Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3137392e34322e3137392e302f32342d3234203d3e203532333639.roa
File:                     3137392e34322e3137392e302f32342d3234203d3e203532333639.roa (raw, json)
Hash identifier:          CFey74pTky8m2PJg0N4G5Syy4mfoFcYCUNBfzl3Se1c=
Subject key identifier:   02:68:D4:1E:30:C5:3C:90:B0:ED:A2:DF:ED:3F:6E:87:B7:02:90:F9
Certificate issuer:       /CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
Certificate serial:       5BA074DDC2547CBC7E4B3529BC9FA2DA9ED58F5D
Authority key identifier: 8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3137392e34322e3137392e302f32342d3234203d3e203532333639.roa
Signing time:             Sun 01 Feb 2026 04:28:48 +0000
ROA not before:           Sun 01 Feb 2026 04:23:48 +0000
ROA not after:            Sun 31 Jan 2027 04:28:48 +0000
asID:                     52369
IP address blocks:        179.42.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:a0:74:dd:c2:54:7c:bc:7e:4b:35:29:bc:9f:a2:da:9e:d5:8f:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
        Validity
            Not Before: Feb  1 04:23:48 2026 GMT
            Not After : Jan 31 04:28:48 2027 GMT
        Subject: CN=0268D41E30C53C90B0EDA2DFED3F6E87B70290F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:03:0d:55:9e:c3:bf:09:0d:c0:04:11:2c:f4:
                    2f:22:43:1f:a1:9d:f7:c5:22:52:d2:4c:af:af:0a:
                    64:0a:06:0c:52:9e:f3:09:0e:2f:10:97:4d:1e:36:
                    be:94:de:15:c0:64:b7:cb:0e:de:26:30:43:d9:98:
                    65:5a:8f:c3:25:e3:32:d3:8a:bd:52:90:17:90:b8:
                    b3:47:56:dc:ad:c0:ad:89:14:12:70:c5:3d:3e:6d:
                    ab:ac:23:0b:b0:16:a7:19:c7:e6:47:68:b0:02:54:
                    f0:b8:a6:fb:64:ee:56:32:c5:3a:7b:3b:0e:4c:01:
                    09:5a:3e:de:95:1e:f7:61:99:8b:81:bf:fe:79:78:
                    c7:46:8d:9c:1e:6c:83:ec:f9:f3:bf:4a:7c:fa:f8:
                    4f:7f:b9:98:9d:6b:0a:0d:f8:77:44:3b:4d:4c:fd:
                    89:3a:f3:ad:89:a8:29:92:0e:ff:d0:5d:63:2e:e6:
                    cc:77:b4:5f:77:09:7e:92:16:5e:36:66:a4:e2:79:
                    5d:81:48:68:00:1c:34:93:21:d4:ae:e2:de:42:c6:
                    88:fc:6a:2a:a4:fa:74:c2:65:a7:52:84:4a:41:08:
                    15:f9:70:85:c5:00:9b:96:fd:4c:9c:ad:60:45:8a:
                    be:ff:e4:ff:a8:14:0a:7f:0e:8d:e3:b5:93:9a:04:
                    1b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:68:D4:1E:30:C5:3C:90:B0:ED:A2:DF:ED:3F:6E:87:B7:02:90:F9
            X509v3 Authority Key Identifier:
                keyid:8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3137392e34322e3137392e302f32342d3234203d3e203532333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:b6:8f:c9:ea:83:85:e4:0b:fb:49:31:71:ee:e2:c1:f4:e9:
         c8:b8:9d:bd:11:fe:78:02:54:f3:4b:f5:21:7f:fa:35:b3:0b:
         d0:48:84:ce:28:40:fe:95:af:66:a9:97:f5:2b:5e:99:b3:05:
         03:d7:2d:64:94:71:72:8f:46:92:a5:a1:8b:7d:39:bc:19:bc:
         29:68:69:a8:f4:bb:40:92:a3:b5:4a:c8:39:bf:06:fe:43:00:
         0b:6f:e8:19:50:90:5a:20:c8:08:17:3d:38:03:b7:bc:86:07:
         09:e1:dc:16:b6:98:56:dc:f6:fb:d1:c0:e6:dc:f4:0e:18:d3:
         1f:44:a3:4a:1f:f7:4d:76:ad:30:cd:b1:1e:ab:bc:f0:ea:9f:
         ff:55:42:1f:48:63:d4:c8:43:7b:20:0e:f7:ba:2f:70:19:da:
         1e:25:8b:ee:dc:73:26:e0:31:31:3d:2f:70:c9:f5:f8:29:84:
         09:a0:2e:a9:6c:76:99:6c:63:e4:f2:f2:db:80:08:18:aa:69:
         4c:c6:fb:83:ea:5d:1a:07:db:09:78:4a:31:ff:3c:35:8c:9f:
         d6:24:64:94:48:9a:c8:e9:85:d8:e4:7e:5a:9e:37:05:05:f5:
         2b:2d:8d:60:a3:d6:33:9e:c6:45:d0:ec:1c:51:d9:00:38:93:
         2c:a4:c0:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:10:44 2026 by rpki-client