Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3137392e36332e3230382e302f32332d3233203d3e203237393736.roa
File:                     3137392e36332e3230382e302f32332d3233203d3e203237393736.roa (raw, json)
Hash identifier:          8Z0AC3kz/sBHf6CQgLYPuu95cTHZN5nhnpXN/LkiXDg=
Subject key identifier:   52:6A:41:8A:4F:CD:52:5D:06:C4:CB:22:1A:C4:4F:0E:85:92:03:69
Certificate issuer:       /CN=C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39
Certificate serial:       5A145B78AA309C87F46DAF1E71C80910CD3A4166
Authority key identifier: C4:E4:73:26:7C:7E:D8:DB:FC:CD:20:9A:C0:9A:1C:A7:B8:4A:7C:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3137392e36332e3230382e302f32332d3233203d3e203237393736.roa
Signing time:             Fri 02 Oct 2026 18:38:00 +0000
ROA not before:           Fri 02 Oct 2026 18:33:00 +0000
ROA not after:            Fri 01 Oct 2027 18:38:00 +0000
asID:                     27976
IP address blocks:        179.63.208.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 09:25:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:14:5b:78:aa:30:9c:87:f4:6d:af:1e:71:c8:09:10:cd:3a:41:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39
        Validity
            Not Before: Oct  2 18:33:00 2026 GMT
            Not After : Oct  1 18:38:00 2027 GMT
        Subject: CN=526A418A4FCD525D06C4CB221AC44F0E85920369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:31:05:3e:db:9f:ac:61:ad:8b:92:24:af:b8:
                    bc:8b:58:80:4f:8d:08:da:cb:75:aa:6a:17:0f:38:
                    8f:4f:32:47:cb:1e:74:c8:10:36:37:ac:c9:31:2a:
                    26:a8:bf:5d:49:ca:7b:69:14:86:e0:6c:b1:3f:a5:
                    b8:c6:14:40:af:3d:e4:aa:f6:07:90:0c:b5:f8:b1:
                    c3:69:8a:98:6e:e4:41:bf:a4:a7:7b:46:e5:2e:cd:
                    b5:82:33:e4:0f:69:89:88:99:01:08:b4:73:fd:31:
                    00:fd:fa:e1:a7:eb:5e:b8:84:d9:8d:d9:64:56:1b:
                    c3:f0:b9:b1:7f:8b:08:d7:e4:36:8a:8e:46:6a:f2:
                    4c:62:dc:0a:d2:4f:70:df:8f:cd:ef:9a:01:66:92:
                    97:55:cf:c4:5c:08:a0:c1:b1:03:63:06:2f:6f:01:
                    bd:34:d5:95:f6:bd:6b:4d:ee:a6:82:d4:f3:dc:44:
                    b1:7a:83:d4:4c:7c:7d:e8:1f:b8:ea:19:92:22:55:
                    3c:a1:a2:8b:98:45:a6:93:0a:92:d6:ae:3d:0b:9b:
                    48:f9:f1:1a:85:97:0d:be:58:df:77:0d:be:58:b0:
                    7a:fb:eb:9f:e5:6f:29:97:ac:84:82:89:4f:8d:51:
                    57:5f:b5:e1:0d:d5:e7:88:ff:ec:08:84:36:a2:46:
                    33:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:6A:41:8A:4F:CD:52:5D:06:C4:CB:22:1A:C4:4F:0E:85:92:03:69
            X509v3 Authority Key Identifier:
                keyid:C4:E4:73:26:7C:7E:D8:DB:FC:CD:20:9A:C0:9A:1C:A7:B8:4A:7C:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3137392e36332e3230382e302f32332d3233203d3e203237393736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         29:75:1d:ba:3c:ef:c1:3d:dd:80:ca:4f:cd:20:05:24:2b:bc:
         9b:ac:40:68:7c:24:cc:dc:aa:2d:5e:f0:7e:1a:3f:ed:47:a8:
         3e:62:f8:3e:6e:b5:8a:82:cb:4e:87:3e:21:4a:d8:86:cd:ee:
         f3:a0:6e:cc:00:41:63:57:58:49:4f:d5:64:7b:f0:f3:3b:fa:
         ed:81:39:f7:e7:72:f7:58:95:db:47:38:58:44:19:b5:e6:26:
         20:a5:0c:4a:0e:de:23:2b:7e:3d:b6:af:84:7a:b9:b6:52:8a:
         91:c1:24:f8:8a:cd:d2:04:19:61:42:a0:8e:ff:e0:be:7a:74:
         37:2b:01:3a:d0:86:a4:94:dd:1e:6f:39:20:74:b3:f5:0e:11:
         98:17:14:d3:8d:84:b2:5b:37:c1:56:90:50:85:48:ba:10:60:
         fa:7e:96:52:7c:3f:f4:46:8e:e8:d8:c2:26:0f:74:c9:25:1d:
         cf:03:9c:89:47:0f:3a:87:6e:fe:9c:3f:85:d4:db:be:ab:2f:
         55:b3:aa:1c:dc:9a:da:3c:6e:d0:39:86:40:dc:b9:bb:63:b2:
         7a:84:fe:c9:78:8a:88:58:ab:44:55:93:aa:24:fe:cc:35:7e:
         f8:0a:6e:0b:20:4a:08:4a:92:ff:a0:8c:78:27:9c:37:a8:93:
         e1:e7:80:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 19:37:22 2026 by rpki-client