Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4C8637342C36E875CF6231D4E56AA6D8F2A9DA6FDF1119B41BF35AD3D5C2F597/0/3230392e39342e3139322e302f31392d3234203d3e2035363339.roa
File:                     3230392e39342e3139322e302f31392d3234203d3e2035363339.roa (raw, json)
Hash identifier:          hBJ2J2fwgVCIQ6j7EI/TcAxhCbqE4IXrttxiPyDQMIA=
Subject key identifier:   79:E9:22:94:C2:8B:BE:1C:AC:84:20:8F:41:B4:EC:C8:B4:55:50:5F
Certificate issuer:       /CN=9C65791642D7761AA97BA0FF1A29DB316A279B37
Certificate serial:       4F34A77861B60F7542778CF1376CA24EA0391572
Authority key identifier: 9C:65:79:16:42:D7:76:1A:A9:7B:A0:FF:1A:29:DB:31:6A:27:9B:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C65791642D7761AA97BA0FF1A29DB316A279B37.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4C8637342C36E875CF6231D4E56AA6D8F2A9DA6FDF1119B41BF35AD3D5C2F597/0/3230392e39342e3139322e302f31392d3234203d3e2035363339.roa
Signing time:             Fri 10 Jul 2026 02:25:00 +0000
ROA not before:           Fri 10 Jul 2026 02:20:00 +0000
ROA not after:            Fri 09 Jul 2027 02:25:00 +0000
asID:                     5639
IP address blocks:        209.94.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4C8637342C36E875CF6231D4E56AA6D8F2A9DA6FDF1119B41BF35AD3D5C2F597/0/9C65791642D7761AA97BA0FF1A29DB316A279B37.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4C8637342C36E875CF6231D4E56AA6D8F2A9DA6FDF1119B41BF35AD3D5C2F597/0/9C65791642D7761AA97BA0FF1A29DB316A279B37.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C65791642D7761AA97BA0FF1A29DB316A279B37.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:34:a7:78:61:b6:0f:75:42:77:8c:f1:37:6c:a2:4e:a0:39:15:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C65791642D7761AA97BA0FF1A29DB316A279B37
        Validity
            Not Before: Jul 10 02:20:00 2026 GMT
            Not After : Jul  9 02:25:00 2027 GMT
        Subject: CN=79E92294C28BBE1CAC84208F41B4ECC8B455505F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:f0:94:f2:3c:5c:0b:66:36:e1:45:67:90:b6:
                    9c:dc:e9:cf:ac:c5:51:03:72:79:d9:0f:8a:ee:bf:
                    dd:df:d0:b9:dd:55:4b:25:b8:6b:0d:44:9b:ce:df:
                    4d:54:30:07:ec:41:7e:93:a5:84:5a:37:df:5a:27:
                    fc:a2:eb:23:23:81:72:3a:e5:cb:91:a0:48:fb:e2:
                    7d:e5:e1:19:f6:90:ae:45:22:8a:8a:fa:58:60:77:
                    08:82:c3:be:c6:68:a3:7d:c3:52:37:55:6d:d6:28:
                    a0:8a:71:94:d0:37:7e:e2:1a:5b:40:ac:0c:76:09:
                    5f:22:78:32:fb:0e:d7:f6:ac:9d:aa:07:08:48:1d:
                    a3:d1:e0:37:d5:c5:a3:02:b1:64:24:73:26:e7:d2:
                    f9:39:fb:da:da:11:ad:33:71:57:f0:ca:aa:ce:8a:
                    9e:f0:c7:47:7d:b5:9e:12:44:15:67:22:ad:15:f9:
                    fe:61:a7:95:31:93:e2:b5:93:b3:25:fd:1c:09:eb:
                    a8:da:e0:1b:7c:16:be:5f:d5:d1:2d:69:fc:f2:75:
                    6e:75:76:13:ed:b4:ba:b9:ff:8b:9e:1d:22:c6:50:
                    e2:77:94:e9:5f:63:a8:b1:28:ff:27:5b:ea:cd:76:
                    4e:c8:29:0f:72:07:b9:a2:2a:8e:68:d2:4e:13:4b:
                    81:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:E9:22:94:C2:8B:BE:1C:AC:84:20:8F:41:B4:EC:C8:B4:55:50:5F
            X509v3 Authority Key Identifier:
                keyid:9C:65:79:16:42:D7:76:1A:A9:7B:A0:FF:1A:29:DB:31:6A:27:9B:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4C8637342C36E875CF6231D4E56AA6D8F2A9DA6FDF1119B41BF35AD3D5C2F597/0/9C65791642D7761AA97BA0FF1A29DB316A279B37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C65791642D7761AA97BA0FF1A29DB316A279B37.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4C8637342C36E875CF6231D4E56AA6D8F2A9DA6FDF1119B41BF35AD3D5C2F597/0/3230392e39342e3139322e302f31392d3234203d3e2035363339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.94.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         11:d3:2a:2f:40:4b:3d:50:28:91:57:3e:5c:1f:89:41:9b:22:
         7f:09:30:b7:22:a3:36:2f:18:4c:cf:26:a8:fd:ea:07:ed:cc:
         90:78:c6:2f:72:2c:ca:cd:71:f6:c5:d1:8d:21:b3:b7:17:85:
         7f:7d:c1:95:5c:8e:3d:f3:e6:09:08:3a:33:0a:74:bd:10:95:
         4e:74:62:fe:73:62:f9:42:b0:3e:93:ac:59:6d:7d:ed:41:46:
         1e:93:72:3a:c1:1b:8d:8b:d8:5d:25:39:82:00:d2:4c:16:a1:
         84:c4:44:f9:de:f0:ae:05:1b:f2:bd:79:27:aa:6e:f0:fb:c9:
         ce:bb:fc:ac:8b:bc:67:e8:65:a4:fd:8d:bb:4d:9f:27:0a:48:
         2a:53:7d:56:80:53:17:cd:91:4f:5b:3c:c5:ab:bb:2f:02:b4:
         ff:aa:bd:ab:c0:8c:e5:40:fd:2b:f6:22:dc:5d:86:c2:85:10:
         3d:25:68:d4:a2:6e:f4:81:af:e6:9b:ed:d4:00:15:2f:4a:6e:
         7a:3f:08:a8:7b:a6:01:e9:a5:f6:e4:5f:b2:03:62:77:43:78:
         f2:ef:5d:2c:29:01:5b:80:00:e7:72:1c:58:95:96:ae:06:a8:
         2f:e6:8d:70:ca:45:11:99:fb:91:78:20:c3:0e:7f:65:96:9c:
         8d:08:1b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:50:44 2026 by rpki-client