Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/54D1C88CDFAF42033C05328865F32C57A74054E8F6398423760A55F511D86F3F/0/3139382e34312e34312e302f32342d3234203d3e203136383734.roa
File:                     3139382e34312e34312e302f32342d3234203d3e203136383734.roa (raw, json)
Hash identifier:          kN7sEO0lodPCiPXBE8LlhQS46AvgGGzuwtMRFrUJCM0=
Subject key identifier:   D6:40:AE:4D:31:4C:60:93:D2:F9:B6:4D:5C:A6:F9:1B:57:55:3E:B2
Certificate issuer:       /CN=C90120384309CC6F9FAC1F040EBFBB7CC69663B1
Certificate serial:       2C974448B9716FA966E2A7E4E65EDC83C3F03B47
Authority key identifier: C9:01:20:38:43:09:CC:6F:9F:AC:1F:04:0E:BF:BB:7C:C6:96:63:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C90120384309CC6F9FAC1F040EBFBB7CC69663B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/54D1C88CDFAF42033C05328865F32C57A74054E8F6398423760A55F511D86F3F/0/3139382e34312e34312e302f32342d3234203d3e203136383734.roa
Signing time:             Thu 09 Jul 2026 23:10:01 +0000
ROA not before:           Thu 09 Jul 2026 23:05:01 +0000
ROA not after:            Thu 08 Jul 2027 23:10:01 +0000
asID:                     16874
IP address blocks:        198.41.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/54D1C88CDFAF42033C05328865F32C57A74054E8F6398423760A55F511D86F3F/0/C90120384309CC6F9FAC1F040EBFBB7CC69663B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/54D1C88CDFAF42033C05328865F32C57A74054E8F6398423760A55F511D86F3F/0/C90120384309CC6F9FAC1F040EBFBB7CC69663B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C90120384309CC6F9FAC1F040EBFBB7CC69663B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 27 Jul 2026 17:24:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:97:44:48:b9:71:6f:a9:66:e2:a7:e4:e6:5e:dc:83:c3:f0:3b:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C90120384309CC6F9FAC1F040EBFBB7CC69663B1
        Validity
            Not Before: Jul  9 23:05:01 2026 GMT
            Not After : Jul  8 23:10:01 2027 GMT
        Subject: CN=D640AE4D314C6093D2F9B64D5CA6F91B57553EB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2e:fa:59:7f:44:9b:3a:5c:d4:bc:da:6d:78:
                    c3:53:63:69:f2:b3:1c:2d:bf:dc:7c:18:35:0e:6b:
                    6a:8c:f7:e0:ef:29:c9:a4:ef:e1:ee:f3:78:99:08:
                    d0:69:d6:d6:a7:30:18:f4:cc:eb:30:6e:3e:97:eb:
                    9c:96:87:98:c3:85:09:d9:32:2b:a9:15:6f:90:35:
                    34:1c:fc:ca:c3:c5:52:c8:81:e0:41:f8:50:16:c8:
                    9f:d3:1b:e8:38:aa:e6:f4:32:ac:2a:d9:89:10:df:
                    93:4d:1a:21:79:aa:02:bb:52:c8:cc:21:8d:1b:8c:
                    cb:90:9d:a0:cf:eb:f5:c0:90:f5:d3:cc:ad:d0:49:
                    57:ba:60:23:26:21:2a:ec:22:df:d3:ce:65:0f:38:
                    75:c5:6d:45:f7:43:95:5b:87:85:13:6c:fb:36:c1:
                    bd:72:9a:fe:82:64:f3:ea:ed:a5:da:e0:56:c5:50:
                    3c:1d:25:16:56:73:d1:f6:2d:c4:a5:c5:dd:ca:51:
                    fd:03:ba:80:96:ca:dd:33:63:68:b4:23:13:d3:fa:
                    61:41:c7:bf:fa:d1:ff:59:c6:10:6e:23:c7:60:10:
                    36:3f:d5:12:06:31:2a:53:09:18:6c:66:ca:03:8b:
                    1b:fd:e6:53:0e:09:7d:a0:8a:3d:bf:e9:66:9d:c1:
                    30:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:40:AE:4D:31:4C:60:93:D2:F9:B6:4D:5C:A6:F9:1B:57:55:3E:B2
            X509v3 Authority Key Identifier:
                keyid:C9:01:20:38:43:09:CC:6F:9F:AC:1F:04:0E:BF:BB:7C:C6:96:63:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/54D1C88CDFAF42033C05328865F32C57A74054E8F6398423760A55F511D86F3F/0/C90120384309CC6F9FAC1F040EBFBB7CC69663B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C90120384309CC6F9FAC1F040EBFBB7CC69663B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/54D1C88CDFAF42033C05328865F32C57A74054E8F6398423760A55F511D86F3F/0/3139382e34312e34312e302f32342d3234203d3e203136383734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:d5:82:c1:8e:b6:f4:ba:b0:d0:94:9c:c0:bf:be:4e:9e:2e:
         52:58:27:ba:fb:58:b2:ff:43:19:64:49:45:a4:83:90:47:69:
         f2:4a:75:5a:13:77:fe:76:69:35:6b:4b:e1:50:ee:8b:5f:78:
         41:bf:b9:21:ca:cc:27:e0:dd:f1:3c:02:5d:73:fc:c5:a3:a1:
         5c:47:11:01:de:45:03:19:32:e0:09:63:00:c4:83:5c:db:58:
         8b:90:82:bd:a2:74:f5:30:fc:28:cd:6c:af:43:19:83:d0:ba:
         5a:65:26:2d:fd:67:16:81:67:39:d2:67:29:00:bc:8a:d7:ef:
         54:05:74:a9:f3:66:ed:ef:8c:ec:b3:1d:d3:92:5c:1b:1b:35:
         f1:18:c2:0d:b1:ee:2f:8a:2e:26:c9:75:2d:aa:15:8d:6a:38:
         51:e1:1a:60:dc:7a:91:65:1e:e4:86:46:76:7f:1b:ad:35:9f:
         56:09:00:78:a6:b5:ab:f7:b8:c5:fd:51:7c:ce:b1:9f:37:4b:
         2a:e3:bc:82:f5:73:33:37:e0:15:80:c7:e5:52:40:d6:54:ff:
         e7:76:9f:25:ae:d1:46:b6:06:b4:a5:6c:aa:25:96:e0:7c:90:
         2e:b3:75:bb:b5:f7:89:95:71:21:cd:d4:b0:f8:30:53:03:f3:
         f3:f3:17:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:59:49 2026 by rpki-client