Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D6C0CE8CFCA14141C3AE42DE6EFC6BBC7716894DF4542224014E417E2E14AB2B/0/3139302e31332e3132382e302f31382d3234203d3e203134313137.roa
File:                     3139302e31332e3132382e302f31382d3234203d3e203134313137.roa (raw, json)
Hash identifier:          GnXHXLzr5aoHHQFbGvwTI2SJqNQcwJ6IisqniGHa5ac=
Subject key identifier:   79:CB:CD:C8:01:CD:B0:25:F4:F3:57:79:0E:CF:97:91:50:84:1D:58
Certificate issuer:       /CN=8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3
Certificate serial:       3350EA6EE250D5CA83A81CEE9244F93BC0CAC9C0
Authority key identifier: 8D:B2:82:B3:47:40:BD:99:CD:F8:94:30:62:B7:DC:EC:3C:4B:1F:F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D6C0CE8CFCA14141C3AE42DE6EFC6BBC7716894DF4542224014E417E2E14AB2B/0/3139302e31332e3132382e302f31382d3234203d3e203134313137.roa
Signing time:             Tue 02 Jun 2026 19:46:09 +0000
ROA not before:           Tue 02 Jun 2026 19:41:09 +0000
ROA not after:            Tue 01 Jun 2027 19:46:09 +0000
asID:                     14117
IP address blocks:        190.13.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D6C0CE8CFCA14141C3AE42DE6EFC6BBC7716894DF4542224014E417E2E14AB2B/0/8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D6C0CE8CFCA14141C3AE42DE6EFC6BBC7716894DF4542224014E417E2E14AB2B/0/8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 07:57:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:50:ea:6e:e2:50:d5:ca:83:a8:1c:ee:92:44:f9:3b:c0:ca:c9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3
        Validity
            Not Before: Jun  2 19:41:09 2026 GMT
            Not After : Jun  1 19:46:09 2027 GMT
        Subject: CN=79CBCDC801CDB025F4F357790ECF979150841D58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fa:2e:42:ff:6d:03:ad:6f:29:f8:ce:c9:c3:
                    8b:94:76:a2:63:b3:f5:0e:fd:2d:cd:8a:76:71:06:
                    11:fc:de:b3:48:18:4a:4e:81:19:b3:a4:f6:8b:33:
                    64:f0:37:62:07:ec:e4:01:b7:37:54:ce:19:e7:6d:
                    05:ac:57:6c:d1:dd:62:b1:22:75:a1:fb:aa:e0:33:
                    b9:66:86:59:6b:29:ab:2f:38:06:0d:3b:3d:01:23:
                    97:d5:0e:e6:ab:2f:2f:66:90:a1:d4:1f:3a:de:d8:
                    48:53:ea:c5:fc:79:e9:66:b0:9e:37:12:bc:5d:6b:
                    a0:ba:28:05:f2:22:44:32:a7:18:bc:6f:31:d8:b6:
                    7f:27:dd:a5:4f:6e:99:94:8a:02:02:1d:e5:a6:a1:
                    a6:f2:89:33:88:fa:7e:10:f7:a8:5c:c9:9f:90:84:
                    fe:8f:53:c9:6f:39:1c:31:34:7a:e1:a3:85:ff:c0:
                    ee:d2:e7:2e:3c:05:ce:61:14:96:73:4b:5b:e7:b7:
                    f6:b1:17:9d:34:57:da:34:b5:7f:b7:1c:86:95:89:
                    bc:98:c2:a2:65:d9:5b:f6:36:7e:f9:f5:ad:ca:87:
                    a8:0c:95:cf:5e:11:0b:f6:70:d0:ae:7f:07:8b:9f:
                    16:31:3a:20:9a:6c:63:44:56:79:ef:0f:ad:de:6a:
                    dc:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:CB:CD:C8:01:CD:B0:25:F4:F3:57:79:0E:CF:97:91:50:84:1D:58
            X509v3 Authority Key Identifier:
                keyid:8D:B2:82:B3:47:40:BD:99:CD:F8:94:30:62:B7:DC:EC:3C:4B:1F:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D6C0CE8CFCA14141C3AE42DE6EFC6BBC7716894DF4542224014E417E2E14AB2B/0/8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D6C0CE8CFCA14141C3AE42DE6EFC6BBC7716894DF4542224014E417E2E14AB2B/0/3139302e31332e3132382e302f31382d3234203d3e203134313137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.13.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         3e:f1:27:af:fd:79:8b:19:6d:09:2f:dc:fb:ef:20:97:a1:be:
         30:31:ec:36:14:6b:be:bc:a9:f8:aa:33:2c:1d:ab:ce:79:b3:
         77:6f:85:48:06:b9:ca:73:32:b9:6a:87:f5:49:05:6a:68:8d:
         60:28:e5:f0:a6:7a:3c:77:75:56:79:21:71:91:42:bc:44:32:
         82:47:ab:17:f1:af:92:19:c8:da:f4:3e:e2:24:db:f8:72:54:
         3a:c9:46:58:c9:4d:e2:ae:2a:73:fd:08:d3:d5:49:a2:9c:c9:
         28:b7:a2:07:f5:35:63:33:a1:f1:20:5a:31:2c:db:d7:f6:1e:
         84:bf:f8:41:7a:27:78:25:ef:89:b1:34:6b:2f:eb:bf:4f:f8:
         0f:c7:b1:54:d1:8b:4b:e6:e3:b3:4f:7b:c8:89:56:76:4f:a0:
         d9:a7:89:7e:fa:08:8f:eb:27:36:27:e9:29:57:2c:6e:d9:8f:
         7c:13:7a:db:fd:fb:aa:d9:fc:60:5a:04:49:a0:1e:6f:e3:6c:
         b1:10:08:80:d0:51:1e:d0:e4:27:ff:27:e8:3e:a6:d6:49:a8:
         aa:32:8b:44:97:b0:77:62:e0:01:29:a3:e9:c7:1b:65:26:ef:
         6a:27:ec:c4:50:41:06:1e:47:6b:d3:b6:3d:9c:e7:4f:ae:09:
         3c:b0:16:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:37:28 2026 by rpki-client