Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5CB9848E9893725A7D22E0CBCE9B9EDCA70AC5F5B2DE28C64352B5D7BDCD4696/0/3139302e392e3132342e302f32342d3234203d3e20323731383839.roa
File:                     3139302e392e3132342e302f32342d3234203d3e20323731383839.roa (raw, json)
Hash identifier:          X/M5SAMx+VEVQ65iJDlVxiSpouU7EN5ilF2poYKvK34=
Subject key identifier:   5B:C6:E7:FC:D5:72:B9:9E:D5:AB:4C:EF:F8:57:4A:E6:82:5E:2E:10
Certificate issuer:       /CN=E4680E7DB5E2661029DADF95F18EDCCD3A194B02
Certificate serial:       26C4BF6120D2765F6A43ED5634B712F57ED1C01B
Authority key identifier: E4:68:0E:7D:B5:E2:66:10:29:DA:DF:95:F1:8E:DC:CD:3A:19:4B:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E4680E7DB5E2661029DADF95F18EDCCD3A194B02.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5CB9848E9893725A7D22E0CBCE9B9EDCA70AC5F5B2DE28C64352B5D7BDCD4696/0/3139302e392e3132342e302f32342d3234203d3e20323731383839.roa
Signing time:             Wed 24 Jun 2026 04:49:25 +0000
ROA not before:           Wed 24 Jun 2026 04:44:25 +0000
ROA not after:            Wed 23 Jun 2027 04:49:25 +0000
asID:                     271889
IP address blocks:        190.9.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5CB9848E9893725A7D22E0CBCE9B9EDCA70AC5F5B2DE28C64352B5D7BDCD4696/0/E4680E7DB5E2661029DADF95F18EDCCD3A194B02.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5CB9848E9893725A7D22E0CBCE9B9EDCA70AC5F5B2DE28C64352B5D7BDCD4696/0/E4680E7DB5E2661029DADF95F18EDCCD3A194B02.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E4680E7DB5E2661029DADF95F18EDCCD3A194B02.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:c4:bf:61:20:d2:76:5f:6a:43:ed:56:34:b7:12:f5:7e:d1:c0:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4680E7DB5E2661029DADF95F18EDCCD3A194B02
        Validity
            Not Before: Jun 24 04:44:25 2026 GMT
            Not After : Jun 23 04:49:25 2027 GMT
        Subject: CN=5BC6E7FCD572B99ED5AB4CEFF8574AE6825E2E10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1f:d4:29:8a:d8:cd:32:29:ef:f1:2a:c9:fb:
                    c1:dd:0d:92:f4:ba:13:64:1a:1a:27:62:ed:71:33:
                    a6:c3:54:f9:3d:5f:25:2e:fc:d7:d2:28:d0:ee:c1:
                    56:a2:c0:08:36:1b:42:06:25:00:fb:75:83:22:f0:
                    60:56:d8:56:c8:4e:4c:6b:b3:6c:2b:d6:d5:fc:ba:
                    c3:7a:f6:c9:10:45:6a:51:54:7b:54:ca:95:b5:a6:
                    71:9b:2b:b4:df:87:35:11:08:87:bd:aa:4c:87:13:
                    f4:26:80:ed:1a:92:a8:25:d5:dc:6d:0a:25:ce:eb:
                    88:e7:a1:43:77:8b:62:14:70:fc:d6:7f:a9:8e:2d:
                    10:e4:2b:cf:4c:aa:f2:09:7b:f7:d0:c1:bd:5f:54:
                    61:1a:d1:70:e3:e3:a2:fc:2e:32:3f:a5:16:96:7c:
                    dc:a8:da:4b:da:62:cc:06:e6:87:b6:27:ba:f1:e1:
                    b0:7f:40:ad:6e:b2:f2:d7:b8:84:10:73:3f:16:35:
                    2f:3b:49:0e:0d:43:f3:d4:da:9a:6c:b5:10:29:8b:
                    bd:9b:aa:5a:54:a0:c4:c4:71:ac:bc:e9:0e:68:fb:
                    68:0e:33:4c:c9:2a:af:a2:0b:c3:5c:0d:96:c1:92:
                    c4:25:8e:42:17:77:1f:a1:60:ef:ad:79:27:f7:40:
                    83:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:C6:E7:FC:D5:72:B9:9E:D5:AB:4C:EF:F8:57:4A:E6:82:5E:2E:10
            X509v3 Authority Key Identifier:
                keyid:E4:68:0E:7D:B5:E2:66:10:29:DA:DF:95:F1:8E:DC:CD:3A:19:4B:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5CB9848E9893725A7D22E0CBCE9B9EDCA70AC5F5B2DE28C64352B5D7BDCD4696/0/E4680E7DB5E2661029DADF95F18EDCCD3A194B02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E4680E7DB5E2661029DADF95F18EDCCD3A194B02.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5CB9848E9893725A7D22E0CBCE9B9EDCA70AC5F5B2DE28C64352B5D7BDCD4696/0/3139302e392e3132342e302f32342d3234203d3e20323731383839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.9.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:b2:b1:0e:97:aa:3e:fe:e9:db:59:a9:eb:b4:66:a8:bc:2f:
         2f:60:d2:0b:23:67:e7:6f:32:b2:d2:a3:b2:ae:97:4e:80:e3:
         16:b4:c3:38:f1:94:a5:8d:58:46:15:c2:31:7e:9c:af:53:7d:
         c3:ff:fb:70:5f:78:49:fb:58:c7:4c:e2:32:b2:e5:2b:c4:2e:
         29:8d:fc:ed:b4:4c:ff:7b:b1:ef:75:b7:9c:cf:b1:85:b7:67:
         39:65:d5:ca:bc:10:80:78:eb:99:3a:d0:83:ea:85:d9:bc:26:
         b9:2a:60:a8:ac:94:20:24:b0:10:a9:49:9e:ee:b6:ff:40:eb:
         53:70:33:a5:bb:b4:78:c6:08:b9:7b:17:6b:28:8c:0a:3b:7c:
         e8:7c:d7:f0:bf:4a:93:c7:52:74:2e:2c:c3:2a:37:2c:0f:cc:
         ce:9e:0e:dc:15:b2:cb:4e:5e:39:7b:70:98:18:a5:85:f0:61:
         91:a0:86:32:fe:4a:bf:34:f7:16:18:09:c6:7b:7a:54:8f:ce:
         20:fb:2a:0e:76:45:f4:3b:b4:ca:09:2a:77:f0:4d:bb:96:d7:
         98:1e:e6:75:85:5c:c3:cf:1d:52:79:0f:86:1b:5f:3e:e1:73:
         a0:67:f1:3d:ec:2d:ca:4d:03:26:d6:b7:3a:c6:19:55:c9:81:
         af:21:9e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:47:21 2026 by rpki-client