Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/3139302e3131332e39352e302f32342d3234203d3e203532343535.roa
File:                     3139302e3131332e39352e302f32342d3234203d3e203532343535.roa (raw, json)
Hash identifier:          uHPOkYynKh5GwvLQVT3dykmNRu3RdW8ylbflmZ0k5As=
Subject key identifier:   FB:71:CB:BE:2E:43:5D:B8:D9:3C:BE:A1:4E:FE:85:01:F3:70:C5:07
Certificate issuer:       /CN=260F3C977C9EAACF80F67FC71EED2986EACDC496
Certificate serial:       52955A9DF2F4ED87E28EE0227EBB77CDE821ED31
Authority key identifier: 26:0F:3C:97:7C:9E:AA:CF:80:F6:7F:C7:1E:ED:29:86:EA:CD:C4:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/3139302e3131332e39352e302f32342d3234203d3e203532343535.roa
Signing time:             Thu 03 Sep 2026 12:33:33 +0000
ROA not before:           Thu 03 Sep 2026 12:28:33 +0000
ROA not after:            Thu 02 Sep 2027 12:33:33 +0000
asID:                     52455
IP address blocks:        190.113.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.crl
                          rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:95:5a:9d:f2:f4:ed:87:e2:8e:e0:22:7e:bb:77:cd:e8:21:ed:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=260F3C977C9EAACF80F67FC71EED2986EACDC496
        Validity
            Not Before: Sep  3 12:28:33 2026 GMT
            Not After : Sep  2 12:33:33 2027 GMT
        Subject: CN=FB71CBBE2E435DB8D93CBEA14EFE8501F370C507
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:5c:b0:c7:bc:14:53:91:bd:45:f8:34:f3:4d:
                    b5:b7:82:8d:fd:42:78:41:74:00:b3:5f:e7:b0:5a:
                    d7:fd:0c:d7:12:34:bc:f9:dc:4b:aa:46:15:dd:ec:
                    bc:07:0e:05:26:99:7f:80:2b:6c:63:25:f4:75:37:
                    bd:4f:09:57:66:2b:b2:3e:49:ac:10:65:e3:cd:bd:
                    97:31:13:76:2a:a3:d2:51:b0:d2:2f:b9:c8:6a:8f:
                    ee:9b:c7:69:7b:76:f3:4b:be:13:fb:e5:06:9c:a2:
                    91:74:d0:14:db:0f:83:50:20:cd:0d:24:ec:ab:8e:
                    1b:31:f2:e9:7b:3d:90:1b:f6:5c:b3:8b:53:a3:1d:
                    a3:bb:0e:5a:1f:8e:b3:2c:22:2e:35:95:27:ec:4c:
                    40:3f:a1:63:97:0d:46:f1:12:12:55:34:38:b4:af:
                    55:0f:5d:52:06:6e:31:d5:b5:6a:92:85:10:c3:4f:
                    8f:ce:bf:89:99:8c:28:75:68:59:74:3e:76:c8:1e:
                    77:ad:c2:ff:e1:a6:48:48:0d:bf:0b:14:83:dd:ff:
                    f1:52:c9:ff:fd:41:80:e7:21:53:be:3d:ab:3b:49:
                    97:80:85:70:50:a8:14:aa:86:4b:d5:d8:6e:b1:15:
                    df:8f:54:78:29:81:26:0b:c4:97:6e:0f:f4:e5:87:
                    0f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:71:CB:BE:2E:43:5D:B8:D9:3C:BE:A1:4E:FE:85:01:F3:70:C5:07
            X509v3 Authority Key Identifier:
                keyid:26:0F:3C:97:7C:9E:AA:CF:80:F6:7F:C7:1E:ED:29:86:EA:CD:C4:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/3139302e3131332e39352e302f32342d3234203d3e203532343535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.113.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:5f:81:94:ae:3a:81:2b:07:cb:9b:d6:4d:67:4a:13:2a:8e:
         16:41:f2:32:a4:57:8f:7d:eb:6f:76:05:49:66:a6:98:ee:0d:
         1d:82:4b:8e:f4:ea:73:77:6e:16:63:fc:e2:cf:42:b6:42:fa:
         c6:a2:8f:a1:d7:dc:5e:f9:89:05:1e:69:05:41:56:44:07:da:
         5c:87:1f:0b:d0:dc:6b:15:78:66:bc:e9:72:0e:3b:14:eb:f6:
         33:8b:15:6c:1e:05:7c:00:16:ea:7f:75:75:36:87:6c:8b:8f:
         58:45:79:59:9d:83:bc:69:7d:44:b1:12:77:05:70:9c:e0:93:
         88:a5:fc:cb:e2:fc:38:32:50:2e:b0:6f:47:fe:7b:7e:69:f2:
         0b:5e:73:8d:f2:a3:90:7a:74:0b:cd:8b:19:fc:dd:8e:2f:f3:
         4a:7f:cc:ff:ec:40:40:c5:a8:fd:0b:6b:e9:d1:5a:2a:76:71:
         ec:0d:1e:75:af:fb:af:aa:47:d9:9b:ba:3b:85:6f:cd:62:18:
         3c:61:5b:8b:2f:ac:f5:a3:ed:9d:5f:d7:74:c0:94:85:b2:79:
         f0:d9:f0:71:0b:dc:06:b6:2c:f7:a4:15:86:dd:6d:7e:ff:2a:
         1c:a4:56:55:ff:ed:06:ce:08:10:3c:9f:bf:2d:7b:fc:59:95:
         0a:f9:42:62
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUUpVanfL07YfijuAifrt3zegh7TEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjYwRjNDOTc3QzlFQUFDRjgwRjY3RkM3MUVFRDI5ODZF
QUNEQzQ5NjAeFw0yNjA5MDMxMjI4MzNaFw0yNzA5MDIxMjMzMzNaMDMxMTAvBgNV
BAMTKEZCNzFDQkJFMkU0MzVEQjhEOTNDQkVBMTRFRkU4NTAxRjM3MEM1MDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPXLDHvBRTkb1F+DTzTbW3go39
QnhBdACzX+ewWtf9DNcSNLz53EuqRhXd7LwHDgUmmX+AK2xjJfR1N71PCVdmK7I+
SawQZePNvZcxE3Yqo9JRsNIvuchqj+6bx2l7dvNLvhP75QacopF00BTbD4NQIM0N
JOyrjhsx8ul7PZAb9lyzi1OjHaO7DlofjrMsIi41lSfsTEA/oWOXDUbxEhJVNDi0
r1UPXVIGbjHVtWqShRDDT4/Ov4mZjCh1aFl0PnbIHnetwv/hpkhIDb8LFIPd//FS
yf/9QYDnIVO+Pas7SZeAhXBQqBSqhkvV2G6xFd+PVHgpgSYLxJduD/Tlhw+JAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU+3HLvi5DXbjZPL6hTv6FAfNwxQcwHwYDVR0j
BBgwFoAUJg88l3yeqs+A9n/HHu0phurNxJYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83OURDNEY4NjU1NDVBMTA5RkRCQkY0MTFCQjZGOEVENDQ1
OTEyNzhCQTE3NTg3REU5RTc3MjFFOUZDMEFFMTc0LzAvMjYwRjNDOTc3QzlFQUFD
RjgwRjY3RkM3MUVFRDI5ODZFQUNEQzQ5Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNjBGM0M5NzdDOUVBQUNGODBG
NjdGQzcxRUVEMjk4NkVBQ0RDNDk2LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzlEQzRGODY1NTQ1QTEwOUZEQkJGNDExQkI2RjhFRDQ0NTkxMjc4QkEx
NzU4N0RFOUU3NzIxRTlGQzBBRTE3NC8wLzMxMzkzMDJlMzEzMTMzMmUzOTM1MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjM0MzUzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAL5xXzAN
BgkqhkiG9w0BAQsFAAOCAQEAD1+BlK46gSsHy5vWTWdKEyqOFkHyMqRXj33rb3YF
SWammO4NHYJLjvTqc3duFmP84s9CtkL6xqKPodfcXvmJBR5pBUFWRAfaXIcfC9Dc
axV4Zrzpcg47FOv2M4sVbB4FfAAW6n91dTaHbIuPWEV5WZ2DvGl9RLESdwVwnOCT
iKX8y+L8ODJQLrBvR/57fmnyC15zjfKjkHp0C82LGfzdji/zSn/M/+xAQMWo/Qtr
6dFaKnZx7A0eda/7r6pH2Zu6O4VvzWIYPGFbiy+s9aPtnV/XdMCUhbJ58NnwcQvc
BrYs96QVht1tfv8qHKRWVf/tBs4IEDyfvy17/FmVCvlCYg==
-----END CERTIFICATE-----
Generated at Fri Sep 18 21:32:24 2026 by rpki-client