Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3137392e34322e3137382e302f32342d3234203d3e203532333639.roa
File:                     3137392e34322e3137382e302f32342d3234203d3e203532333639.roa (raw, json)
Hash identifier:          qvqr3xxSez/t6bE0q9ewgjpU6ETmksuteDQAAfjw8Ew=
Subject key identifier:   9C:9D:6F:0A:09:23:10:F6:92:4F:34:0E:40:74:89:7B:B3:88:82:45
Certificate issuer:       /CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
Certificate serial:       23F310E8714A4DB7EC2FCAE3EC4C771183D6CB23
Authority key identifier: 8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3137392e34322e3137382e302f32342d3234203d3e203532333639.roa
Signing time:             Sun 01 Feb 2026 04:28:46 +0000
ROA not before:           Sun 01 Feb 2026 04:23:46 +0000
ROA not after:            Sun 31 Jan 2027 04:28:46 +0000
asID:                     52369
IP address blocks:        179.42.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:f3:10:e8:71:4a:4d:b7:ec:2f:ca:e3:ec:4c:77:11:83:d6:cb:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
        Validity
            Not Before: Feb  1 04:23:46 2026 GMT
            Not After : Jan 31 04:28:46 2027 GMT
        Subject: CN=9C9D6F0A092310F6924F340E4074897BB3888245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0c:4d:b5:41:91:82:16:6c:f8:b2:a7:9f:4d:
                    d0:a7:c0:03:e2:fb:7f:0e:00:43:c1:d2:53:f4:29:
                    b7:a3:bc:fe:af:e6:3b:41:0d:6c:51:4e:c5:4d:20:
                    a6:4c:c8:38:da:e1:d7:1d:20:24:43:55:c0:13:d1:
                    74:6f:70:2d:94:07:bf:b8:1f:78:f0:51:71:a8:cc:
                    7e:72:31:df:a1:05:68:c8:cb:b8:b2:6e:53:1c:d3:
                    a4:3a:a3:1f:c2:2b:3e:04:3e:e4:88:5a:5a:f0:a8:
                    31:58:01:d1:e1:77:29:63:8e:f6:02:64:9c:25:6e:
                    eb:45:2f:8e:4d:5d:e5:dc:7f:72:7b:e5:4e:2e:d8:
                    bf:f4:4d:24:18:33:97:6a:d5:f8:a0:d4:f7:69:a4:
                    4f:a2:df:c3:79:61:58:67:73:48:94:b4:f0:fa:93:
                    41:72:35:2a:c6:b5:c3:5d:ee:f9:6d:c2:82:70:b0:
                    26:d6:5d:07:de:f9:99:6a:51:49:95:bf:0a:c9:d1:
                    e6:dc:10:74:9f:01:ae:7e:ad:50:51:de:28:98:1e:
                    fb:c1:f8:4e:48:59:1f:ab:1e:b7:a0:d7:88:3d:0d:
                    10:25:20:aa:df:d3:a1:e4:b7:c2:80:c7:a9:20:85:
                    99:2d:4b:56:57:80:09:4f:ee:ac:55:f8:36:6b:7c:
                    1f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:9D:6F:0A:09:23:10:F6:92:4F:34:0E:40:74:89:7B:B3:88:82:45
            X509v3 Authority Key Identifier:
                keyid:8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3137392e34322e3137382e302f32342d3234203d3e203532333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:f2:98:f5:63:14:41:57:3a:36:03:f0:02:88:cf:20:30:59:
         ea:f7:67:9b:53:4b:10:a1:ba:49:20:9a:b0:d7:8a:4d:5d:15:
         06:57:2d:8b:16:e3:9e:9b:27:fc:7f:ad:f4:14:88:64:5f:f7:
         6b:50:5f:2e:32:83:16:27:94:c1:b5:c4:27:9b:f7:b3:ce:05:
         58:ac:60:63:07:f0:78:5d:01:ff:b2:70:46:b5:c7:9e:be:ee:
         ec:26:2e:cb:18:ba:0c:e7:36:9a:af:cc:75:1f:d5:9c:e3:fb:
         74:85:9a:33:ed:ae:4a:b1:5e:c1:cc:39:6d:0a:f9:d2:1e:97:
         51:b1:49:6a:e6:9c:e7:a2:0d:d1:85:04:bf:7f:8c:80:da:17:
         5a:63:ad:79:fe:4a:62:3d:8b:97:3e:1b:37:0c:83:4a:18:85:
         f5:32:98:8e:8b:7c:44:9a:e6:cd:61:23:3e:4f:d8:f0:31:05:
         cb:fc:8f:2f:71:d2:42:70:37:1f:88:f6:c8:36:8d:b5:b9:08:
         68:59:25:68:6b:2d:6e:f8:1e:55:8b:32:f3:5f:28:6c:24:eb:
         72:8d:e5:00:ad:81:bb:e9:e2:8b:5b:b1:a8:6f:94:e8:6d:7b:
         69:5e:3c:47:da:10:bb:81:cf:40:76:7f:6c:5a:4e:3c:f9:60:
         cc:91:aa:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:06:56 2026 by rpki-client