Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3139302e3132382e302e302f31372d3234203d3e203133343839.roa
File:                     3139302e3132382e302e302f31372d3234203d3e203133343839.roa (raw, json)
Hash identifier:          NhNd+QpnSTgM2s0SHbgUU7iQuDEgrFzUS+6/lVYNkpI=
Subject key identifier:   F1:B6:D9:E6:52:DD:FD:E3:30:5C:57:0E:13:3D:42:44:AA:76:25:D5
Certificate issuer:       /CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
Certificate serial:       3BA608747DBE0567FD8A90FBD6FD01A5940C4797
Authority key identifier: 34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3139302e3132382e302e302f31372d3234203d3e203133343839.roa
Signing time:             Thu 19 Mar 2026 20:35:11 +0000
ROA not before:           Thu 19 Mar 2026 20:30:11 +0000
ROA not after:            Thu 18 Mar 2027 20:35:11 +0000
asID:                     13489
IP address blocks:        190.128.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:a6:08:74:7d:be:05:67:fd:8a:90:fb:d6:fd:01:a5:94:0c:47:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
        Validity
            Not Before: Mar 19 20:30:11 2026 GMT
            Not After : Mar 18 20:35:11 2027 GMT
        Subject: CN=F1B6D9E652DDFDE3305C570E133D4244AA7625D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:cd:59:d4:71:11:73:67:7b:73:d9:1a:14:25:
                    c9:48:f3:b3:db:9f:e8:ac:d5:0d:dd:81:b8:fe:e2:
                    53:26:c9:ce:94:45:b2:ab:a2:e5:12:02:8d:ab:4e:
                    e1:ac:50:4e:df:19:57:6e:38:a7:65:35:b1:8d:7c:
                    cc:65:de:f1:b2:4d:4e:42:37:29:e6:8f:60:ab:5c:
                    6b:f7:53:30:de:8d:f3:31:b6:a8:93:c5:d6:6b:6b:
                    32:7d:0c:6d:01:4d:e9:44:53:20:35:d2:76:3f:36:
                    25:6c:cf:47:e2:25:5a:c8:c4:c8:71:da:83:e8:8e:
                    82:cc:28:0b:bb:fc:d8:9a:c9:8e:1a:e3:6a:b0:ec:
                    94:83:7f:3f:8d:0f:d1:8f:88:d5:d3:8e:ca:6e:8e:
                    7c:60:8c:29:38:a4:32:21:56:84:5f:21:5b:0a:5a:
                    b6:78:0e:a4:9d:9a:a5:7d:51:a9:77:97:94:41:a2:
                    cb:c1:60:f4:ab:3c:93:6f:13:04:b5:9f:bf:16:aa:
                    d3:98:ed:ce:4c:21:92:58:3a:f2:0c:b8:bc:b6:af:
                    59:8a:0d:e1:65:cd:1f:a0:88:88:c8:11:c7:f7:43:
                    4f:5b:a3:c8:08:2b:d0:76:2d:72:29:9c:9b:65:6c:
                    67:52:43:e2:35:0f:12:6b:a8:1c:f6:00:85:75:a6:
                    57:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:B6:D9:E6:52:DD:FD:E3:30:5C:57:0E:13:3D:42:44:AA:76:25:D5
            X509v3 Authority Key Identifier:
                keyid:34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3139302e3132382e302e302f31372d3234203d3e203133343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.128.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         a2:8d:71:b5:5a:27:89:99:ae:cf:8b:1a:9f:c9:77:79:ca:5e:
         e7:41:b5:41:eb:82:44:29:30:40:b5:69:0b:f5:ef:13:64:88:
         cc:3b:21:14:2f:f9:ac:66:cf:c2:4f:6c:c6:59:db:68:e7:41:
         3f:ac:cd:92:71:cb:b9:4e:b7:7f:c1:5f:6a:d5:61:57:c1:be:
         fb:4a:e3:c1:35:8c:0e:48:68:c1:96:d3:a5:f9:0f:44:ba:e9:
         3c:38:b4:bf:a6:be:39:0e:91:51:68:ab:10:aa:0c:a0:2d:47:
         fd:3c:e7:c3:4e:a4:6e:ea:12:bb:d4:2c:3a:b7:3a:df:b0:f9:
         fc:c5:b7:9d:a1:46:ee:95:f1:f0:25:38:00:cf:39:d2:49:9e:
         d9:d5:26:7f:be:39:56:49:01:ee:fb:f6:e0:2b:85:60:27:ed:
         0c:86:4b:c2:b4:ac:44:1e:dd:d8:ab:57:fc:5b:8b:16:a4:5d:
         e0:2d:70:00:56:f6:da:3f:30:e2:b7:d2:47:58:4f:fc:92:ae:
         ff:55:27:18:6a:84:7d:3c:2b:79:cb:1e:8e:4a:3c:2d:a3:78:
         53:28:bc:f6:d7:ac:16:c7:a9:71:0c:2f:82:0c:18:43:a8:d3:
         22:7a:ed:bc:cf:53:f8:e2:a7:bc:24:27:21:23:80:59:04:47:
         fc:70:61:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:48:49 2026 by rpki-client