Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3137392e34322e3138382e302f32342d3234203d3e203532333639.roa
File:                     3137392e34322e3138382e302f32342d3234203d3e203532333639.roa (raw, json)
Hash identifier:          iEOGkncWoezGTaO7g/weZYSeTCm0r14eh68pm+uV/Lg=
Subject key identifier:   7E:DE:B8:9A:E1:75:EF:78:3C:4D:EA:83:32:03:4D:0F:C7:02:36:89
Certificate issuer:       /CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
Certificate serial:       5C18A6F80EE400B5C1157091B4D783378BCC3F55
Authority key identifier: 8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3137392e34322e3138382e302f32342d3234203d3e203532333639.roa
Signing time:             Sun 01 Feb 2026 04:28:37 +0000
ROA not before:           Sun 01 Feb 2026 04:23:37 +0000
ROA not after:            Sun 31 Jan 2027 04:28:37 +0000
asID:                     52369
IP address blocks:        179.42.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:18:a6:f8:0e:e4:00:b5:c1:15:70:91:b4:d7:83:37:8b:cc:3f:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
        Validity
            Not Before: Feb  1 04:23:37 2026 GMT
            Not After : Jan 31 04:28:37 2027 GMT
        Subject: CN=7EDEB89AE175EF783C4DEA8332034D0FC7023689
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:cf:31:3f:7b:f9:e5:6c:86:21:d0:58:ae:d3:
                    f1:f3:39:86:31:c9:b8:d6:1e:5c:c3:80:19:06:05:
                    6c:fe:6b:53:d3:2b:38:a5:63:1a:66:66:70:2c:82:
                    60:65:2a:d8:86:3c:ae:b9:e1:39:0d:83:24:8a:db:
                    93:2e:d0:33:77:03:93:7c:66:e3:46:eb:fb:45:cc:
                    73:cf:5a:ee:d1:41:7b:2f:d2:22:ff:2e:52:a5:39:
                    d3:d6:64:70:35:8d:34:38:dd:d7:37:c8:18:c1:bf:
                    bf:83:88:79:5a:cf:a0:36:cc:52:54:be:f2:38:35:
                    65:eb:8a:ac:22:5a:3b:c0:68:98:3f:8c:99:5f:0c:
                    ef:8d:f3:dd:b8:d3:27:1e:11:1c:82:f1:da:f0:da:
                    e3:c2:79:8e:df:e9:c8:70:8a:fe:6a:32:ae:59:a9:
                    2c:e4:41:d2:ac:35:96:47:c7:5d:e5:07:45:d8:3d:
                    7a:b2:ad:17:c5:41:4e:de:0b:1c:8b:30:45:7c:71:
                    e0:39:57:db:d7:6c:8d:2f:4a:a5:72:9d:4a:96:c5:
                    be:21:c1:62:44:57:36:db:39:68:a0:96:55:00:15:
                    60:45:0f:35:1b:32:6e:6a:7f:82:17:7b:59:ae:d6:
                    f2:48:72:14:69:ca:35:2f:5b:86:8a:04:99:d9:e7:
                    9c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:DE:B8:9A:E1:75:EF:78:3C:4D:EA:83:32:03:4D:0F:C7:02:36:89
            X509v3 Authority Key Identifier:
                keyid:8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3137392e34322e3138382e302f32342d3234203d3e203532333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:25:8b:35:5b:e1:51:22:37:a6:27:b6:50:58:60:a1:e9:84:
         5e:bc:dc:ee:39:4b:e7:48:8b:d3:42:fa:d4:f3:09:db:84:b3:
         73:77:c4:a4:37:a7:36:94:8a:e5:d5:45:46:d3:4b:49:93:e4:
         29:52:7b:65:96:01:d0:eb:f2:6d:b9:ae:a3:2e:02:91:c8:cd:
         44:1f:98:04:c3:c6:5a:63:cb:c7:af:e7:14:ef:29:d7:c4:67:
         47:14:bd:cc:b4:0f:a4:fd:b9:cf:0d:2e:fb:b1:1e:f8:bc:dd:
         45:f4:1d:c9:fe:52:1e:a4:ce:78:e5:7c:69:80:9d:a8:f5:2d:
         0b:91:30:eb:75:53:70:06:42:48:49:9d:71:c0:c1:e4:c7:19:
         71:1d:5a:f2:85:b1:80:9e:12:85:48:db:cc:56:52:3f:27:1d:
         78:ff:fb:7b:f3:44:54:12:d8:57:88:c6:82:ab:17:52:5a:06:
         78:02:e9:ab:6f:c8:89:5b:54:d2:7d:b8:0b:5f:47:a3:de:f3:
         90:22:d7:60:41:7a:45:99:f5:a3:63:d6:66:31:cb:90:65:c2:
         6b:a6:a4:03:c8:03:54:02:43:14:e9:ae:36:6f:d4:81:5d:c7:
         bf:d2:98:3b:50:2a:a9:13:b1:5e:8b:8c:7d:ea:d6:80:dd:b1:
         a0:13:13:0c
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUXBim+A7kALXBFXCRtNeDN4vMP1UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEVGOUM3RDY1QTRDQkFGNUQyMUExNUZBMkMyMzdERDg3
RkY3RUY4NDAeFw0yNjAyMDEwNDIzMzdaFw0yNzAxMzEwNDI4MzdaMDMxMTAvBgNV
BAMTKDdFREVCODlBRTE3NUVGNzgzQzRERUE4MzMyMDM0RDBGQzcwMjM2ODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkzzE/e/nlbIYh0Fiu0/HzOYYx
ybjWHlzDgBkGBWz+a1PTKzilYxpmZnAsgmBlKtiGPK654TkNgySK25Mu0DN3A5N8
ZuNG6/tFzHPPWu7RQXsv0iL/LlKlOdPWZHA1jTQ43dc3yBjBv7+DiHlaz6A2zFJU
vvI4NWXriqwiWjvAaJg/jJlfDO+N89240yceERyC8drw2uPCeY7f6chwiv5qMq5Z
qSzkQdKsNZZHx13lB0XYPXqyrRfFQU7eCxyLMEV8ceA5V9vXbI0vSqVynUqWxb4h
wWJEVzbbOWigllUAFWBFDzUbMm5qf4IXe1mu1vJIchRpyjUvW4aKBJnZ55wzAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUft64muF173g8TeqDMgNND8cCNokwHwYDVR0j
BBgwFoAUjvnH1lpMuvXSGhX6LCN92H/374QwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xNkVDNERCQ0IxREE4NjZBQUYzNzExMjYyOTA5QjFCM0Q1
NTNBOUZBRTkxMTkyMTI2OEYyNTk2MkY1NUQ1QTFDLzAvOEVGOUM3RDY1QTRDQkFG
NUQyMUExNUZBMkMyMzdERDg3RkY3RUY4NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84RUY5QzdENjVBNENCQUY1RDIx
QTE1RkEyQzIzN0REODdGRjdFRjg0LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTZFQzREQkNCMURBODY2QUFGMzcxMTI2MjkwOUIxQjNENTUzQTlGQUU5
MTE5MjEyNjhGMjU5NjJGNTVENUExQy8wLzMxMzczOTJlMzQzMjJlMzEzODM4MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjMzMzYzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALMqvDAN
BgkqhkiG9w0BAQsFAAOCAQEARyWLNVvhUSI3pie2UFhgoemEXrzc7jlL50iL00L6
1PMJ24Szc3fEpDenNpSK5dVFRtNLSZPkKVJ7ZZYB0Ovybbmuoy4CkcjNRB+YBMPG
WmPLx6/nFO8p18RnRxS9zLQPpP25zw0u+7Ee+LzdRfQdyf5SHqTOeOV8aYCdqPUt
C5Ew63VTcAZCSEmdccDB5McZcR1a8oWxgJ4ShUjbzFZSPycdeP/7e/NEVBLYV4jG
gqsXUloGeALpq2/IiVtU0n24C19Ho97zkCLXYEF6RZn1o2PWZjHLkGXCa6akA8gD
VAJDFOmuNm/UgV3Hv9KYO1AqqROxXouMferWgN2xoBMTDA==
-----END CERTIFICATE-----
Generated at Thu Feb 19 12:57:44 2026 by rpki-client