Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3139302e392e3139322e302f31382d3234203d3e203133343839.roa
File:                     3139302e392e3139322e302f31382d3234203d3e203133343839.roa (raw, json)
Hash identifier:          ejMZSQ93+XFdZDcl/BrxGbcHn112OLNpEEdnH7FV+lI=
Subject key identifier:   DE:91:8D:7C:2F:AA:24:02:E1:25:51:3C:6F:14:8F:09:32:61:54:AA
Certificate issuer:       /CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
Certificate serial:       44CEA3A308A39FB5B7913B426A0B455748EE61C9
Authority key identifier: 34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3139302e392e3139322e302f31382d3234203d3e203133343839.roa
Signing time:             Thu 19 Mar 2026 20:35:05 +0000
ROA not before:           Thu 19 Mar 2026 20:30:05 +0000
ROA not after:            Thu 18 Mar 2027 20:35:05 +0000
asID:                     13489
IP address blocks:        190.9.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:ce:a3:a3:08:a3:9f:b5:b7:91:3b:42:6a:0b:45:57:48:ee:61:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
        Validity
            Not Before: Mar 19 20:30:05 2026 GMT
            Not After : Mar 18 20:35:05 2027 GMT
        Subject: CN=DE918D7C2FAA2402E125513C6F148F09326154AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9f:06:20:01:2e:44:cc:7e:fc:b2:bb:c6:eb:
                    4c:ed:b9:ba:09:2c:c8:83:5d:c5:c4:6e:8e:e6:57:
                    1a:4a:f7:66:33:da:cd:95:f6:96:f0:9f:80:09:c5:
                    04:d1:0b:7b:73:b4:a7:91:e1:ac:4b:27:9d:40:ed:
                    73:9d:50:92:58:31:ca:e7:f1:1e:1f:b8:99:dd:8c:
                    7e:ca:6c:aa:73:00:00:c1:ce:45:bf:f1:2c:c0:42:
                    5f:5e:81:2a:c3:42:58:29:4f:c0:62:49:2f:35:f2:
                    fd:fc:51:a4:c6:cc:a4:5c:a9:11:3e:f2:1c:21:67:
                    34:5f:d5:e8:58:94:52:f9:09:32:85:ad:16:99:5e:
                    91:d1:fc:dc:4c:4f:ef:72:7b:40:5d:82:32:89:b5:
                    fc:12:f8:cf:ca:a5:34:80:3b:18:92:c0:2a:f2:0f:
                    88:66:86:f9:fa:19:c0:b2:b9:6d:4e:db:12:80:b2:
                    14:b8:bf:41:8e:19:f7:1d:bd:63:25:29:e5:f4:5b:
                    93:2c:e7:6e:e6:a4:50:ac:73:db:1f:7e:dd:90:02:
                    51:87:78:0c:25:f0:34:be:50:c9:74:9d:ee:fa:30:
                    da:89:99:ee:ec:f4:0b:73:70:e0:f7:89:de:21:fd:
                    78:f5:ab:6e:af:b4:46:c3:27:a2:58:7c:7f:d6:c3:
                    03:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:91:8D:7C:2F:AA:24:02:E1:25:51:3C:6F:14:8F:09:32:61:54:AA
            X509v3 Authority Key Identifier:
                keyid:34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3139302e392e3139322e302f31382d3234203d3e203133343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.9.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         24:76:b4:50:85:d2:75:a5:33:77:97:ba:fa:68:cd:82:bf:79:
         4b:aa:fb:fd:c8:73:4c:66:03:af:98:8d:f1:bd:5b:46:09:34:
         3b:34:d1:c1:0b:31:9a:51:b4:a9:d5:e4:36:77:a6:69:73:a6:
         eb:79:6c:a1:03:6d:7b:50:c4:b1:7f:e5:48:79:3f:72:60:a8:
         a9:6b:98:88:04:0b:9a:af:6a:99:30:10:ff:d2:e8:34:66:10:
         60:ce:39:3f:ae:ce:32:0a:b2:3d:a2:96:63:ee:cf:52:68:3d:
         a3:05:76:1d:7f:55:1e:c0:ac:6a:7d:25:77:a5:87:85:1d:f9:
         7c:ef:49:5c:df:c7:1f:8a:ce:41:9b:62:84:9e:4c:61:e7:60:
         ff:12:d2:e2:fc:3f:2c:c5:b8:14:06:98:b1:ab:69:e8:3d:1c:
         11:08:ea:48:7a:8f:51:b6:a2:ad:69:7d:e6:40:ae:f3:bf:96:
         be:2e:e0:3a:f5:cd:71:f1:81:9a:9a:23:94:c1:75:fe:1e:3c:
         ef:c9:9f:62:8a:ba:f2:f8:46:01:18:8f:73:93:a2:0a:89:1d:
         75:97:fa:bf:0b:81:47:9c:5d:ef:5b:e1:85:47:0e:6d:f7:f9:
         c0:73:96:ab:f8:8d:17:98:82:b9:68:98:56:1a:12:2c:65:35:
         33:27:19:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:49:15 2026 by rpki-client