Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/54D1C88CDFAF42033C05328865F32C57A74054E8F6398423760A55F511D86F3F/0/3139382e34312e33392e302f32342d3234203d3e203136383734.roa
File:                     3139382e34312e33392e302f32342d3234203d3e203136383734.roa (raw, json)
Hash identifier:          PRS7bjdflZRj1vqf/EC3zRDe9Z4FkKI2+EPWvVkXYSg=
Subject key identifier:   0F:85:F9:01:6D:D6:D3:AB:45:33:2B:61:A6:EC:AA:F7:5E:F5:35:FC
Certificate issuer:       /CN=C90120384309CC6F9FAC1F040EBFBB7CC69663B1
Certificate serial:       1665F865564941215ED219C8E3251DC582F5C02D
Authority key identifier: C9:01:20:38:43:09:CC:6F:9F:AC:1F:04:0E:BF:BB:7C:C6:96:63:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C90120384309CC6F9FAC1F040EBFBB7CC69663B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/54D1C88CDFAF42033C05328865F32C57A74054E8F6398423760A55F511D86F3F/0/3139382e34312e33392e302f32342d3234203d3e203136383734.roa
Signing time:             Thu 09 Jul 2026 23:10:00 +0000
ROA not before:           Thu 09 Jul 2026 23:05:00 +0000
ROA not after:            Thu 08 Jul 2027 23:10:00 +0000
asID:                     16874
IP address blocks:        198.41.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/54D1C88CDFAF42033C05328865F32C57A74054E8F6398423760A55F511D86F3F/0/C90120384309CC6F9FAC1F040EBFBB7CC69663B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/54D1C88CDFAF42033C05328865F32C57A74054E8F6398423760A55F511D86F3F/0/C90120384309CC6F9FAC1F040EBFBB7CC69663B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C90120384309CC6F9FAC1F040EBFBB7CC69663B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 27 Jul 2026 17:24:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:65:f8:65:56:49:41:21:5e:d2:19:c8:e3:25:1d:c5:82:f5:c0:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C90120384309CC6F9FAC1F040EBFBB7CC69663B1
        Validity
            Not Before: Jul  9 23:05:00 2026 GMT
            Not After : Jul  8 23:10:00 2027 GMT
        Subject: CN=0F85F9016DD6D3AB45332B61A6ECAAF75EF535FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:12:88:81:74:c2:27:30:b8:ba:81:e9:9d:45:
                    7a:bf:53:f5:43:e8:99:af:23:33:2f:0f:11:8f:e8:
                    83:b8:a3:b5:dd:cc:28:03:2b:da:6e:a7:d0:97:12:
                    70:0a:99:4f:07:f4:13:e2:e1:ec:9e:24:ca:6c:ee:
                    0e:82:4a:32:b5:42:25:bf:5c:0b:13:6d:f7:08:d7:
                    40:d8:99:a8:02:46:30:ca:29:f3:ac:42:7d:98:b5:
                    b3:e8:2d:c2:91:38:a4:e5:35:fb:29:3e:82:11:85:
                    a0:99:b3:89:79:7e:c2:fe:b5:40:eb:db:65:b1:90:
                    1f:b3:fe:60:36:ee:74:b6:0b:b4:b4:ce:ec:6a:72:
                    0b:95:0f:4f:f5:6e:4a:a3:24:13:d6:bd:d1:27:2d:
                    3f:d8:cf:e4:9b:8c:58:c3:f1:38:a7:42:45:31:d0:
                    0c:17:71:06:af:ee:b2:0f:e9:a6:3f:b2:cb:77:5b:
                    b9:48:8d:35:10:31:a3:44:3a:0a:2f:0a:fc:2b:f2:
                    2b:9f:de:e7:fe:0c:6d:9c:25:bb:7c:39:78:c2:8b:
                    da:df:c2:93:6c:73:d8:8e:39:19:17:de:a1:13:65:
                    63:d2:1b:64:49:56:5f:c1:5c:49:1a:85:2b:0b:35:
                    06:d0:2e:2b:70:71:da:98:c9:8a:17:c4:bb:b9:ae:
                    5e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:85:F9:01:6D:D6:D3:AB:45:33:2B:61:A6:EC:AA:F7:5E:F5:35:FC
            X509v3 Authority Key Identifier:
                keyid:C9:01:20:38:43:09:CC:6F:9F:AC:1F:04:0E:BF:BB:7C:C6:96:63:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/54D1C88CDFAF42033C05328865F32C57A74054E8F6398423760A55F511D86F3F/0/C90120384309CC6F9FAC1F040EBFBB7CC69663B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C90120384309CC6F9FAC1F040EBFBB7CC69663B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/54D1C88CDFAF42033C05328865F32C57A74054E8F6398423760A55F511D86F3F/0/3139382e34312e33392e302f32342d3234203d3e203136383734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:2c:00:1e:16:f8:ad:30:bf:c1:97:0a:34:d4:60:24:f5:39:
         6f:1a:68:5f:98:33:78:70:9e:d9:b6:7c:e0:17:a3:a1:a8:8b:
         c2:12:c8:ec:23:c5:78:80:29:87:d6:40:76:7c:03:a0:51:f4:
         91:bb:d0:40:a9:3b:8b:a2:18:58:a2:7a:f4:a6:6d:49:8c:a3:
         28:dd:77:11:6e:fc:aa:08:77:75:4e:e5:bf:c6:68:f0:21:a6:
         cc:07:e5:de:76:75:21:00:ce:57:3d:0e:fc:50:0e:cd:39:b1:
         11:4b:fc:cd:4c:da:7e:d6:1e:05:4a:a2:99:e7:b3:c5:5b:24:
         01:47:8f:ca:e1:b8:a2:fd:7d:b6:fe:d9:08:c6:7a:2d:63:93:
         9b:0f:4e:5d:3c:c4:1c:27:dd:5c:1a:36:08:57:0a:f1:a4:bb:
         eb:58:68:eb:90:42:90:cd:07:3b:2e:3a:5b:c9:c2:fb:e8:6d:
         28:78:37:72:4a:89:7d:59:70:dd:2d:12:ea:d0:36:3d:52:58:
         48:7f:c1:58:39:fe:b2:df:79:f8:47:96:cb:95:c7:2e:69:a0:
         d4:be:d5:ef:6b:03:3b:fa:4f:31:8e:32:1f:ce:50:81:1b:b7:
         59:c0:d1:6a:51:14:e8:3b:66:e1:c2:2b:33:69:cd:f3:eb:70:
         af:3d:dd:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:59:49 2026 by rpki-client