Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/AS18678.roa
File:                     AS18678.roa (raw, json)
Hash identifier:          XrsmMZQU6rWlVIkINHPDrOiY0uwRoqDgBQ2mdCt8aiY=
Subject key identifier:   E4:4D:3F:1B:9F:A5:66:8E:6C:EF:12:53:4C:2F:AE:A4:9B:45:44:71
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       06A6C191E85DC4A03F5B3ADED6F29F18FF205ACB
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/AS18678.roa
Signing time:             Thu 04 Jun 2026 04:40:01 +0000
ROA not before:           Thu 04 Jun 2026 04:35:01 +0000
ROA not after:            Thu 03 Jun 2027 04:40:01 +0000
asID:                     18678
IP address blocks:        179.1.0.0/17 maxlen: 24
                          179.1.0.0/21 maxlen: 24
                          179.1.8.0/21 maxlen: 24
                          179.1.16.0/20 maxlen: 24
                          179.1.32.0/20 maxlen: 24
                          179.1.48.0/20 maxlen: 24
                          179.1.64.0/20 maxlen: 24
                          179.1.80.0/20 maxlen: 24
                          179.1.96.0/20 maxlen: 24
                          179.1.112.0/20 maxlen: 24
                          179.1.128.0/20 maxlen: 24
                          179.1.176.0/20 maxlen: 24
                          179.1.192.0/18 maxlen: 24
                          190.90.0.0/17 maxlen: 24
                          190.90.0.0/21 maxlen: 24
                          190.90.8.0/21 maxlen: 24
                          190.90.16.0/21 maxlen: 24
                          190.90.24.0/21 maxlen: 24
                          190.90.32.0/21 maxlen: 24
                          190.90.52.0/22 maxlen: 24
                          190.90.60.0/22 maxlen: 24
                          190.90.64.0/18 maxlen: 24
                          190.90.64.0/20 maxlen: 24
                          190.90.80.0/20 maxlen: 24
                          190.90.128.0/17 maxlen: 24
                          190.90.128.0/18 maxlen: 24
                          190.90.128.0/20 maxlen: 24
                          190.90.144.0/21 maxlen: 24
                          190.90.151.0/24 maxlen: 24
                          190.90.152.0/22 maxlen: 24
                          190.90.168.0/21 maxlen: 24
                          190.90.188.0/22 maxlen: 24
                          190.90.192.0/18 maxlen: 24
                          190.90.192.0/20 maxlen: 24
                          190.90.215.0/24 maxlen: 24
                          190.90.216.0/21 maxlen: 24
                          190.90.224.0/19 maxlen: 24
                          190.90.234.0/24 maxlen: 24
                          190.90.249.0/24 maxlen: 24
                          190.90.253.0/24 maxlen: 24
                          2800:310::/32 maxlen: 48
                          2800:310::/33 maxlen: 48
                          2800:310:11::/48 maxlen: 48
                          2800:310:12::/48 maxlen: 48
                          2800:310:14::/48 maxlen: 48
                          2800:310:12c::/48 maxlen: 48
                          2800:310:12e::/48 maxlen: 48
                          2800:310:138::/48 maxlen: 48
                          2800:310:139::/48 maxlen: 48
                          2800:310:501::/48 maxlen: 48
                          2800:310:504::/48 maxlen: 48
                          2800:310:800::/48 maxlen: 48
                          2800:310:804::/48 maxlen: 48
                          2800:310:a02::/48 maxlen: 48
                          2800:310:a07::/48 maxlen: 48
                          2800:310:c06::/48 maxlen: 48
                          2800:310:c0a::/48 maxlen: 48
                          2800:310:c0b::/48 maxlen: 48
                          2800:310:d02::/48 maxlen: 48
                          2800:310:d04::/48 maxlen: 48
                          2800:310:d06::/48 maxlen: 48
                          2800:310:d07::/48 maxlen: 48
                          2800:310:1301::/48 maxlen: 48
                          2800:310:1500::/48 maxlen: 48
                          2800:310:1502::/48 maxlen: 48
                          2800:310:1900::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jun 2026 05:16:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:a6:c1:91:e8:5d:c4:a0:3f:5b:3a:de:d6:f2:9f:18:ff:20:5a:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Jun  4 04:35:01 2026 GMT
            Not After : Jun  3 04:40:01 2027 GMT
        Subject: CN=E44D3F1B9FA5668E6CEF12534C2FAEA49B454471
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:59:9f:cb:73:29:f2:93:d1:cd:62:cb:87:f0:
                    cb:29:79:c2:7d:9e:14:15:1e:69:ca:48:ed:2d:b1:
                    0c:09:f3:19:6b:d1:f8:4f:11:0b:9d:0e:6f:1e:91:
                    23:dd:26:b1:eb:09:db:f0:99:2a:92:e3:95:cf:f0:
                    17:6d:74:2b:db:9c:20:0c:c0:5e:44:83:6f:75:4f:
                    71:ed:d6:2e:cf:cf:95:d6:f0:0f:92:57:2b:e0:35:
                    cd:30:60:50:a6:66:a7:c8:86:06:94:72:b5:f3:83:
                    9d:cb:49:d3:43:ce:43:92:72:35:4d:70:78:34:d0:
                    54:19:d0:31:5d:78:b5:d2:15:b2:3b:bd:07:d9:23:
                    23:79:39:df:5a:9f:30:ba:cb:57:de:cf:21:75:ea:
                    f3:de:7f:27:74:84:88:ef:33:4b:f5:f6:26:84:ed:
                    f6:f3:d6:84:1d:eb:ab:54:b1:7e:b9:25:ec:f7:66:
                    c1:a0:bb:81:d4:39:5b:80:d1:d8:4e:cb:70:c1:bc:
                    0b:c6:2c:8d:fb:45:85:0d:7c:2d:5f:4d:f4:84:5c:
                    43:86:38:f4:06:99:a1:e3:58:33:e6:8b:b5:f5:fb:
                    e7:a8:9f:e0:ff:1e:5f:8d:af:50:a8:20:a3:7e:41:
                    5f:a0:0f:7d:6d:82:05:6d:ac:fd:24:89:82:09:9c:
                    e9:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:4D:3F:1B:9F:A5:66:8E:6C:EF:12:53:4C:2F:AE:A4:9B:45:44:71
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/AS18678.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.1.0.0-179.1.143.255
                  179.1.176.0-179.1.255.255
                  190.90.0.0/16
                IPv6:
                  2800:310::/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:76:8f:79:24:18:d0:4e:11:4d:7e:60:e5:7d:a6:27:65:8c:
         e8:9b:10:78:5d:57:6a:b1:4b:89:99:64:e7:09:86:7d:cb:17:
         81:0c:1d:92:c0:dd:ec:69:20:8a:3f:d3:a0:cf:8c:c6:1c:3a:
         27:68:5a:a9:a1:0d:f6:aa:01:af:55:53:21:3c:5a:b8:95:99:
         63:4f:3c:88:88:bf:90:4c:13:da:78:df:bf:4f:21:e4:d0:04:
         c1:b0:2d:07:f4:d2:19:94:54:66:8a:7c:50:38:a5:dc:e0:48:
         a6:35:3a:2d:37:51:68:e6:aa:8a:61:b0:da:34:4e:1c:d4:17:
         43:e7:f6:cb:ce:ac:72:3b:e0:ef:2a:ca:d1:e7:f4:ac:c0:93:
         2b:af:a9:f8:1b:57:2f:33:09:16:49:ec:6c:e4:25:a7:72:89:
         61:5d:08:f2:98:61:f7:8d:cd:40:ab:1b:8b:cf:e7:e8:cc:2c:
         fe:7a:21:50:dd:3b:37:c5:06:68:5e:96:8f:d0:03:65:37:ca:
         07:41:b2:7f:e0:54:d2:a0:7c:55:ab:ec:2d:9b:e3:94:24:20:
         f5:2b:12:19:a7:c6:11:53:fd:8c:3f:ef:28:b7:61:9c:62:62:
         a1:aa:af:cf:18:e4:be:b1:c2:c3:c6:8a:7b:6b:ce:40:79:5c:
         9a:6b:66:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 23:59:17 2026 by rpki-client