Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/54D1C88CDFAF42033C05328865F32C57A74054E8F6398423760A55F511D86F3F/0/3139382e34312e33342e302f32342d3234203d3e203136383734.roa
File:                     3139382e34312e33342e302f32342d3234203d3e203136383734.roa (raw, json)
Hash identifier:          V8DmMs5e9T3nwQG45LlGNlSmUtAJtYDD/MIoVLi8+nk=
Subject key identifier:   C2:BB:5E:A3:72:4D:3D:F7:09:69:AE:D2:29:7E:FA:2C:30:51:72:EE
Certificate issuer:       /CN=C90120384309CC6F9FAC1F040EBFBB7CC69663B1
Certificate serial:       6D1CB10B2234D09A81168CB8AE9876A269C0B636
Authority key identifier: C9:01:20:38:43:09:CC:6F:9F:AC:1F:04:0E:BF:BB:7C:C6:96:63:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C90120384309CC6F9FAC1F040EBFBB7CC69663B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/54D1C88CDFAF42033C05328865F32C57A74054E8F6398423760A55F511D86F3F/0/3139382e34312e33342e302f32342d3234203d3e203136383734.roa
Signing time:             Thu 09 Jul 2026 23:05:01 +0000
ROA not before:           Thu 09 Jul 2026 23:00:01 +0000
ROA not after:            Thu 08 Jul 2027 23:05:01 +0000
asID:                     16874
IP address blocks:        198.41.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/54D1C88CDFAF42033C05328865F32C57A74054E8F6398423760A55F511D86F3F/0/C90120384309CC6F9FAC1F040EBFBB7CC69663B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/54D1C88CDFAF42033C05328865F32C57A74054E8F6398423760A55F511D86F3F/0/C90120384309CC6F9FAC1F040EBFBB7CC69663B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C90120384309CC6F9FAC1F040EBFBB7CC69663B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:1c:b1:0b:22:34:d0:9a:81:16:8c:b8:ae:98:76:a2:69:c0:b6:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C90120384309CC6F9FAC1F040EBFBB7CC69663B1
        Validity
            Not Before: Jul  9 23:00:01 2026 GMT
            Not After : Jul  8 23:05:01 2027 GMT
        Subject: CN=C2BB5EA3724D3DF70969AED2297EFA2C305172EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:16:2b:ba:b3:11:d0:37:92:b7:52:5d:fe:ef:
                    43:8f:aa:67:ea:2f:fd:58:dd:91:63:6e:c7:2c:e6:
                    32:57:56:7a:2a:37:10:e8:da:8a:4a:1d:1d:d5:2a:
                    76:d7:d9:81:e8:01:40:85:c5:58:f5:04:1e:d0:60:
                    e6:31:2d:82:be:e0:29:cd:12:11:c8:d2:a6:af:31:
                    ae:b0:28:14:4f:e5:e9:bd:67:66:7b:c8:73:8f:2c:
                    1c:df:c7:37:ef:bc:ae:a8:43:3e:a7:6b:15:09:97:
                    aa:ff:42:6d:75:7d:c0:4e:1c:35:59:45:a0:1a:7c:
                    11:8d:02:c6:e9:82:ee:5d:f2:f9:f8:27:52:f0:b1:
                    cb:e9:6c:66:18:ca:71:c4:6d:86:f8:0a:87:f4:38:
                    33:bd:e0:50:36:80:06:93:55:bd:b6:51:8d:56:5c:
                    d8:ee:75:c2:0a:8f:1b:2a:fc:45:13:f1:38:90:04:
                    62:6c:0c:02:6c:c4:ca:87:4b:5d:7f:26:7c:39:56:
                    6b:11:b6:2f:82:59:54:09:88:51:14:74:e1:88:d0:
                    d8:df:1a:8e:68:e9:a8:34:9d:ea:40:a8:45:ec:83:
                    ce:96:68:e4:6b:e4:74:dd:48:50:03:d9:a0:57:4e:
                    ee:6d:89:5e:d8:2c:72:31:c6:ea:b2:fa:5d:ec:16:
                    8b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:BB:5E:A3:72:4D:3D:F7:09:69:AE:D2:29:7E:FA:2C:30:51:72:EE
            X509v3 Authority Key Identifier:
                keyid:C9:01:20:38:43:09:CC:6F:9F:AC:1F:04:0E:BF:BB:7C:C6:96:63:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/54D1C88CDFAF42033C05328865F32C57A74054E8F6398423760A55F511D86F3F/0/C90120384309CC6F9FAC1F040EBFBB7CC69663B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C90120384309CC6F9FAC1F040EBFBB7CC69663B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/54D1C88CDFAF42033C05328865F32C57A74054E8F6398423760A55F511D86F3F/0/3139382e34312e33342e302f32342d3234203d3e203136383734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:11:ae:6c:6a:79:04:64:7b:f3:da:b4:6e:0c:ea:36:5b:53:
         88:79:b7:18:98:3f:d9:9d:97:4c:62:f9:e0:c9:95:08:d2:af:
         db:e2:c0:b6:a4:e5:7a:72:2a:21:a7:71:05:fb:a5:39:f5:44:
         10:33:46:5b:12:86:75:3b:12:6e:11:89:1d:42:61:fa:9e:14:
         94:d4:c7:17:66:f7:17:c1:7a:2d:0d:62:11:bd:d3:37:1b:fa:
         42:05:3e:f7:ae:c3:c6:73:c0:2e:6c:06:32:c9:a6:40:1c:2a:
         2c:b0:7d:4e:2f:17:e8:f3:33:08:4b:71:52:05:08:c8:58:fe:
         8c:e2:13:a7:b3:33:1d:e2:c7:d7:61:8e:80:39:af:ed:f5:6a:
         9a:3b:62:6b:6d:ff:19:29:6a:c1:3b:a2:76:7c:04:f2:66:23:
         21:ca:80:2a:29:8c:e1:9a:2b:68:f5:37:aa:2a:90:60:f4:6b:
         7a:71:f8:ae:83:54:4d:cf:3a:a8:3f:80:79:fc:e5:cf:c8:d4:
         13:13:ee:f7:a1:ef:88:e3:b9:3e:00:5b:6d:97:f1:5c:99:5b:
         7e:69:54:11:cb:94:49:7f:d1:df:b8:75:bb:25:f7:6c:b6:d9:
         64:87:a1:89:8e:df:56:e2:5c:53:86:bf:54:72:fb:dc:b3:cd:
         17:ce:44:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:09:51 2026 by rpki-client