Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D4A27342A7E1849F8AFC489E93CA3DC3F65B9DCD36B04FD2B584CCD2B805C76/0/3139312e3130322e3135352e302f32342d3234203d3e2032393134.roa
File:                     3139312e3130322e3135352e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier:          /Qhk+7kQ0Ude+qudN4oIA5u5T3BHgn/QB12DGs2qakU=
Subject key identifier:   40:56:5D:4B:66:78:FA:E6:FA:01:DB:FE:B2:73:86:F3:F4:BB:56:59
Certificate issuer:       /CN=01DFCD969398C7D14FA18E44D1649A0B21C96569
Certificate serial:       69B919A31888BF540C952E23ABFF780F792E4F22
Authority key identifier: 01:DF:CD:96:93:98:C7:D1:4F:A1:8E:44:D1:64:9A:0B:21:C9:65:69
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01DFCD969398C7D14FA18E44D1649A0B21C96569.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0D4A27342A7E1849F8AFC489E93CA3DC3F65B9DCD36B04FD2B584CCD2B805C76/0/3139312e3130322e3135352e302f32342d3234203d3e2032393134.roa
Signing time:             Mon 27 Apr 2026 15:55:00 +0000
ROA not before:           Mon 27 Apr 2026 15:50:00 +0000
ROA not after:            Mon 26 Apr 2027 15:55:00 +0000
asID:                     2914
IP address blocks:        191.102.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0D4A27342A7E1849F8AFC489E93CA3DC3F65B9DCD36B04FD2B584CCD2B805C76/0/01DFCD969398C7D14FA18E44D1649A0B21C96569.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0D4A27342A7E1849F8AFC489E93CA3DC3F65B9DCD36B04FD2B584CCD2B805C76/0/01DFCD969398C7D14FA18E44D1649A0B21C96569.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01DFCD969398C7D14FA18E44D1649A0B21C96569.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 16 May 2026 15:39:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:b9:19:a3:18:88:bf:54:0c:95:2e:23:ab:ff:78:0f:79:2e:4f:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01DFCD969398C7D14FA18E44D1649A0B21C96569
        Validity
            Not Before: Apr 27 15:50:00 2026 GMT
            Not After : Apr 26 15:55:00 2027 GMT
        Subject: CN=40565D4B6678FAE6FA01DBFEB27386F3F4BB5659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:46:21:29:99:ce:35:de:85:35:36:ab:86:93:
                    70:8b:c3:5d:93:12:04:c8:55:91:9d:2b:3e:9b:d8:
                    8b:59:c8:02:09:4d:ff:bb:04:ff:2b:38:c9:d8:61:
                    b9:fe:2f:1b:d9:b8:31:8a:88:0f:82:45:44:06:fa:
                    a5:3b:7c:b8:f3:c4:03:29:0d:b3:63:e8:eb:81:51:
                    01:09:43:81:11:41:6f:d5:3a:b8:38:5f:d0:f1:83:
                    7f:59:f1:bd:fa:7b:af:80:f6:92:07:d6:c0:cb:80:
                    be:7d:2c:65:4c:cd:aa:b8:91:db:5d:c1:41:19:06:
                    bb:af:9f:93:81:af:f9:11:59:30:e0:40:af:7d:72:
                    b4:d1:58:ff:9c:45:50:f5:3b:5c:65:a1:0a:ae:bf:
                    61:4e:32:45:19:6b:b2:8e:c9:a2:69:22:ca:1c:29:
                    03:ad:a5:0b:ab:dd:0c:c9:c6:75:5f:dd:1b:c4:c5:
                    77:60:4c:31:34:9b:df:ad:81:40:c0:bc:1d:06:3f:
                    22:4d:41:af:0d:26:4b:50:e1:2c:0d:ec:0a:d2:70:
                    f8:62:cc:ab:c5:c5:e4:ce:a1:36:20:67:ee:da:6e:
                    16:34:52:9c:7f:27:b7:d7:3f:cc:37:ea:24:96:63:
                    e2:a1:65:3b:9e:d0:e4:8c:62:d2:41:06:f9:46:5c:
                    52:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:56:5D:4B:66:78:FA:E6:FA:01:DB:FE:B2:73:86:F3:F4:BB:56:59
            X509v3 Authority Key Identifier:
                keyid:01:DF:CD:96:93:98:C7:D1:4F:A1:8E:44:D1:64:9A:0B:21:C9:65:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0D4A27342A7E1849F8AFC489E93CA3DC3F65B9DCD36B04FD2B584CCD2B805C76/0/01DFCD969398C7D14FA18E44D1649A0B21C96569.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01DFCD969398C7D14FA18E44D1649A0B21C96569.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D4A27342A7E1849F8AFC489E93CA3DC3F65B9DCD36B04FD2B584CCD2B805C76/0/3139312e3130322e3135352e302f32342d3234203d3e2032393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.102.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:cb:eb:ca:04:fe:77:72:3c:26:19:81:6d:be:89:cc:ef:1f:
         ab:29:7e:2d:b4:23:11:c3:fb:9d:7c:ab:7d:70:46:39:04:5e:
         75:5c:39:0c:6a:90:44:66:43:32:bb:fd:dd:9d:5d:8d:dc:7e:
         71:2d:d5:21:a2:6e:a8:98:2d:6c:da:e9:c6:ea:16:94:fe:4e:
         08:e9:3e:43:e0:d1:56:7b:1a:14:2f:f1:51:81:cf:8c:00:f4:
         f0:ad:d4:29:6d:98:ee:59:49:9b:c6:4e:96:ed:2e:67:d6:2f:
         73:00:ac:1a:47:9e:08:e0:90:67:3e:55:bf:88:70:eb:91:8a:
         c4:7c:44:8f:87:d6:72:3c:06:00:e5:40:08:36:49:6d:d1:9d:
         85:e3:d2:2c:5a:30:b1:75:e3:34:68:6f:c7:fd:4b:a3:71:c8:
         c9:5a:d6:50:ae:8e:73:be:a8:8a:6f:bc:8a:78:d4:21:31:78:
         06:75:52:ca:49:cc:52:5b:e9:cf:19:8d:02:84:18:c1:8c:2e:
         c8:0c:16:f6:0e:cb:12:90:eb:ad:b2:76:fe:63:a9:45:0c:44:
         89:fa:3e:b8:dc:e9:ec:aa:40:da:39:18:21:7d:23:41:7d:68:
         29:99:9b:41:fa:0b:99:fb:14:9f:96:64:38:64:c5:6b:c3:09:
         3d:17:d6:36
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUabkZoxiIv1QMlS4jq/94D3kuTyIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDFERkNEOTY5Mzk4QzdEMTRGQTE4RTQ0RDE2NDlBMEIy
MUM5NjU2OTAeFw0yNjA0MjcxNTUwMDBaFw0yNzA0MjYxNTU1MDBaMDMxMTAvBgNV
BAMTKDQwNTY1RDRCNjY3OEZBRTZGQTAxREJGRUIyNzM4NkYzRjRCQjU2NTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGRiEpmc413oU1NquGk3CLw12T
EgTIVZGdKz6b2ItZyAIJTf+7BP8rOMnYYbn+LxvZuDGKiA+CRUQG+qU7fLjzxAMp
DbNj6OuBUQEJQ4ERQW/VOrg4X9Dxg39Z8b36e6+A9pIH1sDLgL59LGVMzaq4kdtd
wUEZBruvn5OBr/kRWTDgQK99crTRWP+cRVD1O1xloQquv2FOMkUZa7KOyaJpIsoc
KQOtpQur3QzJxnVf3RvExXdgTDE0m9+tgUDAvB0GPyJNQa8NJktQ4SwN7ArScPhi
zKvFxeTOoTYgZ+7abhY0Upx/J7fXP8w36iSWY+KhZTue0OSMYtJBBvlGXFLZAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUQFZdS2Z4+ub6Adv+snOG8/S7VlkwHwYDVR0j
BBgwFoAUAd/NlpOYx9FPoY5E0WSaCyHJZWkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wRDRBMjczNDJBN0UxODQ5RjhBRkM0ODlFOTNDQTNEQzNG
NjVCOURDRDM2QjA0RkQyQjU4NENDRDJCODA1Qzc2LzAvMDFERkNEOTY5Mzk4QzdE
MTRGQTE4RTQ0RDE2NDlBMEIyMUM5NjU2OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wMURGQ0Q5NjkzOThDN0QxNEZB
MThFNDREMTY0OUEwQjIxQzk2NTY5LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMEQ0QTI3MzQyQTdFMTg0OUY4QUZDNDg5RTkzQ0EzREMzRjY1QjlEQ0Qz
NkIwNEZEMkI1ODRDQ0QyQjgwNUM3Ni8wLzMxMzkzMTJlMzEzMDMyMmUzMTM1MzUy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM5MzEzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAL9mmzAN
BgkqhkiG9w0BAQsFAAOCAQEAU8vrygT+d3I8JhmBbb6JzO8fqyl+LbQjEcP7nXyr
fXBGOQRedVw5DGqQRGZDMrv93Z1djdx+cS3VIaJuqJgtbNrpxuoWlP5OCOk+Q+DR
VnsaFC/xUYHPjAD08K3UKW2Y7llJm8ZOlu0uZ9YvcwCsGkeeCOCQZz5Vv4hw65GK
xHxEj4fWcjwGAOVACDZJbdGdhePSLFowsXXjNGhvx/1Lo3HIyVrWUK6Oc76oim+8
injUITF4BnVSyknMUlvpzxmNAoQYwYwuyAwW9g7LEpDrrbJ2/mOpRQxEifo+uNzp
7KpA2jkYIX0jQX1oKZmbQfoLmfsUn5ZkOGTFa8MJPRfWNg==
-----END CERTIFICATE-----
Generated at Wed May 13 15:56:20 2026 by rpki-client