Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3137392e35382e36342e302f31382d3138203d3e203238303234.roa
File:                     3137392e35382e36342e302f31382d3138203d3e203238303234.roa (raw, json)
Hash identifier:          5wh9LBk5hHFKWSlHkDp+DDjbXmuiiTHwIX3dgc94hSc=
Subject key identifier:   3D:39:E4:DB:F1:F1:54:FC:AA:00:5E:3B:8F:98:A3:00:C4:A0:F2:24
Certificate issuer:       /CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
Certificate serial:       4C9F6B691D452BFF5F7664EE14C41C2BD918C77B
Authority key identifier: EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3137392e35382e36342e302f31382d3138203d3e203238303234.roa
Signing time:             Tue 06 Jan 2026 19:01:02 +0000
ROA not before:           Tue 06 Jan 2026 18:56:02 +0000
ROA not after:            Tue 05 Jan 2027 19:01:02 +0000
asID:                     28024
IP address blocks:        179.58.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:37:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:9f:6b:69:1d:45:2b:ff:5f:76:64:ee:14:c4:1c:2b:d9:18:c7:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
        Validity
            Not Before: Jan  6 18:56:02 2026 GMT
            Not After : Jan  5 19:01:02 2027 GMT
        Subject: CN=3D39E4DBF1F154FCAA005E3B8F98A300C4A0F224
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:de:c9:87:94:34:e4:f8:d1:75:bd:d4:6b:1f:
                    5d:57:17:5b:cc:52:2e:4f:09:b6:11:87:7b:fd:15:
                    d7:69:07:90:a5:b0:91:4b:a7:71:d7:8e:26:a1:71:
                    19:05:d9:20:3e:45:52:14:aa:d5:46:cc:f3:b1:76:
                    7e:bb:c3:51:ae:51:2e:ed:04:52:43:4c:9f:f4:f7:
                    f0:32:f4:a9:bb:b0:94:a2:df:f5:5a:0e:3e:1a:00:
                    ed:2a:cb:14:5c:16:e1:3a:b0:85:a4:51:03:f4:5b:
                    fc:fc:5b:04:ee:ca:ba:c5:df:49:a6:3a:4e:93:1e:
                    ea:c8:d8:cd:81:63:2a:80:9e:56:61:08:20:a9:ea:
                    b8:b3:5f:a7:27:2f:d4:75:f3:ea:12:83:8f:09:6e:
                    e2:44:ed:fb:c3:bc:cc:41:67:07:24:6f:c6:01:02:
                    53:a8:be:0d:1d:9a:31:5b:4d:b0:74:12:de:dc:92:
                    29:1a:62:e9:52:78:6e:89:09:71:de:90:71:d1:21:
                    d1:9f:6f:46:41:86:b7:10:2a:bc:74:74:20:c2:b7:
                    44:2f:bc:c9:61:d7:3a:d1:24:b4:f5:52:07:88:ef:
                    2b:12:d4:0a:91:7e:28:05:c5:36:b0:12:12:02:ed:
                    f3:37:a9:98:62:6f:0c:b3:53:17:fc:55:3c:e9:6e:
                    b1:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:39:E4:DB:F1:F1:54:FC:AA:00:5E:3B:8F:98:A3:00:C4:A0:F2:24
            X509v3 Authority Key Identifier:
                keyid:EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3137392e35382e36342e302f31382d3138203d3e203238303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.58.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         30:9f:ef:d6:80:e3:dc:03:8b:0e:e7:c3:c4:5f:e6:09:bf:15:
         66:4b:bd:e2:cd:9d:a2:17:6b:ef:11:3a:71:82:9e:72:47:5c:
         6f:14:74:54:d2:63:7e:e4:7d:da:70:bc:28:80:68:bd:c4:99:
         0d:e5:d1:2b:99:11:f6:2b:7c:03:d3:d6:5f:34:f2:8b:d4:88:
         30:a7:12:7a:93:e5:3f:42:a4:c7:0d:40:d7:09:10:0b:01:97:
         61:3a:d8:04:64:36:4f:e7:56:a0:60:7d:26:28:78:be:5b:4f:
         39:e4:ea:de:9e:1a:aa:e3:02:19:06:55:d5:a6:51:ba:fb:7d:
         86:fa:44:14:92:24:1a:90:e0:ef:b0:e4:4a:aa:9f:e7:96:d5:
         d8:ac:0b:6d:80:0b:f1:38:db:9b:2e:77:95:54:06:48:6b:8f:
         bf:05:92:fd:89:cd:75:74:3d:88:72:b5:99:40:83:03:82:03:
         cb:ea:e2:de:2a:ec:20:03:50:f5:99:a3:f7:12:55:f3:ab:0e:
         24:d6:ee:26:42:72:d9:32:48:45:cd:1b:b2:90:9c:df:51:e9:
         29:fa:ba:b1:e8:2d:30:3b:0b:5c:b4:14:35:e9:bd:c7:66:b4:
         c1:c8:fb:1f:6c:0f:64:89:e0:51:ae:8f:54:c6:56:fa:d3:89:
         5c:5a:7f:6d
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUTJ9raR1FK/9fdmTuFMQcK9kYx3swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUNCQjlCOTMyM0U2OUU2RUI3QTYyODYwOTE0QTZCMjlF
RkYxMTQyMzAeFw0yNjAxMDYxODU2MDJaFw0yNzAxMDUxOTAxMDJaMDMxMTAvBgNV
BAMTKDNEMzlFNERCRjFGMTU0RkNBQTAwNUUzQjhGOThBMzAwQzRBMEYyMjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC93smHlDTk+NF1vdRrH11XF1vM
Ui5PCbYRh3v9FddpB5ClsJFLp3HXjiahcRkF2SA+RVIUqtVGzPOxdn67w1GuUS7t
BFJDTJ/09/Ay9Km7sJSi3/VaDj4aAO0qyxRcFuE6sIWkUQP0W/z8WwTuyrrF30mm
Ok6THurI2M2BYyqAnlZhCCCp6rizX6cnL9R18+oSg48JbuJE7fvDvMxBZwckb8YB
AlOovg0dmjFbTbB0Et7ckikaYulSeG6JCXHekHHRIdGfb0ZBhrcQKrx0dCDCt0Qv
vMlh1zrRJLT1UgeI7ysS1AqRfigFxTawEhIC7fM3qZhibwyzUxf8VTzpbrEbAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUPTnk2/HxVPyqAF47j5ijAMSg8iQwHwYDVR0j
BBgwFoAU7LubkyPmnm63pihgkUprKe/xFCMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83QTdCN0E5MjNBRThBNEY2NThCNTJCREI5QUVCNkIxODhF
Qzk5M0MyQTJEODg0REMzRkI1NTRCMzdGNkM1QjIxLzAvRUNCQjlCOTMyM0U2OUU2
RUI3QTYyODYwOTE0QTZCMjlFRkYxMTQyMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FQ0JCOUI5MzIzRTY5RTZFQjdB
NjI4NjA5MTRBNkIyOUVGRjExNDIzLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0E3QjdBOTIzQUU4QTRGNjU4QjUyQkRCOUFFQjZCMTg4RUM5OTNDMkEy
RDg4NERDM0ZCNTU0QjM3RjZDNUIyMS8wLzMxMzczOTJlMzUzODJlMzYzNDJlMzAy
ZjMxMzgyZDMxMzgyMDNkM2UyMDMyMzgzMDMyMzQucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAazOkAwDQYJ
KoZIhvcNAQELBQADggEBADCf79aA49wDiw7nw8Rf5gm/FWZLveLNnaIXa+8ROnGC
nnJHXG8UdFTSY37kfdpwvCiAaL3EmQ3l0SuZEfYrfAPT1l808ovUiDCnEnqT5T9C
pMcNQNcJEAsBl2E62ARkNk/nVqBgfSYoeL5bTznk6t6eGqrjAhkGVdWmUbr7fYb6
RBSSJBqQ4O+w5Eqqn+eW1disC22AC/E425sud5VUBkhrj78Fkv2JzXV0PYhytZlA
gwOCA8vq4t4q7CADUPWZo/cSVfOrDiTW7iZCctkySEXNG7KQnN9R6Sn6urHoLTA7
C1y0FDXpvcdmtMHI+x9sD2SJ4FGuj1TGVvrTiVxaf20=
-----END CERTIFICATE-----
Generated at Thu Feb 19 03:02:35 2026 by rpki-client