Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/C0938E504A2DBB19893DA48A3CD5A4798ECF807FEC9B301745D720CBA2B8A7D6/0/3134382e3233392e302e302f31382d3138203d3e203238353139.roa
File:                     3134382e3233392e302e302f31382d3138203d3e203238353139.roa (raw, json)
Hash identifier:          QnfOvGi8o0qWvAJFFs6tBvKnxvxBR+cpk9uY0x1u2uk=
Subject key identifier:   5B:23:B8:67:DF:82:40:4D:A4:42:60:B5:E4:C7:C3:6B:DC:63:F4:71
Certificate issuer:       /CN=BA37BA6B417CEF8AD4663D8734D77A748FE64112
Certificate serial:       462C492DEA8E8A905AB3D8A9DFFC243243B9F131
Authority key identifier: BA:37:BA:6B:41:7C:EF:8A:D4:66:3D:87:34:D7:7A:74:8F:E6:41:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BA37BA6B417CEF8AD4663D8734D77A748FE64112.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C0938E504A2DBB19893DA48A3CD5A4798ECF807FEC9B301745D720CBA2B8A7D6/0/3134382e3233392e302e302f31382d3138203d3e203238353139.roa
Signing time:             Thu 03 Sep 2026 22:30:01 +0000
ROA not before:           Thu 03 Sep 2026 22:25:01 +0000
ROA not after:            Thu 02 Sep 2027 22:30:01 +0000
asID:                     28519
IP address blocks:        148.239.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C0938E504A2DBB19893DA48A3CD5A4798ECF807FEC9B301745D720CBA2B8A7D6/0/BA37BA6B417CEF8AD4663D8734D77A748FE64112.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C0938E504A2DBB19893DA48A3CD5A4798ECF807FEC9B301745D720CBA2B8A7D6/0/BA37BA6B417CEF8AD4663D8734D77A748FE64112.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BA37BA6B417CEF8AD4663D8734D77A748FE64112.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Sep 2026 23:05:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:2c:49:2d:ea:8e:8a:90:5a:b3:d8:a9:df:fc:24:32:43:b9:f1:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA37BA6B417CEF8AD4663D8734D77A748FE64112
        Validity
            Not Before: Sep  3 22:25:01 2026 GMT
            Not After : Sep  2 22:30:01 2027 GMT
        Subject: CN=5B23B867DF82404DA44260B5E4C7C36BDC63F471
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:5d:72:b2:53:f4:dc:3c:46:9f:e5:95:d0:96:
                    a1:e3:7e:4b:34:a7:ab:41:54:e7:55:43:b7:2c:02:
                    d9:c6:58:47:c5:79:f1:93:67:57:c6:09:04:b7:aa:
                    f3:63:8e:e2:ea:07:29:9a:12:24:13:6d:c0:df:65:
                    f2:37:5d:8f:35:07:1f:ca:35:6b:fc:8c:e5:e8:74:
                    fc:85:40:f1:25:38:89:bd:a9:26:60:dc:eb:78:11:
                    02:2c:e0:67:71:d8:e1:29:24:d5:98:eb:45:87:13:
                    4c:d6:2d:df:5c:84:a0:62:95:26:59:a7:09:83:19:
                    79:da:aa:69:70:58:7f:28:dd:73:38:34:10:3a:1d:
                    c5:44:65:e9:be:5a:2e:22:72:19:11:12:10:b6:7c:
                    d4:74:0b:95:5e:d5:45:25:58:1d:ef:ab:47:5b:1a:
                    b8:35:38:8a:fd:ac:81:da:57:93:65:73:de:5c:87:
                    f9:c1:b9:a1:d7:df:b9:ee:c5:5e:1c:10:f7:04:e5:
                    3b:9a:15:f7:6f:19:e8:a0:cc:6c:2a:26:7f:6f:3f:
                    5e:17:c7:8a:b0:bd:e2:d6:4f:d3:4f:96:1b:51:8b:
                    46:63:ac:6b:2e:d8:e1:8b:71:e0:64:c1:80:40:1f:
                    7e:f4:94:30:a6:64:02:08:36:61:75:97:11:da:a7:
                    c0:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:23:B8:67:DF:82:40:4D:A4:42:60:B5:E4:C7:C3:6B:DC:63:F4:71
            X509v3 Authority Key Identifier:
                keyid:BA:37:BA:6B:41:7C:EF:8A:D4:66:3D:87:34:D7:7A:74:8F:E6:41:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C0938E504A2DBB19893DA48A3CD5A4798ECF807FEC9B301745D720CBA2B8A7D6/0/BA37BA6B417CEF8AD4663D8734D77A748FE64112.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BA37BA6B417CEF8AD4663D8734D77A748FE64112.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C0938E504A2DBB19893DA48A3CD5A4798ECF807FEC9B301745D720CBA2B8A7D6/0/3134382e3233392e302e302f31382d3138203d3e203238353139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.239.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         54:77:f0:ee:b7:0b:2b:65:4f:15:a0:31:b6:87:d9:14:09:06:
         83:f4:71:69:37:9b:79:e5:21:32:2a:7f:50:5b:d3:e4:4a:d0:
         6f:a1:33:ed:bf:12:13:b6:e1:de:5f:70:eb:65:a1:f2:04:76:
         12:38:b8:3a:a2:71:24:53:68:87:44:64:41:f3:36:b2:15:95:
         da:5c:34:70:78:eb:d8:ff:67:50:6e:e4:2a:c7:37:04:7f:60:
         16:c0:73:cf:63:9d:08:74:3a:59:07:27:23:34:71:7f:70:05:
         5c:54:90:10:40:32:f6:58:f6:0e:6c:f4:f9:b5:b5:eb:4b:fb:
         a4:0e:03:b1:61:ac:b1:63:bd:9b:b4:5a:83:d3:c6:d8:df:97:
         7e:32:fe:96:cb:28:a3:7d:5a:d3:76:c9:26:70:5a:75:1c:cc:
         63:9c:c5:4f:4c:a3:55:2d:2b:8d:75:20:13:d9:ad:1e:b2:59:
         ad:50:0f:ca:35:58:43:6f:67:27:ef:b0:7e:fc:c9:bd:ac:67:
         0f:ef:17:ed:52:35:f7:45:9a:03:de:9c:f5:61:4c:e0:9c:13:
         04:1f:be:98:b3:2b:1d:58:a4:f5:b1:6c:a4:c5:fa:7c:00:4e:
         73:18:36:ad:24:3e:2a:b6:95:f2:78:11:d4:2c:e9:ef:9b:45:
         1f:04:5f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 20:00:31 2026 by rpki-client