Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0E7AB838EB28B3465BB403B5449282533504C6A714EFA545E25A3832F6AFFEFB/0/3139322e3134312e34382e302f32322d3234203d3e203539373936.roa
File:                     3139322e3134312e34382e302f32322d3234203d3e203539373936.roa (raw, json)
Hash identifier:          LmdgthGCdXAgtFa2vShRUjW+unyJje/ByNq3T7U97q8=
Subject key identifier:   73:C8:22:9E:B6:E8:96:BD:90:2E:B5:2F:54:D7:0B:8D:17:96:DA:F4
Certificate issuer:       /CN=9D11184F5F0BEE606F314C188036FDDCF0F294F8
Certificate serial:       0A45734A5C31FEA02ED332B4525343C01371CE39
Authority key identifier: 9D:11:18:4F:5F:0B:EE:60:6F:31:4C:18:80:36:FD:DC:F0:F2:94:F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D11184F5F0BEE606F314C188036FDDCF0F294F8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0E7AB838EB28B3465BB403B5449282533504C6A714EFA545E25A3832F6AFFEFB/0/3139322e3134312e34382e302f32322d3234203d3e203539373936.roa
Signing time:             Thu 23 Jul 2026 17:20:00 +0000
ROA not before:           Thu 23 Jul 2026 17:15:00 +0000
ROA not after:            Thu 22 Jul 2027 17:20:00 +0000
asID:                     59796
IP address blocks:        192.141.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0E7AB838EB28B3465BB403B5449282533504C6A714EFA545E25A3832F6AFFEFB/0/9D11184F5F0BEE606F314C188036FDDCF0F294F8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0E7AB838EB28B3465BB403B5449282533504C6A714EFA545E25A3832F6AFFEFB/0/9D11184F5F0BEE606F314C188036FDDCF0F294F8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D11184F5F0BEE606F314C188036FDDCF0F294F8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:45:73:4a:5c:31:fe:a0:2e:d3:32:b4:52:53:43:c0:13:71:ce:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D11184F5F0BEE606F314C188036FDDCF0F294F8
        Validity
            Not Before: Jul 23 17:15:00 2026 GMT
            Not After : Jul 22 17:20:00 2027 GMT
        Subject: CN=73C8229EB6E896BD902EB52F54D70B8D1796DAF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:67:74:51:63:50:c2:69:d9:f8:c0:16:12:e6:
                    29:94:f8:5a:58:7d:fc:43:21:80:14:85:29:5c:25:
                    db:2a:f6:d2:24:41:20:0b:73:ee:2c:a3:0b:ac:0a:
                    08:80:7d:db:4e:20:b0:61:6c:d2:59:17:a8:75:1b:
                    15:61:ff:c7:b7:5e:ba:7e:6a:b2:a0:e2:b5:c2:32:
                    c3:08:6f:50:da:16:22:47:0a:0a:b4:97:d2:24:4c:
                    e7:5a:08:73:08:14:ef:3e:e7:4f:eb:13:a7:e3:79:
                    0e:0e:7b:a9:47:8d:e8:f2:6a:9a:e1:ca:7a:a4:36:
                    4a:1a:d8:6d:32:ab:33:3b:56:84:fd:3e:61:07:36:
                    eb:96:2b:5c:18:46:96:c2:0a:ca:96:61:f3:fd:40:
                    86:ef:8d:1e:0d:7d:b2:0e:d6:38:fc:f3:5d:cf:c7:
                    cf:e0:3b:f7:d1:49:d1:db:dd:b5:00:5d:4a:4e:82:
                    18:35:91:1f:6e:85:c8:ac:68:9a:37:64:46:39:d4:
                    4a:97:e1:57:6f:4c:88:6a:8d:50:6f:90:9d:0d:e2:
                    21:b5:27:c3:27:ab:10:2d:cb:c9:84:5f:cc:0f:c8:
                    40:69:d2:e1:55:00:92:af:91:da:eb:4b:d7:e8:07:
                    9b:c5:48:65:c7:b0:58:95:43:9b:db:15:a5:73:a2:
                    83:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:C8:22:9E:B6:E8:96:BD:90:2E:B5:2F:54:D7:0B:8D:17:96:DA:F4
            X509v3 Authority Key Identifier:
                keyid:9D:11:18:4F:5F:0B:EE:60:6F:31:4C:18:80:36:FD:DC:F0:F2:94:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0E7AB838EB28B3465BB403B5449282533504C6A714EFA545E25A3832F6AFFEFB/0/9D11184F5F0BEE606F314C188036FDDCF0F294F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D11184F5F0BEE606F314C188036FDDCF0F294F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0E7AB838EB28B3465BB403B5449282533504C6A714EFA545E25A3832F6AFFEFB/0/3139322e3134312e34382e302f32322d3234203d3e203539373936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:08:81:e9:e4:3f:c8:6e:b4:33:c1:e6:4b:ac:a3:a8:b8:d5:
         52:64:95:13:e6:09:80:86:59:31:23:19:2b:b5:5d:13:31:72:
         96:d6:91:6f:bc:5b:d4:27:6a:19:96:97:51:7f:2d:7f:c1:d5:
         74:c2:37:67:97:30:95:2c:b0:d7:a0:f4:72:d0:b8:3d:7c:0c:
         db:d9:c7:0f:78:31:28:a4:6f:8d:21:00:25:64:72:1b:ae:0d:
         75:ec:5b:14:67:75:ea:7a:f0:6b:dd:e9:3a:60:d8:44:ff:50:
         57:ff:10:2b:7e:b7:af:e7:68:96:7d:7b:8a:56:81:12:69:7a:
         ef:45:fc:61:5f:e5:ed:99:3f:84:3e:81:54:c4:60:73:b0:a3:
         86:33:33:ca:6b:c4:c4:19:ae:9f:d0:5a:2a:ba:79:3c:94:11:
         1f:5e:e2:1b:5e:2d:e1:7e:fc:1e:fd:87:f9:88:96:b5:3f:e8:
         2e:23:87:da:fc:84:35:20:1e:e7:3d:94:11:62:6d:aa:74:41:
         45:f2:05:02:1b:ec:20:20:98:d7:67:84:ff:e3:24:c1:00:9e:
         6a:0b:15:6f:20:8c:0a:66:ef:a3:f6:44:7c:cf:67:7b:2c:06:
         dc:c7:42:e8:e4:03:23:6f:0e:e2:55:bc:aa:9a:49:61:a6:c0:
         88:8e:5d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:34:50 2026 by rpki-client