Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/3139322e3138382e35392e302f32342d3234203d3e203631343638.roa
File:                     3139322e3138382e35392e302f32342d3234203d3e203631343638.roa (raw, json)
Hash identifier:          KrXU23GOKe/AOYWzin/uePZ7roMAy2K72lQ7M9Wtj2g=
Subject key identifier:   7C:AB:86:3D:FF:09:A2:6C:59:13:66:C5:1D:4E:50:65:84:35:55:8E
Certificate issuer:       /CN=5094E25430BCD5E2E482E64388ADB10B84687666
Certificate serial:       080F86861C89315C95851DCB5CFD5CC3667A3928
Authority key identifier: 50:94:E2:54:30:BC:D5:E2:E4:82:E6:43:88:AD:B1:0B:84:68:76:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5094E25430BCD5E2E482E64388ADB10B84687666.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/3139322e3138382e35392e302f32342d3234203d3e203631343638.roa
Signing time:             Wed 16 Sep 2026 17:35:51 +0000
ROA not before:           Wed 16 Sep 2026 17:30:51 +0000
ROA not after:            Wed 15 Sep 2027 17:35:51 +0000
asID:                     61468
IP address blocks:        192.188.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/5094E25430BCD5E2E482E64388ADB10B84687666.crl
                          rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/5094E25430BCD5E2E482E64388ADB10B84687666.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5094E25430BCD5E2E482E64388ADB10B84687666.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 18:47:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:0f:86:86:1c:89:31:5c:95:85:1d:cb:5c:fd:5c:c3:66:7a:39:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5094E25430BCD5E2E482E64388ADB10B84687666
        Validity
            Not Before: Sep 16 17:30:51 2026 GMT
            Not After : Sep 15 17:35:51 2027 GMT
        Subject: CN=7CAB863DFF09A26C591366C51D4E50658435558E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:35:9d:43:13:b0:be:3a:55:d6:23:e0:a1:9d:
                    f2:69:e0:91:47:4e:6e:d3:2d:8b:93:df:ea:6a:6c:
                    a3:c4:fe:2d:0a:05:d6:b5:6b:17:86:51:97:e3:9d:
                    99:fe:87:c8:99:14:77:42:a2:ea:c3:53:ca:b8:89:
                    aa:34:e6:87:ab:c1:1c:3c:3f:24:2f:6a:a6:ba:ad:
                    c9:12:4f:3c:6e:d6:6d:b4:98:b1:e6:80:cc:f2:c9:
                    24:91:81:fc:4d:7c:2c:b0:69:f8:a3:44:11:74:54:
                    80:08:fc:19:f6:3d:8d:4f:bb:8e:e4:09:ff:9d:b9:
                    ca:1e:cc:e2:a1:1d:39:5b:e3:ee:d9:fb:aa:ba:b4:
                    eb:db:42:72:f6:1b:07:d3:d8:b9:f0:75:57:94:4e:
                    82:be:30:55:6f:49:fd:6e:d2:d6:ef:54:6d:01:36:
                    01:8f:5b:46:af:5d:25:7d:3d:d4:4b:08:30:97:a8:
                    92:15:f7:fc:af:40:a2:4f:58:bd:20:b8:a9:1b:b2:
                    ea:e0:7d:af:3a:39:80:1e:f7:42:7c:bf:f4:7f:8b:
                    6a:f8:e2:25:da:cc:3a:7d:3d:79:a8:a1:4a:a3:40:
                    d3:d5:00:ec:36:d9:ea:30:67:33:6f:a8:2b:ed:16:
                    d2:80:2b:bd:23:ea:54:65:f5:26:1c:7e:72:f1:8b:
                    03:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:AB:86:3D:FF:09:A2:6C:59:13:66:C5:1D:4E:50:65:84:35:55:8E
            X509v3 Authority Key Identifier:
                keyid:50:94:E2:54:30:BC:D5:E2:E4:82:E6:43:88:AD:B1:0B:84:68:76:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/5094E25430BCD5E2E482E64388ADB10B84687666.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5094E25430BCD5E2E482E64388ADB10B84687666.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/3139322e3138382e35392e302f32342d3234203d3e203631343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.188.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:b6:62:d3:2d:e5:22:36:ad:3a:aa:8f:4e:78:a7:14:bc:80:
         08:fd:40:5b:8a:d8:28:f1:84:6d:a5:72:8d:8d:70:b0:47:b2:
         a2:0f:55:a1:41:cc:0b:b9:1e:a9:cc:48:ea:8c:ec:1b:db:4c:
         4e:98:0f:86:b3:0d:bc:a0:3e:6b:03:98:36:90:3d:fe:02:23:
         00:85:83:de:c8:a9:68:d6:26:f6:29:ef:73:30:a1:02:75:31:
         9a:41:c0:52:8d:30:dd:39:d1:9e:43:d0:e0:86:15:6c:77:f2:
         a7:d8:15:60:c7:8e:5d:4f:ef:3e:65:39:93:8b:f1:37:14:0f:
         72:81:88:72:44:60:bf:40:f4:bb:ec:65:1f:69:f2:40:a9:6d:
         35:e5:02:6f:26:4c:86:c4:d8:47:9a:b4:6e:17:67:40:2a:63:
         6e:6e:b8:06:e2:c8:da:79:0a:11:b3:25:06:ed:78:02:b0:65:
         02:db:c5:c8:6c:9a:d4:05:77:6e:a0:78:d2:7b:1c:e1:8e:15:
         98:79:e0:95:c3:aa:ea:10:c6:9c:86:7d:36:32:c2:67:49:86:
         63:d4:38:1e:66:bb:14:7f:a4:0e:1e:ce:32:78:9d:26:6e:03:
         e9:fd:52:cb:79:9a:27:d0:c1:48:b8:4d:9b:ed:e3:9d:a6:e2:
         bb:79:e5:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 17:19:56 2026 by rpki-client