Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3139312e3130332e3132382e302f31372d3137203d3e203237363935.roa
File:                     3139312e3130332e3132382e302f31372d3137203d3e203237363935.roa (raw, json)
Hash identifier:          gTE6xVQtdHtcu7lxmwlJTmvSYUW3NT+ELK1rabkDe+I=
Subject key identifier:   F9:A1:A3:B3:72:94:CA:0E:28:50:09:F5:D7:99:7A:21:E0:BF:AA:EB
Certificate issuer:       /CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
Certificate serial:       1CBBE2719476F628F45692F294080D38790CFA38
Authority key identifier: 34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3139312e3130332e3132382e302f31372d3137203d3e203237363935.roa
Signing time:             Mon 19 Oct 2026 20:42:02 +0000
ROA not before:           Mon 19 Oct 2026 20:37:02 +0000
ROA not after:            Mon 18 Oct 2027 20:42:02 +0000
asID:                     27695
IP address blocks:        191.103.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 04 Nov 2026 02:32:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:bb:e2:71:94:76:f6:28:f4:56:92:f2:94:08:0d:38:79:0c:fa:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
        Validity
            Not Before: Oct 19 20:37:02 2026 GMT
            Not After : Oct 18 20:42:02 2027 GMT
        Subject: CN=F9A1A3B37294CA0E285009F5D7997A21E0BFAAEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:db:cc:45:40:5a:77:71:49:0c:2f:aa:ae:c4:
                    d8:da:8f:13:cc:ea:52:8d:96:0d:ed:ff:58:d6:91:
                    ac:68:f9:95:16:bf:79:d8:06:21:a7:5b:3f:35:0f:
                    67:ca:fe:d6:d1:6a:cd:59:35:05:61:61:6c:47:07:
                    05:48:4a:c1:8c:4b:47:41:3e:60:a2:a3:e3:31:d1:
                    d4:3a:2e:ce:7e:f6:a2:2d:96:13:d5:57:47:66:98:
                    ad:f9:3d:4b:b6:73:99:da:4d:98:5c:37:ae:69:cc:
                    ec:c1:94:3a:3b:90:f2:5e:18:66:f3:0a:26:30:4a:
                    16:0e:4d:1f:f4:b3:b8:e4:16:e0:a7:35:39:cc:7b:
                    10:5a:97:5f:45:1e:f3:10:76:53:66:6d:e5:28:db:
                    0a:ee:39:01:a6:c6:e8:98:38:16:21:99:db:76:64:
                    81:a9:8a:23:1f:f0:1b:fe:c7:de:fb:2a:44:d2:88:
                    68:6d:4d:ef:d7:60:3d:4c:fd:9b:b3:9c:59:fd:86:
                    11:5e:72:0f:ac:23:42:d5:6d:6e:2a:db:1c:a5:cc:
                    4c:66:4c:b2:fe:78:74:67:9d:89:55:49:09:cb:54:
                    78:84:85:35:6a:b5:02:7c:78:f2:30:9e:f5:ef:b6:
                    9a:6e:ae:91:50:58:20:83:b8:89:e5:62:a9:c6:b7:
                    da:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:A1:A3:B3:72:94:CA:0E:28:50:09:F5:D7:99:7A:21:E0:BF:AA:EB
            X509v3 Authority Key Identifier:
                keyid:34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3139312e3130332e3132382e302f31372d3137203d3e203237363935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.103.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         6b:2f:21:8a:5f:dd:be:4d:58:a3:82:70:fa:f2:8e:fa:87:19:
         da:f1:b5:3d:35:d0:46:2d:36:19:0e:5d:a5:ea:e9:26:54:e6:
         36:5a:62:86:1b:78:d4:5a:36:ba:fc:44:f8:6e:2d:d0:3a:f3:
         39:1c:60:dc:11:20:f3:df:54:36:2f:a1:a2:d7:10:e4:a8:60:
         be:a3:7d:b7:9d:90:4b:e0:a9:b1:72:c9:d8:40:4a:e8:75:c5:
         47:4c:58:9f:84:25:a8:7e:de:9b:6e:88:84:97:f2:5b:cf:44:
         b0:7b:33:e4:44:1d:f7:75:c9:69:4e:00:f6:1d:42:76:bb:aa:
         ba:a3:f0:f6:aa:99:11:90:eb:3e:96:31:04:86:56:8e:05:50:
         c2:da:4b:f8:6a:71:86:a9:db:15:8f:fc:e7:6e:ee:b9:1f:ab:
         88:24:82:87:a4:6d:da:40:e0:3b:40:46:a5:c4:c6:93:9e:f2:
         c0:fa:8a:45:51:3f:86:76:e3:44:a0:e9:c4:8e:30:23:0f:ea:
         99:05:5f:af:6b:d3:6e:90:04:8f:9f:e5:b4:88:79:c4:ae:97:
         bb:c7:6e:05:b2:5a:17:9d:f2:20:96:2b:c9:62:b8:a0:67:81:
         d5:e8:6c:32:10:9f:0f:3d:21:8c:f0:4b:54:3d:28:02:15:53:
         0b:11:f2:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 03:22:54 2026 by rpki-client