Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3139312e39372e34382e302f32342d3234203d3e203138363738.roa
File:                     3139312e39372e34382e302f32342d3234203d3e203138363738.roa (raw, json)
Hash identifier:          wViQjEh7qT94fGj2zCUeUTiPvRZrf89VynUvIi7uEow=
Subject key identifier:   85:9E:CE:FC:74:65:9D:F7:9B:67:41:EB:63:28:6E:04:79:1A:6C:D2
Certificate issuer:       /CN=8E9E896ADF8041E07AB6735225935260B837E74D
Certificate serial:       0DE9A3706531672786C1E27F291E715E7F1D155F
Authority key identifier: 8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3139312e39372e34382e302f32342d3234203d3e203138363738.roa
Signing time:             Tue 26 Aug 2025 16:45:00 +0000
ROA not before:           Tue 26 Aug 2025 16:40:00 +0000
ROA not after:            Tue 25 Aug 2026 16:45:00 +0000
asID:                     18678
IP address blocks:        191.97.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Sep 2025 00:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:e9:a3:70:65:31:67:27:86:c1:e2:7f:29:1e:71:5e:7f:1d:15:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E9E896ADF8041E07AB6735225935260B837E74D
        Validity
            Not Before: Aug 26 16:40:00 2025 GMT
            Not After : Aug 25 16:45:00 2026 GMT
        Subject: CN=859ECEFC74659DF79B6741EB63286E04791A6CD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:39:b4:cc:f0:2d:99:5a:53:9b:5e:94:9b:99:
                    08:3f:c4:b1:0c:82:57:ec:a9:9f:3f:c5:d4:06:66:
                    a0:85:f7:6a:64:b2:56:2b:9b:3d:15:9c:c9:db:da:
                    5d:a2:ac:bf:3f:ee:d2:2f:29:da:cd:59:e0:3b:ca:
                    e4:28:85:ef:14:e7:e3:a6:78:6c:74:5e:84:61:17:
                    58:5c:0e:0e:1a:a6:82:d7:b8:f3:06:4e:58:29:6d:
                    3a:1d:ff:cf:5d:27:68:c5:cd:5b:79:52:a5:78:7c:
                    2c:ed:0d:15:b5:3b:1c:06:a5:cd:bd:12:af:4e:0b:
                    9c:09:4b:aa:84:d5:12:45:cd:a5:39:d9:74:46:9c:
                    9b:5f:19:6f:f9:04:df:ee:e7:10:04:b9:7c:71:de:
                    8d:7b:41:ae:b5:d0:e4:ca:f0:11:70:f2:da:a4:11:
                    e8:1f:8c:0d:6d:60:1d:af:e7:7b:22:25:fe:9f:3d:
                    8f:25:cf:be:f7:e4:74:ef:61:6e:52:a8:a8:ed:7f:
                    21:b4:eb:61:94:ba:5e:53:13:43:94:86:ac:96:93:
                    b5:f7:cd:a9:82:a1:ce:1c:2f:13:1a:8a:26:c1:a9:
                    82:45:2d:e2:e5:17:d2:56:69:c7:91:de:84:72:b7:
                    75:17:f3:a1:97:c7:c7:c6:94:27:42:cd:8b:ae:a0:
                    9e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:9E:CE:FC:74:65:9D:F7:9B:67:41:EB:63:28:6E:04:79:1A:6C:D2
            X509v3 Authority Key Identifier:
                keyid:8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3139312e39372e34382e302f32342d3234203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.97.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:70:35:12:fa:c2:88:e8:bf:31:8b:14:36:e8:84:5e:bb:61:
         8a:3d:df:6a:91:00:2d:1c:7c:1c:57:6c:e6:2c:a6:b4:04:59:
         65:dc:6a:ba:d5:24:75:a9:d2:61:d3:30:48:e5:a6:bc:b2:53:
         29:c5:7d:42:2c:68:1e:e7:6d:ba:7e:88:4c:37:c3:33:78:49:
         de:7a:b1:b3:c7:23:50:a3:1c:f5:0e:52:54:69:07:5f:4a:f0:
         05:cd:17:02:a2:63:09:28:67:50:ff:32:2b:83:83:65:1f:2a:
         29:13:14:8e:8b:26:96:1a:9e:20:cf:22:21:18:4e:1b:34:c2:
         59:26:da:e1:bf:26:4b:c3:da:46:4e:e5:18:27:30:74:53:7a:
         af:f7:b2:fd:7b:5c:09:bc:cb:17:60:77:0b:19:21:d4:94:18:
         10:fb:01:a7:de:01:e9:5d:86:46:3c:dc:c0:01:15:40:25:76:
         e1:3e:c7:b4:22:d1:80:cd:94:aa:0a:bd:66:31:04:20:e2:40:
         41:c7:97:10:ad:a3:06:30:f9:1e:e3:85:60:9a:f4:40:fb:bd:
         30:3b:c3:b7:c3:7a:8e:01:f5:f5:cb:b9:ae:1c:06:74:09:c0:
         c1:cc:ca:e9:78:2a:3f:5d:52:04:72:d3:88:e6:62:01:8f:48:
         0d:cc:15:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 23:43:14 2025 by rpki-client