Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3139302e3130392e3132382e302f31382d3234203d3e203133343839.roa
File:                     3139302e3130392e3132382e302f31382d3234203d3e203133343839.roa (raw, json)
Hash identifier:          oNHMympwSkSXm5tgfTy2IroOLNbLlLX1TySZAk2ZxFI=
Subject key identifier:   E8:61:80:2F:E1:A5:64:5C:ED:DC:14:07:AB:D6:68:7D:C5:46:5F:44
Certificate issuer:       /CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
Certificate serial:       172285ED3924A81F0AC0B2878A073C858C63F89A
Authority key identifier: 34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3139302e3130392e3132382e302f31382d3234203d3e203133343839.roa
Signing time:             Thu 19 Mar 2026 21:35:01 +0000
ROA not before:           Thu 19 Mar 2026 21:30:01 +0000
ROA not after:            Thu 18 Mar 2027 21:35:01 +0000
asID:                     13489
IP address blocks:        190.109.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:22:85:ed:39:24:a8:1f:0a:c0:b2:87:8a:07:3c:85:8c:63:f8:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
        Validity
            Not Before: Mar 19 21:30:01 2026 GMT
            Not After : Mar 18 21:35:01 2027 GMT
        Subject: CN=E861802FE1A5645CEDDC1407ABD6687DC5465F44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3b:53:b1:e3:fc:f5:0f:1b:98:22:40:b7:28:
                    2b:e7:01:d1:67:b3:70:7b:14:dd:ec:4a:85:9c:0f:
                    96:ed:c5:5c:55:32:94:09:ae:35:2d:ed:ee:ab:b2:
                    9e:1e:95:0a:e4:e9:3b:05:d0:14:26:5f:98:75:e4:
                    18:fd:d0:09:b9:c6:87:e3:21:5c:da:23:e7:79:67:
                    21:bb:9c:42:bb:4d:b8:30:98:3a:e8:a2:3e:2b:e8:
                    f1:cf:f8:2c:78:e3:ea:52:34:e1:b3:94:b5:c1:33:
                    d0:59:ab:c5:40:4b:29:02:eb:0c:56:ef:34:67:b7:
                    9d:18:8b:eb:16:f5:7f:73:97:96:d3:d9:42:d7:c0:
                    fa:7d:f7:93:34:cd:ed:e9:5f:26:0b:eb:21:24:c1:
                    ba:47:ef:9e:b2:4b:65:5b:bf:0a:29:14:30:a7:ea:
                    96:3f:0a:99:93:88:02:c2:72:41:7a:de:a9:61:52:
                    27:97:f5:4d:a7:81:7b:e2:f4:36:cc:09:a6:b3:04:
                    5f:db:e9:1b:0f:f6:4d:7a:ab:b6:8f:78:5b:0c:b5:
                    f5:be:95:95:c6:d6:55:e6:5d:aa:7b:97:8a:fb:44:
                    36:e5:ee:70:08:18:16:37:4a:10:40:8c:a4:d9:98:
                    cf:c0:a8:6d:13:44:3a:4a:8c:f6:05:e2:85:14:33:
                    48:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:61:80:2F:E1:A5:64:5C:ED:DC:14:07:AB:D6:68:7D:C5:46:5F:44
            X509v3 Authority Key Identifier:
                keyid:34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3139302e3130392e3132382e302f31382d3234203d3e203133343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.109.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         2b:83:b7:78:88:bb:27:59:4f:03:24:da:ea:bc:5b:67:c6:3a:
         2a:da:e9:02:aa:c5:02:06:f5:fe:70:b0:37:83:9f:68:01:1f:
         e6:39:1c:8f:fe:72:b0:4e:23:1b:1d:1e:63:46:a5:38:1c:12:
         50:71:64:9d:ce:b5:07:57:29:6c:2c:ed:d4:1f:18:06:80:0c:
         28:d5:0a:43:a2:34:c6:3f:39:37:d8:39:64:72:df:54:0e:23:
         35:aa:81:d9:85:ef:d0:53:a2:00:6e:1d:88:e4:20:55:9a:89:
         bf:90:a9:1a:cd:86:78:6d:46:11:0e:7b:58:1e:fc:32:0c:05:
         31:f8:de:fd:b3:3b:9c:d1:be:0d:77:11:b4:ae:41:df:4e:c0:
         b2:7d:90:42:62:9d:b2:d2:8a:c2:7a:20:9b:60:18:59:4a:7c:
         89:45:4e:9f:c3:99:ae:f9:5b:34:96:a6:c0:c2:28:7c:22:16:
         85:5e:84:fd:49:1e:7f:87:75:46:0f:91:41:50:10:50:d9:ec:
         dd:d5:a4:6b:06:6b:36:0d:fb:02:95:e0:3d:2f:b0:ab:33:fc:
         38:06:d4:f1:51:fc:da:07:70:4b:09:bc:5a:8c:1e:c4:b3:d2:
         a3:7d:51:9c:3f:06:af:39:fc:ba:f2:95:5e:f1:9a:82:01:9e:
         99:f4:a8:34
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUFyKF7TkkqB8KwLKHigc8hYxj+JowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzQwMzlGNUJBREVDRDRERkI0MkUzRjRFMEM1RUNFOTdB
MzAxODBBNzAeFw0yNjAzMTkyMTMwMDFaFw0yNzAzMTgyMTM1MDFaMDMxMTAvBgNV
BAMTKEU4NjE4MDJGRTFBNTY0NUNFRERDMTQwN0FCRDY2ODdEQzU0NjVGNDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvO1Ox4/z1DxuYIkC3KCvnAdFn
s3B7FN3sSoWcD5btxVxVMpQJrjUt7e6rsp4elQrk6TsF0BQmX5h15Bj90Am5xofj
IVzaI+d5ZyG7nEK7TbgwmDrooj4r6PHP+Cx44+pSNOGzlLXBM9BZq8VASykC6wxW
7zRnt50Yi+sW9X9zl5bT2ULXwPp995M0ze3pXyYL6yEkwbpH756yS2VbvwopFDCn
6pY/CpmTiALCckF63qlhUieX9U2ngXvi9DbMCaazBF/b6RsP9k16q7aPeFsMtfW+
lZXG1lXmXap7l4r7RDbl7nAIGBY3ShBAjKTZmM/AqG0TRDpKjPYF4oUUM0ilAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU6GGAL+GlZFzt3BQHq9ZofcVGX0QwHwYDVR0j
BBgwFoAUNAOfW63s1N+0Lj9ODF7Ol6MBgKcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MUU1MjNBNDc4NDNBOTZDQ0JEOTQ5RkRGNzJDODA2NDIy
MDVBNkY1QjYxQ0IzMjlGNjY1MzY4QTQ4QjJBNUExLzAvMzQwMzlGNUJBREVDRDRE
RkI0MkUzRjRFMEM1RUNFOTdBMzAxODBBNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNDAzOUY1QkFERUNENERGQjQy
RTNGNEUwQzVFQ0U5N0EzMDE4MEE3LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTFFNTIzQTQ3ODQzQTk2Q0NCRDk0OUZERjcyQzgwNjQyMjA1QTZGNUI2
MUNCMzI5RjY2NTM2OEE0OEIyQTVBMS8wLzMxMzkzMDJlMzEzMDM5MmUzMTMyMzgy
ZTMwMmYzMTM4MmQzMjM0MjAzZDNlMjAzMTMzMzQzODM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGvm2A
MA0GCSqGSIb3DQEBCwUAA4IBAQArg7d4iLsnWU8DJNrqvFtnxjoq2ukCqsUCBvX+
cLA3g59oAR/mORyP/nKwTiMbHR5jRqU4HBJQcWSdzrUHVylsLO3UHxgGgAwo1QpD
ojTGPzk32Dlkct9UDiM1qoHZhe/QU6IAbh2I5CBVmom/kKkazYZ4bUYRDntYHvwy
DAUx+N79szuc0b4NdxG0rkHfTsCyfZBCYp2y0orCeiCbYBhZSnyJRU6fw5mu+Vs0
lqbAwih8IhaFXoT9SR5/h3VGD5FBUBBQ2ezd1aRrBms2DfsCleA9L7CrM/w4BtTx
UfzaB3BLCbxajB7Es9KjfVGcPwavOfy68pVe8ZqCAZ6Z9Kg0
-----END CERTIFICATE-----
Generated at Thu Mar 26 22:49:11 2026 by rpki-client