Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3137392e34322e3137362e302f32302d3230203d3e203532333639.roa
File:                     3137392e34322e3137362e302f32302d3230203d3e203532333639.roa (raw, json)
Hash identifier:          V/wNBdyLVcmfSw6iAPR2SWpgV0Xb9g/0i6MnxU7L384=
Subject key identifier:   36:36:AB:A0:F8:7E:E4:2E:BD:2E:77:C8:92:EB:45:26:3B:31:DC:6B
Certificate issuer:       /CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
Certificate serial:       6F51B606687B8A9CCEE924E88C821A2750DBC419
Authority key identifier: 8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3137392e34322e3137362e302f32302d3230203d3e203532333639.roa
Signing time:             Sun 01 Feb 2026 04:28:38 +0000
ROA not before:           Sun 01 Feb 2026 04:23:38 +0000
ROA not after:            Sun 31 Jan 2027 04:28:38 +0000
asID:                     52369
IP address blocks:        179.42.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:51:b6:06:68:7b:8a:9c:ce:e9:24:e8:8c:82:1a:27:50:db:c4:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
        Validity
            Not Before: Feb  1 04:23:38 2026 GMT
            Not After : Jan 31 04:28:38 2027 GMT
        Subject: CN=3636ABA0F87EE42EBD2E77C892EB45263B31DC6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a8:79:1a:be:b9:7a:9d:5e:38:4a:07:e9:70:
                    9c:a3:5a:e8:59:eb:d9:22:ba:fd:5c:90:cb:ac:7a:
                    52:48:7b:65:2a:46:cc:ae:d4:d1:63:3e:e6:59:81:
                    db:fc:eb:b1:56:4c:4d:6d:ec:94:bd:8a:f7:c8:13:
                    66:65:5e:a6:ca:b0:f6:24:27:c8:53:fd:f0:22:c6:
                    7f:b6:16:9a:f4:43:05:24:90:40:1b:06:7d:62:51:
                    80:a6:e2:ff:cd:da:ef:e5:41:4c:d8:d7:68:12:43:
                    ce:4e:30:7f:ca:6f:71:7a:3f:4b:37:86:4e:85:9d:
                    5c:f1:2f:de:94:7f:7e:75:32:3b:ad:f6:40:0e:ed:
                    ee:5f:3c:78:e3:2e:df:d6:11:e5:b9:1e:45:cb:bc:
                    4b:4a:85:f9:ea:b4:2d:00:15:35:57:b5:46:77:39:
                    c7:04:e7:38:4f:b9:a5:6b:13:b5:0a:e1:fe:e0:b6:
                    65:20:c3:a2:da:e0:f6:1a:1c:76:59:b7:1b:ca:00:
                    f5:f6:df:66:73:16:7c:a1:81:d0:ff:b5:67:17:fb:
                    b9:a2:e5:8c:30:ea:9b:54:0f:aa:ad:67:6f:b8:30:
                    2b:aa:a2:41:6c:2b:bb:f1:7a:19:ea:8c:17:79:04:
                    43:c9:67:38:f9:48:06:ca:c4:13:67:1e:52:61:b2:
                    db:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:36:AB:A0:F8:7E:E4:2E:BD:2E:77:C8:92:EB:45:26:3B:31:DC:6B
            X509v3 Authority Key Identifier:
                keyid:8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3137392e34322e3137362e302f32302d3230203d3e203532333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2d:97:12:86:ef:6e:7c:4a:b7:6f:cc:e3:e7:63:a9:6b:43:3f:
         bf:1b:88:8b:6e:e4:10:5a:f3:b5:eb:f1:96:e2:70:5c:8a:6e:
         91:87:94:50:3f:bb:fd:18:bc:02:ea:1a:e4:a6:05:98:20:3c:
         cc:6c:35:38:17:a6:3f:c4:32:4a:59:ba:a1:06:a9:98:53:0a:
         e6:40:a6:86:68:d7:b0:e2:2d:30:b3:72:dd:c9:10:a8:2e:5f:
         47:d1:b2:fe:d6:07:fb:eb:aa:4c:3f:cc:a6:90:b7:9c:d5:f7:
         ec:4a:a1:fe:c4:6b:1a:63:c0:71:67:bb:87:ae:1a:eb:b2:25:
         bf:6e:58:46:90:f4:d9:45:90:42:e0:89:6c:47:34:3f:d3:6d:
         be:93:5b:fb:81:a9:f2:52:36:f3:e6:ac:12:86:aa:b1:4c:dc:
         d3:10:a5:a1:23:c1:47:1e:0c:5e:d1:1a:43:8c:6e:10:c6:99:
         ab:7a:a7:40:51:59:d1:4d:36:1d:d5:47:47:1a:05:fc:85:52:
         38:57:d7:87:77:ee:06:fd:fb:2a:e3:aa:ff:56:8e:4c:80:a3:
         b4:84:3c:97:ca:f6:2c:7f:67:28:c1:6f:91:4d:bc:6f:ed:48:
         7a:64:a6:37:05:d2:05:90:56:cc:e4:cb:f8:31:7b:a0:a6:e8:
         80:4c:18:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 00:15:00 2026 by rpki-client