Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/54D1C88CDFAF42033C05328865F32C57A74054E8F6398423760A55F511D86F3F/0/3139382e34312e33332e302f32342d3234203d3e203136383734.roa
File:                     3139382e34312e33332e302f32342d3234203d3e203136383734.roa (raw, json)
Hash identifier:          I0za2aW26g21TgV+D3EGNLsb+inxgykIEpw15mow1Xk=
Subject key identifier:   BB:1B:B2:69:5A:04:5B:1C:70:E7:7F:94:A2:00:18:25:53:C4:DA:04
Certificate issuer:       /CN=C90120384309CC6F9FAC1F040EBFBB7CC69663B1
Certificate serial:       6B32339FA99400357FCAE7887595B9EE9999FB0A
Authority key identifier: C9:01:20:38:43:09:CC:6F:9F:AC:1F:04:0E:BF:BB:7C:C6:96:63:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C90120384309CC6F9FAC1F040EBFBB7CC69663B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/54D1C88CDFAF42033C05328865F32C57A74054E8F6398423760A55F511D86F3F/0/3139382e34312e33332e302f32342d3234203d3e203136383734.roa
Signing time:             Thu 09 Jul 2026 23:05:00 +0000
ROA not before:           Thu 09 Jul 2026 23:00:00 +0000
ROA not after:            Thu 08 Jul 2027 23:05:00 +0000
asID:                     16874
IP address blocks:        198.41.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/54D1C88CDFAF42033C05328865F32C57A74054E8F6398423760A55F511D86F3F/0/C90120384309CC6F9FAC1F040EBFBB7CC69663B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/54D1C88CDFAF42033C05328865F32C57A74054E8F6398423760A55F511D86F3F/0/C90120384309CC6F9FAC1F040EBFBB7CC69663B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C90120384309CC6F9FAC1F040EBFBB7CC69663B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:32:33:9f:a9:94:00:35:7f:ca:e7:88:75:95:b9:ee:99:99:fb:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C90120384309CC6F9FAC1F040EBFBB7CC69663B1
        Validity
            Not Before: Jul  9 23:00:00 2026 GMT
            Not After : Jul  8 23:05:00 2027 GMT
        Subject: CN=BB1BB2695A045B1C70E77F94A200182553C4DA04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:d6:8f:22:05:b0:fb:b7:e6:38:c6:27:8f:de:
                    7a:fa:bc:3c:bf:26:c5:25:ed:18:cf:dd:80:b0:4e:
                    00:db:01:b4:fa:e4:bb:fb:79:5e:b4:78:e1:aa:de:
                    29:aa:00:42:ec:15:35:9f:bd:37:61:33:54:00:da:
                    6e:9c:1a:79:e7:1f:2b:6a:f7:12:12:96:65:a2:a1:
                    e9:b3:06:db:09:84:04:3c:84:5a:e2:6b:04:5e:4e:
                    79:0d:87:5c:92:c5:f7:01:af:6d:4f:d2:54:d5:af:
                    92:fa:4f:31:d1:b4:05:5a:97:b3:25:1c:9e:81:ed:
                    3a:78:94:3e:c6:90:71:8e:dd:4a:cf:dd:0e:4a:98:
                    88:9c:01:4a:15:dd:34:35:b0:70:c7:9a:12:df:01:
                    c4:f3:48:84:18:5d:bc:6d:fe:09:41:4c:c1:73:9f:
                    68:b0:fe:8c:55:9e:d1:89:8e:ae:73:97:c9:15:82:
                    97:79:be:6f:48:f0:26:ae:23:1a:60:42:5b:8d:b4:
                    86:06:66:8d:5e:a3:99:ae:48:1d:41:fc:7b:50:af:
                    b6:61:b4:87:58:aa:27:2f:83:00:f4:e7:fe:c3:9e:
                    4c:06:4f:32:e5:69:38:1c:94:c4:2d:76:b3:37:24:
                    f6:c3:81:fc:a1:5b:f3:95:9a:f6:72:51:a6:e6:d6:
                    d7:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:1B:B2:69:5A:04:5B:1C:70:E7:7F:94:A2:00:18:25:53:C4:DA:04
            X509v3 Authority Key Identifier:
                keyid:C9:01:20:38:43:09:CC:6F:9F:AC:1F:04:0E:BF:BB:7C:C6:96:63:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/54D1C88CDFAF42033C05328865F32C57A74054E8F6398423760A55F511D86F3F/0/C90120384309CC6F9FAC1F040EBFBB7CC69663B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C90120384309CC6F9FAC1F040EBFBB7CC69663B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/54D1C88CDFAF42033C05328865F32C57A74054E8F6398423760A55F511D86F3F/0/3139382e34312e33332e302f32342d3234203d3e203136383734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:a0:bb:b8:23:57:4a:40:30:9e:df:e4:0f:3a:38:e6:0b:78:
         88:f2:63:24:95:90:db:fc:0b:7d:6b:3e:20:76:a9:b4:bb:17:
         98:34:c9:a2:64:16:68:7d:5f:34:82:7b:14:3c:6c:4b:21:8b:
         dc:76:ee:19:23:70:c1:ff:93:be:23:36:d8:a8:3f:db:1e:3f:
         b6:09:e8:47:d5:03:c2:0e:5d:85:25:d3:4f:34:07:86:bd:ea:
         fd:c5:32:cc:75:16:0a:dc:50:44:ed:7f:56:06:b0:62:c0:0a:
         d6:6f:b2:43:a7:dc:0f:b7:af:53:55:05:dc:dd:54:b1:4d:8d:
         02:90:34:1b:28:aa:64:1c:d3:fc:24:0d:2a:45:83:20:55:16:
         3e:f3:34:e5:b6:70:09:4c:67:99:bb:44:c3:ac:ad:30:a0:ab:
         e5:ad:72:9b:9e:60:ac:31:3e:ed:1d:d5:fa:65:5e:53:43:43:
         e6:73:ac:5a:a7:03:b5:db:ad:1f:ca:97:54:ed:35:73:f7:73:
         74:a4:56:19:87:ea:ff:d5:5e:55:df:64:d2:fb:72:12:4d:8c:
         41:14:d2:e8:b0:f5:cd:08:e0:b8:f8:f9:30:79:b2:ae:96:af:
         61:ce:e5:a6:73:00:88:45:0d:5e:0b:8d:ce:78:6b:dd:d3:f2:
         dc:7c:42:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:05:57 2026 by rpki-client