Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D29BB50E838B580A19CF44F74A15982F5D2B3E45E90BAEF26CBDD9B6D09060BA/0/3139312e39372e39372e302f32342d3236203d3e20323633383039.roa
File:                     3139312e39372e39372e302f32342d3236203d3e20323633383039.roa (raw, json)
Hash identifier:          gzQdWNlJZABIeVycKpsacO2ZZhkax9gVpiemGj1NWMs=
Subject key identifier:   1B:CB:E8:3F:8E:F8:D3:DA:F3:2E:11:2B:A0:F1:26:5A:FF:34:39:96
Certificate issuer:       /CN=92CBA0288430251DD4FED89A879B0C57A75AF8C2
Certificate serial:       741A0259AA360D74D31D9F9A26AE1FECF2AD5287
Authority key identifier: 92:CB:A0:28:84:30:25:1D:D4:FE:D8:9A:87:9B:0C:57:A7:5A:F8:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92CBA0288430251DD4FED89A879B0C57A75AF8C2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D29BB50E838B580A19CF44F74A15982F5D2B3E45E90BAEF26CBDD9B6D09060BA/0/3139312e39372e39372e302f32342d3236203d3e20323633383039.roa
Signing time:             Tue 31 Mar 2026 15:25:00 +0000
ROA not before:           Tue 31 Mar 2026 15:20:00 +0000
ROA not after:            Tue 30 Mar 2027 15:25:00 +0000
asID:                     263809
IP address blocks:        191.97.97.0/24 maxlen: 26
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D29BB50E838B580A19CF44F74A15982F5D2B3E45E90BAEF26CBDD9B6D09060BA/0/92CBA0288430251DD4FED89A879B0C57A75AF8C2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D29BB50E838B580A19CF44F74A15982F5D2B3E45E90BAEF26CBDD9B6D09060BA/0/92CBA0288430251DD4FED89A879B0C57A75AF8C2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92CBA0288430251DD4FED89A879B0C57A75AF8C2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 08 Apr 2026 18:08:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:1a:02:59:aa:36:0d:74:d3:1d:9f:9a:26:ae:1f:ec:f2:ad:52:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92CBA0288430251DD4FED89A879B0C57A75AF8C2
        Validity
            Not Before: Mar 31 15:20:00 2026 GMT
            Not After : Mar 30 15:25:00 2027 GMT
        Subject: CN=1BCBE83F8EF8D3DAF32E112BA0F1265AFF343996
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:33:c0:25:03:a0:83:1d:17:53:f8:ff:a0:c2:
                    e7:8c:c1:a0:02:d1:48:70:99:aa:f4:5c:fb:9f:40:
                    24:19:fe:c2:5e:fd:f0:fe:c8:38:f7:09:03:1b:32:
                    d8:e8:83:f0:28:49:78:9a:c6:5d:68:1c:8a:37:1f:
                    da:75:0b:cf:60:23:98:aa:2e:5d:21:60:c0:4c:6a:
                    37:d2:ff:ac:cf:95:20:02:d6:5a:78:e8:f3:61:e4:
                    f4:fd:72:f5:b2:73:02:2b:2e:cd:79:4d:f7:7e:3c:
                    6d:f8:d4:74:d6:de:f7:22:9b:bf:90:a5:e8:72:45:
                    79:8a:e9:7a:46:87:ec:5b:73:2c:94:91:ce:8b:07:
                    75:45:dd:12:2b:6e:66:46:40:36:31:ed:2d:69:b5:
                    01:cb:99:57:36:0d:00:39:55:d2:c5:73:65:a6:ff:
                    89:b8:8f:ae:83:a1:78:22:2f:70:d0:8c:58:01:57:
                    69:c2:3b:26:ec:fc:c4:4e:e3:ba:4e:a5:ba:bc:fa:
                    3e:53:0e:00:58:e9:34:d0:39:d7:08:b9:87:83:32:
                    87:83:0a:9f:f3:08:a6:1e:08:19:f4:1c:e6:8f:91:
                    d2:56:71:9a:4d:db:fe:04:ca:01:e9:74:b5:3a:ea:
                    65:c0:4b:06:72:b0:bc:92:57:fc:df:6e:fb:c3:55:
                    d2:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:CB:E8:3F:8E:F8:D3:DA:F3:2E:11:2B:A0:F1:26:5A:FF:34:39:96
            X509v3 Authority Key Identifier:
                keyid:92:CB:A0:28:84:30:25:1D:D4:FE:D8:9A:87:9B:0C:57:A7:5A:F8:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D29BB50E838B580A19CF44F74A15982F5D2B3E45E90BAEF26CBDD9B6D09060BA/0/92CBA0288430251DD4FED89A879B0C57A75AF8C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92CBA0288430251DD4FED89A879B0C57A75AF8C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D29BB50E838B580A19CF44F74A15982F5D2B3E45E90BAEF26CBDD9B6D09060BA/0/3139312e39372e39372e302f32342d3236203d3e20323633383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.97.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:56:53:09:8c:21:30:4e:9d:30:24:47:22:90:6f:c1:fd:0c:
         32:c1:e5:c8:59:0b:34:7e:16:82:a6:27:7d:2b:08:a5:43:f1:
         f2:d9:57:52:4e:5c:d9:13:5b:bc:74:13:4c:94:71:ec:82:84:
         ff:8f:3b:50:40:53:3f:4a:34:c8:38:22:ed:9b:38:49:30:c4:
         d7:db:6f:e2:bb:92:68:8e:25:98:bf:01:dc:03:7e:bb:e9:7b:
         19:0d:0e:33:06:8e:da:88:3b:c6:da:69:0a:c8:b0:cb:cf:66:
         69:dc:ea:35:bd:50:9e:31:20:00:8b:23:95:b8:e3:82:1c:d4:
         f3:59:b2:5b:78:c2:fa:73:04:6b:ba:3c:4d:1d:b8:ac:4d:39:
         ca:cd:61:d5:4d:e5:da:ef:eb:ea:ab:5c:07:03:7c:18:e8:08:
         ff:6b:4b:26:82:32:0d:24:05:3a:95:2a:59:9c:15:04:21:bf:
         f3:fb:4d:01:c0:65:78:be:3f:26:c0:62:d0:ce:f8:e4:58:67:
         e7:d8:56:95:48:18:9b:d2:7f:a5:0b:91:df:5b:00:e9:52:77:
         a8:dd:0b:8b:1e:a0:52:af:da:3a:84:37:be:87:37:76:54:6a:
         bc:a4:72:f7:fd:d6:6d:6a:10:f3:22:79:8c:64:b9:77:f8:7e:
         cd:b7:04:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:15:36 2026 by rpki-client