Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4C8637342C36E875CF6231D4E56AA6D8F2A9DA6FDF1119B41BF35AD3D5C2F597/0/3139302e35382e302e302f31362d3234203d3e2035363339.roa
File:                     3139302e35382e302e302f31362d3234203d3e2035363339.roa (raw, json)
Hash identifier:          wM4PGS9AWLbL0TjblRbfAXwVLlvFzg/1rrjL+qozzRI=
Subject key identifier:   57:9E:1C:83:92:C4:C1:3D:48:27:6B:01:59:E1:76:03:3F:CE:CA:45
Certificate issuer:       /CN=9C65791642D7761AA97BA0FF1A29DB316A279B37
Certificate serial:       7A588F73C486EB449BECC00E9661BD989F93AFB3
Authority key identifier: 9C:65:79:16:42:D7:76:1A:A9:7B:A0:FF:1A:29:DB:31:6A:27:9B:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C65791642D7761AA97BA0FF1A29DB316A279B37.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4C8637342C36E875CF6231D4E56AA6D8F2A9DA6FDF1119B41BF35AD3D5C2F597/0/3139302e35382e302e302f31362d3234203d3e2035363339.roa
Signing time:             Fri 10 Jul 2026 02:30:03 +0000
ROA not before:           Fri 10 Jul 2026 02:25:03 +0000
ROA not after:            Fri 09 Jul 2027 02:30:03 +0000
asID:                     5639
IP address blocks:        190.58.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4C8637342C36E875CF6231D4E56AA6D8F2A9DA6FDF1119B41BF35AD3D5C2F597/0/9C65791642D7761AA97BA0FF1A29DB316A279B37.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4C8637342C36E875CF6231D4E56AA6D8F2A9DA6FDF1119B41BF35AD3D5C2F597/0/9C65791642D7761AA97BA0FF1A29DB316A279B37.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C65791642D7761AA97BA0FF1A29DB316A279B37.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:58:8f:73:c4:86:eb:44:9b:ec:c0:0e:96:61:bd:98:9f:93:af:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C65791642D7761AA97BA0FF1A29DB316A279B37
        Validity
            Not Before: Jul 10 02:25:03 2026 GMT
            Not After : Jul  9 02:30:03 2027 GMT
        Subject: CN=579E1C8392C4C13D48276B0159E176033FCECA45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b3:93:fe:77:38:88:84:f6:a8:47:9f:83:d6:
                    65:57:d9:08:7f:36:c7:bd:7d:cd:ba:b7:c0:8d:0f:
                    30:4c:04:6d:c3:7c:0b:af:fb:36:ff:96:48:79:bf:
                    84:06:89:21:e8:b9:49:3d:a6:2d:46:1e:9c:80:13:
                    26:2b:21:0d:2c:c3:1f:d8:c8:3f:5d:e1:e3:6b:53:
                    33:4c:e5:70:f8:0b:7f:69:e8:1e:62:56:7a:43:98:
                    a7:9f:0f:80:59:56:03:f2:a6:e3:3b:f7:fd:7b:d8:
                    78:5b:a9:7c:52:47:c2:20:dc:76:6b:e2:c9:ca:19:
                    17:e7:6a:5d:18:9a:9a:7b:5b:83:d4:a9:07:5a:e7:
                    19:a2:4b:7d:22:09:d6:38:3e:5d:77:4c:85:0f:56:
                    02:7b:ea:63:59:76:83:c7:1d:b4:5d:29:0b:24:48:
                    f1:b1:ec:04:88:18:1f:83:52:04:c9:2d:25:12:8e:
                    f8:12:b1:73:e8:7c:85:c5:cc:19:1c:4f:48:db:cf:
                    86:43:d7:cd:08:9f:2f:8d:e7:8f:d7:ec:dd:be:fa:
                    a0:a5:3c:e7:1b:fa:64:17:d0:49:63:84:47:ea:7a:
                    d1:38:b8:39:95:13:c2:55:fe:78:bb:0c:38:b2:7b:
                    fb:58:7f:09:4b:63:9b:81:b2:ac:cc:9e:be:c8:62:
                    59:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:9E:1C:83:92:C4:C1:3D:48:27:6B:01:59:E1:76:03:3F:CE:CA:45
            X509v3 Authority Key Identifier:
                keyid:9C:65:79:16:42:D7:76:1A:A9:7B:A0:FF:1A:29:DB:31:6A:27:9B:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4C8637342C36E875CF6231D4E56AA6D8F2A9DA6FDF1119B41BF35AD3D5C2F597/0/9C65791642D7761AA97BA0FF1A29DB316A279B37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C65791642D7761AA97BA0FF1A29DB316A279B37.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4C8637342C36E875CF6231D4E56AA6D8F2A9DA6FDF1119B41BF35AD3D5C2F597/0/3139302e35382e302e302f31362d3234203d3e2035363339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.58.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         65:69:fe:9f:3b:ce:11:5c:1c:57:8c:b5:ee:8d:04:19:c9:66:
         d8:07:bb:dc:5b:7e:a9:dd:de:89:f2:1f:ac:15:6b:d1:10:27:
         35:58:e8:9c:94:92:b7:d7:5c:bd:e8:70:11:11:23:95:f5:55:
         c7:a6:77:1c:bb:74:67:9b:55:b9:f2:fe:b7:76:ac:57:d3:5e:
         5f:99:f6:9a:b6:05:be:93:0c:2b:bd:6e:30:79:51:35:29:35:
         4c:a1:71:05:8a:11:cd:d5:39:13:70:e9:43:66:40:48:f6:eb:
         c5:67:98:9f:3c:49:37:e3:a5:62:b1:75:15:c6:ab:48:d8:a5:
         ee:85:29:3d:c5:10:f7:0a:e4:8e:c8:ce:6c:ad:42:34:3e:d7:
         38:8c:b8:a4:0a:cb:cb:3c:ff:87:79:19:ad:d4:24:17:f9:3d:
         88:d3:2c:f9:18:70:13:dd:d6:04:97:c7:a5:b5:72:28:b2:3e:
         fb:cc:24:6d:73:2a:75:76:03:6a:b9:d2:32:e0:19:6c:9b:39:
         6b:67:5d:22:3b:01:a1:32:69:da:56:24:e1:26:ab:1b:20:e1:
         9a:eb:77:49:24:bb:14:87:e2:e2:4c:0c:31:82:0a:38:af:3b:
         2a:b2:ab:08:36:f7:4d:df:d2:d7:ff:d3:d1:c9:f7:ee:a7:ea:
         f9:5e:ee:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:50:49 2026 by rpki-client