Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4C8637342C36E875CF6231D4E56AA6D8F2A9DA6FDF1119B41BF35AD3D5C2F597/0/3139302e35392e302e302f31362d3234203d3e2035363339.roa
File:                     3139302e35392e302e302f31362d3234203d3e2035363339.roa (raw, json)
Hash identifier:          XEHznaTi6Z+gR3n5WROLn34LrzI3Sd7Jn1H88+VVQQc=
Subject key identifier:   D0:8B:0D:00:28:77:BE:3C:D9:06:CE:D9:BB:4B:96:D5:34:F7:01:39
Certificate issuer:       /CN=9C65791642D7761AA97BA0FF1A29DB316A279B37
Certificate serial:       097F7286607769526924F9AB80712244EBFD4406
Authority key identifier: 9C:65:79:16:42:D7:76:1A:A9:7B:A0:FF:1A:29:DB:31:6A:27:9B:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C65791642D7761AA97BA0FF1A29DB316A279B37.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4C8637342C36E875CF6231D4E56AA6D8F2A9DA6FDF1119B41BF35AD3D5C2F597/0/3139302e35392e302e302f31362d3234203d3e2035363339.roa
Signing time:             Fri 10 Jul 2026 02:30:03 +0000
ROA not before:           Fri 10 Jul 2026 02:25:03 +0000
ROA not after:            Fri 09 Jul 2027 02:30:03 +0000
asID:                     5639
IP address blocks:        190.59.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4C8637342C36E875CF6231D4E56AA6D8F2A9DA6FDF1119B41BF35AD3D5C2F597/0/9C65791642D7761AA97BA0FF1A29DB316A279B37.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4C8637342C36E875CF6231D4E56AA6D8F2A9DA6FDF1119B41BF35AD3D5C2F597/0/9C65791642D7761AA97BA0FF1A29DB316A279B37.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C65791642D7761AA97BA0FF1A29DB316A279B37.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:7f:72:86:60:77:69:52:69:24:f9:ab:80:71:22:44:eb:fd:44:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C65791642D7761AA97BA0FF1A29DB316A279B37
        Validity
            Not Before: Jul 10 02:25:03 2026 GMT
            Not After : Jul  9 02:30:03 2027 GMT
        Subject: CN=D08B0D002877BE3CD906CED9BB4B96D534F70139
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:8a:66:79:b9:56:f4:de:51:dd:2a:a8:17:74:
                    c6:68:e0:45:34:57:34:53:96:42:91:ab:1b:42:b2:
                    16:00:29:4b:43:f2:1d:09:83:76:94:e8:a1:bb:89:
                    b5:28:92:45:7c:aa:56:6e:05:50:18:e9:ec:8c:0b:
                    2e:57:6f:e6:01:5c:80:d8:6f:f4:ba:cb:a0:bd:60:
                    31:7b:a7:01:ac:0f:79:ff:a0:5a:6f:a7:03:b4:fb:
                    16:e3:02:1b:34:7c:d5:f9:40:f3:35:b9:77:8f:d9:
                    bd:8f:ac:6a:b1:42:b3:1e:90:de:f1:9f:61:fe:c9:
                    d2:f4:db:88:d0:f1:37:49:70:00:79:18:18:e9:3f:
                    b3:15:d2:a1:30:b9:ed:05:b3:6e:14:92:60:2f:35:
                    d0:db:32:47:38:0e:87:63:d3:75:f1:1a:44:59:fd:
                    64:ad:d1:c1:0c:c2:a2:dd:2e:cc:3c:35:10:2a:07:
                    67:92:1a:94:5b:c1:19:ae:b5:4b:1a:13:f0:3d:36:
                    ac:f8:cf:b3:63:8b:d4:d3:91:24:09:f6:3d:03:32:
                    8d:f6:2b:da:9f:93:26:f7:0c:9c:47:41:a7:72:6d:
                    fd:79:80:e3:b2:56:26:7d:e2:cd:bb:bf:1c:c8:ac:
                    ff:d4:5d:53:ae:a9:35:e9:47:f9:18:76:d4:48:78:
                    74:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:8B:0D:00:28:77:BE:3C:D9:06:CE:D9:BB:4B:96:D5:34:F7:01:39
            X509v3 Authority Key Identifier:
                keyid:9C:65:79:16:42:D7:76:1A:A9:7B:A0:FF:1A:29:DB:31:6A:27:9B:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4C8637342C36E875CF6231D4E56AA6D8F2A9DA6FDF1119B41BF35AD3D5C2F597/0/9C65791642D7761AA97BA0FF1A29DB316A279B37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C65791642D7761AA97BA0FF1A29DB316A279B37.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4C8637342C36E875CF6231D4E56AA6D8F2A9DA6FDF1119B41BF35AD3D5C2F597/0/3139302e35392e302e302f31362d3234203d3e2035363339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.59.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         66:b7:51:1d:b7:5a:f4:04:f0:68:9a:45:02:f6:7a:1d:09:0c:
         88:e0:e0:7f:71:4a:ed:d6:d7:f6:d0:21:c7:ac:b0:08:d6:01:
         a9:29:c7:f1:0b:49:4d:f7:66:94:1b:e3:41:13:89:91:e5:4c:
         b2:28:08:bc:9b:3f:d8:cf:a6:15:13:98:ba:4e:ad:67:22:a3:
         75:39:53:9e:bf:24:f9:02:eb:64:9d:3e:91:09:8b:a5:2e:b1:
         0e:4a:de:a8:28:9c:35:f7:97:21:10:51:c1:79:60:e0:14:a3:
         45:62:7e:16:a8:b0:8f:aa:d3:84:e4:7e:bf:37:64:e5:60:2f:
         94:46:54:67:9b:09:02:2b:1a:e8:a9:ee:53:09:f4:cd:3a:1b:
         b6:a8:88:36:07:72:11:51:20:18:45:13:bc:78:d5:4e:1f:14:
         4a:b0:3e:cd:d5:cf:89:a1:70:2b:71:c9:3f:1b:d8:77:37:41:
         95:4c:dc:7f:ce:10:86:7b:b4:fb:54:a1:7e:cd:11:81:5b:13:
         2d:ee:1a:85:21:67:3c:de:f9:48:65:65:c7:fd:8e:e6:c9:ae:
         41:a4:48:15:8a:e7:95:3f:79:ab:9c:80:a6:ad:23:98:d0:d8:
         47:97:41:f9:f2:26:da:86:19:ca:6d:db:47:8d:16:66:3a:03:
         9c:20:e3:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:50:47 2026 by rpki-client