Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/96FE3216CF8B963CA17E477AD1C3CF78D3636F8EFF7B374AF1A329335F21C390/0/3137392e34392e3230382e302f32322d3234203d3e20323730313032.roa
File:                     3137392e34392e3230382e302f32322d3234203d3e20323730313032.roa (raw, json)
Hash identifier:          0zqPyjEtc4u9oroOWHSZI1vsnKoXyIvynkBHL9EGZzc=
Subject key identifier:   1C:BF:A2:CB:27:B4:A3:F3:06:57:05:6A:4B:C5:1F:40:B1:C8:81:2E
Certificate issuer:       /CN=B2A16D868A803CE9E68217F72B7CE67CC7541FB7
Certificate serial:       289BBEB7813D7E7D596FCF2DB6A6B7D40AA07016
Authority key identifier: B2:A1:6D:86:8A:80:3C:E9:E6:82:17:F7:2B:7C:E6:7C:C7:54:1F:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B2A16D868A803CE9E68217F72B7CE67CC7541FB7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/96FE3216CF8B963CA17E477AD1C3CF78D3636F8EFF7B374AF1A329335F21C390/0/3137392e34392e3230382e302f32322d3234203d3e20323730313032.roa
Signing time:             Tue 06 Jan 2026 19:44:22 +0000
ROA not before:           Tue 06 Jan 2026 19:39:22 +0000
ROA not after:            Tue 05 Jan 2027 19:44:22 +0000
asID:                     270102
IP address blocks:        179.49.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/96FE3216CF8B963CA17E477AD1C3CF78D3636F8EFF7B374AF1A329335F21C390/0/B2A16D868A803CE9E68217F72B7CE67CC7541FB7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/96FE3216CF8B963CA17E477AD1C3CF78D3636F8EFF7B374AF1A329335F21C390/0/B2A16D868A803CE9E68217F72B7CE67CC7541FB7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B2A16D868A803CE9E68217F72B7CE67CC7541FB7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 21:54:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:9b:be:b7:81:3d:7e:7d:59:6f:cf:2d:b6:a6:b7:d4:0a:a0:70:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2A16D868A803CE9E68217F72B7CE67CC7541FB7
        Validity
            Not Before: Jan  6 19:39:22 2026 GMT
            Not After : Jan  5 19:44:22 2027 GMT
        Subject: CN=1CBFA2CB27B4A3F30657056A4BC51F40B1C8812E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f3:cc:74:4a:d4:96:2b:ed:21:09:7b:69:9e:
                    5a:62:46:e8:87:c0:5d:e0:ca:1f:5c:86:a5:fa:8e:
                    45:9f:68:85:ef:62:02:de:bb:a4:b0:9a:d4:b5:cd:
                    5f:67:cd:c8:78:11:44:33:b2:65:11:1e:3f:09:fb:
                    1d:1d:8e:58:1c:18:ed:dc:e5:de:54:d5:fd:cb:96:
                    2a:c0:13:f3:dd:17:ee:ff:46:71:69:66:e5:48:c7:
                    20:25:e8:3d:20:f1:46:47:98:49:f6:5d:e3:c0:2f:
                    3e:3d:a6:41:ed:8c:5d:10:60:0d:93:86:79:28:3f:
                    ab:d5:f2:82:66:89:45:41:30:93:43:9f:6f:10:38:
                    f5:dd:0e:94:22:4c:7a:c7:bb:52:6e:11:30:32:06:
                    6e:0f:3b:ef:6a:af:95:c7:d7:8e:8a:31:ff:d9:b5:
                    e3:c1:78:80:e9:f5:ac:bc:aa:9a:0a:34:1a:12:f8:
                    04:f0:2d:fd:da:4a:9f:af:7f:5e:fb:ab:33:60:92:
                    30:0d:55:85:ac:5f:71:38:ed:02:f4:96:f0:c9:10:
                    1a:52:42:0a:6d:c3:2a:6a:1b:bf:ac:dd:8f:f9:8a:
                    67:a1:03:bf:dd:28:99:3a:4d:c2:c0:fd:ce:58:ff:
                    bc:cb:ac:96:0c:24:82:e0:ec:98:6b:72:e4:2a:f7:
                    07:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:BF:A2:CB:27:B4:A3:F3:06:57:05:6A:4B:C5:1F:40:B1:C8:81:2E
            X509v3 Authority Key Identifier:
                keyid:B2:A1:6D:86:8A:80:3C:E9:E6:82:17:F7:2B:7C:E6:7C:C7:54:1F:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/96FE3216CF8B963CA17E477AD1C3CF78D3636F8EFF7B374AF1A329335F21C390/0/B2A16D868A803CE9E68217F72B7CE67CC7541FB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B2A16D868A803CE9E68217F72B7CE67CC7541FB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/96FE3216CF8B963CA17E477AD1C3CF78D3636F8EFF7B374AF1A329335F21C390/0/3137392e34392e3230382e302f32322d3234203d3e20323730313032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:00:93:ad:e5:87:ff:27:d0:b6:19:e9:15:86:9e:15:a3:b7:
         6a:89:bf:34:aa:78:fa:92:a1:0d:db:8b:bc:e7:12:92:8f:b8:
         0b:6a:49:95:f4:3c:82:0c:97:1d:f2:5d:0a:29:9c:2c:1d:78:
         27:56:b1:54:56:bd:82:2b:61:7d:94:bf:d2:6b:e6:f8:b9:0b:
         c9:db:ca:47:07:d6:db:38:75:3c:49:26:83:fd:72:f6:08:d4:
         82:8a:c6:8e:3a:06:b4:0f:5f:d1:9f:85:93:12:59:ba:0a:51:
         8a:cf:f3:46:6b:9a:47:fc:51:43:d1:7a:fc:55:7a:c6:f3:76:
         f9:59:f4:d7:3c:46:71:cc:24:ea:f7:b2:94:b2:61:b9:be:65:
         c7:f8:56:2e:d3:b9:01:70:63:6a:f4:d4:65:6d:47:9c:e4:bd:
         d8:0b:a3:c2:dc:04:82:01:b7:64:38:36:6f:e1:8a:a8:ba:96:
         82:f1:50:dd:ee:19:4a:c7:81:b9:93:a0:e5:74:16:46:f0:9c:
         e8:7f:0d:d5:55:26:47:3f:9e:75:71:4e:de:b8:04:c6:a9:c6:
         0e:03:6b:2f:ce:f5:ff:b4:fc:83:57:3d:6e:0f:21:e7:ba:a0:
         e5:a8:b0:54:2b:d6:4a:e2:64:30:13:11:7c:61:fb:3a:be:16:
         e4:a7:47:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:02:53 2026 by rpki-client