Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/87E5152B40CF394122FAABC707601C426819C7183D5E425B4E92E928388E952A/0/3136302e31392e3230312e302f32342d3234203d3e203238333139.roa
File:                     3136302e31392e3230312e302f32342d3234203d3e203238333139.roa (raw, json)
Hash identifier:          g9+7Co5fO6uxLO0fUTCYuTjhiS82vS5YVwiXewrdM/Q=
Subject key identifier:   80:1E:45:EA:04:53:B6:06:8F:8D:DB:AB:BB:7F:31:9D:6E:88:B3:63
Certificate issuer:       /CN=DC24274E5C8E92342E101D071FFDFA45EB73464D
Certificate serial:       29E20F7440F966CA9E08155B75D4133C3B59439E
Authority key identifier: DC:24:27:4E:5C:8E:92:34:2E:10:1D:07:1F:FD:FA:45:EB:73:46:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC24274E5C8E92342E101D071FFDFA45EB73464D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/87E5152B40CF394122FAABC707601C426819C7183D5E425B4E92E928388E952A/0/3136302e31392e3230312e302f32342d3234203d3e203238333139.roa
Signing time:             Mon 02 Nov 2026 18:07:56 +0000
ROA not before:           Mon 02 Nov 2026 18:02:56 +0000
ROA not after:            Mon 01 Nov 2027 18:07:56 +0000
asID:                     28319
IP address blocks:        160.19.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/87E5152B40CF394122FAABC707601C426819C7183D5E425B4E92E928388E952A/0/DC24274E5C8E92342E101D071FFDFA45EB73464D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/87E5152B40CF394122FAABC707601C426819C7183D5E425B4E92E928388E952A/0/DC24274E5C8E92342E101D071FFDFA45EB73464D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC24274E5C8E92342E101D071FFDFA45EB73464D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Nov 2026 04:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:e2:0f:74:40:f9:66:ca:9e:08:15:5b:75:d4:13:3c:3b:59:43:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC24274E5C8E92342E101D071FFDFA45EB73464D
        Validity
            Not Before: Nov  2 18:02:56 2026 GMT
            Not After : Nov  1 18:07:56 2027 GMT
        Subject: CN=801E45EA0453B6068F8DDBABBB7F319D6E88B363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f1:27:5f:f0:f6:8d:e3:89:eb:f9:09:2a:11:
                    39:f2:0c:a5:bd:f2:27:e9:5f:7a:d7:18:01:c1:41:
                    df:b1:b5:a8:51:ab:67:37:47:c3:b0:2c:bc:aa:14:
                    44:3f:a8:2e:db:7d:b3:c2:db:da:3b:5f:7e:82:51:
                    c0:49:9e:e9:de:9c:d2:9a:93:15:39:7b:85:25:3a:
                    c3:3d:88:8a:17:50:a7:f8:a5:49:08:3c:72:5c:5c:
                    fa:f2:cb:63:5d:2c:c6:ee:36:f6:9c:b1:02:19:2f:
                    c7:13:e5:a7:04:bd:14:b3:e3:1d:91:77:63:68:98:
                    35:91:d9:1c:7b:66:b4:75:00:c6:a2:0c:ec:70:45:
                    8c:2e:75:65:86:c1:90:44:f4:d0:c4:c4:79:f8:0e:
                    6c:5e:f8:b2:42:ad:68:53:d3:c4:39:a3:5d:7e:b4:
                    96:84:d2:09:ef:91:95:a4:35:a8:5c:17:03:16:99:
                    61:59:aa:09:e6:bf:c0:66:a7:e2:26:80:31:92:9d:
                    bf:ec:4f:30:5a:09:d3:4e:ee:2c:75:f6:7c:31:e1:
                    d7:c9:fd:56:59:d4:06:1f:bf:92:4e:18:23:ed:8b:
                    6c:c7:53:9d:21:25:35:ea:3f:21:6b:c9:28:23:c8:
                    81:d5:04:fb:e1:5e:3e:5a:fb:0f:b7:db:bf:df:c3:
                    10:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:1E:45:EA:04:53:B6:06:8F:8D:DB:AB:BB:7F:31:9D:6E:88:B3:63
            X509v3 Authority Key Identifier:
                keyid:DC:24:27:4E:5C:8E:92:34:2E:10:1D:07:1F:FD:FA:45:EB:73:46:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/87E5152B40CF394122FAABC707601C426819C7183D5E425B4E92E928388E952A/0/DC24274E5C8E92342E101D071FFDFA45EB73464D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC24274E5C8E92342E101D071FFDFA45EB73464D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/87E5152B40CF394122FAABC707601C426819C7183D5E425B4E92E928388E952A/0/3136302e31392e3230312e302f32342d3234203d3e203238333139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.19.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:4f:57:9f:7f:1d:4e:7a:19:7e:88:96:88:27:b3:07:3f:d1:
         d0:51:f7:2d:57:36:db:96:f1:33:77:5c:3d:0c:a5:94:5f:20:
         9d:06:6a:50:44:1f:d2:d1:97:b9:a6:53:85:af:98:40:a0:01:
         32:8a:0e:c8:56:c7:cc:c1:d7:a9:eb:7f:61:3e:ef:8b:30:c4:
         df:c0:dc:73:da:02:36:e6:4f:a7:40:98:e4:98:45:69:5b:96:
         0e:80:98:66:ee:16:cf:91:e2:ce:f4:29:6c:6b:9e:6e:d2:d1:
         1b:8e:36:11:55:06:23:0f:4c:77:54:33:f6:dd:04:95:8a:a0:
         bb:5a:75:a7:ea:aa:89:1e:37:5f:5d:52:aa:c2:39:88:ff:58:
         dc:3e:9f:7d:8c:76:db:36:c0:de:15:7c:85:ed:14:0a:14:79:
         70:5e:9d:b1:86:87:3e:fe:0b:e9:67:06:17:cb:b5:fe:0d:3c:
         f4:51:cd:5f:1b:1b:a5:f3:c9:fd:e9:f6:87:08:69:bc:a5:60:
         76:2d:99:3d:29:31:c8:8c:69:a5:05:03:83:7d:a3:a3:d2:5e:
         b5:2b:63:a9:64:fb:02:28:ea:2a:f5:7e:8b:60:b0:4b:bb:4a:
         3b:ce:a3:7f:7a:bd:ac:9f:5f:be:44:7a:4e:b6:c3:24:9f:09:
         dd:3d:2b:0e
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUKeIPdED5ZsqeCBVbddQTPDtZQ54wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREMyNDI3NEU1QzhFOTIzNDJFMTAxRDA3MUZGREZBNDVF
QjczNDY0RDAeFw0yNjExMDIxODAyNTZaFw0yNzExMDExODA3NTZaMDMxMTAvBgNV
BAMTKDgwMUU0NUVBMDQ1M0I2MDY4RjhEREJBQkJCN0YzMTlENkU4OEIzNjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc8Sdf8PaN44nr+QkqETnyDKW9
8ifpX3rXGAHBQd+xtahRq2c3R8OwLLyqFEQ/qC7bfbPC29o7X36CUcBJnunenNKa
kxU5e4UlOsM9iIoXUKf4pUkIPHJcXPryy2NdLMbuNvacsQIZL8cT5acEvRSz4x2R
d2NomDWR2Rx7ZrR1AMaiDOxwRYwudWWGwZBE9NDExHn4Dmxe+LJCrWhT08Q5o11+
tJaE0gnvkZWkNahcFwMWmWFZqgnmv8Bmp+ImgDGSnb/sTzBaCdNO7ix19nwx4dfJ
/VZZ1AYfv5JOGCPti2zHU50hJTXqPyFrySgjyIHVBPvhXj5a+w+327/fwxBtAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUgB5F6gRTtgaPjduru38xnW6Is2MwHwYDVR0j
BBgwFoAU3CQnTlyOkjQuEB0HH/36RetzRk0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84N0U1MTUyQjQwQ0YzOTQxMjJGQUFCQzcwNzYwMUM0MjY4
MTlDNzE4M0Q1RTQyNUI0RTkyRTkyODM4OEU5NTJBLzAvREMyNDI3NEU1QzhFOTIz
NDJFMTAxRDA3MUZGREZBNDVFQjczNDY0RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EQzI0Mjc0RTVDOEU5MjM0MkUx
MDFEMDcxRkZERkE0NUVCNzM0NjRELmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODdFNTE1MkI0MENGMzk0MTIyRkFBQkM3MDc2MDFDNDI2ODE5QzcxODNE
NUU0MjVCNEU5MkU5MjgzODhFOTUyQS8wLzMxMzYzMDJlMzEzOTJlMzIzMDMxMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzODMzMzEzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKATyTAN
BgkqhkiG9w0BAQsFAAOCAQEAT09Xn38dTnoZfoiWiCezBz/R0FH3LVc225bxM3dc
PQyllF8gnQZqUEQf0tGXuaZTha+YQKABMooOyFbHzMHXqet/YT7vizDE38Dcc9oC
NuZPp0CY5JhFaVuWDoCYZu4Wz5HizvQpbGuebtLRG442EVUGIw9Md1Qz9t0ElYqg
u1p1p+qqiR43X11SqsI5iP9Y3D6ffYx22zbA3hV8he0UChR5cF6dsYaHPv4L6WcG
F8u1/g089FHNXxsbpfPJ/en2hwhpvKVgdi2ZPSkxyIxppQUDg32jo9JetStjqWT7
AijqKvV+i2CwS7tKO86jf3q9rJ9fvkR6TrbDJJ8J3T0rDg==
-----END CERTIFICATE-----
Generated at Tue Nov 3 10:36:04 2026 by rpki-client