Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE67CD8C92B1DE114AB4D3B2151D828AB834D06E8A890C1E2548B6BC74F7A9A9/0/3137392e35312e3134332e302f32342d3234203d3e20323633373932.roa
File:                     3137392e35312e3134332e302f32342d3234203d3e20323633373932.roa (raw, json)
Hash identifier:          MU1jxRCDE6ZDw/MuJgCf2YgDCb2B8/CZJRVtQWUI3HM=
Subject key identifier:   24:F0:33:CC:9E:B9:CB:4C:B3:AE:7A:52:DE:5C:AD:65:4C:2A:31:75
Certificate issuer:       /CN=3F3113B81AF3FD2448A47AEA0168935257B94663
Certificate serial:       52EA839BF84D4C12DA757B4E55821FAB92E2DCD4
Authority key identifier: 3F:31:13:B8:1A:F3:FD:24:48:A4:7A:EA:01:68:93:52:57:B9:46:63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F3113B81AF3FD2448A47AEA0168935257B94663.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE67CD8C92B1DE114AB4D3B2151D828AB834D06E8A890C1E2548B6BC74F7A9A9/0/3137392e35312e3134332e302f32342d3234203d3e20323633373932.roa
Signing time:             Tue 17 Feb 2026 13:30:51 +0000
ROA not before:           Tue 17 Feb 2026 13:25:51 +0000
ROA not after:            Tue 16 Feb 2027 13:30:51 +0000
asID:                     263792
IP address blocks:        179.51.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BE67CD8C92B1DE114AB4D3B2151D828AB834D06E8A890C1E2548B6BC74F7A9A9/0/3F3113B81AF3FD2448A47AEA0168935257B94663.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BE67CD8C92B1DE114AB4D3B2151D828AB834D06E8A890C1E2548B6BC74F7A9A9/0/3F3113B81AF3FD2448A47AEA0168935257B94663.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F3113B81AF3FD2448A47AEA0168935257B94663.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:ea:83:9b:f8:4d:4c:12:da:75:7b:4e:55:82:1f:ab:92:e2:dc:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F3113B81AF3FD2448A47AEA0168935257B94663
        Validity
            Not Before: Feb 17 13:25:51 2026 GMT
            Not After : Feb 16 13:30:51 2027 GMT
        Subject: CN=24F033CC9EB9CB4CB3AE7A52DE5CAD654C2A3175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d4:26:3a:15:1a:7d:02:9b:ec:97:3b:76:92:
                    ac:26:a5:26:be:78:e4:10:e1:cc:7b:4b:58:57:4c:
                    2b:44:ca:60:7a:36:7c:d7:d6:4b:b8:6d:12:aa:29:
                    29:8e:af:f2:6a:ee:bf:8b:ec:2b:4e:68:a3:e2:5c:
                    48:29:d0:b4:85:cd:c1:85:cd:5f:ad:3d:48:1f:c2:
                    ec:c6:38:6e:87:4e:e9:26:a6:54:2c:de:2d:07:33:
                    b6:cb:85:43:0a:00:3b:3b:87:55:e7:0d:2b:8c:c6:
                    83:27:84:60:cb:69:14:04:09:fb:42:d6:62:77:ba:
                    1d:d1:5b:d2:07:d5:a1:17:97:f3:dc:d7:b0:c0:90:
                    2c:ad:f9:96:1a:6c:c2:35:57:ba:5b:af:d5:c0:36:
                    71:35:9c:f2:61:14:86:64:4a:a6:3e:a9:cb:cd:71:
                    08:03:43:d4:46:ca:fb:e5:41:9a:59:f1:8e:0b:c8:
                    3c:53:66:a5:38:8e:76:b2:eb:b5:70:bc:0e:04:5d:
                    0f:13:09:a7:42:fc:c6:19:ac:73:c8:fd:4d:c2:a0:
                    28:ed:c8:55:0e:5d:7c:a3:8f:f8:04:53:1d:9e:ad:
                    18:7b:a8:05:ad:c7:68:5b:dc:4f:29:6e:78:39:f7:
                    ad:14:77:cd:19:b7:9a:e4:32:4b:d1:b0:2a:8b:ad:
                    59:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:F0:33:CC:9E:B9:CB:4C:B3:AE:7A:52:DE:5C:AD:65:4C:2A:31:75
            X509v3 Authority Key Identifier:
                keyid:3F:31:13:B8:1A:F3:FD:24:48:A4:7A:EA:01:68:93:52:57:B9:46:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE67CD8C92B1DE114AB4D3B2151D828AB834D06E8A890C1E2548B6BC74F7A9A9/0/3F3113B81AF3FD2448A47AEA0168935257B94663.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F3113B81AF3FD2448A47AEA0168935257B94663.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE67CD8C92B1DE114AB4D3B2151D828AB834D06E8A890C1E2548B6BC74F7A9A9/0/3137392e35312e3134332e302f32342d3234203d3e20323633373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.51.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:e9:85:40:ab:0e:0f:30:44:fe:42:28:25:25:99:c8:7e:84:
         37:bd:b1:18:b4:5d:8a:bf:97:70:72:7c:2c:90:54:ea:a5:ff:
         ae:22:5e:37:c0:6b:ac:83:24:ec:4c:94:9b:35:e3:ff:d8:58:
         3c:d6:ca:a1:ab:27:ab:5c:ed:47:0b:61:6b:9f:c5:a4:91:67:
         b6:af:52:88:71:62:d8:1f:f0:52:cf:29:6f:73:94:3a:85:45:
         f2:36:d3:bf:7d:bd:3d:55:aa:e0:e7:4a:31:d3:4a:c3:ab:60:
         52:f1:2b:84:9a:c3:5f:d9:a5:5c:08:d4:b5:f7:0d:79:6d:15:
         1d:5d:6d:11:70:b6:a1:31:36:59:c4:75:3c:bf:ff:55:61:fe:
         c7:23:47:1a:e3:e2:f7:f8:8d:53:fe:4a:31:d1:ca:96:c9:f1:
         52:20:a3:9a:7b:8c:39:0d:4d:e3:43:a0:03:7b:a1:58:a9:fe:
         35:fc:88:13:ff:86:86:11:7e:3e:c6:4e:9b:9f:3a:5a:b2:9c:
         e3:b0:fb:33:3b:95:ae:39:92:59:9a:c8:e0:1c:4d:e3:d2:d1:
         9d:4c:37:24:e5:98:8b:81:ca:b0:b4:39:67:16:92:a8:04:a2:
         01:2b:6d:2d:8c:eb:e9:d2:00:5f:c7:22:7b:f0:cc:a1:d2:42:
         f0:46:e1:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:59:59 2026 by rpki-client