Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e39372e38362e302f32342d3234203d3e203237383435.roa
File:                     3139302e39372e38362e302f32342d3234203d3e203237383435.roa (raw, json)
Hash identifier:          EVrI8IdPIYD/Jyb7TW+aM9wjrUnGOd216l0jWsIV3jM=
Subject key identifier:   5B:E8:C2:0A:93:13:C2:D0:32:7F:ED:A0:80:C3:C2:22:04:D9:44:18
Certificate issuer:       /CN=55DB0D17B157BF6AD08BAC25988489AFD55B85BC
Certificate serial:       33ED3D33557E6CFED2C1AF2E9920DE1A52F0FF66
Authority key identifier: 55:DB:0D:17:B1:57:BF:6A:D0:8B:AC:25:98:84:89:AF:D5:5B:85:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e39372e38362e302f32342d3234203d3e203237383435.roa
Signing time:             Fri 09 Oct 2026 02:39:28 +0000
ROA not before:           Fri 09 Oct 2026 02:34:28 +0000
ROA not after:            Fri 08 Oct 2027 02:39:28 +0000
asID:                     27845
IP address blocks:        190.97.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 Oct 2026 05:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:ed:3d:33:55:7e:6c:fe:d2:c1:af:2e:99:20:de:1a:52:f0:ff:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55DB0D17B157BF6AD08BAC25988489AFD55B85BC
        Validity
            Not Before: Oct  9 02:34:28 2026 GMT
            Not After : Oct  8 02:39:28 2027 GMT
        Subject: CN=5BE8C20A9313C2D0327FEDA080C3C22204D94418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d1:1a:0f:44:4b:c3:30:d6:74:89:7f:20:be:
                    4a:d8:9c:50:01:d6:12:4e:2c:95:da:d5:28:4f:0a:
                    54:d3:06:75:4a:70:ef:09:24:33:d6:58:04:2a:6a:
                    34:18:68:aa:bc:5a:84:17:04:19:0b:ba:08:ec:50:
                    20:d6:96:10:ed:55:a5:9e:e8:80:d5:2a:1d:53:32:
                    6b:99:91:69:a0:35:5b:c6:51:90:73:8a:92:2d:d5:
                    29:09:be:a5:a5:8d:1a:30:d7:de:fc:d7:bf:9e:a9:
                    33:c5:2e:84:9a:11:95:23:d0:52:4b:41:d0:b9:ee:
                    9d:60:19:6d:82:b6:e3:b6:e3:88:cd:60:1c:3b:74:
                    fb:a8:e4:f1:70:c1:13:9b:1e:91:cb:7a:67:46:2c:
                    8f:39:91:29:e1:37:11:b7:67:82:01:05:e2:f9:7a:
                    7f:0b:cf:35:02:24:66:9f:65:7f:86:47:67:5b:38:
                    9d:a2:25:be:b1:4a:6a:db:fa:5c:08:6b:9e:20:90:
                    e1:d9:d7:05:aa:95:02:0d:8e:a7:c6:11:3a:e7:9f:
                    92:26:d1:d5:cd:fd:32:ed:31:20:25:1c:96:e4:5c:
                    fe:a5:21:8f:5e:d3:dd:21:25:df:a2:56:49:17:22:
                    8d:14:71:d6:dc:a3:d9:9b:7a:9a:e1:55:d7:92:f0:
                    d0:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:E8:C2:0A:93:13:C2:D0:32:7F:ED:A0:80:C3:C2:22:04:D9:44:18
            X509v3 Authority Key Identifier:
                keyid:55:DB:0D:17:B1:57:BF:6A:D0:8B:AC:25:98:84:89:AF:D5:5B:85:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e39372e38362e302f32342d3234203d3e203237383435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.97.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:e3:90:0b:bd:b2:cd:73:9f:af:d1:87:82:7c:d5:f6:fb:9d:
         cb:c7:1d:f6:53:35:01:e7:4d:bf:5d:d5:e9:03:86:41:64:46:
         3e:09:f2:42:68:a3:bc:7b:04:76:e0:ad:93:39:eb:b5:eb:fc:
         75:cf:03:51:ba:37:a2:39:b3:73:4b:32:c6:1d:82:e2:c9:9e:
         75:c4:4f:8a:6f:33:c1:13:de:db:13:b9:ba:54:31:32:53:0c:
         23:34:b4:f6:8b:b0:c3:ca:e2:00:e9:49:a1:d5:65:20:d4:22:
         9e:c5:ae:ce:cb:ad:df:c3:f6:e6:c6:66:81:c9:cb:d4:de:94:
         28:66:d6:2f:8f:19:14:80:01:b8:64:d0:25:24:a5:a4:38:ab:
         65:95:c0:a2:77:37:b3:60:f9:51:40:e4:ed:fb:6c:ad:f0:4f:
         4b:e1:64:eb:97:2c:26:70:19:2e:1f:ac:c4:84:aa:e8:cb:7d:
         8d:94:16:1f:51:3c:dd:11:9b:7c:9a:66:c3:84:8a:85:03:e8:
         b5:3c:3e:2e:ec:e5:32:a9:2a:10:35:58:dc:1a:df:a3:f1:05:
         5d:45:57:51:c2:ae:45:dd:bf:5a:62:d6:87:08:83:50:b0:00:
         9b:30:61:c8:0d:39:6f:ce:70:f5:7f:98:54:31:5e:0f:65:71:
         43:b6:50:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 09:06:06 2026 by rpki-client