Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3137392e36332e3231342e302f32332d3233203d3e203237393736.roa
File:                     3137392e36332e3231342e302f32332d3233203d3e203237393736.roa (raw, json)
Hash identifier:          EWR9YrJtqzrqGmewEeWCmWCIfQ7DrzlVY3U/JJpWucw=
Subject key identifier:   05:2F:A7:06:41:B0:24:E2:90:5F:D2:D1:2B:77:69:DD:10:99:FD:C8
Certificate issuer:       /CN=C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39
Certificate serial:       187CA2C9B40AF4894E833638FE1753C527FB2639
Authority key identifier: C4:E4:73:26:7C:7E:D8:DB:FC:CD:20:9A:C0:9A:1C:A7:B8:4A:7C:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3137392e36332e3231342e302f32332d3233203d3e203237393736.roa
Signing time:             Fri 02 Oct 2026 18:37:53 +0000
ROA not before:           Fri 02 Oct 2026 18:32:53 +0000
ROA not after:            Fri 01 Oct 2027 18:37:53 +0000
asID:                     27976
IP address blocks:        179.63.214.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 16:56:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:7c:a2:c9:b4:0a:f4:89:4e:83:36:38:fe:17:53:c5:27:fb:26:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39
        Validity
            Not Before: Oct  2 18:32:53 2026 GMT
            Not After : Oct  1 18:37:53 2027 GMT
        Subject: CN=052FA70641B024E2905FD2D12B7769DD1099FDC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:a0:a5:c3:84:56:d9:9a:34:4a:e4:b7:70:34:
                    3c:b0:9d:37:ee:47:86:98:19:32:11:f1:1b:b8:90:
                    50:30:94:b8:df:03:77:4f:de:da:63:9d:50:f6:7c:
                    8c:41:9f:6f:17:a8:ff:ce:9f:67:f0:4a:02:14:b5:
                    41:12:57:18:63:c4:b4:8a:4b:bb:d2:14:8c:94:ce:
                    ac:a1:28:65:ae:1c:a9:f7:ff:5e:db:b2:bd:a2:9d:
                    65:e0:db:fb:69:f1:42:33:61:60:cb:a8:0d:27:51:
                    33:95:e4:e8:c5:6f:c8:01:cd:f6:9b:e2:53:37:bc:
                    82:0b:d3:20:23:47:9e:88:36:32:a3:53:91:44:37:
                    c1:bb:e5:74:29:7b:3d:e8:af:fc:82:47:8f:84:77:
                    57:ee:a7:1d:9f:42:a6:4a:4b:64:ba:f9:13:0a:28:
                    53:aa:b9:0a:21:5d:b6:39:93:8a:03:d9:4a:f7:51:
                    0d:08:33:46:d3:be:a8:a3:ad:19:c4:e4:d8:07:b1:
                    c9:07:c6:cd:a7:79:f6:33:4d:46:03:fd:59:3c:c7:
                    a4:2f:25:26:dd:9c:b5:45:47:56:b5:51:29:e0:53:
                    60:c7:c4:a1:06:5d:7e:42:9b:e9:e0:41:6b:1d:cb:
                    91:ed:dc:d1:3f:7d:8c:5b:72:e3:c9:62:10:0e:d1:
                    52:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:2F:A7:06:41:B0:24:E2:90:5F:D2:D1:2B:77:69:DD:10:99:FD:C8
            X509v3 Authority Key Identifier:
                keyid:C4:E4:73:26:7C:7E:D8:DB:FC:CD:20:9A:C0:9A:1C:A7:B8:4A:7C:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3137392e36332e3231342e302f32332d3233203d3e203237393736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9a:9e:30:7d:a8:7c:c9:34:f4:9a:61:6a:12:d1:ef:83:6d:2e:
         15:4b:42:b8:dc:1a:27:82:2e:87:14:2b:5f:1c:59:48:d8:48:
         08:db:a3:49:dc:ae:b4:84:f5:cc:f4:22:16:a0:57:48:0e:f5:
         ed:85:4f:3c:1e:4b:d7:91:20:ef:c9:26:23:85:26:11:a6:ca:
         25:5b:cc:88:f6:d1:09:3b:63:2d:c2:51:73:be:8c:58:e2:ac:
         02:05:77:1e:ef:09:10:ce:97:bd:2b:06:5b:1c:c0:64:f4:1a:
         cb:46:a7:b5:20:19:e8:9a:69:d1:36:f4:0f:66:3c:ab:e2:24:
         86:32:92:d7:3c:92:ce:99:21:e3:8b:21:2a:3c:df:55:b5:1a:
         ff:87:09:23:c8:77:6a:03:e2:96:64:07:10:10:60:c8:22:bc:
         94:e0:bf:08:1b:9e:15:7f:cd:c3:73:c4:46:4f:80:98:a9:be:
         78:85:28:08:f3:06:e4:84:bb:3f:19:ef:70:5f:b0:e5:a4:4c:
         99:2d:b6:c6:eb:b0:62:97:95:e2:d6:2d:4b:3e:f5:f8:e6:b7:
         fc:07:20:2b:b6:9e:c8:30:40:1d:49:99:0d:29:7a:ee:d8:74:
         db:eb:20:4a:3a:87:50:d9:e8:07:28:5e:90:cd:ec:1f:da:17:
         dc:d4:fd:4b
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUGHyiybQK9IlOgzY4/hdTxSf7JjkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzRFNDczMjY3QzdFRDhEQkZDQ0QyMDlBQzA5QTFDQTdC
ODRBN0MzOTAeFw0yNjEwMDIxODMyNTNaFw0yNzEwMDExODM3NTNaMDMxMTAvBgNV
BAMTKDA1MkZBNzA2NDFCMDI0RTI5MDVGRDJEMTJCNzc2OUREMTA5OUZEQzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkoKXDhFbZmjRK5LdwNDywnTfu
R4aYGTIR8Ru4kFAwlLjfA3dP3tpjnVD2fIxBn28XqP/On2fwSgIUtUESVxhjxLSK
S7vSFIyUzqyhKGWuHKn3/17bsr2inWXg2/tp8UIzYWDLqA0nUTOV5OjFb8gBzfab
4lM3vIIL0yAjR56INjKjU5FEN8G75XQpez3or/yCR4+Ed1fupx2fQqZKS2S6+RMK
KFOquQohXbY5k4oD2Ur3UQ0IM0bTvqijrRnE5NgHsckHxs2nefYzTUYD/Vk8x6Qv
JSbdnLVFR1a1USngU2DHxKEGXX5Cm+ngQWsdy5Ht3NE/fYxbcuPJYhAO0VJhAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUBS+nBkGwJOKQX9LRK3dp3RCZ/cgwHwYDVR0j
BBgwFoAUxORzJnx+2Nv8zSCawJocp7hKfDkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQzJEOUIxRTYxNkJGQzYwMzBGM0RBMUQ2RjIwQjZCNDE0
MzE5QThDREQ0NEVFNjQyMEI2RkZFNzBENjVDNUI5LzAvQzRFNDczMjY3QzdFRDhE
QkZDQ0QyMDlBQzA5QTFDQTdCODRBN0MzOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DNEU0NzMyNjdDN0VEOERCRkND
RDIwOUFDMDlBMUNBN0I4NEE3QzM5LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUMyRDlCMUU2MTZCRkM2MDMwRjNEQTFENkYyMEI2QjQxNDMxOUE4Q0RE
NDRFRTY0MjBCNkZGRTcwRDY1QzVCOS8wLzMxMzczOTJlMzYzMzJlMzIzMTM0MmUz
MDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNzM5MzczNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAbM/1jAN
BgkqhkiG9w0BAQsFAAOCAQEAmp4wfah8yTT0mmFqEtHvg20uFUtCuNwaJ4IuhxQr
XxxZSNhICNujSdyutIT1zPQiFqBXSA717YVPPB5L15Eg78kmI4UmEabKJVvMiPbR
CTtjLcJRc76MWOKsAgV3Hu8JEM6XvSsGWxzAZPQay0antSAZ6Jpp0Tb0D2Y8q+Ik
hjKS1zySzpkh44shKjzfVbUa/4cJI8h3agPilmQHEBBgyCK8lOC/CBueFX/Nw3PE
Rk+AmKm+eIUoCPMG5IS7PxnvcF+w5aRMmS22xuuwYpeV4tYtSz71+Oa3/AcgK7ae
yDBAHUmZDSl67th02+sgSjqHUNnoByhekM3sH9oX3NT9Sw==
-----END CERTIFICATE-----
Generated at Sun Oct 11 19:42:17 2026 by rpki-client