Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3137392e36332e3230382e302f32322d3232203d3e203237393736.roa
File:                     3137392e36332e3230382e302f32322d3232203d3e203237393736.roa (raw, json)
Hash identifier:          ZcOa+wG+5UcaLCDTL7IpA4dSwAT0PUh75viW6Rkd8RM=
Subject key identifier:   C3:2F:38:75:E6:BE:2B:34:F7:58:DD:E4:BF:6F:92:44:FB:DC:F4:CA
Certificate issuer:       /CN=C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39
Certificate serial:       179AAE8896887E74956F06E10FDF5906F992A17E
Authority key identifier: C4:E4:73:26:7C:7E:D8:DB:FC:CD:20:9A:C0:9A:1C:A7:B8:4A:7C:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3137392e36332e3230382e302f32322d3232203d3e203237393736.roa
Signing time:             Fri 02 Oct 2026 18:38:02 +0000
ROA not before:           Fri 02 Oct 2026 18:33:02 +0000
ROA not after:            Fri 01 Oct 2027 18:38:02 +0000
asID:                     27976
IP address blocks:        179.63.208.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 09:25:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:9a:ae:88:96:88:7e:74:95:6f:06:e1:0f:df:59:06:f9:92:a1:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39
        Validity
            Not Before: Oct  2 18:33:02 2026 GMT
            Not After : Oct  1 18:38:02 2027 GMT
        Subject: CN=C32F3875E6BE2B34F758DDE4BF6F9244FBDCF4CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:9e:a8:10:03:ee:58:2c:73:b9:29:bb:f7:d2:
                    1f:52:6a:f2:a7:93:27:49:e8:ae:69:fd:ba:c2:72:
                    90:f2:2e:33:87:a2:73:69:22:b2:bb:71:1d:91:a3:
                    a4:00:20:8a:01:8e:44:bf:97:b3:4d:c6:8b:67:69:
                    e4:61:d6:4b:4c:6e:e6:e2:b4:e4:49:5d:c0:99:2d:
                    dc:96:9f:d5:55:23:55:a2:ce:0c:93:8a:1a:64:98:
                    f6:63:46:54:9c:7b:71:e7:6b:fa:bf:49:b3:de:ac:
                    e5:42:f7:d5:1e:43:de:bb:e9:be:e8:bf:77:47:1f:
                    db:db:fd:e1:35:68:bb:52:b4:f9:3b:41:fd:a8:f5:
                    a2:1b:fa:95:f5:93:01:20:b5:f7:32:01:76:dd:c3:
                    b6:8a:38:b3:2b:e3:2f:d2:7c:4d:38:00:20:38:bc:
                    28:e5:6e:d5:29:1c:8a:df:6f:d3:5a:a1:1d:c6:90:
                    cc:f1:3e:94:47:2e:99:1e:61:a5:cf:60:8c:b7:73:
                    45:65:d7:20:2c:b4:56:df:9c:d6:fb:b2:65:21:17:
                    3c:9b:05:8f:c6:16:95:95:3e:bb:b2:63:ae:20:2f:
                    e6:82:27:82:b9:a8:2a:93:bd:76:34:25:d0:59:c6:
                    4e:6c:9f:6f:a5:19:ce:bd:29:97:61:8d:86:ed:01:
                    b1:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:2F:38:75:E6:BE:2B:34:F7:58:DD:E4:BF:6F:92:44:FB:DC:F4:CA
            X509v3 Authority Key Identifier:
                keyid:C4:E4:73:26:7C:7E:D8:DB:FC:CD:20:9A:C0:9A:1C:A7:B8:4A:7C:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3137392e36332e3230382e302f32322d3232203d3e203237393736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         66:57:61:de:03:70:e7:c8:f3:9c:d2:5a:8c:fb:0b:a2:00:2a:
         e8:c4:00:b2:bb:c8:6d:13:af:15:d8:c7:ea:53:35:b5:d9:00:
         10:3e:0e:59:84:13:bb:0c:47:03:65:2a:52:7a:d9:d4:53:37:
         fc:39:3b:f4:16:a2:6a:3d:f2:1b:65:e2:09:95:ef:db:b9:c9:
         ad:48:61:eb:26:8f:d6:10:87:eb:d1:59:f1:3c:1d:57:a5:98:
         fa:b1:3c:25:38:6b:95:a9:47:e2:7d:dd:23:f7:a7:84:41:6e:
         52:fb:b4:d9:83:74:58:13:24:c6:f6:0f:a4:f2:d1:c5:6e:5a:
         21:e4:90:48:ad:7c:0d:4b:54:d4:ce:bc:ff:6f:1b:8c:69:70:
         33:1d:d2:e4:b0:97:01:da:7e:5e:8f:38:94:ea:4e:5d:f5:0f:
         1a:27:70:d8:a3:76:ca:8a:d4:ec:f5:30:1c:c4:11:df:af:91:
         0b:81:3d:5c:83:92:7f:43:3e:6c:9b:3c:68:21:b7:15:47:68:
         b2:ee:f8:c6:fe:b8:fa:f2:40:4a:00:22:59:8b:82:54:e9:e9:
         9b:32:3f:bd:93:8a:cc:8c:48:02:ef:28:57:2c:0d:33:7c:cf:
         20:5d:4e:29:84:26:a7:b1:6d:32:54:8f:1b:f8:99:34:22:16:
         e0:0b:4f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 09:52:45 2026 by rpki-client