Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/9D4D58C520956C2B5FA6BE9F13DD7CBFB484981CD249B654A71A9DCFC2680324/0/3230302e33392e3136302e302f31392d3234203d3e2032353439.roa
File:                     3230302e33392e3136302e302f31392d3234203d3e2032353439.roa (raw, json)
Hash identifier:          6K44VCicQs9gsopP8YHIJtSNBMsJ8sezF4o86lUOfmw=
Subject key identifier:   CD:FF:71:98:D4:96:22:96:B2:D8:CC:3D:A7:46:8E:24:EC:DC:77:DA
Certificate issuer:       /CN=50898D14E85F6BDE9012499897EB13E5874E5B62
Certificate serial:       68A5F64D4B5DE047F52AEFAFC474C09355BF36FD
Authority key identifier: 50:89:8D:14:E8:5F:6B:DE:90:12:49:98:97:EB:13:E5:87:4E:5B:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50898D14E85F6BDE9012499897EB13E5874E5B62.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9D4D58C520956C2B5FA6BE9F13DD7CBFB484981CD249B654A71A9DCFC2680324/0/3230302e33392e3136302e302f31392d3234203d3e2032353439.roa
Signing time:             Tue 22 Sep 2026 19:30:00 +0000
ROA not before:           Tue 22 Sep 2026 19:25:00 +0000
ROA not after:            Tue 21 Sep 2027 19:30:00 +0000
asID:                     2549
IP address blocks:        200.39.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9D4D58C520956C2B5FA6BE9F13DD7CBFB484981CD249B654A71A9DCFC2680324/0/50898D14E85F6BDE9012499897EB13E5874E5B62.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9D4D58C520956C2B5FA6BE9F13DD7CBFB484981CD249B654A71A9DCFC2680324/0/50898D14E85F6BDE9012499897EB13E5874E5B62.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50898D14E85F6BDE9012499897EB13E5874E5B62.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 09:25:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:a5:f6:4d:4b:5d:e0:47:f5:2a:ef:af:c4:74:c0:93:55:bf:36:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50898D14E85F6BDE9012499897EB13E5874E5B62
        Validity
            Not Before: Sep 22 19:25:00 2026 GMT
            Not After : Sep 21 19:30:00 2027 GMT
        Subject: CN=CDFF7198D4962296B2D8CC3DA7468E24ECDC77DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:dd:c1:4a:83:ed:99:e7:44:8d:fa:26:9e:2a:
                    1f:5a:fa:3c:e4:e5:88:c4:0f:dd:44:5a:71:46:26:
                    14:57:1f:73:82:d1:fa:37:d2:4f:d1:40:2f:a3:dc:
                    04:de:89:ac:98:5d:99:d3:5f:54:82:f3:4a:1c:c6:
                    00:75:ae:c7:44:08:5e:07:a3:1b:76:fb:c9:7a:18:
                    32:3d:57:87:44:4e:0a:ec:28:a3:e3:08:7e:74:28:
                    9c:13:3f:2b:b9:7e:86:b4:ac:20:e6:95:5f:66:9d:
                    94:ce:3a:a3:9f:cf:0b:c6:1f:f8:b9:ba:f3:b3:e1:
                    50:00:2f:0e:8d:18:59:7f:cf:0b:c7:60:7a:12:6a:
                    91:f7:5c:14:46:00:b5:c2:9e:53:a6:4b:75:0b:14:
                    58:53:d9:24:e8:db:2f:7f:da:46:82:86:5e:10:2e:
                    a8:10:7b:fe:c2:d9:0c:ef:c6:8e:6f:40:8c:12:ff:
                    99:08:45:f2:00:de:ec:69:ea:5a:b4:fa:28:a7:96:
                    89:e0:f4:75:64:18:70:4b:1e:b5:7f:e4:a9:16:aa:
                    c1:16:de:7f:e3:db:70:e4:de:f9:92:a4:36:1f:e5:
                    b8:94:ae:dc:19:b1:34:86:89:86:29:df:ba:0b:0a:
                    65:e8:74:1c:f0:29:93:82:70:57:cd:28:2c:6b:d9:
                    c9:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:FF:71:98:D4:96:22:96:B2:D8:CC:3D:A7:46:8E:24:EC:DC:77:DA
            X509v3 Authority Key Identifier:
                keyid:50:89:8D:14:E8:5F:6B:DE:90:12:49:98:97:EB:13:E5:87:4E:5B:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9D4D58C520956C2B5FA6BE9F13DD7CBFB484981CD249B654A71A9DCFC2680324/0/50898D14E85F6BDE9012499897EB13E5874E5B62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50898D14E85F6BDE9012499897EB13E5874E5B62.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9D4D58C520956C2B5FA6BE9F13DD7CBFB484981CD249B654A71A9DCFC2680324/0/3230302e33392e3136302e302f31392d3234203d3e2032353439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.39.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         c9:0f:bd:f7:1d:a8:84:85:f8:a6:07:74:d3:a4:19:6f:65:42:
         32:b8:b1:e2:46:d0:7b:a5:4f:c8:3f:8f:b2:78:4a:f4:9f:6d:
         e4:34:53:89:1f:63:d3:97:df:d3:68:c9:31:a1:51:61:52:56:
         19:66:a6:13:aa:1f:6d:98:7b:c5:d6:2c:f1:b9:6a:4d:8e:fe:
         ce:3c:40:91:f3:0d:c3:f5:ed:fb:c6:ba:0c:bd:28:d6:76:1c:
         b7:9b:ea:e1:17:59:fa:1e:73:c8:e0:3d:d3:db:8d:c0:22:86:
         71:27:c3:fe:d7:ee:5c:44:8b:3c:eb:e2:32:4a:a8:9e:90:14:
         79:48:66:2a:fc:26:19:ad:6b:ea:ef:78:f7:c5:ba:60:07:64:
         5c:8a:87:2d:4f:b4:5d:8d:29:51:5e:04:6a:ed:4f:33:d9:53:
         5e:99:a3:1d:b3:8e:c8:7e:38:50:07:9d:61:16:08:76:0d:59:
         a7:3a:52:45:0f:3d:71:bb:56:fe:3c:9a:61:d6:ce:ed:49:98:
         19:74:0c:e2:ee:95:fb:9f:d3:ac:ff:3d:91:27:ff:7b:6b:de:
         30:46:da:f6:f9:11:f2:14:66:df:d6:74:e1:a6:33:ba:30:3d:
         87:97:be:f7:a4:c0:d9:bf:46:77:7d:47:69:da:a9:2f:ea:38:
         11:e0:24:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 19:03:31 2026 by rpki-client