Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3137392e34322e3138302e302f32332d3233203d3e203532333639.roa
File:                     3137392e34322e3138302e302f32332d3233203d3e203532333639.roa (raw, json)
Hash identifier:          8XTf66lk6RY3siro9m8j/m/u2Ew4w1sWgI/Mg7k5MD0=
Subject key identifier:   C9:14:A0:02:15:06:E3:E9:13:C9:DC:10:44:19:01:74:07:35:E4:BC
Certificate issuer:       /CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
Certificate serial:       1A5F455A95D05998713A6BED3D4C905A073234D1
Authority key identifier: 8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3137392e34322e3138302e302f32332d3233203d3e203532333639.roa
Signing time:             Sun 01 Feb 2026 04:28:44 +0000
ROA not before:           Sun 01 Feb 2026 04:23:44 +0000
ROA not after:            Sun 31 Jan 2027 04:28:44 +0000
asID:                     52369
IP address blocks:        179.42.180.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:5f:45:5a:95:d0:59:98:71:3a:6b:ed:3d:4c:90:5a:07:32:34:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
        Validity
            Not Before: Feb  1 04:23:44 2026 GMT
            Not After : Jan 31 04:28:44 2027 GMT
        Subject: CN=C914A0021506E3E913C9DC10441901740735E4BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e4:2e:31:a2:9f:0d:68:fb:a0:d9:56:7d:9f:
                    15:d1:1e:a1:8f:d5:75:04:f8:6a:d9:99:89:32:40:
                    10:2d:bd:4c:84:08:a4:0c:46:45:fa:8a:3c:af:14:
                    c1:e5:6d:07:ba:66:0f:0c:fd:57:3b:f5:2e:ad:9c:
                    37:15:1b:ba:6b:71:cc:39:1f:ac:6b:e1:2e:26:2d:
                    57:08:b1:22:59:13:76:7e:5c:d4:45:fb:6d:8d:c1:
                    b8:79:ae:e2:2f:05:d4:c4:18:d2:89:dc:f8:2e:6e:
                    fd:9e:fa:97:25:8a:19:01:d0:17:aa:11:b5:03:fa:
                    06:3d:d5:f7:61:da:28:26:ba:db:f3:6b:cd:24:1b:
                    2c:4b:e7:18:43:37:2a:d3:4d:55:9a:e0:10:c4:ed:
                    6d:65:6f:f7:04:da:bf:c5:17:e7:1a:ef:fd:4e:87:
                    9e:3b:55:8c:b2:be:83:f1:f8:fa:27:53:e6:77:22:
                    05:90:62:57:01:1a:8e:1c:b2:6f:13:b1:fd:40:30:
                    7e:16:56:f6:59:b0:61:f6:be:3c:5f:71:c1:ec:d7:
                    d8:4a:eb:91:a0:55:e2:2f:6a:3a:ed:4b:5d:dd:5e:
                    11:3b:29:7e:39:83:8a:05:78:eb:e6:71:77:e3:1b:
                    45:6e:28:b7:83:71:60:d6:fb:fd:cd:e5:f5:79:98:
                    4b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:14:A0:02:15:06:E3:E9:13:C9:DC:10:44:19:01:74:07:35:E4:BC
            X509v3 Authority Key Identifier:
                keyid:8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3137392e34322e3138302e302f32332d3233203d3e203532333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9d:39:6d:86:b3:78:dd:5a:7d:f1:75:3f:23:94:5d:ff:3c:db:
         81:b7:11:8d:fe:e5:d2:71:6c:5a:d1:57:19:0a:dc:53:d3:e1:
         45:a0:ce:5c:3c:76:0e:70:06:42:5c:af:29:91:bd:24:62:2c:
         72:1e:6e:7f:10:10:f5:bd:36:d0:dd:ae:11:6a:1a:54:b8:e4:
         20:3e:57:42:b5:f8:28:80:c7:72:23:58:ba:d8:8f:4c:f2:b6:
         01:eb:61:c4:a6:46:7e:0d:34:42:b1:05:0d:14:ea:95:d5:63:
         8f:db:85:59:9d:04:cf:65:0f:0e:bc:8d:b3:d3:54:56:d7:eb:
         b6:ef:51:11:13:6c:0f:09:0f:bf:14:eb:f0:b7:9b:c8:a7:c5:
         22:07:78:d9:35:12:7f:d6:0c:14:35:a8:c7:3d:2b:76:dd:a8:
         92:bd:e1:9f:c8:25:65:3a:fd:9d:35:4a:47:33:03:a1:6f:66:
         55:38:39:c3:ed:97:b8:9a:9f:46:05:9c:25:a4:78:25:23:27:
         f5:e7:da:88:45:60:6c:dc:c5:83:0d:e2:53:f8:21:aa:82:67:
         41:50:d0:0e:e7:c0:59:98:ae:55:11:1a:97:a7:a9:a2:93:a3:
         e8:90:19:c5:96:0b:36:db:8e:67:09:0c:ab:96:9c:6b:4b:a9:
         c0:04:a1:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 00:15:06 2026 by rpki-client