Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/54D1C88CDFAF42033C05328865F32C57A74054E8F6398423760A55F511D86F3F/0/3139382e34312e34342e302f32342d3234203d3e203532343431.roa
File:                     3139382e34312e34342e302f32342d3234203d3e203532343431.roa (raw, json)
Hash identifier:          OmGZQN0GPLfLTI9HPPuVkIPLHQ1wA3uwp20n1nZGwco=
Subject key identifier:   D5:53:23:05:3C:C2:2F:91:7F:1F:0B:FC:20:99:DC:48:1F:31:89:99
Certificate issuer:       /CN=C90120384309CC6F9FAC1F040EBFBB7CC69663B1
Certificate serial:       63B68064CCC88EA7ACDEE9A68B205E6A85B533D5
Authority key identifier: C9:01:20:38:43:09:CC:6F:9F:AC:1F:04:0E:BF:BB:7C:C6:96:63:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C90120384309CC6F9FAC1F040EBFBB7CC69663B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/54D1C88CDFAF42033C05328865F32C57A74054E8F6398423760A55F511D86F3F/0/3139382e34312e34342e302f32342d3234203d3e203532343431.roa
Signing time:             Thu 09 Jul 2026 19:50:00 +0000
ROA not before:           Thu 09 Jul 2026 19:45:00 +0000
ROA not after:            Thu 08 Jul 2027 19:50:00 +0000
asID:                     52441
IP address blocks:        198.41.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/54D1C88CDFAF42033C05328865F32C57A74054E8F6398423760A55F511D86F3F/0/C90120384309CC6F9FAC1F040EBFBB7CC69663B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/54D1C88CDFAF42033C05328865F32C57A74054E8F6398423760A55F511D86F3F/0/C90120384309CC6F9FAC1F040EBFBB7CC69663B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C90120384309CC6F9FAC1F040EBFBB7CC69663B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 27 Jul 2026 17:24:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:b6:80:64:cc:c8:8e:a7:ac:de:e9:a6:8b:20:5e:6a:85:b5:33:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C90120384309CC6F9FAC1F040EBFBB7CC69663B1
        Validity
            Not Before: Jul  9 19:45:00 2026 GMT
            Not After : Jul  8 19:50:00 2027 GMT
        Subject: CN=D55323053CC22F917F1F0BFC2099DC481F318999
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:58:cb:f3:76:dc:ba:d1:d3:33:8b:79:52:ff:
                    8d:2d:63:1b:e1:70:ef:c6:23:3b:66:d0:90:0f:66:
                    d9:04:2e:fb:78:73:dc:2f:ae:3f:a4:b6:21:1d:d1:
                    64:67:6d:f2:af:45:3b:9c:ab:4d:cc:37:51:b2:19:
                    3d:95:14:7e:1c:39:f2:b0:01:4b:14:cf:a9:65:c9:
                    cf:01:24:9d:c9:3e:b9:6f:e5:26:b7:0e:e3:ce:5a:
                    a5:ff:cd:5a:e5:cf:02:19:a7:0f:94:48:82:9b:1a:
                    02:ed:ab:09:af:e6:23:3c:4b:f8:56:3b:a2:b8:8c:
                    2f:30:49:43:ba:0b:a8:a0:e2:0b:ef:86:ec:a7:66:
                    7e:75:b7:50:f6:ec:81:f0:da:9f:6b:bd:d1:c0:b8:
                    36:7a:91:68:cd:c1:f3:03:79:c8:39:75:a7:ab:40:
                    77:dc:b3:3b:8c:1e:1e:23:6b:0b:ad:fa:b8:7c:58:
                    ef:a3:cf:0f:16:63:9f:6a:94:a8:28:4a:04:66:2d:
                    18:5a:77:57:23:12:d8:58:04:a6:fe:8e:d5:bd:7f:
                    09:97:1d:97:cc:17:2a:bb:cb:3f:3e:d1:9c:af:de:
                    c9:8a:88:71:3d:b5:a2:f2:fa:14:1e:ca:30:9b:23:
                    4b:8d:83:4a:5c:a6:56:f7:f6:6c:e4:05:61:2a:23:
                    bc:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:53:23:05:3C:C2:2F:91:7F:1F:0B:FC:20:99:DC:48:1F:31:89:99
            X509v3 Authority Key Identifier:
                keyid:C9:01:20:38:43:09:CC:6F:9F:AC:1F:04:0E:BF:BB:7C:C6:96:63:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/54D1C88CDFAF42033C05328865F32C57A74054E8F6398423760A55F511D86F3F/0/C90120384309CC6F9FAC1F040EBFBB7CC69663B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C90120384309CC6F9FAC1F040EBFBB7CC69663B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/54D1C88CDFAF42033C05328865F32C57A74054E8F6398423760A55F511D86F3F/0/3139382e34312e34342e302f32342d3234203d3e203532343431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:6a:5d:bc:3f:43:17:27:41:bb:c4:ce:c0:68:08:63:2a:91:
         89:bd:10:94:8f:c2:4f:9e:d4:62:4a:3f:ac:31:15:c2:cc:20:
         74:04:1a:f9:17:2b:3c:0c:bf:42:01:8b:55:59:d8:c9:31:4a:
         ae:46:64:53:64:71:39:02:a0:ce:c9:e4:10:92:44:93:39:9b:
         f4:30:6c:10:41:5d:d6:41:13:ab:0a:f2:8d:a2:ba:bd:02:4f:
         db:6a:25:99:74:b2:34:d4:eb:fb:bb:55:4a:14:87:72:db:4d:
         38:99:45:8e:66:06:1d:fc:5b:ee:74:fe:94:96:2f:76:fa:64:
         52:5c:32:ae:d7:de:f2:2f:7c:0d:f0:fa:35:de:41:2e:fa:93:
         16:fa:ba:7a:df:4c:b2:b0:99:5e:f4:14:57:fc:02:bd:5a:c6:
         30:5a:30:4f:a6:08:e2:b6:60:54:b7:cd:7f:09:29:f7:2c:5d:
         f6:ac:83:f0:68:83:00:94:70:96:82:ac:96:60:72:3d:ca:3f:
         48:13:40:8c:8b:da:9e:08:e1:d1:e9:13:cb:65:1b:1f:4c:2e:
         d7:e7:2f:ab:fc:7c:57:c8:3a:90:1e:8d:a3:92:64:d5:7a:67:
         24:6f:78:bb:b3:f8:0b:a6:a6:d9:58:b9:6b:0a:0d:bc:79:13:
         c1:8a:1a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:59:49 2026 by rpki-client