Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3925D2C5A7012116032AA4EA90BAE66AB5FCD500A9A2F16E2ABBC2831049A1E9/0/3138392e3230312e3235342e302f32332d3233203d3e203238343636.roa
File:                     3138392e3230312e3235342e302f32332d3233203d3e203238343636.roa (raw, json)
Hash identifier:          5jp1yGeKKbhetEwlivm2PevZwu3JF9Atz6XKFmeAY+k=
Subject key identifier:   9F:05:E7:28:64:65:1A:96:D4:F8:D4:EF:8F:B0:2E:0B:C9:6D:C7:57
Certificate issuer:       /CN=DF7BF8CF88926B1690350CA1477C3431E7A6CC7E
Certificate serial:       399B1ED58DE772064C6E8B43F00AE40FE13C1EB5
Authority key identifier: DF:7B:F8:CF:88:92:6B:16:90:35:0C:A1:47:7C:34:31:E7:A6:CC:7E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DF7BF8CF88926B1690350CA1477C3431E7A6CC7E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3925D2C5A7012116032AA4EA90BAE66AB5FCD500A9A2F16E2ABBC2831049A1E9/0/3138392e3230312e3235342e302f32332d3233203d3e203238343636.roa
Signing time:             Fri 10 Jul 2026 21:30:00 +0000
ROA not before:           Fri 10 Jul 2026 21:25:00 +0000
ROA not after:            Fri 09 Jul 2027 21:30:00 +0000
asID:                     28466
IP address blocks:        189.201.254.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3925D2C5A7012116032AA4EA90BAE66AB5FCD500A9A2F16E2ABBC2831049A1E9/0/DF7BF8CF88926B1690350CA1477C3431E7A6CC7E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3925D2C5A7012116032AA4EA90BAE66AB5FCD500A9A2F16E2ABBC2831049A1E9/0/DF7BF8CF88926B1690350CA1477C3431E7A6CC7E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DF7BF8CF88926B1690350CA1477C3431E7A6CC7E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:9b:1e:d5:8d:e7:72:06:4c:6e:8b:43:f0:0a:e4:0f:e1:3c:1e:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF7BF8CF88926B1690350CA1477C3431E7A6CC7E
        Validity
            Not Before: Jul 10 21:25:00 2026 GMT
            Not After : Jul  9 21:30:00 2027 GMT
        Subject: CN=9F05E72864651A96D4F8D4EF8FB02E0BC96DC757
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:72:c8:a7:35:aa:24:a3:33:26:9c:75:53:5c:
                    dc:ed:71:f3:c4:29:05:3b:90:5a:93:af:65:39:46:
                    11:24:6a:19:70:e4:1e:c1:d8:31:ce:f1:15:ad:39:
                    87:82:17:37:85:c4:e1:d3:0e:55:5e:b1:9c:37:ee:
                    87:ae:ee:50:0d:57:f3:7b:6f:bb:99:09:b3:cb:5f:
                    dc:24:5c:bf:54:9a:85:14:58:af:b9:bd:38:88:a8:
                    c3:af:66:a3:69:50:6e:2a:e8:1c:c2:10:34:0d:ac:
                    1e:34:cd:34:11:7b:b2:71:5c:90:fc:fe:47:c6:21:
                    9e:9e:23:97:ae:6d:d3:c9:97:5c:21:9a:bb:64:e0:
                    74:e4:9a:51:cd:df:77:ce:a9:31:3c:25:a3:5f:ce:
                    c5:7f:4d:f7:56:df:11:39:34:e1:23:9e:6b:d8:d9:
                    e6:08:7d:2a:ac:af:b5:ed:ab:7a:50:0a:e9:80:cf:
                    ca:05:c5:89:5d:dd:10:5d:cd:18:55:38:d7:21:e5:
                    67:8f:ce:ef:38:ed:d5:56:ac:b6:02:83:c2:15:08:
                    9e:60:63:17:e8:2a:72:fe:12:73:12:a3:80:9b:1b:
                    cd:4f:29:fa:94:e0:f2:be:f2:85:f0:b0:c0:c5:27:
                    24:e7:cb:ea:ab:d1:17:0b:2b:91:66:bc:d9:e2:5d:
                    57:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:05:E7:28:64:65:1A:96:D4:F8:D4:EF:8F:B0:2E:0B:C9:6D:C7:57
            X509v3 Authority Key Identifier:
                keyid:DF:7B:F8:CF:88:92:6B:16:90:35:0C:A1:47:7C:34:31:E7:A6:CC:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3925D2C5A7012116032AA4EA90BAE66AB5FCD500A9A2F16E2ABBC2831049A1E9/0/DF7BF8CF88926B1690350CA1477C3431E7A6CC7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DF7BF8CF88926B1690350CA1477C3431E7A6CC7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3925D2C5A7012116032AA4EA90BAE66AB5FCD500A9A2F16E2ABBC2831049A1E9/0/3138392e3230312e3235342e302f32332d3233203d3e203238343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.201.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b7:d5:90:29:f2:ee:89:42:a7:ec:9b:d1:f0:ff:89:62:f3:39:
         51:26:70:26:b2:07:21:df:1e:f1:df:2d:29:c9:6e:f8:60:29:
         bf:b9:2e:0d:bf:73:5b:a0:49:23:53:56:5e:a3:40:2e:93:e0:
         3a:da:83:28:bb:60:1a:85:cf:90:72:9b:e4:07:b8:24:44:40:
         10:30:4b:d0:41:5d:11:cc:d1:31:fd:dd:48:7a:73:ec:69:c6:
         85:c1:ce:16:bf:4e:36:91:1f:76:4a:b5:48:64:09:c6:f1:b6:
         fa:46:c5:a2:c5:f6:5f:fd:59:65:03:f7:b2:ee:34:89:b3:0c:
         d2:50:f1:38:65:ee:0a:3f:97:ab:83:f7:9d:ec:e4:eb:d9:44:
         f1:14:04:78:1b:87:01:bd:ef:a1:34:2f:c2:68:98:51:67:6b:
         e3:84:93:dc:68:9f:e5:39:ee:04:16:11:46:0c:cf:51:3d:1b:
         b0:aa:69:f3:ea:92:ea:bd:47:da:48:fd:dd:4a:70:d9:91:21:
         11:3a:a0:36:d2:5c:f6:1c:b5:8d:e3:ca:f1:63:22:8f:67:82:
         42:ee:d4:cb:15:9e:cf:04:a7:76:8f:7f:95:01:fe:a9:0c:64:
         80:4f:f5:96:72:8c:5a:01:6f:10:ee:76:38:f3:49:52:20:f1:
         0c:d7:92:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:57:21 2026 by rpki-client