Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3137392e36332e3230382e302f32342d3234203d3e203237393736.roa
File:                     3137392e36332e3230382e302f32342d3234203d3e203237393736.roa (raw, json)
Hash identifier:          v38l1YSPgzHJyGMIpmP8rYQrgIk+LCr177p853P8BLc=
Subject key identifier:   29:76:99:11:E9:46:7F:8C:F3:9F:02:B5:2D:50:DF:3C:D0:05:E2:D9
Certificate issuer:       /CN=C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39
Certificate serial:       2C64B4962B0A738486A70844188FF70BA10AA624
Authority key identifier: C4:E4:73:26:7C:7E:D8:DB:FC:CD:20:9A:C0:9A:1C:A7:B8:4A:7C:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3137392e36332e3230382e302f32342d3234203d3e203237393736.roa
Signing time:             Fri 02 Oct 2026 18:37:58 +0000
ROA not before:           Fri 02 Oct 2026 18:32:58 +0000
ROA not after:            Fri 01 Oct 2027 18:37:58 +0000
asID:                     27976
IP address blocks:        179.63.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Oct 2026 05:47:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:64:b4:96:2b:0a:73:84:86:a7:08:44:18:8f:f7:0b:a1:0a:a6:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39
        Validity
            Not Before: Oct  2 18:32:58 2026 GMT
            Not After : Oct  1 18:37:58 2027 GMT
        Subject: CN=29769911E9467F8CF39F02B52D50DF3CD005E2D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e3:a9:ff:ff:28:27:07:e0:10:d4:5e:4a:aa:
                    75:b7:ba:6e:ef:27:84:c4:07:93:09:27:ab:1c:2f:
                    7a:8d:b0:de:33:61:df:63:84:f0:43:38:91:cd:55:
                    ae:8c:65:88:e1:3f:45:ec:f1:3e:bf:e8:3b:f8:1e:
                    c4:5d:cb:61:3a:62:e2:f7:9d:48:0e:72:3f:e6:14:
                    63:98:a7:09:2d:a8:ed:49:57:74:7a:b0:ff:01:63:
                    08:9f:a4:df:8a:b2:c2:bc:ee:ae:12:5c:05:29:2f:
                    52:4c:6f:c0:f1:6a:21:e4:80:8e:01:15:a1:97:05:
                    8b:1a:b3:1a:93:af:f5:dc:08:74:6d:98:62:a7:aa:
                    5b:28:5e:dd:d9:00:64:f3:7b:f4:2f:e9:a5:aa:7c:
                    be:49:b2:ce:77:c8:0d:92:af:b9:36:8d:c2:87:da:
                    b3:8e:3e:13:e4:89:9f:e2:00:7f:1d:5a:de:69:a9:
                    ae:b9:35:7d:fe:39:d1:0c:18:ba:a5:7b:3c:35:b6:
                    d0:d9:d4:ea:ad:57:14:89:80:5d:fb:3c:36:e6:5e:
                    67:b8:96:70:a4:64:19:f6:57:1b:19:1f:3f:fe:d6:
                    82:04:36:81:54:4e:df:b0:40:99:fe:e2:40:eb:b6:
                    6d:ff:a1:91:4f:b2:1a:c1:3b:e5:75:7a:88:2f:0f:
                    cc:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:76:99:11:E9:46:7F:8C:F3:9F:02:B5:2D:50:DF:3C:D0:05:E2:D9
            X509v3 Authority Key Identifier:
                keyid:C4:E4:73:26:7C:7E:D8:DB:FC:CD:20:9A:C0:9A:1C:A7:B8:4A:7C:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3137392e36332e3230382e302f32342d3234203d3e203237393736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:11:32:2a:44:83:39:b8:13:39:df:a7:26:2e:e9:10:1f:82:
         90:08:51:57:a5:0b:3a:2e:a8:93:8b:1a:3a:7c:cb:34:dd:e3:
         92:52:8b:a8:3c:d4:2d:96:33:35:cf:38:68:aa:cd:1e:c0:e9:
         63:72:36:12:15:59:43:57:13:a1:e4:11:64:e9:f2:ed:58:50:
         18:03:b6:46:4d:0f:bb:1d:2c:d7:ee:54:83:19:ca:9c:dc:53:
         01:cc:a4:bb:06:0b:59:7f:b8:7f:25:5b:06:bc:e3:e2:d6:e8:
         bd:49:bc:9d:22:f7:97:4d:ec:2a:d4:d1:55:43:6e:e5:a4:bd:
         67:d0:a0:ef:b9:72:f7:b4:2c:df:f8:1f:7d:e1:47:cb:0a:11:
         e8:9c:e6:cf:19:81:ac:80:df:a9:b0:b9:b8:bb:59:8d:fb:6c:
         32:32:2b:87:d3:c7:6f:92:5b:6f:a4:8e:b4:ec:b8:34:15:8b:
         fc:4d:7d:3e:28:37:c3:fd:1e:7b:ee:26:23:46:13:29:96:c3:
         b0:ac:fd:e2:dc:16:a0:c9:7c:08:25:b9:b1:25:9b:1c:49:88:
         ae:f6:8f:52:ba:0c:c3:ef:59:ed:f2:bf:24:60:49:d3:d1:46:
         1f:7d:fe:6b:e3:0b:64:72:2b:58:98:eb:95:a5:3b:61:70:af:
         ee:ab:86:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 01:56:18 2026 by rpki-client