Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/54D1C88CDFAF42033C05328865F32C57A74054E8F6398423760A55F511D86F3F/0/3139382e34312e33352e302f32342d3234203d3e203136383734.roa
File:                     3139382e34312e33352e302f32342d3234203d3e203136383734.roa (raw, json)
Hash identifier:          u5hVZrDWnxSrgBmYi8EyNIdxFAAijPJcA+uZcfgFS4w=
Subject key identifier:   AD:37:63:5D:15:2B:C3:0E:0B:2B:9B:6B:A9:DF:D5:02:08:2C:74:BC
Certificate issuer:       /CN=C90120384309CC6F9FAC1F040EBFBB7CC69663B1
Certificate serial:       775AFE4B1F78F45917484125505EEBCF2E568C75
Authority key identifier: C9:01:20:38:43:09:CC:6F:9F:AC:1F:04:0E:BF:BB:7C:C6:96:63:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C90120384309CC6F9FAC1F040EBFBB7CC69663B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/54D1C88CDFAF42033C05328865F32C57A74054E8F6398423760A55F511D86F3F/0/3139382e34312e33352e302f32342d3234203d3e203136383734.roa
Signing time:             Thu 09 Jul 2026 23:05:00 +0000
ROA not before:           Thu 09 Jul 2026 23:00:00 +0000
ROA not after:            Thu 08 Jul 2027 23:05:00 +0000
asID:                     16874
IP address blocks:        198.41.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/54D1C88CDFAF42033C05328865F32C57A74054E8F6398423760A55F511D86F3F/0/C90120384309CC6F9FAC1F040EBFBB7CC69663B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/54D1C88CDFAF42033C05328865F32C57A74054E8F6398423760A55F511D86F3F/0/C90120384309CC6F9FAC1F040EBFBB7CC69663B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C90120384309CC6F9FAC1F040EBFBB7CC69663B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:5a:fe:4b:1f:78:f4:59:17:48:41:25:50:5e:eb:cf:2e:56:8c:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C90120384309CC6F9FAC1F040EBFBB7CC69663B1
        Validity
            Not Before: Jul  9 23:00:00 2026 GMT
            Not After : Jul  8 23:05:00 2027 GMT
        Subject: CN=AD37635D152BC30E0B2B9B6BA9DFD502082C74BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4d:af:36:7b:de:68:1a:f7:b7:d9:f9:79:78:
                    90:93:dc:dc:1e:86:00:a2:a7:4a:71:b7:49:b1:bd:
                    80:be:a2:72:1d:29:c8:62:45:32:05:39:f6:2e:a3:
                    47:a4:8e:5a:bc:f5:cc:f1:f2:fa:e7:7a:e6:2e:42:
                    c8:5c:ed:73:e2:bf:d0:8b:3d:19:99:ed:4e:d6:f8:
                    60:61:7d:5a:8c:f4:a6:ea:41:6d:d1:38:98:11:25:
                    ef:5e:63:ed:64:9b:be:32:22:7c:c4:51:53:63:c1:
                    b0:40:78:ec:6d:de:ca:58:49:70:7c:67:86:a0:98:
                    74:05:f9:0b:a3:39:15:a2:bc:4f:ce:6e:d7:6d:8b:
                    af:8e:1f:1f:1a:2f:6c:43:19:0b:59:6b:ed:d0:7f:
                    1d:1a:e7:ae:e4:70:61:41:86:6f:17:c9:78:1e:be:
                    dc:5f:8a:53:d7:98:46:f8:e5:0f:e0:d8:42:af:68:
                    c9:e2:da:35:df:6b:78:6a:04:66:6c:d7:c0:1d:2b:
                    65:d5:0b:0e:63:79:5d:89:6c:a5:b6:d9:ae:84:aa:
                    7b:04:3b:d0:a1:b6:9b:83:f5:6e:10:6e:43:79:3b:
                    1f:5e:4d:96:16:95:d1:c2:18:38:c5:b0:e2:b0:c1:
                    18:1a:3f:6d:d7:30:cf:18:0f:be:ad:8f:26:37:e7:
                    eb:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:37:63:5D:15:2B:C3:0E:0B:2B:9B:6B:A9:DF:D5:02:08:2C:74:BC
            X509v3 Authority Key Identifier:
                keyid:C9:01:20:38:43:09:CC:6F:9F:AC:1F:04:0E:BF:BB:7C:C6:96:63:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/54D1C88CDFAF42033C05328865F32C57A74054E8F6398423760A55F511D86F3F/0/C90120384309CC6F9FAC1F040EBFBB7CC69663B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C90120384309CC6F9FAC1F040EBFBB7CC69663B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/54D1C88CDFAF42033C05328865F32C57A74054E8F6398423760A55F511D86F3F/0/3139382e34312e33352e302f32342d3234203d3e203136383734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:b5:0f:d2:e8:53:ad:1f:1a:d7:f7:7e:f2:f7:dc:fe:5f:c9:
         52:4c:28:9a:7f:2a:4f:b9:5b:48:21:8f:76:f1:c1:a6:4a:77:
         e1:b5:17:c0:44:93:a2:25:af:e1:08:f9:27:1b:ff:ee:b1:aa:
         f9:d5:a6:6b:96:57:03:b6:c1:78:c2:d8:b0:48:5f:17:b3:76:
         08:51:c0:6c:75:77:88:81:a7:e9:b6:0e:43:90:9c:f2:6b:67:
         02:69:9e:e9:55:41:95:e4:bc:68:d7:d0:dc:e1:80:9b:85:2e:
         ea:8c:45:61:5c:b7:26:2f:69:a8:91:b0:9d:7e:4d:e6:fa:c7:
         db:27:ce:aa:be:d3:7a:63:48:5d:b6:50:0b:76:cd:12:a4:de:
         57:00:d7:d8:a5:63:3f:3c:56:e3:4d:32:ab:09:c7:90:d9:cd:
         c9:5f:ba:3b:2a:3c:69:58:ec:1b:51:23:85:6b:e3:08:f6:fe:
         59:52:94:9e:70:4d:9e:ca:e8:a5:5c:7f:9c:f6:1c:6b:0a:39:
         4c:80:18:2b:bd:25:d7:fa:8c:1d:b4:e5:1d:cc:4d:17:53:13:
         6f:81:74:f1:61:e5:26:84:27:ad:84:39:56:fa:0d:a0:b5:4a:
         ad:f3:d2:25:29:47:fb:d4:e6:f4:58:6d:d2:c7:f4:d5:24:c6:
         42:f6:b1:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:09:53 2026 by rpki-client