Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3137392e34322e3138342e302f32322d3232203d3e203532333639.roa
File:                     3137392e34322e3138342e302f32322d3232203d3e203532333639.roa (raw, json)
Hash identifier:          784gnmZFBNw2botc9Z57/k4iyXpqexOethdrK1X46cM=
Subject key identifier:   BA:74:6A:85:E6:E3:01:A8:D7:BD:31:BC:12:21:5F:0D:79:C6:4F:78
Certificate issuer:       /CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
Certificate serial:       700754A08A29312C530CF5C1A960A25125DB8930
Authority key identifier: 8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3137392e34322e3138342e302f32322d3232203d3e203532333639.roa
Signing time:             Sun 01 Feb 2026 04:28:42 +0000
ROA not before:           Sun 01 Feb 2026 04:23:42 +0000
ROA not after:            Sun 31 Jan 2027 04:28:42 +0000
asID:                     52369
IP address blocks:        179.42.184.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:07:54:a0:8a:29:31:2c:53:0c:f5:c1:a9:60:a2:51:25:db:89:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
        Validity
            Not Before: Feb  1 04:23:42 2026 GMT
            Not After : Jan 31 04:28:42 2027 GMT
        Subject: CN=BA746A85E6E301A8D7BD31BC12215F0D79C64F78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:55:0e:1d:a4:06:3c:74:eb:85:25:a3:86:25:
                    8a:1a:b7:c3:57:a9:31:9b:f4:c1:57:7c:6f:12:23:
                    dd:43:82:79:7b:88:a8:21:0d:1b:bd:50:0b:e6:5f:
                    fa:ae:78:0a:67:17:8c:20:ac:e4:42:8f:57:64:d2:
                    08:34:ae:26:ae:c4:e2:3f:26:94:ee:e4:41:22:13:
                    4e:4d:9f:b7:30:6b:0a:50:9e:91:5f:72:d7:ea:6a:
                    45:f7:31:90:4b:a5:ed:6d:5d:e4:7b:52:8b:4c:77:
                    49:50:e9:f6:40:11:29:a8:ae:ba:50:ea:52:80:fc:
                    f1:e6:b2:63:9d:5a:db:5f:f2:f9:f1:63:f6:a3:a0:
                    5b:05:c3:31:70:96:c1:6d:fe:70:0e:7b:e6:22:75:
                    53:0e:51:ec:60:5a:58:2c:b2:83:75:d5:00:80:31:
                    8f:83:fb:90:94:ee:6f:85:1d:90:62:ae:b2:32:8a:
                    25:43:a7:68:c6:23:c4:34:e0:7a:4b:30:ce:cc:7d:
                    83:5d:51:69:71:64:21:84:ff:1d:36:56:9a:a7:ee:
                    32:5f:59:73:d0:5e:7a:b9:a8:f6:55:89:51:72:1d:
                    49:42:f0:df:78:c3:9b:42:0e:c0:3a:da:a0:4f:81:
                    cb:30:c8:13:90:9c:68:da:98:9c:f6:26:de:6e:5e:
                    bb:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:74:6A:85:E6:E3:01:A8:D7:BD:31:BC:12:21:5F:0D:79:C6:4F:78
            X509v3 Authority Key Identifier:
                keyid:8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3137392e34322e3138342e302f32322d3232203d3e203532333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:d3:1c:e2:9a:4c:89:58:2d:b5:b9:14:6f:81:a4:f3:6f:5c:
         f0:93:61:4c:67:01:73:6e:e2:1f:be:96:18:90:8b:ae:48:ab:
         a6:b3:8d:90:58:0e:42:0e:bb:09:05:5b:36:c5:54:8f:15:ee:
         95:35:16:2d:69:19:66:e9:73:d3:f0:2b:d3:49:cf:d2:6c:97:
         9f:a0:da:1d:0b:a1:7c:8a:7b:42:38:48:7e:62:9e:dc:d9:a4:
         72:61:70:be:0a:87:fa:eb:d7:65:3a:a0:ec:8e:a2:d1:7a:11:
         7f:54:bb:a8:90:6d:c5:11:23:a4:77:41:28:bf:e9:9a:19:5f:
         86:42:5c:6a:e8:51:e3:0c:2c:8f:a3:d8:7f:0b:09:df:d5:e8:
         67:48:11:c3:1a:58:24:07:ec:7c:b0:36:3b:f7:b8:66:dc:ec:
         1c:63:ef:bc:76:8c:f4:cb:f9:cb:ac:78:87:e2:b0:f3:73:94:
         56:a0:35:6d:59:1f:ae:ff:52:27:0c:17:c0:e1:c2:34:cf:7e:
         d6:65:bc:eb:d5:05:1a:80:39:0b:28:e3:c9:4a:b1:6a:f3:d5:
         07:3b:46:71:94:52:c0:8f:50:ab:0f:91:d4:3c:bc:08:06:30:
         dc:fe:18:d1:d0:25:c0:a7:23:43:fc:d8:ff:f3:39:0b:6d:30:
         48:7b:fc:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:07:12 2026 by rpki-client