Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4C8637342C36E875CF6231D4E56AA6D8F2A9DA6FDF1119B41BF35AD3D5C2F597/0/3139362e332e3133322e302f32322d3234203d3e2035363339.roa
File:                     3139362e332e3133322e302f32322d3234203d3e2035363339.roa (raw, json)
Hash identifier:          o+wj6gxQVoNhOglg85FkA9ekSz4AHT+BvijrwJWn4i8=
Subject key identifier:   97:A5:01:AA:F5:29:43:DF:B4:8C:0A:5B:3D:85:B1:EA:DB:61:46:B7
Certificate issuer:       /CN=9C65791642D7761AA97BA0FF1A29DB316A279B37
Certificate serial:       7E1D0175F55734E1E359F2796C11A14E4845795E
Authority key identifier: 9C:65:79:16:42:D7:76:1A:A9:7B:A0:FF:1A:29:DB:31:6A:27:9B:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C65791642D7761AA97BA0FF1A29DB316A279B37.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4C8637342C36E875CF6231D4E56AA6D8F2A9DA6FDF1119B41BF35AD3D5C2F597/0/3139362e332e3133322e302f32322d3234203d3e2035363339.roa
Signing time:             Fri 10 Jul 2026 02:30:00 +0000
ROA not before:           Fri 10 Jul 2026 02:25:00 +0000
ROA not after:            Fri 09 Jul 2027 02:30:00 +0000
asID:                     5639
IP address blocks:        196.3.132.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4C8637342C36E875CF6231D4E56AA6D8F2A9DA6FDF1119B41BF35AD3D5C2F597/0/9C65791642D7761AA97BA0FF1A29DB316A279B37.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4C8637342C36E875CF6231D4E56AA6D8F2A9DA6FDF1119B41BF35AD3D5C2F597/0/9C65791642D7761AA97BA0FF1A29DB316A279B37.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C65791642D7761AA97BA0FF1A29DB316A279B37.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:1d:01:75:f5:57:34:e1:e3:59:f2:79:6c:11:a1:4e:48:45:79:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C65791642D7761AA97BA0FF1A29DB316A279B37
        Validity
            Not Before: Jul 10 02:25:00 2026 GMT
            Not After : Jul  9 02:30:00 2027 GMT
        Subject: CN=97A501AAF52943DFB48C0A5B3D85B1EADB6146B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:af:c4:6e:31:0a:de:08:7c:2c:e5:6e:f5:6a:
                    27:6e:65:e0:6c:a4:c5:1e:93:a7:67:b8:05:53:43:
                    f2:b5:e1:20:19:09:b0:58:64:52:c0:84:00:b3:85:
                    f4:3e:94:7b:ed:47:54:32:e2:b6:48:06:f8:19:8d:
                    8b:04:a2:9f:e5:27:d2:99:7d:0d:cd:38:33:3a:9d:
                    ab:57:c4:90:2c:0a:0f:37:c2:16:95:d0:65:44:f1:
                    df:9c:61:52:7f:b0:0f:69:ab:1c:d9:f5:67:d0:a1:
                    bf:27:46:18:97:fd:89:e7:e1:72:6a:57:40:61:77:
                    99:f3:03:2c:f4:ca:07:b3:6b:a7:40:f4:c4:bb:03:
                    49:64:d9:6a:be:dc:b0:0b:fc:5b:5f:73:c6:59:2b:
                    eb:f6:c9:6b:0e:6f:63:d4:e4:3e:02:47:41:40:84:
                    97:06:65:3f:1b:96:78:50:c9:d9:e4:11:29:38:82:
                    87:4e:2c:ce:1e:17:7d:93:c2:04:1d:eb:ab:6a:91:
                    70:e7:5d:22:da:34:cb:e8:eb:f4:47:fb:30:be:3f:
                    eb:37:f5:81:2c:b0:6c:b1:e6:47:37:e4:44:79:c6:
                    e8:ca:6e:1c:bd:41:7e:d5:4f:98:f6:70:2d:c7:72:
                    59:62:3e:8e:9d:ca:cc:2d:e4:a0:84:b1:39:60:42:
                    7d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:A5:01:AA:F5:29:43:DF:B4:8C:0A:5B:3D:85:B1:EA:DB:61:46:B7
            X509v3 Authority Key Identifier:
                keyid:9C:65:79:16:42:D7:76:1A:A9:7B:A0:FF:1A:29:DB:31:6A:27:9B:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4C8637342C36E875CF6231D4E56AA6D8F2A9DA6FDF1119B41BF35AD3D5C2F597/0/9C65791642D7761AA97BA0FF1A29DB316A279B37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C65791642D7761AA97BA0FF1A29DB316A279B37.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4C8637342C36E875CF6231D4E56AA6D8F2A9DA6FDF1119B41BF35AD3D5C2F597/0/3139362e332e3133322e302f32322d3234203d3e2035363339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.3.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:8c:73:bf:bd:f0:ba:c0:c9:94:24:47:75:2d:e2:8e:7b:75:
         c8:57:b1:99:70:46:e4:8a:f5:4a:26:72:76:bd:fd:f5:4a:83:
         92:c1:45:17:4a:06:d6:e6:2a:cd:cf:e7:9a:d5:ad:3f:5e:35:
         1d:e7:25:f3:06:50:a9:9c:74:bf:65:79:49:d0:ec:8f:c0:23:
         8f:78:15:79:1e:9c:7a:1f:d4:90:35:f0:fc:75:2f:1b:df:23:
         ba:34:1e:9a:88:c9:cd:32:32:e7:9e:d9:30:ae:cd:aa:8b:b8:
         c1:ce:7f:77:07:65:6f:c4:3b:f8:85:c3:01:f0:bd:7c:6f:be:
         84:84:d4:c4:3a:da:be:1d:74:a3:52:af:2d:2d:f4:55:23:58:
         e0:a5:67:84:0c:06:d0:f4:6d:f2:e9:38:e9:96:d7:95:3d:a9:
         84:84:ef:87:37:9c:25:d9:9e:b9:7f:63:59:e1:f6:d2:68:f8:
         8c:5c:3c:78:9f:15:9b:a1:2a:34:41:bb:30:e2:b3:9e:c2:0a:
         5e:d1:36:fc:22:29:1a:2e:a1:9c:13:05:1b:2c:e3:73:02:fa:
         cc:ec:dc:da:bd:9d:0a:9e:54:f8:fb:bd:6c:aa:78:be:91:5e:
         3e:f6:6e:5f:7e:ce:00:be:e5:2b:51:53:9c:28:f9:b0:85:4d:
         45:f3:d2:e5
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUfh0BdfVXNOHjWfJ5bBGhTkhFeV4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUM2NTc5MTY0MkQ3NzYxQUE5N0JBMEZGMUEyOURCMzE2
QTI3OUIzNzAeFw0yNjA3MTAwMjI1MDBaFw0yNzA3MDkwMjMwMDBaMDMxMTAvBgNV
BAMTKDk3QTUwMUFBRjUyOTQzREZCNDhDMEE1QjNEODVCMUVBREI2MTQ2QjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDer8RuMQreCHws5W71aiduZeBs
pMUek6dnuAVTQ/K14SAZCbBYZFLAhACzhfQ+lHvtR1Qy4rZIBvgZjYsEop/lJ9KZ
fQ3NODM6natXxJAsCg83whaV0GVE8d+cYVJ/sA9pqxzZ9WfQob8nRhiX/Ynn4XJq
V0Bhd5nzAyz0ygeza6dA9MS7A0lk2Wq+3LAL/Ftfc8ZZK+v2yWsOb2PU5D4CR0FA
hJcGZT8blnhQydnkESk4godOLM4eF32TwgQd66tqkXDnXSLaNMvo6/RH+zC+P+s3
9YEssGyx5kc35ER5xujKbhy9QX7VT5j2cC3HclliPo6dyswt5KCEsTlgQn1HAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUl6UBqvUpQ9+0jApbPYWx6tthRrcwHwYDVR0j
BBgwFoAUnGV5FkLXdhqpe6D/GinbMWonmzcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80Qzg2MzczNDJDMzZFODc1Q0Y2MjMxRDRFNTZBQTZEOEYy
QTlEQTZGREYxMTE5QjQxQkYzNUFEM0Q1QzJGNTk3LzAvOUM2NTc5MTY0MkQ3NzYx
QUE5N0JBMEZGMUEyOURCMzE2QTI3OUIzNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85QzY1NzkxNjQyRDc3NjFBQTk3
QkEwRkYxQTI5REIzMTZBMjc5QjM3LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNEM4NjM3MzQyQzM2RTg3NUNGNjIzMUQ0RTU2QUE2RDhGMkE5REE2RkRG
MTExOUI0MUJGMzVBRDNENUMyRjU5Ny8wLzMxMzkzNjJlMzMyZTMxMzMzMjJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDM1MzYzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxAOEMA0GCSqG
SIb3DQEBCwUAA4IBAQCCjHO/vfC6wMmUJEd1LeKOe3XIV7GZcEbkivVKJnJ2vf31
SoOSwUUXSgbW5irNz+ea1a0/XjUd5yXzBlCpnHS/ZXlJ0OyPwCOPeBV5Hpx6H9SQ
NfD8dS8b3yO6NB6aiMnNMjLnntkwrs2qi7jBzn93B2VvxDv4hcMB8L18b76EhNTE
Otq+HXSjUq8tLfRVI1jgpWeEDAbQ9G3y6TjplteVPamEhO+HN5wl2Z65f2NZ4fbS
aPiMXDx4nxWboSo0Qbsw4rOewgpe0Tb8IikaLqGcEwUbLONzAvrM7NzavZ0KnlT4
+71sqni+kV4+9m5ffs4AvuUrUVOcKPmwhU1F89Ll
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:50:39 2026 by rpki-client