Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3137392e35382e302e302f31382d3138203d3e203238303234.roa
File:                     3137392e35382e302e302f31382d3138203d3e203238303234.roa (raw, json)
Hash identifier:          Sm59mWWMUu2eozqeIpP910Ie+xjsav7g1W8TW77eIdg=
Subject key identifier:   BF:B7:49:96:4F:E8:F5:EE:B8:B8:CD:A9:84:0E:18:AF:E5:94:32:D9
Certificate issuer:       /CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
Certificate serial:       1A28CC9712467F9E2FC42A972141C2416C42B3DF
Authority key identifier: EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3137392e35382e302e302f31382d3138203d3e203238303234.roa
Signing time:             Tue 06 Jan 2026 19:00:59 +0000
ROA not before:           Tue 06 Jan 2026 18:55:59 +0000
ROA not after:            Tue 05 Jan 2027 19:00:59 +0000
asID:                     28024
IP address blocks:        179.58.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:37:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:28:cc:97:12:46:7f:9e:2f:c4:2a:97:21:41:c2:41:6c:42:b3:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
        Validity
            Not Before: Jan  6 18:55:59 2026 GMT
            Not After : Jan  5 19:00:59 2027 GMT
        Subject: CN=BFB749964FE8F5EEB8B8CDA9840E18AFE59432D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f9:98:05:1c:a0:38:29:cf:66:25:1a:e5:82:
                    47:45:3a:a5:a7:50:22:78:96:66:f1:1f:bd:c3:db:
                    6d:85:70:07:4d:fa:2c:5e:f0:6f:de:6b:9e:f4:c2:
                    79:85:12:b8:3a:a7:10:f5:f9:bd:8a:59:ff:e7:a9:
                    78:b2:fc:70:73:30:57:a3:28:22:c2:df:68:3d:79:
                    35:9b:36:03:ec:79:2a:7a:69:4c:29:cf:5c:3a:88:
                    5e:55:7b:2c:7f:f4:89:51:4f:f9:bd:c8:74:79:55:
                    d6:8f:69:de:70:e5:1d:a8:d1:fb:b4:e0:9d:60:3e:
                    ca:91:fc:20:a4:8f:4e:ec:78:bf:b4:3a:b6:1e:7e:
                    b7:d9:69:5c:56:26:ce:dd:e8:44:15:1d:54:83:5d:
                    3e:e3:6b:d8:61:14:8c:2f:fa:85:5d:63:02:cb:2b:
                    d7:f8:dc:fd:e1:ba:6e:fc:67:bf:0d:28:cf:9d:8a:
                    a4:ac:34:a9:e3:8d:5d:fc:d3:70:36:53:df:3f:0f:
                    79:46:4c:8b:34:46:fd:6e:57:9c:77:80:b7:21:f4:
                    9a:ad:68:30:b7:74:f0:3a:44:71:26:9f:31:0d:92:
                    98:70:e6:18:83:d3:57:5c:c2:dd:0b:34:59:b6:40:
                    dd:96:84:15:68:60:a3:09:79:48:40:ec:43:48:0a:
                    b7:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:B7:49:96:4F:E8:F5:EE:B8:B8:CD:A9:84:0E:18:AF:E5:94:32:D9
            X509v3 Authority Key Identifier:
                keyid:EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3137392e35382e302e302f31382d3138203d3e203238303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.58.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         70:31:bc:e2:16:3f:1c:38:c0:52:af:04:30:28:8b:19:c7:56:
         43:1a:d2:8e:a4:1e:b9:ea:ee:05:be:34:9c:d5:b9:75:09:9d:
         e5:9c:86:3e:b9:c5:61:d4:0f:64:aa:3d:c1:0f:3b:f4:e8:8b:
         ac:62:ef:f0:dc:81:4f:40:61:a4:51:44:e6:80:a7:fc:17:2e:
         35:22:96:6e:5a:4c:49:33:e3:8e:ec:1c:c2:0e:cc:c2:13:0f:
         65:7b:63:ee:55:5c:a4:35:59:2c:29:25:b8:85:38:1f:67:ad:
         8d:97:2c:7a:87:2b:3c:f4:42:b1:fc:0e:bb:8c:9b:67:b8:ab:
         79:9b:07:8e:68:8c:3d:e2:61:24:1e:b7:f9:80:0d:9c:b2:37:
         0f:be:e6:72:c3:9c:84:fa:45:74:e6:3e:a1:83:b6:73:88:b1:
         ea:59:9d:96:21:5d:01:6d:ca:93:b0:4f:30:03:7a:a1:df:d0:
         04:b7:d9:3e:2a:df:9a:fc:91:ed:24:0e:49:ba:b9:80:a6:2f:
         39:81:c8:db:d5:1d:c7:4e:1e:05:19:93:fb:b5:e5:33:11:51:
         48:da:da:35:9b:95:27:a2:46:d4:4c:70:57:82:51:d2:61:f4:
         01:cd:db:ce:01:0e:c7:07:8a:d9:7b:98:7c:82:de:5f:90:e6:
         30:e5:8e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:02:46 2026 by rpki-client