Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/54D1C88CDFAF42033C05328865F32C57A74054E8F6398423760A55F511D86F3F/0/3139382e34312e33322e302f32342d3234203d3e203136383734.roa
File:                     3139382e34312e33322e302f32342d3234203d3e203136383734.roa (raw, json)
Hash identifier:          xzsZ6B5lw78PJJOTsGyVIz2c6FT9DDaKpj4CcwWZ8nw=
Subject key identifier:   69:51:BA:06:45:90:E8:68:03:85:96:92:00:E9:F9:E8:52:F4:72:BF
Certificate issuer:       /CN=C90120384309CC6F9FAC1F040EBFBB7CC69663B1
Certificate serial:       09BB1E506E09DD1E9F982849F37F66B1C574AAEA
Authority key identifier: C9:01:20:38:43:09:CC:6F:9F:AC:1F:04:0E:BF:BB:7C:C6:96:63:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C90120384309CC6F9FAC1F040EBFBB7CC69663B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/54D1C88CDFAF42033C05328865F32C57A74054E8F6398423760A55F511D86F3F/0/3139382e34312e33322e302f32342d3234203d3e203136383734.roa
Signing time:             Thu 09 Jul 2026 23:05:00 +0000
ROA not before:           Thu 09 Jul 2026 23:00:00 +0000
ROA not after:            Thu 08 Jul 2027 23:05:00 +0000
asID:                     16874
IP address blocks:        198.41.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/54D1C88CDFAF42033C05328865F32C57A74054E8F6398423760A55F511D86F3F/0/C90120384309CC6F9FAC1F040EBFBB7CC69663B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/54D1C88CDFAF42033C05328865F32C57A74054E8F6398423760A55F511D86F3F/0/C90120384309CC6F9FAC1F040EBFBB7CC69663B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C90120384309CC6F9FAC1F040EBFBB7CC69663B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 27 Jul 2026 17:24:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:bb:1e:50:6e:09:dd:1e:9f:98:28:49:f3:7f:66:b1:c5:74:aa:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C90120384309CC6F9FAC1F040EBFBB7CC69663B1
        Validity
            Not Before: Jul  9 23:00:00 2026 GMT
            Not After : Jul  8 23:05:00 2027 GMT
        Subject: CN=6951BA064590E8680385969200E9F9E852F472BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:5b:a5:c1:d5:e0:ef:45:df:85:ef:6a:ea:df:
                    87:01:63:a6:ef:06:47:a0:e8:5f:cc:e1:e9:3f:a7:
                    22:7e:ed:3b:19:6e:72:42:1c:cc:d7:9e:52:77:59:
                    fd:ce:d3:56:37:69:19:9f:09:20:93:12:29:4c:1b:
                    5f:da:77:1f:2f:70:da:f2:e3:15:17:d0:52:6f:92:
                    ca:5a:96:c9:be:3c:95:a2:5e:08:32:6a:a7:8a:6e:
                    de:03:d3:ea:e7:8a:1f:0c:81:b8:b2:b3:50:6c:7f:
                    cf:ff:0a:6e:55:86:a2:ce:66:49:74:6d:82:bb:7b:
                    1c:d1:f9:78:b8:13:c4:49:b0:58:8f:39:4e:d6:aa:
                    fb:36:d4:ce:5f:05:84:c1:60:07:5d:c6:24:7d:2a:
                    ed:db:a4:e5:d4:b2:1b:78:1a:53:3c:4d:c3:fa:53:
                    ed:ac:91:be:28:37:e7:c1:ea:3b:b8:de:0e:2d:53:
                    f0:a5:db:77:65:28:01:70:8e:5b:fe:07:53:86:cb:
                    b9:d3:69:6e:58:2c:a9:c9:05:24:df:84:84:23:fc:
                    c7:c6:fc:1b:1a:ec:2b:8a:80:22:8e:a1:2d:7c:e0:
                    f4:65:b4:7f:20:07:04:4f:16:c4:a7:94:11:b2:2b:
                    51:ce:90:d5:ed:e5:16:9b:6b:d7:ab:f8:89:2a:fd:
                    42:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:51:BA:06:45:90:E8:68:03:85:96:92:00:E9:F9:E8:52:F4:72:BF
            X509v3 Authority Key Identifier:
                keyid:C9:01:20:38:43:09:CC:6F:9F:AC:1F:04:0E:BF:BB:7C:C6:96:63:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/54D1C88CDFAF42033C05328865F32C57A74054E8F6398423760A55F511D86F3F/0/C90120384309CC6F9FAC1F040EBFBB7CC69663B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C90120384309CC6F9FAC1F040EBFBB7CC69663B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/54D1C88CDFAF42033C05328865F32C57A74054E8F6398423760A55F511D86F3F/0/3139382e34312e33322e302f32342d3234203d3e203136383734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:aa:43:af:53:29:9a:9c:40:3c:92:ae:20:4f:c7:0c:39:0f:
         2a:45:d8:1f:f8:ef:17:73:d4:07:10:b7:6a:24:41:ca:ad:16:
         b0:65:05:72:76:b1:9a:42:b2:e9:95:52:88:11:3c:f2:c0:75:
         88:d7:c3:5f:8e:e5:48:e4:29:99:9a:34:bf:a9:44:ff:84:5f:
         ba:98:c2:99:df:a1:d6:5b:3f:39:7b:30:67:b8:aa:5c:74:c2:
         92:e2:0f:a8:2c:b6:16:19:cf:8b:25:0d:8d:73:9f:d0:57:bf:
         e1:89:14:b7:ee:36:99:15:3c:05:65:34:ef:55:6c:2d:84:df:
         6d:f0:71:cd:53:c4:1a:7b:14:f4:51:36:4b:c5:c6:9f:ab:44:
         73:46:3b:1e:dd:c5:ba:81:08:f1:2e:82:ae:9d:11:ea:7c:68:
         c2:1b:39:b6:ac:2b:88:0f:c9:3a:1c:8a:60:f9:2b:74:da:4b:
         04:00:79:f3:10:3a:52:98:58:64:06:62:1c:a4:a8:fa:cc:fb:
         10:97:d1:f3:7c:d0:55:af:9c:eb:61:09:20:8a:ec:60:0a:c1:
         00:0e:67:e4:b8:66:6f:67:e2:0e:1e:54:27:eb:71:d6:ff:30:
         ac:ab:75:19:7f:70:81:0d:f0:1e:fc:b1:70:42:a8:6a:f0:01:
         85:f9:75:a8
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUCbseUG4J3R6fmChJ839mscV0quowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzkwMTIwMzg0MzA5Q0M2RjlGQUMxRjA0MEVCRkJCN0ND
Njk2NjNCMTAeFw0yNjA3MDkyMzAwMDBaFw0yNzA3MDgyMzA1MDBaMDMxMTAvBgNV
BAMTKDY5NTFCQTA2NDU5MEU4NjgwMzg1OTY5MjAwRTlGOUU4NTJGNDcyQkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrW6XB1eDvRd+F72rq34cBY6bv
Bkeg6F/M4ek/pyJ+7TsZbnJCHMzXnlJ3Wf3O01Y3aRmfCSCTEilMG1/adx8vcNry
4xUX0FJvkspalsm+PJWiXggyaqeKbt4D0+rnih8Mgbiys1Bsf8//Cm5VhqLOZkl0
bYK7exzR+Xi4E8RJsFiPOU7Wqvs21M5fBYTBYAddxiR9Ku3bpOXUsht4GlM8TcP6
U+2skb4oN+fB6ju43g4tU/Cl23dlKAFwjlv+B1OGy7nTaW5YLKnJBSTfhIQj/MfG
/Bsa7CuKgCKOoS184PRltH8gBwRPFsSnlBGyK1HOkNXt5Raba9er+Ikq/ULdAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUaVG6BkWQ6GgDhZaSAOn56FL0cr8wHwYDVR0j
BBgwFoAUyQEgOEMJzG+frB8EDr+7fMaWY7EwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NEQxQzg4Q0RGQUY0MjAzM0MwNTMyODg2NUYzMkM1N0E3
NDA1NEU4RjYzOTg0MjM3NjBBNTVGNTExRDg2RjNGLzAvQzkwMTIwMzg0MzA5Q0M2
RjlGQUMxRjA0MEVCRkJCN0NDNjk2NjNCMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DOTAxMjAzODQzMDlDQzZGOUZB
QzFGMDQwRUJGQkI3Q0M2OTY2M0IxLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTREMUM4OENERkFGNDIwMzNDMDUzMjg4NjVGMzJDNTdBNzQwNTRFOEY2
Mzk4NDIzNzYwQTU1RjUxMUQ4NkYzRi8wLzMxMzkzODJlMzQzMTJlMzMzMjJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzYzODM3MzQucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADGKSAwDQYJ
KoZIhvcNAQELBQADggEBAAmqQ69TKZqcQDySriBPxww5DypF2B/47xdz1AcQt2ok
QcqtFrBlBXJ2sZpCsumVUogRPPLAdYjXw1+O5UjkKZmaNL+pRP+EX7qYwpnfodZb
Pzl7MGe4qlx0wpLiD6gsthYZz4slDY1zn9BXv+GJFLfuNpkVPAVlNO9VbC2E323w
cc1TxBp7FPRRNkvFxp+rRHNGOx7dxbqBCPEugq6dEep8aMIbObasK4gPyTocimD5
K3TaSwQAefMQOlKYWGQGYhykqPrM+xCX0fN80FWvnOthCSCK7GAKwQAOZ+S4Zm9n
4g4eVCfrcdb/MKyrdRl/cIEN8B78sXBCqGrwAYX5dag=
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:59:39 2026 by rpki-client