Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3137392e36332e3231322e302f32342d3234203d3e203237393736.roa
File:                     3137392e36332e3231322e302f32342d3234203d3e203237393736.roa (raw, json)
Hash identifier:          LQ5jMnP3OaTjAUMRs1bIW9QiymjKfA5ycB7ojVNVeNo=
Subject key identifier:   EA:05:91:CB:6D:38:7E:85:A6:6B:0E:53:D0:84:4A:44:F2:32:DC:72
Certificate issuer:       /CN=C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39
Certificate serial:       19777D07943B74A61EC6C3BF67E07D6A16850F9E
Authority key identifier: C4:E4:73:26:7C:7E:D8:DB:FC:CD:20:9A:C0:9A:1C:A7:B8:4A:7C:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3137392e36332e3231322e302f32342d3234203d3e203237393736.roa
Signing time:             Fri 02 Oct 2026 18:37:55 +0000
ROA not before:           Fri 02 Oct 2026 18:32:55 +0000
ROA not after:            Fri 01 Oct 2027 18:37:55 +0000
asID:                     27976
IP address blocks:        179.63.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 18:47:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:77:7d:07:94:3b:74:a6:1e:c6:c3:bf:67:e0:7d:6a:16:85:0f:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39
        Validity
            Not Before: Oct  2 18:32:55 2026 GMT
            Not After : Oct  1 18:37:55 2027 GMT
        Subject: CN=EA0591CB6D387E85A66B0E53D0844A44F232DC72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d4:09:2c:1d:96:10:87:f2:e6:41:1a:9c:14:
                    4d:6b:cb:ec:fc:7f:ac:e3:6a:29:2a:74:9b:56:1d:
                    56:14:83:bd:0e:b8:27:ca:0f:cd:0f:e2:69:29:1b:
                    8b:bb:c6:26:de:79:ac:49:49:55:5a:1d:d4:bb:fe:
                    24:07:48:cc:1d:78:3c:43:77:f9:47:2e:d5:98:f2:
                    e0:3e:d1:4c:e5:ce:fb:84:f4:5e:c2:1f:90:07:60:
                    77:35:b8:cd:e7:b1:af:5f:8d:bc:d4:27:aa:f5:eb:
                    da:9c:3c:c7:38:b3:7e:ed:1a:11:98:f3:58:e5:c0:
                    fa:fc:4c:c1:7a:cb:bd:5d:4a:a3:fa:d6:81:61:d3:
                    b2:05:2c:76:8c:b4:68:98:e2:bb:2e:47:50:8c:64:
                    1d:2f:b2:b1:47:71:24:6b:b4:60:11:6c:9e:55:f6:
                    9d:8d:96:31:45:0d:9c:2f:5f:2c:52:da:23:0e:5d:
                    2b:b5:8e:5d:1e:cf:d3:32:b9:82:f7:c5:d9:31:15:
                    9f:63:fe:77:39:2a:56:3a:9d:77:2d:eb:44:f9:a3:
                    99:ac:4b:16:f4:ea:78:e7:03:4c:ab:b9:ac:47:e8:
                    16:d8:8b:8f:89:52:5f:11:9d:cc:a7:10:ff:d5:41:
                    51:a2:a9:14:73:46:c9:20:c4:b5:54:17:22:0b:bb:
                    2f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:05:91:CB:6D:38:7E:85:A6:6B:0E:53:D0:84:4A:44:F2:32:DC:72
            X509v3 Authority Key Identifier:
                keyid:C4:E4:73:26:7C:7E:D8:DB:FC:CD:20:9A:C0:9A:1C:A7:B8:4A:7C:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3137392e36332e3231322e302f32342d3234203d3e203237393736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:67:a6:db:37:a4:e2:5a:f9:35:96:40:75:b5:99:f4:d6:57:
         cf:c2:a2:5d:1c:3b:b8:33:58:99:46:ba:a5:c4:ed:f2:20:47:
         9c:74:36:16:06:ec:8e:a9:3e:cd:6e:3c:29:ce:bf:8a:12:49:
         c7:a8:90:dd:9b:ec:5d:2e:94:c5:93:99:f6:22:83:34:76:e7:
         c5:62:0b:91:63:f3:22:7c:bd:3b:ab:0d:21:57:86:55:18:09:
         81:c0:24:13:f2:09:4e:3d:48:de:26:d9:21:64:2f:23:7a:e7:
         8c:40:51:8c:58:d3:4a:24:58:9e:61:f7:96:cb:05:bc:5c:b1:
         0e:b6:79:b5:4b:67:9f:0e:38:3d:c9:40:0f:42:d9:c9:0c:72:
         57:0a:66:36:56:89:8f:ce:91:3d:98:ed:1f:9d:23:72:82:44:
         c8:36:b4:9e:3d:10:d1:d1:67:9f:5d:d7:83:2f:b7:9d:bb:78:
         8d:58:5e:a9:74:7d:b7:ed:11:73:d2:fc:b0:f0:3c:78:06:51:
         2b:00:a7:48:6e:42:60:46:9c:e6:bb:d9:e1:22:91:ce:3e:f0:
         d2:83:a3:f0:f5:54:01:94:04:6a:95:5d:1f:93:10:ce:f8:d6:
         06:ec:25:29:a8:56:d0:0b:b8:c9:f8:3e:86:74:33:84:47:37:
         dc:c6:7f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 00:01:10 2026 by rpki-client