Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/54D1C88CDFAF42033C05328865F32C57A74054E8F6398423760A55F511D86F3F/0/3139382e34312e34302e302f32342d3234203d3e203136383734.roa
File:                     3139382e34312e34302e302f32342d3234203d3e203136383734.roa (raw, json)
Hash identifier:          QHHzPEojYtESOYqvBOjuHaPj0R3R8ReXAhcJOVxbBZs=
Subject key identifier:   DE:AF:C5:2C:6D:DD:50:F8:39:4B:CF:19:99:13:61:CA:1C:5F:5F:F2
Certificate issuer:       /CN=C90120384309CC6F9FAC1F040EBFBB7CC69663B1
Certificate serial:       7C0C0777A6624841C4A33B146AAEAEAE78F4F2E8
Authority key identifier: C9:01:20:38:43:09:CC:6F:9F:AC:1F:04:0E:BF:BB:7C:C6:96:63:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C90120384309CC6F9FAC1F040EBFBB7CC69663B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/54D1C88CDFAF42033C05328865F32C57A74054E8F6398423760A55F511D86F3F/0/3139382e34312e34302e302f32342d3234203d3e203136383734.roa
Signing time:             Thu 09 Jul 2026 23:10:01 +0000
ROA not before:           Thu 09 Jul 2026 23:05:01 +0000
ROA not after:            Thu 08 Jul 2027 23:10:01 +0000
asID:                     16874
IP address blocks:        198.41.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/54D1C88CDFAF42033C05328865F32C57A74054E8F6398423760A55F511D86F3F/0/C90120384309CC6F9FAC1F040EBFBB7CC69663B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/54D1C88CDFAF42033C05328865F32C57A74054E8F6398423760A55F511D86F3F/0/C90120384309CC6F9FAC1F040EBFBB7CC69663B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C90120384309CC6F9FAC1F040EBFBB7CC69663B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:0c:07:77:a6:62:48:41:c4:a3:3b:14:6a:ae:ae:ae:78:f4:f2:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C90120384309CC6F9FAC1F040EBFBB7CC69663B1
        Validity
            Not Before: Jul  9 23:05:01 2026 GMT
            Not After : Jul  8 23:10:01 2027 GMT
        Subject: CN=DEAFC52C6DDD50F8394BCF19991361CA1C5F5FF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:01:70:e0:07:2d:61:d1:85:3b:72:e6:77:4b:
                    f7:18:80:20:66:56:bb:5a:fa:ac:83:87:46:b3:5c:
                    d4:ad:fb:39:b6:eb:88:65:70:36:5f:86:22:1f:3f:
                    69:95:a3:05:d1:cc:68:7d:f8:51:d5:2c:9b:a9:93:
                    d4:33:26:1a:cd:32:fc:cd:1e:7c:84:fc:e6:94:57:
                    97:ec:ed:99:d8:38:3c:41:bb:81:c5:71:9e:ba:fb:
                    26:ab:59:99:06:38:4f:d2:f3:78:5f:dd:cc:3a:6d:
                    13:cf:92:ee:12:5f:38:e2:ab:a8:78:ec:91:c3:60:
                    ec:1b:44:fe:73:c3:34:31:18:c1:57:8b:24:c6:0e:
                    77:6e:a9:52:02:9a:25:da:c7:e7:a1:20:2e:ad:5e:
                    b6:6b:f0:62:c0:b9:d9:fe:dc:73:08:04:28:6c:3e:
                    c5:b3:dd:82:fb:b9:34:e1:c4:ff:43:dc:fb:5f:c0:
                    7f:ab:03:10:92:3a:57:23:89:0a:ce:3e:22:2c:5f:
                    03:9e:55:cf:7f:3f:ed:39:32:2f:f8:1d:14:16:e8:
                    79:1d:c0:94:a2:59:6c:ee:5d:26:0e:6d:c0:1b:77:
                    be:27:29:93:ec:0e:c2:e7:58:4e:51:64:1d:49:bf:
                    c7:8b:82:e5:09:b9:b3:37:6c:8c:3f:8d:fd:e2:0c:
                    af:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:AF:C5:2C:6D:DD:50:F8:39:4B:CF:19:99:13:61:CA:1C:5F:5F:F2
            X509v3 Authority Key Identifier:
                keyid:C9:01:20:38:43:09:CC:6F:9F:AC:1F:04:0E:BF:BB:7C:C6:96:63:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/54D1C88CDFAF42033C05328865F32C57A74054E8F6398423760A55F511D86F3F/0/C90120384309CC6F9FAC1F040EBFBB7CC69663B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C90120384309CC6F9FAC1F040EBFBB7CC69663B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/54D1C88CDFAF42033C05328865F32C57A74054E8F6398423760A55F511D86F3F/0/3139382e34312e34302e302f32342d3234203d3e203136383734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:f1:f5:ad:e9:f0:03:c6:dc:53:c2:ac:84:02:df:78:2d:15:
         37:60:3a:1f:c4:81:16:cf:e4:9c:dc:27:ac:74:41:99:04:12:
         50:0c:35:8b:68:e4:00:c5:33:ef:30:8b:1c:e1:a6:c9:b7:09:
         bc:3e:3b:ca:66:aa:d9:33:4d:c6:59:dd:10:9e:89:12:9b:fb:
         d6:93:59:9f:0a:89:9e:e0:cb:5b:6a:fa:ff:f5:40:9e:35:95:
         c2:71:49:93:56:08:84:bc:4b:67:e5:00:0d:48:e0:fa:41:87:
         f2:7d:d9:69:18:f8:0e:c8:bf:e5:a2:90:55:65:7f:ba:72:1f:
         00:d4:f5:d5:65:58:2a:a3:b6:72:66:33:33:af:c0:ba:d4:b5:
         05:ba:2d:2b:b1:4a:46:ad:d3:4e:c4:f0:8d:85:c5:e2:69:55:
         d9:15:25:da:ff:f8:06:d4:ba:04:d9:d7:84:0b:51:fa:d1:5c:
         6a:e8:20:c1:49:8c:42:a9:58:fd:ff:1e:71:0d:a7:cb:0a:0b:
         c0:ef:37:a4:09:70:c8:28:15:4a:bf:82:c1:df:2c:2e:6e:b2:
         96:06:1d:2b:6c:c1:9a:6e:57:44:1c:52:5d:aa:06:69:64:d3:
         db:bb:9f:a4:84:e1:b0:0c:42:be:02:06:6e:79:74:35:2f:f2:
         ee:ff:dd:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:09:47 2026 by rpki-client