Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/3139302e39382e3136302e302f31392d3139203d3e203132393536.roa
File:                     3139302e39382e3136302e302f31392d3139203d3e203132393536.roa (raw, json)
Hash identifier:          7jsMXRRb+tUhxNm2RdnBxPQ3MPUwoZRyDpgE/hFn5Qs=
Subject key identifier:   FA:9C:FC:B6:0E:8C:18:DE:8E:93:54:C8:1B:79:1A:57:E9:C0:5A:F6
Certificate issuer:       /CN=B61ABF237277FEAF24117EBBE28D9D57E442433A
Certificate serial:       424E8BBC32ED7F8F03F47AAE290E34525CFBCFC3
Authority key identifier: B6:1A:BF:23:72:77:FE:AF:24:11:7E:BB:E2:8D:9D:57:E4:42:43:3A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/3139302e39382e3136302e302f31392d3139203d3e203132393536.roa
Signing time:             Mon 07 Sep 2026 12:34:04 +0000
ROA not before:           Mon 07 Sep 2026 12:29:04 +0000
ROA not after:            Mon 06 Sep 2027 12:34:04 +0000
asID:                     12956
IP address blocks:        190.98.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Sep 2026 18:55:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:4e:8b:bc:32:ed:7f:8f:03:f4:7a:ae:29:0e:34:52:5c:fb:cf:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B61ABF237277FEAF24117EBBE28D9D57E442433A
        Validity
            Not Before: Sep  7 12:29:04 2026 GMT
            Not After : Sep  6 12:34:04 2027 GMT
        Subject: CN=FA9CFCB60E8C18DE8E9354C81B791A57E9C05AF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:89:da:17:e9:0c:fb:cb:6d:be:e8:2e:af:f9:
                    49:14:71:c3:c6:4e:09:d5:29:a7:3e:df:9c:71:cf:
                    9a:13:0a:0b:a9:16:29:01:d2:e4:39:fe:e4:b1:56:
                    82:41:bc:62:eb:0b:0c:c0:12:70:80:2e:c6:2e:72:
                    7e:2f:bf:76:61:03:ee:9e:0a:e8:62:19:ec:22:7d:
                    f2:82:b4:69:7a:19:53:3b:3c:79:8a:b6:20:5f:49:
                    01:e1:82:80:a1:70:4e:e9:0c:9e:93:ca:07:1c:6c:
                    ee:24:5f:01:9b:4d:e7:92:8b:ff:e0:94:c5:41:11:
                    49:81:06:0b:fa:88:77:4d:bf:ca:32:90:d5:67:f1:
                    82:46:81:e2:6c:e3:59:58:1b:47:1a:6b:e8:42:21:
                    e8:c8:66:85:e0:10:f8:3b:0b:24:53:e7:f6:8c:73:
                    f9:73:13:0a:02:f2:ab:33:db:0e:11:e3:ae:f2:5f:
                    d6:0b:2c:2d:ac:a1:71:d7:f7:2a:3c:0f:ee:cf:6a:
                    c9:e0:70:34:c0:80:6f:bc:74:7a:50:6c:ae:2c:5d:
                    66:24:d1:82:29:41:ea:eb:f9:ff:2c:21:cb:70:18:
                    0e:6b:a8:55:fc:49:8e:b2:d6:82:ed:12:6a:b6:42:
                    21:4c:06:b0:8f:45:89:e1:d8:4a:00:7a:05:4a:5e:
                    9e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:9C:FC:B6:0E:8C:18:DE:8E:93:54:C8:1B:79:1A:57:E9:C0:5A:F6
            X509v3 Authority Key Identifier:
                keyid:B6:1A:BF:23:72:77:FE:AF:24:11:7E:BB:E2:8D:9D:57:E4:42:43:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/3139302e39382e3136302e302f31392d3139203d3e203132393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.98.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         ab:ef:4e:74:72:c2:26:1f:c0:cf:b3:8a:f2:2f:c8:f7:e7:26:
         3e:ef:48:5a:b1:01:54:8e:17:93:78:d3:16:a6:e9:54:48:d2:
         3c:d1:67:4a:b9:74:ac:aa:6e:2b:6c:d1:37:95:ec:ee:54:69:
         0d:08:91:5a:a8:96:24:15:6b:c6:b7:2f:6a:47:da:59:d0:f4:
         16:f9:36:b7:a0:b1:85:99:70:4c:56:a1:c9:0c:1b:88:6e:21:
         b8:53:ca:38:07:58:f4:be:23:fc:82:af:9c:d6:67:31:87:33:
         28:9a:f4:33:ab:43:62:91:45:59:14:8a:fc:e3:bc:be:86:8d:
         f6:b1:17:51:ca:3c:94:ec:30:c6:d3:12:be:8f:32:26:bf:ab:
         03:ff:97:28:55:6f:8d:71:4f:a0:f8:9e:45:76:13:b4:3a:6b:
         d6:5b:81:8a:87:d7:59:24:08:45:5f:06:cd:fc:48:12:d8:a6:
         50:ed:1f:68:ee:e1:e5:42:9a:47:45:83:9e:f6:e8:d8:8f:55:
         99:4f:b9:6c:a8:d7:3a:9d:3f:ac:18:f1:bb:06:9f:40:be:d3:
         2c:de:a5:14:95:a6:5c:b6:b6:96:38:1e:58:33:0b:43:9b:10:
         a5:9d:07:75:1a:ef:f7:77:50:18:9b:73:ab:5d:6e:d5:46:78:
         4a:a5:8b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 14:46:36 2026 by rpki-client