Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/850D9501358F5D5B32DFA06FC6271F6440C0CEAEDBD40339F219D7EE276BA7C3/0/3139302e3130332e33322e302f32302d3234203d3e20323635353836.roa
File:                     3139302e3130332e33322e302f32302d3234203d3e20323635353836.roa (raw, json)
Hash identifier:          kAYWGianfOS/6B7FXlLRqUpnCsD49Dx8o+TK60mvStc=
Subject key identifier:   3D:6B:59:AF:C2:5F:9E:BC:F5:10:7F:DA:77:CB:87:18:00:DD:62:B9
Certificate issuer:       /CN=97DFE5114076326D22F751B0AA10943A7346D8AC
Certificate serial:       18FD5DC017455C12785871BE38D62BA5C81EA536
Authority key identifier: 97:DF:E5:11:40:76:32:6D:22:F7:51:B0:AA:10:94:3A:73:46:D8:AC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/97DFE5114076326D22F751B0AA10943A7346D8AC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/850D9501358F5D5B32DFA06FC6271F6440C0CEAEDBD40339F219D7EE276BA7C3/0/3139302e3130332e33322e302f32302d3234203d3e20323635353836.roa
Signing time:             Tue 07 Jul 2026 17:25:00 +0000
ROA not before:           Tue 07 Jul 2026 17:20:00 +0000
ROA not after:            Tue 06 Jul 2027 17:25:00 +0000
asID:                     265586
IP address blocks:        190.103.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/850D9501358F5D5B32DFA06FC6271F6440C0CEAEDBD40339F219D7EE276BA7C3/0/97DFE5114076326D22F751B0AA10943A7346D8AC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/850D9501358F5D5B32DFA06FC6271F6440C0CEAEDBD40339F219D7EE276BA7C3/0/97DFE5114076326D22F751B0AA10943A7346D8AC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/97DFE5114076326D22F751B0AA10943A7346D8AC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Jul 2026 14:14:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:fd:5d:c0:17:45:5c:12:78:58:71:be:38:d6:2b:a5:c8:1e:a5:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97DFE5114076326D22F751B0AA10943A7346D8AC
        Validity
            Not Before: Jul  7 17:20:00 2026 GMT
            Not After : Jul  6 17:25:00 2027 GMT
        Subject: CN=3D6B59AFC25F9EBCF5107FDA77CB871800DD62B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:40:b9:2c:a5:d6:ed:56:8d:4a:a0:40:58:ea:
                    57:07:d4:7b:35:2b:a4:f9:0f:fd:9b:7d:e0:dd:14:
                    aa:8d:1d:7a:dc:14:87:90:39:a3:4a:cd:9e:5e:8f:
                    e3:a0:8a:b0:52:04:51:8a:fe:85:1f:0f:d9:52:49:
                    d9:25:9b:b9:72:ef:23:1c:75:40:01:a0:4e:ea:15:
                    e0:ff:79:c8:d5:c3:ef:67:a7:84:be:18:68:71:0e:
                    87:f9:78:b1:bd:f3:1f:83:56:88:e3:08:77:8f:f7:
                    81:60:9b:73:c0:9b:5d:63:f1:6b:45:00:2e:2e:5c:
                    f9:ff:8e:1d:a1:3e:18:32:1d:8e:b5:42:7d:9f:dc:
                    f8:f2:cc:5f:ef:5e:d0:b5:ed:ca:c1:14:35:1e:5e:
                    7e:1c:8d:81:05:2a:91:f0:c9:d3:55:ed:38:db:bc:
                    af:c5:3a:bf:92:f6:8a:43:95:33:54:f0:b8:33:21:
                    70:25:31:1c:33:2b:35:e2:0c:7c:1b:d8:66:79:90:
                    4a:8e:d6:7d:d6:61:96:85:63:4f:21:5e:43:95:a6:
                    ae:ed:8d:c2:91:2a:77:ff:4d:e9:8f:7a:80:38:88:
                    b1:df:da:8d:7e:6a:aa:8d:d0:da:b7:b4:43:55:c0:
                    7c:f6:30:19:08:31:c6:1f:d3:fa:93:5f:2d:68:cf:
                    f6:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:6B:59:AF:C2:5F:9E:BC:F5:10:7F:DA:77:CB:87:18:00:DD:62:B9
            X509v3 Authority Key Identifier:
                keyid:97:DF:E5:11:40:76:32:6D:22:F7:51:B0:AA:10:94:3A:73:46:D8:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/850D9501358F5D5B32DFA06FC6271F6440C0CEAEDBD40339F219D7EE276BA7C3/0/97DFE5114076326D22F751B0AA10943A7346D8AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/97DFE5114076326D22F751B0AA10943A7346D8AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/850D9501358F5D5B32DFA06FC6271F6440C0CEAEDBD40339F219D7EE276BA7C3/0/3139302e3130332e33322e302f32302d3234203d3e20323635353836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.103.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         50:e9:10:44:15:ed:f5:0c:6d:8d:83:3d:4b:93:07:30:51:83:
         8b:92:55:78:d9:5d:e1:0d:96:df:ec:3a:f6:89:7e:f7:7a:48:
         56:e7:0f:85:44:81:cb:01:10:28:da:e0:08:4e:70:41:0f:d1:
         db:ef:2f:0b:eb:ee:8d:9a:04:14:83:58:46:54:e2:5c:ea:ff:
         f8:a5:ca:f2:b5:3e:c4:df:d9:22:51:e8:f9:7c:7d:4b:4e:31:
         d7:3f:d0:0c:ba:7c:32:91:d3:73:82:42:02:f9:2b:81:4c:13:
         54:d0:d2:51:d6:0e:3b:ec:15:bc:a2:d6:d6:c5:bd:60:8b:cb:
         5e:fb:3d:5b:98:83:3e:49:4d:e9:f9:6e:04:80:f8:95:9f:83:
         ec:ac:23:3f:a1:61:cc:72:12:57:d2:02:92:55:09:45:53:5b:
         e5:d3:32:ae:3a:f1:95:cd:d1:76:76:dd:92:84:c0:b0:12:0c:
         ee:c7:9d:8a:d5:f1:34:fc:a1:4a:32:b2:f6:6d:d3:ce:c7:c7:
         0d:f5:7c:dc:80:9b:b3:07:36:ad:d6:bd:cc:bb:52:4f:68:a7:
         7f:f1:39:79:27:14:6b:e9:60:c5:2b:b1:1a:2e:94:ba:03:ce:
         c4:95:6c:e9:4b:f9:d8:9e:5b:e9:36:a0:07:82:86:d6:d6:56:
         9f:09:8c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:16:32 2026 by rpki-client