Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/3B87C93929EA1BE951549B8B74A3800C64833E85BE9D523BBA8EC24E94339AED/0/AS11519.roa
File:                     AS11519.roa (raw, json)
Hash identifier:          7345QLmtYvraIhRtDBfRxOzF5YCphXqgnFEsU5yWjpY=
Subject key identifier:   1D:6A:1F:66:DF:FE:FB:43:63:F5:97:6F:D2:E1:C6:ED:3D:6A:20:96
Certificate issuer:       /CN=C868DC422443FA70E7761C0304061EB998BF7378
Certificate serial:       71F59538C8375EFA59F00C7E801FA3DA246A0F54
Authority key identifier: C8:68:DC:42:24:43:FA:70:E7:76:1C:03:04:06:1E:B9:98:BF:73:78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C868DC422443FA70E7761C0304061EB998BF7378.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3B87C93929EA1BE951549B8B74A3800C64833E85BE9D523BBA8EC24E94339AED/0/AS11519.roa
Signing time:             Fri 30 Oct 2026 18:20:00 +0000
ROA not before:           Fri 30 Oct 2026 18:15:00 +0000
ROA not after:            Fri 29 Oct 2027 18:20:00 +0000
asID:                     11519
IP address blocks:        201.134.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3B87C93929EA1BE951549B8B74A3800C64833E85BE9D523BBA8EC24E94339AED/0/C868DC422443FA70E7761C0304061EB998BF7378.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3B87C93929EA1BE951549B8B74A3800C64833E85BE9D523BBA8EC24E94339AED/0/C868DC422443FA70E7761C0304061EB998BF7378.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C868DC422443FA70E7761C0304061EB998BF7378.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Nov 2026 01:33:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:f5:95:38:c8:37:5e:fa:59:f0:0c:7e:80:1f:a3:da:24:6a:0f:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C868DC422443FA70E7761C0304061EB998BF7378
        Validity
            Not Before: Oct 30 18:15:00 2026 GMT
            Not After : Oct 29 18:20:00 2027 GMT
        Subject: CN=1D6A1F66DFFEFB4363F5976FD2E1C6ED3D6A2096
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:65:c3:7d:20:24:dd:9b:ec:f7:1f:ee:51:42:
                    33:f7:59:18:b6:f8:aa:13:69:fb:ef:ce:5e:8d:54:
                    d4:7d:c2:eb:2a:29:88:88:3a:e5:7d:1b:22:08:e6:
                    f8:1b:56:99:78:06:45:c7:4f:c2:a2:17:89:a2:c2:
                    e7:46:91:c1:f2:92:76:bd:45:b0:ca:bc:d2:3e:c2:
                    6d:18:06:b3:62:b7:3a:cf:d5:a3:39:05:3b:3f:6c:
                    2c:70:b6:33:01:2f:37:16:f8:40:22:81:1a:e0:b3:
                    86:69:b3:4e:e7:0f:81:52:d5:8f:7f:1d:a1:e8:b0:
                    e7:40:ad:0c:31:74:78:ed:ea:52:55:92:e6:79:79:
                    73:94:14:c4:67:03:17:58:76:2b:76:ab:9d:f1:63:
                    50:48:13:e3:6c:5f:32:6a:22:39:62:2f:3a:bc:58:
                    7a:91:5d:11:e1:10:ab:51:f3:b3:61:ee:0d:7c:15:
                    9a:3b:36:ed:7c:55:ad:02:28:b7:b4:fb:0a:45:cb:
                    18:be:f1:6d:68:50:17:a7:7a:3e:f5:0b:47:3d:d7:
                    01:9b:f4:1d:2c:6d:28:b8:52:a3:9e:ca:e6:5f:c8:
                    fc:e6:44:7c:bc:85:8a:64:c7:c6:f9:9c:87:44:cc:
                    74:20:cb:72:40:b7:12:f0:ad:48:df:c5:92:53:6b:
                    62:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:6A:1F:66:DF:FE:FB:43:63:F5:97:6F:D2:E1:C6:ED:3D:6A:20:96
            X509v3 Authority Key Identifier:
                keyid:C8:68:DC:42:24:43:FA:70:E7:76:1C:03:04:06:1E:B9:98:BF:73:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3B87C93929EA1BE951549B8B74A3800C64833E85BE9D523BBA8EC24E94339AED/0/C868DC422443FA70E7761C0304061EB998BF7378.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C868DC422443FA70E7761C0304061EB998BF7378.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3B87C93929EA1BE951549B8B74A3800C64833E85BE9D523BBA8EC24E94339AED/0/AS11519.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.134.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:39:51:f8:8e:ac:6c:8f:1b:84:d7:bd:d7:ce:30:be:97:f9:
         a5:80:54:fd:a9:e2:d4:76:f8:dc:83:19:d0:c6:b5:05:7a:76:
         37:fd:9f:0e:13:84:bb:ce:1b:2e:5a:61:7f:49:97:5d:7c:91:
         8a:4b:02:06:57:34:12:7d:e7:7c:d6:6a:0b:0b:b8:2c:16:0e:
         6f:fd:6d:1e:fc:3c:d8:cc:8a:52:c2:f5:59:f0:31:be:4b:3a:
         2d:0b:08:54:74:91:fc:9f:60:ee:09:b6:ce:75:b8:be:00:b5:
         1a:fd:27:7b:bc:3d:75:49:0a:ed:ca:f4:ae:88:e7:56:73:04:
         29:32:0b:8f:12:f5:de:32:a0:a1:f6:f9:f3:99:e5:a4:ec:b8:
         38:71:05:12:92:95:7a:1c:44:e2:83:73:50:92:92:22:d7:f9:
         57:37:16:6b:d5:6a:49:e2:58:55:3f:07:c9:68:e1:c9:9d:85:
         8e:51:be:0b:f9:6c:8d:90:2c:d1:06:95:17:10:b6:9f:1d:a5:
         57:01:b3:77:e1:48:e2:b6:99:1e:80:6e:61:c8:6c:7f:20:aa:
         af:b5:55:a9:85:27:31:e5:7e:c4:b3:ee:90:37:67:e2:4e:e7:
         57:93:b7:8f:88:2d:6e:f8:64:00:80:d8:93:be:9a:15:e9:54:
         ed:68:73:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 17:34:51 2026 by rpki-client