890C1E2548B6BC74F7A9A9/0/3137392e35312e3134322e302f32342d3234203d3e20323633373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.51.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:9d:e4:51:6b:73:c4:a1:40:83:f7:39:6e:eb:71:ef:8f:51:
         7d:29:0b:4c:10:df:1d:0c:a8:44:b3:3e:2e:ff:1f:59:5a:85:
         9a:da:08:47:04:e7:7d:2a:50:aa:ea:be:8c:30:2d:8e:9c:c0:
         c6:08:b5:b8:b9:34:24:12:dc:68:23:c0:fc:c8:db:c9:df:1d:
         09:06:66:be:ba:ec:62:d4:1c:82:39:c4:65:82:06:ad:cc:70:
         2a:1f:4f:78:e8:6f:f8:c4:39:a7:91:5d:60:d3:79:b9:0a:5f:
         ef:6a:7e:73:3b:63:ac:31:ed:3f:62:7f:41:2e:75:55:ef:46:
         7f:bd:10:59:24:e3:01:3c:6f:7b:dd:b6:f6:09:30:47:9f:b1:
         87:60:a6:cc:d3:b8:fe:72:7f:da:10:67:89:63:8f:7c:d2:0c:
         bb:e1:9d:56:ab:cc:3f:c9:b8:9c:aa:93:1a:65:38:f7:2c:e4:
         b6:db:ad:6f:f7:37:9e:ef:d6:93:d2:0d:36:87:66:f7:9a:07:
         f1:5c:0a:19:e1:51:75:ef:ee:46:33:96:7c:95:7b:67:82:5b:
         e7:03:99:dd:72:47:b4:b2:39:55:12:91:f4:13:8d:7d:59:b6:
         e4:2c:0e:61:74:7b:02:d7:25:25:fc:55:27:36:0d:25:b6:0a:
         9b:b3:53:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:00:20 2026 by rpki-client