Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e35332e34312e302f32342d3234203d3e203237373432.roa
File:                     3139302e35332e34312e302f32342d3234203d3e203237373432.roa (raw, json)
Hash identifier:          dCitJSLLm8VvutM62VCfORD/T0GYKf+Z2tfsKZWldVY=
Subject key identifier:   C5:B6:D6:89:B9:D1:2F:D6:4B:78:D3:0B:54:16:1B:E0:D0:EB:69:BC
Certificate issuer:       /CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Certificate serial:       13864E0C7D174AD91D5009533DFFE19F14CD661C
Authority key identifier: 9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e35332e34312e302f32342d3234203d3e203237373432.roa
Signing time:             Tue 01 Sep 2026 23:20:00 +0000
ROA not before:           Tue 01 Sep 2026 23:15:00 +0000
ROA not after:            Tue 31 Aug 2027 23:20:00 +0000
asID:                     27742
IP address blocks:        190.53.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Sep 2026 00:15:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:86:4e:0c:7d:17:4a:d9:1d:50:09:53:3d:ff:e1:9f:14:cd:66:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
        Validity
            Not Before: Sep  1 23:15:00 2026 GMT
            Not After : Aug 31 23:20:00 2027 GMT
        Subject: CN=C5B6D689B9D12FD64B78D30B54161BE0D0EB69BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:8a:8f:5c:f3:90:03:2d:c9:d0:ae:22:39:06:
                    ad:97:b6:52:4b:a9:ec:ae:17:02:2a:ef:a1:ed:66:
                    36:1b:61:ca:81:b0:96:c8:17:17:ef:39:d4:d5:3d:
                    26:7d:8a:da:ec:bd:18:d0:1b:75:7d:64:a8:7e:a8:
                    31:86:06:8f:b6:ce:15:e4:ed:71:bd:0f:f0:b6:b6:
                    0a:24:6d:87:60:e7:d2:82:5a:18:6e:f8:46:ee:20:
                    22:6d:55:64:c3:ce:34:58:28:23:17:8a:f2:3e:3b:
                    b0:5a:1f:b0:df:4a:6b:d8:25:d3:56:df:e8:b8:cf:
                    44:e8:f6:dd:5d:1e:4c:bf:75:ac:f8:c7:bb:7d:ff:
                    b1:0c:43:48:d8:31:67:72:f8:55:d4:0c:9d:74:c6:
                    e4:4a:18:28:ab:d5:f9:13:1a:67:2f:d1:af:9f:51:
                    68:82:c0:59:22:f3:b7:a4:4e:e9:60:ec:2a:48:7a:
                    86:f3:e8:6f:d1:28:82:8f:9a:40:6c:08:79:6d:59:
                    48:15:eb:2a:ce:a8:f5:66:49:ff:57:4a:1e:ae:1c:
                    ab:43:e3:4a:04:66:96:a3:fe:ff:1b:e2:50:bc:e7:
                    d1:2f:05:9a:97:34:79:52:a3:7f:b1:42:f0:ea:05:
                    de:81:f6:93:30:ae:d6:fd:a9:9f:6b:08:fa:6f:91:
                    1e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:B6:D6:89:B9:D1:2F:D6:4B:78:D3:0B:54:16:1B:E0:D0:EB:69:BC
            X509v3 Authority Key Identifier:
                keyid:9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e35332e34312e302f32342d3234203d3e203237373432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.53.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:f0:d9:08:08:5d:95:4e:9c:78:dc:30:36:21:71:3b:30:0e:
         16:eb:36:2f:46:5a:a6:83:75:52:4c:4f:b8:0b:38:cf:84:3f:
         a4:6b:c6:a9:52:56:68:7f:ef:f3:2b:2a:ba:04:d7:6f:7e:80:
         ac:18:5b:34:ae:15:4c:dd:5a:93:95:66:64:09:d5:52:b1:bd:
         fd:85:a6:e8:a0:df:d3:4f:4f:a1:8a:c2:20:e8:44:f0:ba:21:
         70:bf:0a:e5:22:ba:10:5a:04:6c:22:88:09:17:12:9f:1c:8c:
         c0:3b:f2:b2:cc:20:fe:ba:48:56:91:6b:d8:41:1c:47:b6:7e:
         00:bb:b2:a6:6a:4f:98:84:fb:b6:bd:e8:0a:6a:25:21:c9:d5:
         3a:37:cc:b5:f1:6c:b9:ba:09:16:c2:67:30:16:cd:37:c6:e6:
         e8:97:ec:36:78:6c:d2:ea:a2:cb:52:3e:d2:ed:b1:8b:86:30:
         63:20:ee:cb:3f:df:60:13:9d:90:b5:f0:f6:3a:8b:92:1c:eb:
         45:d8:35:c8:d5:be:06:3d:a3:ed:44:39:dd:76:78:65:59:4c:
         54:df:3e:4d:45:f7:f1:a4:03:43:bd:e4:ca:f9:f5:37:ea:36:
         33:88:c7:e3:92:c0:63:bb:27:6e:00:88:48:6e:46:09:b5:b1:
         5a:3f:d6:cb
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUE4ZODH0XStkdUAlTPf/hnxTNZhwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUJDQ0JENjhFQjIyQzM3Qjg4NkQ4MUJERkM4QkE3N0NE
NzMxMjIwODAeFw0yNjA5MDEyMzE1MDBaFw0yNzA4MzEyMzIwMDBaMDMxMTAvBgNV
BAMTKEM1QjZENjg5QjlEMTJGRDY0Qjc4RDMwQjU0MTYxQkUwRDBFQjY5QkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKio9c85ADLcnQriI5Bq2XtlJL
qeyuFwIq76HtZjYbYcqBsJbIFxfvOdTVPSZ9itrsvRjQG3V9ZKh+qDGGBo+2zhXk
7XG9D/C2tgokbYdg59KCWhhu+EbuICJtVWTDzjRYKCMXivI+O7BaH7DfSmvYJdNW
3+i4z0To9t1dHky/daz4x7t9/7EMQ0jYMWdy+FXUDJ10xuRKGCir1fkTGmcv0a+f
UWiCwFki87ekTulg7CpIeobz6G/RKIKPmkBsCHltWUgV6yrOqPVmSf9XSh6uHKtD
40oEZpaj/v8b4lC859EvBZqXNHlSo3+xQvDqBd6B9pMwrtb9qZ9rCPpvkR4fAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUxbbWibnRL9ZLeNMLVBYb4NDrabwwHwYDVR0j
BBgwFoAUm8y9aOsiw3uIbYG9/IunfNcxIggwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zQTVGMkY4N0QxMTc4NkZCM0ZDQURBQTA0MzQzMUVCMDEz
Q0RCQUQwMDI0N0VEQjdBNjUwMkJGRkQ4QjRDQzI0LzAvOUJDQ0JENjhFQjIyQzM3
Qjg4NkQ4MUJERkM4QkE3N0NENzMxMjIwOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85QkNDQkQ2OEVCMjJDMzdCODg2
RDgxQkRGQzhCQTc3Q0Q3MzEyMjA4LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0E1RjJGODdEMTE3ODZGQjNGQ0FEQUEwNDM0MzFFQjAxM0NEQkFEMDAy
NDdFREI3QTY1MDJCRkZEOEI0Q0MyNC8wLzMxMzkzMDJlMzUzMzJlMzQzMTJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzczNzM0MzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC+NSkwDQYJ
KoZIhvcNAQELBQADggEBAG3w2QgIXZVOnHjcMDYhcTswDhbrNi9GWqaDdVJMT7gL
OM+EP6RrxqlSVmh/7/MrKroE129+gKwYWzSuFUzdWpOVZmQJ1VKxvf2Fpuig39NP
T6GKwiDoRPC6IXC/CuUiuhBaBGwiiAkXEp8cjMA78rLMIP66SFaRa9hBHEe2fgC7
sqZqT5iE+7a96ApqJSHJ1To3zLXxbLm6CRbCZzAWzTfG5uiX7DZ4bNLqostSPtLt
sYuGMGMg7ss/32ATnZC18PY6i5Ic60XYNcjVvgY9o+1EOd12eGVZTFTfPk1F9/Gk
A0O95Mr59TfqNjOIx+OSwGO7J24AiEhuRgm1sVo/1ss=
-----END CERTIFICATE-----
Generated at Wed Sep 2 12:03:30 2026 by rpki-client