Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3137392e36332e3231342e302f32342d3234203d3e203237393736.roa
File:                     3137392e36332e3231342e302f32342d3234203d3e203237393736.roa (raw, json)
Hash identifier:          4Xydysw5M0Feo2jqUxaGurzsWdANoJVyTxhSqnrArXA=
Subject key identifier:   77:3E:DF:F2:45:FE:72:18:75:4C:70:92:AF:94:8D:C5:B9:34:A6:4B
Certificate issuer:       /CN=C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39
Certificate serial:       60A3D06D9B9BA9A69CAAC32F38127770BF477D8B
Authority key identifier: C4:E4:73:26:7C:7E:D8:DB:FC:CD:20:9A:C0:9A:1C:A7:B8:4A:7C:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3137392e36332e3231342e302f32342d3234203d3e203237393736.roa
Signing time:             Fri 02 Oct 2026 18:37:59 +0000
ROA not before:           Fri 02 Oct 2026 18:32:59 +0000
ROA not after:            Fri 01 Oct 2027 18:37:59 +0000
asID:                     27976
IP address blocks:        179.63.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 06:54:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:a3:d0:6d:9b:9b:a9:a6:9c:aa:c3:2f:38:12:77:70:bf:47:7d:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39
        Validity
            Not Before: Oct  2 18:32:59 2026 GMT
            Not After : Oct  1 18:37:59 2027 GMT
        Subject: CN=773EDFF245FE7218754C7092AF948DC5B934A64B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d5:f2:7a:d5:9c:66:3a:c3:bc:31:78:44:67:
                    6c:00:ea:d6:ca:49:f7:51:db:5b:2e:f1:2f:15:86:
                    bb:be:a6:5f:fc:df:db:8b:45:ea:85:7f:4b:01:d8:
                    92:74:d6:cf:cb:e2:8d:ef:ea:ad:46:a5:c3:2a:c9:
                    13:77:22:e5:1b:c2:c7:58:86:a4:95:70:42:c7:52:
                    9d:99:73:8b:49:73:1a:bb:ef:7c:46:08:20:c1:de:
                    b8:1c:e1:cc:ee:f8:18:92:72:70:81:b3:05:df:88:
                    80:3e:c6:1f:42:a6:ca:d9:d0:a1:6f:21:a7:59:5f:
                    d3:8c:8b:d4:92:27:6b:dd:33:a1:32:67:be:54:b1:
                    dd:de:49:2e:8b:f5:aa:2c:9c:35:78:2b:6e:01:68:
                    b3:8b:08:0c:9f:ef:07:24:30:3a:e1:0b:84:b7:50:
                    13:0a:ed:b0:5e:1f:13:9a:54:a4:78:c7:63:0b:c7:
                    27:91:50:d4:53:90:a0:0e:33:a3:54:e3:ef:77:fa:
                    a4:ba:9a:8e:48:aa:9d:2e:77:88:f1:ac:7f:5e:4c:
                    6e:35:e4:11:c7:43:7e:9e:2f:3e:4c:8e:f3:ed:2c:
                    05:37:a5:97:ad:4d:78:f7:20:2f:39:ec:e1:96:b3:
                    93:9c:f3:fa:61:48:c3:95:62:d0:41:21:bf:48:66:
                    e5:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:3E:DF:F2:45:FE:72:18:75:4C:70:92:AF:94:8D:C5:B9:34:A6:4B
            X509v3 Authority Key Identifier:
                keyid:C4:E4:73:26:7C:7E:D8:DB:FC:CD:20:9A:C0:9A:1C:A7:B8:4A:7C:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3137392e36332e3231342e302f32342d3234203d3e203237393736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:68:6a:d9:76:20:25:09:80:f5:20:88:ee:01:cd:87:70:ea:
         e2:e7:58:05:3e:e4:50:03:7b:d1:90:26:74:44:63:96:c4:e5:
         de:d0:7a:32:9e:5c:ec:67:1b:50:ff:8a:62:ba:47:39:1a:aa:
         1f:be:c8:58:a7:6c:bc:20:da:c7:5b:af:12:6e:22:55:64:99:
         53:68:46:6f:44:0e:a9:3a:2a:43:7f:d6:46:48:a6:ef:86:65:
         b9:4e:50:78:05:78:44:d1:23:80:3e:6f:78:31:05:a8:0f:0e:
         fd:03:bb:e5:3c:1c:12:b8:96:11:a3:77:d7:c3:a4:c9:15:d2:
         dc:a0:ae:ef:e2:40:fd:f2:ab:f3:fd:b7:dd:a5:c2:08:45:0d:
         24:8c:21:36:0c:60:00:90:14:e4:f0:41:1d:d7:8d:12:39:f7:
         32:43:96:f5:66:01:2f:95:12:02:21:62:ff:44:43:8e:e5:03:
         0f:df:a7:93:68:8a:19:43:66:10:16:26:5b:28:eb:b0:86:25:
         c2:56:43:cc:3d:04:fe:c7:9b:88:f4:3b:e4:5c:08:a0:e1:52:
         20:82:bd:11:82:3a:8e:72:7b:c9:39:cb:0a:a1:af:be:15:ff:
         22:21:b4:10:9c:8a:43:09:aa:67:22:cb:fc:b5:80:b3:08:ab:
         21:29:f6:88
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUYKPQbZubqaacqsMvOBJ3cL9HfYswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzRFNDczMjY3QzdFRDhEQkZDQ0QyMDlBQzA5QTFDQTdC
ODRBN0MzOTAeFw0yNjEwMDIxODMyNTlaFw0yNzEwMDExODM3NTlaMDMxMTAvBgNV
BAMTKDc3M0VERkYyNDVGRTcyMTg3NTRDNzA5MkFGOTQ4REM1QjkzNEE2NEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCU1fJ61ZxmOsO8MXhEZ2wA6tbK
SfdR21su8S8Vhru+pl/839uLReqFf0sB2JJ01s/L4o3v6q1GpcMqyRN3IuUbwsdY
hqSVcELHUp2Zc4tJcxq773xGCCDB3rgc4czu+BiScnCBswXfiIA+xh9CpsrZ0KFv
IadZX9OMi9SSJ2vdM6EyZ75Usd3eSS6L9aosnDV4K24BaLOLCAyf7wckMDrhC4S3
UBMK7bBeHxOaVKR4x2MLxyeRUNRTkKAOM6NU4+93+qS6mo5Iqp0ud4jxrH9eTG41
5BHHQ36eLz5MjvPtLAU3pZetTXj3IC857OGWs5Oc8/phSMOVYtBBIb9IZuXtAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUdz7f8kX+chh1THCSr5SNxbk0pkswHwYDVR0j
BBgwFoAUxORzJnx+2Nv8zSCawJocp7hKfDkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQzJEOUIxRTYxNkJGQzYwMzBGM0RBMUQ2RjIwQjZCNDE0
MzE5QThDREQ0NEVFNjQyMEI2RkZFNzBENjVDNUI5LzAvQzRFNDczMjY3QzdFRDhE
QkZDQ0QyMDlBQzA5QTFDQTdCODRBN0MzOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DNEU0NzMyNjdDN0VEOERCRkND
RDIwOUFDMDlBMUNBN0I4NEE3QzM5LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUMyRDlCMUU2MTZCRkM2MDMwRjNEQTFENkYyMEI2QjQxNDMxOUE4Q0RE
NDRFRTY0MjBCNkZGRTcwRDY1QzVCOS8wLzMxMzczOTJlMzYzMzJlMzIzMTM0MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzM5MzczNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALM/1jAN
BgkqhkiG9w0BAQsFAAOCAQEAUGhq2XYgJQmA9SCI7gHNh3Dq4udYBT7kUAN70ZAm
dERjlsTl3tB6Mp5c7GcbUP+KYrpHORqqH77IWKdsvCDax1uvEm4iVWSZU2hGb0QO
qToqQ3/WRkim74ZluU5QeAV4RNEjgD5veDEFqA8O/QO75TwcEriWEaN318OkyRXS
3KCu7+JA/fKr8/233aXCCEUNJIwhNgxgAJAU5PBBHdeNEjn3MkOW9WYBL5USAiFi
/0RDjuUDD9+nk2iKGUNmEBYmWyjrsIYlwlZDzD0E/sebiPQ75FwIoOFSIIK9EYI6
jnJ7yTnLCqGvvhX/IiG0EJyKQwmqZyLL/LWAswirISn2iA==
-----END CERTIFICATE-----
Generated at Sun Oct 11 22:13:14 2026 by rpki-client