Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3139302e332e3139322e302f31382d3234203d3e203133343839.roa
File:                     3139302e332e3139322e302f31382d3234203d3e203133343839.roa (raw, json)
Hash identifier:          sSBxw6CHtLiMKlfojdXKg6TIH66WSWkw3+JYh7CpPvc=
Subject key identifier:   6A:E9:3A:F2:4F:D6:E4:AE:A8:5B:B2:A9:C7:3C:79:65:0F:D0:4D:7F
Certificate issuer:       /CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
Certificate serial:       20A1ECA3A0A32D6A62013230E6B793A091E70902
Authority key identifier: 34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3139302e332e3139322e302f31382d3234203d3e203133343839.roa
Signing time:             Thu 19 Mar 2026 21:35:02 +0000
ROA not before:           Thu 19 Mar 2026 21:30:02 +0000
ROA not after:            Thu 18 Mar 2027 21:35:02 +0000
asID:                     13489
IP address blocks:        190.3.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:a1:ec:a3:a0:a3:2d:6a:62:01:32:30:e6:b7:93:a0:91:e7:09:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
        Validity
            Not Before: Mar 19 21:30:02 2026 GMT
            Not After : Mar 18 21:35:02 2027 GMT
        Subject: CN=6AE93AF24FD6E4AEA85BB2A9C73C79650FD04D7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:09:76:33:c0:9d:65:3c:9c:a1:30:ef:ed:48:
                    82:39:3c:97:a2:81:a2:d4:5b:8e:7c:d0:10:4b:c5:
                    cb:00:32:2a:c6:7e:d1:92:c2:80:0d:75:b8:f3:36:
                    41:c6:0e:4e:b4:7f:91:79:e6:2b:9e:6e:4c:d4:18:
                    d3:83:97:19:aa:7a:63:4a:be:23:3e:b6:91:56:64:
                    c6:da:6b:6f:c0:47:49:15:22:e5:33:10:0d:13:48:
                    eb:8f:5c:ba:76:c8:2d:1e:62:e1:f8:d6:d9:f3:76:
                    6b:04:1e:96:6b:6d:b1:04:b5:bc:40:06:1a:6e:b2:
                    fc:55:29:d8:b3:e4:44:a5:34:96:a7:ab:a4:c3:d0:
                    db:fe:d0:5c:09:bb:59:39:1f:77:9c:f5:0b:ab:1a:
                    74:0d:d6:c2:f6:5a:46:cf:96:c3:d5:d1:3e:b2:ed:
                    eb:6b:0f:2a:55:f8:43:d2:2d:27:f3:6a:de:4d:6f:
                    df:d7:93:c5:6c:e0:2a:6a:e8:b5:cf:16:1c:a0:3b:
                    67:cd:a2:e0:59:7b:a0:7e:53:cb:86:45:d0:89:c6:
                    69:e9:96:79:1f:c6:7f:00:82:c2:19:bb:a0:47:f0:
                    cd:96:d6:9f:f7:25:1c:c0:db:84:43:07:1f:a5:10:
                    e6:90:c6:0d:ff:07:27:d1:10:14:45:17:1c:fe:22:
                    db:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:E9:3A:F2:4F:D6:E4:AE:A8:5B:B2:A9:C7:3C:79:65:0F:D0:4D:7F
            X509v3 Authority Key Identifier:
                keyid:34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3139302e332e3139322e302f31382d3234203d3e203133343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.3.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         4f:e1:9d:5e:74:c2:3f:a2:a5:fa:54:7e:60:a3:96:aa:ef:5e:
         d6:7d:27:4d:d3:f4:8a:0d:60:a3:2a:46:16:a9:a1:a1:8f:05:
         17:81:e2:cb:dc:c8:42:05:92:51:59:96:9b:16:4b:c1:69:8b:
         d6:96:eb:99:4f:7a:16:63:ed:2a:4e:9c:0c:f5:c0:2b:d1:f4:
         d4:94:98:65:4e:ce:f5:a3:a3:d4:84:a0:f1:0d:c6:7e:b5:e8:
         58:5f:88:1d:b5:0c:6a:de:7b:4f:1e:fe:cb:10:b9:9f:a5:b0:
         3e:83:cc:9b:ba:05:80:02:c5:36:23:bd:42:9d:19:d7:ff:7b:
         de:4f:1f:bd:83:43:fa:9c:2c:65:14:7e:57:10:bd:33:b8:6e:
         23:ab:00:3d:38:21:ab:df:97:9e:6e:1f:a6:35:79:ab:52:42:
         c4:62:cb:bd:56:4e:93:0f:fd:ea:14:92:3b:7a:ce:15:cd:ab:
         69:d1:19:a5:a2:a2:bf:2e:73:9e:da:cd:c5:b4:c5:78:44:0e:
         85:9f:9e:25:f0:a8:c9:bd:da:41:1c:64:c3:71:97:07:33:12:
         db:dd:8f:ad:0d:3c:8e:de:a3:8d:96:05:00:44:0d:1d:7a:13:
         d7:67:9a:2f:c8:d8:37:dc:bd:3d:2d:7f:9f:e2:6c:f5:8c:e1:
         5f:d3:04:78
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUIKHso6CjLWpiATIw5reToJHnCQIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzQwMzlGNUJBREVDRDRERkI0MkUzRjRFMEM1RUNFOTdB
MzAxODBBNzAeFw0yNjAzMTkyMTMwMDJaFw0yNzAzMTgyMTM1MDJaMDMxMTAvBgNV
BAMTKDZBRTkzQUYyNEZENkU0QUVBODVCQjJBOUM3M0M3OTY1MEZEMDREN0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQCXYzwJ1lPJyhMO/tSII5PJei
gaLUW4580BBLxcsAMirGftGSwoANdbjzNkHGDk60f5F55iuebkzUGNODlxmqemNK
viM+tpFWZMbaa2/AR0kVIuUzEA0TSOuPXLp2yC0eYuH41tnzdmsEHpZrbbEEtbxA
BhpusvxVKdiz5ESlNJanq6TD0Nv+0FwJu1k5H3ec9QurGnQN1sL2WkbPlsPV0T6y
7etrDypV+EPSLSfzat5Nb9/Xk8Vs4Cpq6LXPFhygO2fNouBZe6B+U8uGRdCJxmnp
lnkfxn8AgsIZu6BH8M2W1p/3JRzA24RDBx+lEOaQxg3/ByfREBRFFxz+ItvbAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUauk68k/W5K6oW7Kpxzx5ZQ/QTX8wHwYDVR0j
BBgwFoAUNAOfW63s1N+0Lj9ODF7Ol6MBgKcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MUU1MjNBNDc4NDNBOTZDQ0JEOTQ5RkRGNzJDODA2NDIy
MDVBNkY1QjYxQ0IzMjlGNjY1MzY4QTQ4QjJBNUExLzAvMzQwMzlGNUJBREVDRDRE
RkI0MkUzRjRFMEM1RUNFOTdBMzAxODBBNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNDAzOUY1QkFERUNENERGQjQy
RTNGNEUwQzVFQ0U5N0EzMDE4MEE3LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTFFNTIzQTQ3ODQzQTk2Q0NCRDk0OUZERjcyQzgwNjQyMjA1QTZGNUI2
MUNCMzI5RjY2NTM2OEE0OEIyQTVBMS8wLzMxMzkzMDJlMzMyZTMxMzkzMjJlMzAy
ZjMxMzgyZDMyMzQyMDNkM2UyMDMxMzMzNDM4Mzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAa+A8AwDQYJ
KoZIhvcNAQELBQADggEBAE/hnV50wj+ipfpUfmCjlqrvXtZ9J03T9IoNYKMqRhap
oaGPBReB4svcyEIFklFZlpsWS8Fpi9aW65lPehZj7SpOnAz1wCvR9NSUmGVOzvWj
o9SEoPENxn616FhfiB21DGree08e/ssQuZ+lsD6DzJu6BYACxTYjvUKdGdf/e95P
H72DQ/qcLGUUflcQvTO4biOrAD04Iavfl55uH6Y1eatSQsRiy71WTpMP/eoUkjt6
zhXNq2nRGaWior8uc57azcW0xXhEDoWfniXwqMm92kEcZMNxlwczEtvdj60NPI7e
o42WBQBEDR16E9dnmi/I2DfcvT0tf5/ibPWM4V/TBHg=
-----END CERTIFICATE-----
Generated at Thu Mar 26 22:49:16 2026 by rpki-client