Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3137392e34322e3138342e302f32342d3234203d3e203532333639.roa
File:                     3137392e34322e3138342e302f32342d3234203d3e203532333639.roa (raw, json)
Hash identifier:          /NSTwCNRA3j4+q9RXcDomnJliL+SqU7KgQwRx2rDx9o=
Subject key identifier:   5F:4D:30:7D:F1:32:38:66:60:6B:F3:D6:72:E6:D6:37:E4:81:56:19
Certificate issuer:       /CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
Certificate serial:       36B51C1C58AFE64F69EEDED0935ABD61BDE5FF24
Authority key identifier: 8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3137392e34322e3138342e302f32342d3234203d3e203532333639.roa
Signing time:             Sun 01 Feb 2026 04:28:38 +0000
ROA not before:           Sun 01 Feb 2026 04:23:38 +0000
ROA not after:            Sun 31 Jan 2027 04:28:38 +0000
asID:                     52369
IP address blocks:        179.42.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:b5:1c:1c:58:af:e6:4f:69:ee:de:d0:93:5a:bd:61:bd:e5:ff:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
        Validity
            Not Before: Feb  1 04:23:38 2026 GMT
            Not After : Jan 31 04:28:38 2027 GMT
        Subject: CN=5F4D307DF1323866606BF3D672E6D637E4815619
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:92:5c:bd:50:b0:ce:20:1e:03:2c:24:a2:fa:
                    ef:ab:23:aa:f8:9e:b5:ca:ae:a4:94:3a:ea:d9:88:
                    f7:58:11:f1:3b:8a:ff:f2:93:cb:d3:94:c7:63:70:
                    2a:7a:a4:df:cb:99:24:bc:49:fd:4c:4a:b1:ca:ab:
                    e6:1d:19:b5:3b:60:23:2c:1f:a9:4c:0e:1b:a2:17:
                    81:89:b4:ed:75:d3:13:86:70:46:0a:96:ba:ad:4a:
                    5d:5f:63:1d:57:0c:9c:90:f3:47:62:66:95:a1:50:
                    cb:b4:ae:c6:4d:27:f8:8a:4e:0a:20:0d:66:37:89:
                    51:e4:e4:81:4e:a4:95:9e:5c:bc:75:3c:57:53:c9:
                    36:a6:57:cd:0c:e7:ab:3e:a7:91:85:f3:24:87:87:
                    cf:23:5e:f5:66:8a:e8:7f:39:ec:a8:5b:5d:35:57:
                    dd:32:a4:e1:c3:a2:95:cf:ad:f4:18:ec:f8:55:d9:
                    c4:b6:f6:e5:37:f6:e5:26:2f:cd:aa:46:9c:d5:fb:
                    ff:72:7c:e5:9a:cb:6f:ae:3c:1a:a7:cc:5e:c3:62:
                    9c:38:e7:8e:22:90:ed:84:28:a7:87:2a:79:b5:cf:
                    fe:b0:75:6e:b5:54:9f:0a:b8:56:cb:1b:a3:32:91:
                    0b:5e:ed:0d:3f:72:ab:1b:81:58:24:2a:86:cc:c7:
                    e5:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:4D:30:7D:F1:32:38:66:60:6B:F3:D6:72:E6:D6:37:E4:81:56:19
            X509v3 Authority Key Identifier:
                keyid:8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3137392e34322e3138342e302f32342d3234203d3e203532333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:23:40:39:cb:79:a3:e7:4f:86:2b:7e:2f:f4:3b:9a:b8:fb:
         19:19:9a:fe:16:8f:7b:52:9e:d4:0a:b4:bf:56:44:3b:f3:71:
         3b:8c:c0:78:8c:93:fc:b3:99:7d:f1:72:18:9a:09:3c:a3:96:
         9f:0a:97:40:f1:74:6b:e5:21:52:7d:a7:01:f9:93:bc:3f:b9:
         1a:fe:42:5c:4a:57:57:ee:a8:2a:99:12:9b:82:b9:a5:31:21:
         c0:c0:8c:82:b7:92:83:48:82:26:5b:ab:14:58:9f:6e:7f:61:
         7d:cc:96:06:f7:ae:c8:b5:42:f4:c2:71:1f:7b:ee:8e:cc:62:
         03:38:a9:bd:83:f2:b0:0f:7a:7b:85:1c:d2:1b:4e:3e:53:0c:
         1e:65:06:6d:6f:db:cc:d5:5e:0a:0d:b7:d3:33:e7:ac:52:fd:
         d9:c9:42:e1:f4:45:01:94:3b:19:66:ee:73:ff:f4:8c:39:c4:
         5a:63:15:80:68:eb:d8:f6:4f:a6:da:ec:f5:9c:66:04:e9:66:
         f1:8c:f5:5d:6d:ec:1e:36:8e:65:70:dc:48:88:6a:5f:5f:2b:
         d0:91:42:5a:21:04:57:76:97:1f:21:6b:6e:50:90:0d:d3:59:
         ae:80:30:97:e1:b5:85:2f:75:80:5e:83:78:75:77:6f:34:8e:
         49:fe:66:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:06:58 2026 by rpki-client