Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/2AC5EE1DD083724E86C5C94B754C117392700A0D837B84AF99B3F08B14F28665/0/3139322e3233312e3134302e302f32342d3234203d3e20323138363438.roa
File:                     3139322e3233312e3134302e302f32342d3234203d3e20323138363438.roa (raw, json)
Hash identifier:          OIkQZkFdvGM2NsJnzp2VTXjnkAs1hwT4I7WcKUo0u6I=
Subject key identifier:   F5:AB:41:BF:62:0F:22:0A:27:39:EF:71:52:A9:22:EA:96:29:EB:72
Certificate issuer:       /CN=BB9F58AE70D6FEE0088AE976C8A0F64807E1799E
Certificate serial:       60A22A375103954A28DAF889BE15A2F0E05EB67C
Authority key identifier: BB:9F:58:AE:70:D6:FE:E0:08:8A:E9:76:C8:A0:F6:48:07:E1:79:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB9F58AE70D6FEE0088AE976C8A0F64807E1799E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2AC5EE1DD083724E86C5C94B754C117392700A0D837B84AF99B3F08B14F28665/0/3139322e3233312e3134302e302f32342d3234203d3e20323138363438.roa
Signing time:             Thu 17 Sep 2026 14:00:00 +0000
ROA not before:           Thu 17 Sep 2026 13:55:00 +0000
ROA not after:            Thu 16 Sep 2027 14:00:00 +0000
asID:                     218648
IP address blocks:        192.231.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2AC5EE1DD083724E86C5C94B754C117392700A0D837B84AF99B3F08B14F28665/0/BB9F58AE70D6FEE0088AE976C8A0F64807E1799E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2AC5EE1DD083724E86C5C94B754C117392700A0D837B84AF99B3F08B14F28665/0/BB9F58AE70D6FEE0088AE976C8A0F64807E1799E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB9F58AE70D6FEE0088AE976C8A0F64807E1799E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:a2:2a:37:51:03:95:4a:28:da:f8:89:be:15:a2:f0:e0:5e:b6:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB9F58AE70D6FEE0088AE976C8A0F64807E1799E
        Validity
            Not Before: Sep 17 13:55:00 2026 GMT
            Not After : Sep 16 14:00:00 2027 GMT
        Subject: CN=F5AB41BF620F220A2739EF7152A922EA9629EB72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:b9:59:ba:0c:a0:63:48:5c:b3:5e:61:aa:69:
                    64:93:5f:7e:6e:30:5c:9d:61:8d:3b:a7:2d:5d:51:
                    64:4f:f5:ca:ef:34:38:c6:30:e2:fe:99:5c:4a:09:
                    63:16:ff:e3:5e:77:e1:52:7e:35:e3:16:f8:2f:ee:
                    ea:86:01:2c:02:ce:b2:d2:0c:da:fd:97:3e:76:47:
                    d5:de:e3:05:65:82:52:c6:32:86:3e:c4:11:88:19:
                    04:45:c1:8a:48:ce:53:af:5d:7c:52:04:2d:69:18:
                    17:8a:0c:2b:29:61:e6:12:c8:c7:e5:77:6f:98:63:
                    b3:52:96:e1:15:22:93:76:2d:45:53:12:53:fa:37:
                    11:f1:f8:41:ad:d1:9c:ab:e6:5b:3a:e8:66:be:ce:
                    1f:37:90:29:14:96:14:2d:dd:ba:82:dd:e0:66:ef:
                    c8:59:a8:40:2a:fe:60:8a:85:be:3d:02:43:af:0b:
                    64:ec:b0:14:71:fe:2b:68:cc:b4:8f:aa:12:f1:a7:
                    10:da:1b:09:53:b2:1d:62:a5:b9:e4:77:d4:8e:d2:
                    50:26:09:f6:31:0f:b1:c0:ee:ea:bd:2c:40:d0:dd:
                    e2:b8:b9:5c:41:73:a4:00:ca:55:d6:db:9b:9c:3f:
                    38:c1:fc:c3:6b:bc:b4:de:fc:c1:52:37:26:fe:79:
                    fc:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:AB:41:BF:62:0F:22:0A:27:39:EF:71:52:A9:22:EA:96:29:EB:72
            X509v3 Authority Key Identifier:
                keyid:BB:9F:58:AE:70:D6:FE:E0:08:8A:E9:76:C8:A0:F6:48:07:E1:79:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2AC5EE1DD083724E86C5C94B754C117392700A0D837B84AF99B3F08B14F28665/0/BB9F58AE70D6FEE0088AE976C8A0F64807E1799E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB9F58AE70D6FEE0088AE976C8A0F64807E1799E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2AC5EE1DD083724E86C5C94B754C117392700A0D837B84AF99B3F08B14F28665/0/3139322e3233312e3134302e302f32342d3234203d3e20323138363438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.231.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:06:f6:30:f2:7b:0e:ff:06:44:0d:23:48:78:83:9c:61:3e:
         9f:cb:ec:01:c9:9d:9b:8d:b6:13:f4:09:e1:48:63:98:90:a7:
         da:43:eb:13:17:6f:c3:32:18:ce:fb:33:da:29:95:9b:d7:43:
         ce:84:e2:f3:37:1e:4f:30:66:da:ef:19:81:5d:ad:56:ca:1a:
         c6:e8:f3:89:ff:d3:53:a6:0f:08:5d:58:ed:ec:27:b1:59:e7:
         5d:4d:90:a3:78:61:a8:3d:ac:15:f5:a2:d4:77:ae:d1:0d:f1:
         31:cc:c6:09:ff:a4:29:5f:dd:2d:17:33:0f:08:e5:74:1d:a3:
         5d:e8:08:ae:e3:17:67:49:a1:12:16:55:f7:88:0e:e5:b6:fe:
         82:57:86:5c:a0:96:c3:d5:53:4b:62:ee:52:09:b6:4d:31:3b:
         ee:21:75:96:37:2f:9d:29:87:c6:76:2e:56:fb:38:e5:ab:88:
         44:5a:39:44:cd:90:c6:ab:db:10:37:bf:32:a8:01:1b:10:69:
         d2:d1:d1:26:1e:42:ef:dd:c1:e4:a5:fc:29:c5:cf:24:c9:23:
         56:13:46:6b:25:8c:c1:c8:4e:c9:a5:ff:fa:ee:24:0d:79:31:
         cc:26:3c:da:86:ba:3d:0e:8b:00:15:de:4c:20:f9:e8:31:e9:
         e3:69:dd:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 21:05:54 2026 by rpki-client