Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/74806F814385AAD96FAE92612923C07960461FF7C8DB441E53A0EAC453F5A450/0/3139312e3130322e36322e302f32342d3234203d3e20323632393239.roa
File:                     3139312e3130322e36322e302f32342d3234203d3e20323632393239.roa (raw, json)
Hash identifier:          kSOusjXrIrd/bVZImvH+SgLN/wcNxAEstlCKgkjg6UI=
Subject key identifier:   48:91:63:51:FC:42:A4:E0:E2:B8:67:EF:E1:7A:5B:91:26:70:83:51
Certificate issuer:       /CN=D3B81DF8275FF8695370D4498DDC3A40FEE98F99
Certificate serial:       1E8248ED5DB74226EC6A1B749669967885352601
Authority key identifier: D3:B8:1D:F8:27:5F:F8:69:53:70:D4:49:8D:DC:3A:40:FE:E9:8F:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3B81DF8275FF8695370D4498DDC3A40FEE98F99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/74806F814385AAD96FAE92612923C07960461FF7C8DB441E53A0EAC453F5A450/0/3139312e3130322e36322e302f32342d3234203d3e20323632393239.roa
Signing time:             Wed 26 Aug 2026 21:26:42 +0000
ROA not before:           Wed 26 Aug 2026 21:21:42 +0000
ROA not after:            Wed 25 Aug 2027 21:26:42 +0000
asID:                     262929
IP address blocks:        191.102.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/74806F814385AAD96FAE92612923C07960461FF7C8DB441E53A0EAC453F5A450/0/D3B81DF8275FF8695370D4498DDC3A40FEE98F99.crl
                          rsync://repository.lacnic.net/rpki/lacnic/74806F814385AAD96FAE92612923C07960461FF7C8DB441E53A0EAC453F5A450/0/D3B81DF8275FF8695370D4498DDC3A40FEE98F99.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3B81DF8275FF8695370D4498DDC3A40FEE98F99.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:82:48:ed:5d:b7:42:26:ec:6a:1b:74:96:69:96:78:85:35:26:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3B81DF8275FF8695370D4498DDC3A40FEE98F99
        Validity
            Not Before: Aug 26 21:21:42 2026 GMT
            Not After : Aug 25 21:26:42 2027 GMT
        Subject: CN=48916351FC42A4E0E2B867EFE17A5B9126708351
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:fb:c2:38:d1:6b:8c:c6:67:20:91:b0:5f:55:
                    a5:6e:6a:f7:29:ad:f4:64:66:89:4a:8a:4f:b7:4c:
                    36:55:a5:4f:de:de:a5:18:da:2c:cc:06:13:74:24:
                    1b:8e:a8:c8:95:2a:c6:b8:f3:81:de:34:e6:c9:05:
                    04:44:91:3e:62:a0:46:50:73:72:04:f0:43:1f:e2:
                    42:47:9c:d8:7d:77:7b:34:02:99:fe:4f:d0:f7:c9:
                    fc:1e:b9:f6:d9:95:c9:d1:77:b1:2d:20:64:47:de:
                    28:24:8c:8c:2e:75:27:ea:e9:5e:a0:ae:37:59:66:
                    17:11:1e:9f:df:7b:20:60:e5:a9:5d:da:15:c2:ed:
                    22:fe:b3:14:04:35:46:eb:70:ea:c0:15:89:56:93:
                    f0:7c:2e:3a:22:f0:55:7b:c0:85:18:4f:87:ee:63:
                    da:92:d1:c8:4e:71:ea:75:61:36:23:0d:9c:3e:9a:
                    12:80:82:13:71:fb:79:90:5f:c4:f9:a5:80:d2:66:
                    2a:fd:cf:a0:36:ae:21:a8:48:8e:01:e0:14:92:2a:
                    4a:48:7c:08:94:dd:ae:bd:ab:bd:ba:00:33:2a:d3:
                    31:d1:b4:70:42:27:14:1d:30:5a:22:a1:80:23:c7:
                    6e:be:f5:1f:96:01:cd:af:26:84:a9:91:f1:37:52:
                    e7:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:91:63:51:FC:42:A4:E0:E2:B8:67:EF:E1:7A:5B:91:26:70:83:51
            X509v3 Authority Key Identifier:
                keyid:D3:B8:1D:F8:27:5F:F8:69:53:70:D4:49:8D:DC:3A:40:FE:E9:8F:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/74806F814385AAD96FAE92612923C07960461FF7C8DB441E53A0EAC453F5A450/0/D3B81DF8275FF8695370D4498DDC3A40FEE98F99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3B81DF8275FF8695370D4498DDC3A40FEE98F99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/74806F814385AAD96FAE92612923C07960461FF7C8DB441E53A0EAC453F5A450/0/3139312e3130322e36322e302f32342d3234203d3e20323632393239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.102.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:af:dc:3f:00:3b:2c:39:54:58:68:29:fa:64:e6:37:c8:77:
         f2:a1:1f:a3:8d:f6:c4:aa:e6:11:db:20:ab:c6:79:2e:08:0b:
         bd:cf:11:0f:07:7a:d7:7a:c1:37:da:1d:03:71:ee:03:29:b5:
         cc:f8:26:db:33:a1:01:cc:b7:95:67:be:a2:7b:ad:3e:70:f0:
         42:45:4a:9b:75:c9:18:39:22:55:a5:9c:22:c3:a1:b7:f1:9b:
         6b:4c:df:d2:e2:da:07:e6:0d:b1:b1:8d:9e:87:f0:3f:1b:a3:
         c0:09:99:26:54:0e:63:95:9c:43:6c:e5:72:e7:cf:44:c4:ea:
         04:bb:ab:d0:13:3c:f5:54:0f:a4:d4:7b:f0:35:ef:79:07:ca:
         ca:94:40:c1:02:c0:0f:d8:bd:dd:74:e5:53:89:53:70:bf:68:
         63:50:c1:7e:68:3c:98:53:3f:4e:43:ca:07:9b:1a:8f:41:f9:
         68:e4:ea:f6:22:ee:2c:3c:6d:8f:89:28:5e:22:06:9a:1d:bd:
         19:19:fd:ee:cf:f5:a2:90:bb:5c:97:72:d0:01:fe:b4:77:26:
         dd:85:ce:fc:3b:1f:7e:96:79:c2:f7:9a:a4:de:b6:a3:57:f0:
         df:aa:54:a1:ee:f1:34:c9:bc:66:e2:e7:d0:30:75:8e:a3:d5:
         dd:66:de:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 22:36:34 2026 by rpki-client