Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/859587FC09738A05DE30D6AA1D8F560C7EE4DD7FB9273534BA64F0FDDA4B0B96/0/3139322e3138382e34342e302f32342d3234203d3e203631343638.roa
File:                     3139322e3138382e34342e302f32342d3234203d3e203631343638.roa (raw, json)
Hash identifier:          SN3/EtHxfiu7k0prY0FHlEBhViLAOrFgCK5dtF5BNsk=
Subject key identifier:   AC:60:C9:43:FC:0C:41:8A:C8:FE:7E:9C:9A:72:E1:17:2C:B6:36:99
Certificate issuer:       /CN=965293D07EEAC64C7FC00E7B595A7D95974C0E8B
Certificate serial:       5F01C117A0E4DBF262302256EBF135EF21F72546
Authority key identifier: 96:52:93:D0:7E:EA:C6:4C:7F:C0:0E:7B:59:5A:7D:95:97:4C:0E:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/965293D07EEAC64C7FC00E7B595A7D95974C0E8B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/859587FC09738A05DE30D6AA1D8F560C7EE4DD7FB9273534BA64F0FDDA4B0B96/0/3139322e3138382e34342e302f32342d3234203d3e203631343638.roa
Signing time:             Wed 30 Sep 2026 14:50:00 +0000
ROA not before:           Wed 30 Sep 2026 14:45:00 +0000
ROA not after:            Wed 29 Sep 2027 14:50:00 +0000
asID:                     61468
IP address blocks:        192.188.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/859587FC09738A05DE30D6AA1D8F560C7EE4DD7FB9273534BA64F0FDDA4B0B96/0/965293D07EEAC64C7FC00E7B595A7D95974C0E8B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/859587FC09738A05DE30D6AA1D8F560C7EE4DD7FB9273534BA64F0FDDA4B0B96/0/965293D07EEAC64C7FC00E7B595A7D95974C0E8B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/965293D07EEAC64C7FC00E7B595A7D95974C0E8B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 30 Oct 2026 03:31:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:01:c1:17:a0:e4:db:f2:62:30:22:56:eb:f1:35:ef:21:f7:25:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=965293D07EEAC64C7FC00E7B595A7D95974C0E8B
        Validity
            Not Before: Sep 30 14:45:00 2026 GMT
            Not After : Sep 29 14:50:00 2027 GMT
        Subject: CN=AC60C943FC0C418AC8FE7E9C9A72E1172CB63699
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7c:9b:7a:fa:c3:4b:c6:e2:b6:a7:67:7f:9a:
                    5d:85:e4:f9:f9:67:ea:6f:11:7e:1a:90:10:fe:b8:
                    3b:72:2d:72:0c:6e:5e:90:ae:56:30:6e:88:09:2e:
                    54:a2:ea:c7:22:13:e7:a9:b2:27:68:fc:7b:5f:2e:
                    4e:83:91:ae:ee:5d:43:d9:12:bb:46:00:ba:e1:ce:
                    f2:54:05:82:8e:bc:d9:bd:8a:ca:2c:8c:fc:d5:4f:
                    6c:a1:aa:54:63:cb:f6:29:4e:a1:36:47:be:2f:3d:
                    89:6f:5d:fb:07:4c:c6:c6:1a:36:77:bc:7b:2f:3a:
                    6f:43:ba:b1:10:e5:de:61:71:24:b1:5e:52:c1:26:
                    45:cf:4c:ea:9b:03:52:c3:5c:92:99:d2:ef:cf:3e:
                    96:52:39:17:9a:6b:0b:e5:67:1d:0c:a7:ca:3a:15:
                    87:e2:d5:a0:08:00:ff:b5:72:7b:e6:31:49:61:ef:
                    ed:80:7c:a9:2e:a5:0d:56:bd:58:27:dd:9f:cf:3b:
                    8c:6c:20:bf:7a:a1:06:ee:7f:21:5c:b5:d6:2c:dd:
                    5e:bf:62:34:4a:00:3a:30:ce:64:f1:3b:87:0d:d6:
                    d5:97:b0:cc:85:c8:8a:36:08:93:7f:30:a5:e0:ea:
                    fd:bc:08:19:12:f1:f3:8d:bc:3e:5b:c5:aa:1d:c3:
                    f5:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:60:C9:43:FC:0C:41:8A:C8:FE:7E:9C:9A:72:E1:17:2C:B6:36:99
            X509v3 Authority Key Identifier:
                keyid:96:52:93:D0:7E:EA:C6:4C:7F:C0:0E:7B:59:5A:7D:95:97:4C:0E:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/859587FC09738A05DE30D6AA1D8F560C7EE4DD7FB9273534BA64F0FDDA4B0B96/0/965293D07EEAC64C7FC00E7B595A7D95974C0E8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/965293D07EEAC64C7FC00E7B595A7D95974C0E8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/859587FC09738A05DE30D6AA1D8F560C7EE4DD7FB9273534BA64F0FDDA4B0B96/0/3139322e3138382e34342e302f32342d3234203d3e203631343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.188.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:a0:22:d6:6a:eb:0c:8f:f3:8b:a7:c4:65:96:a8:68:5d:95:
         30:13:14:46:a8:16:36:4f:87:4e:bc:06:6a:42:67:04:8c:60:
         c5:71:43:09:c4:af:9d:af:5e:47:17:4d:d0:b7:d7:ec:14:0c:
         0b:df:cc:76:34:6a:87:49:3e:bd:e5:5b:3d:e0:82:08:f6:5f:
         7a:2e:08:28:4d:f1:28:c9:24:90:18:76:0b:b7:40:ff:89:b5:
         b5:78:c1:e4:66:3a:c6:1e:e3:9a:42:d9:02:c5:53:ec:f5:05:
         9b:6e:5c:55:79:4c:bc:0b:e0:49:a1:3e:71:a4:ef:93:eb:48:
         fb:9b:dd:46:22:b9:79:b3:a1:3d:2c:b9:96:0b:8b:ec:cd:da:
         f7:b3:44:7c:3d:67:58:c8:66:d5:5d:e4:8a:19:b1:3a:62:e7:
         f0:54:3d:04:4e:6a:bc:11:ef:4c:6e:4a:72:56:ac:c5:63:31:
         4e:07:6b:3a:e2:ee:3b:cf:b9:56:a8:1f:74:1c:1e:e8:84:97:
         6f:ac:96:52:bd:f4:2f:7c:f1:5b:36:91:b7:ff:7f:1a:b5:c8:
         34:1d:05:69:81:eb:b2:79:5b:cf:24:f6:d0:da:49:ae:5a:2a:
         c1:61:79:20:a1:6d:e6:a2:58:e5:cc:eb:ad:77:4f:2d:f9:5e:
         8e:20:93:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 00:13:23 2026 by rpki-client