Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/79AB99C105ED1087E2A1BD21EAE402A69718A9BAE4D9F2EF391C083368F38147/0/3139302e31352e332e302f32342d3234203d3e20323733383239.roa
File:                     3139302e31352e332e302f32342d3234203d3e20323733383239.roa (raw, json)
Hash identifier:          X6l1wsbbZ5w5mfy6B9282RfhYO3fbQHhImkeW3OVr64=
Subject key identifier:   79:C1:49:48:8D:2F:B4:E9:C1:42:06:36:29:1B:91:06:0B:E1:12:F6
Certificate issuer:       /CN=F8097A80F65CAD011E316F610FD2A7189B6F9D80
Certificate serial:       4823E663C08AB492F165A0DD1A8E1BE9E652A658
Authority key identifier: F8:09:7A:80:F6:5C:AD:01:1E:31:6F:61:0F:D2:A7:18:9B:6F:9D:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8097A80F65CAD011E316F610FD2A7189B6F9D80.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/79AB99C105ED1087E2A1BD21EAE402A69718A9BAE4D9F2EF391C083368F38147/0/3139302e31352e332e302f32342d3234203d3e20323733383239.roa
Signing time:             Wed 30 Sep 2026 21:10:00 +0000
ROA not before:           Wed 30 Sep 2026 21:05:00 +0000
ROA not after:            Wed 29 Sep 2027 21:10:00 +0000
asID:                     273829
IP address blocks:        190.15.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/79AB99C105ED1087E2A1BD21EAE402A69718A9BAE4D9F2EF391C083368F38147/0/F8097A80F65CAD011E316F610FD2A7189B6F9D80.crl
                          rsync://repository.lacnic.net/rpki/lacnic/79AB99C105ED1087E2A1BD21EAE402A69718A9BAE4D9F2EF391C083368F38147/0/F8097A80F65CAD011E316F610FD2A7189B6F9D80.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8097A80F65CAD011E316F610FD2A7189B6F9D80.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 09:25:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:23:e6:63:c0:8a:b4:92:f1:65:a0:dd:1a:8e:1b:e9:e6:52:a6:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8097A80F65CAD011E316F610FD2A7189B6F9D80
        Validity
            Not Before: Sep 30 21:05:00 2026 GMT
            Not After : Sep 29 21:10:00 2027 GMT
        Subject: CN=79C149488D2FB4E9C1420636291B91060BE112F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e4:dd:43:0a:67:a5:98:53:6f:e5:16:f7:b1:
                    39:fe:f5:b3:69:ab:ad:82:7b:b0:1a:86:a2:56:6f:
                    ae:58:f5:41:2e:ac:14:70:c5:c7:4d:df:44:9e:8c:
                    20:ef:bd:87:ab:41:b4:97:84:6d:3a:bc:ed:cc:41:
                    7e:98:39:bd:0c:7f:c4:7d:58:10:4a:a8:01:6a:94:
                    ec:9d:d0:21:8a:ee:51:c1:bb:94:e3:ab:1b:64:dc:
                    42:fb:15:33:d2:48:64:48:12:e3:7b:65:9f:23:27:
                    30:8d:c4:f1:1b:6f:78:f0:0a:f4:28:72:ce:f4:45:
                    72:da:5c:46:ba:76:c4:b2:63:64:ad:dc:9e:98:6e:
                    3a:2b:ae:85:ed:fb:ed:ca:a8:17:98:7f:3c:3b:60:
                    92:6c:1a:1e:48:83:0e:a5:04:e3:8f:36:de:a6:0d:
                    33:43:6c:76:a2:79:34:3c:a6:fb:63:6c:a4:31:93:
                    27:78:92:ec:f2:83:75:e3:51:82:33:ec:2a:ed:a2:
                    68:58:fd:6c:ed:39:83:72:75:29:35:ca:e8:45:b2:
                    89:9e:0d:37:b4:f7:8d:9a:10:0e:28:01:68:f3:b1:
                    a4:c2:ea:13:2a:53:6d:72:39:52:0d:5e:b8:ea:2c:
                    9f:f3:13:8a:dc:66:d0:60:56:c7:fe:b2:2e:c0:6e:
                    3a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:C1:49:48:8D:2F:B4:E9:C1:42:06:36:29:1B:91:06:0B:E1:12:F6
            X509v3 Authority Key Identifier:
                keyid:F8:09:7A:80:F6:5C:AD:01:1E:31:6F:61:0F:D2:A7:18:9B:6F:9D:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/79AB99C105ED1087E2A1BD21EAE402A69718A9BAE4D9F2EF391C083368F38147/0/F8097A80F65CAD011E316F610FD2A7189B6F9D80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8097A80F65CAD011E316F610FD2A7189B6F9D80.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/79AB99C105ED1087E2A1BD21EAE402A69718A9BAE4D9F2EF391C083368F38147/0/3139302e31352e332e302f32342d3234203d3e20323733383239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.15.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:f9:cf:fd:56:75:f4:f4:32:db:b7:63:84:2a:85:39:e3:55:
         3f:46:40:09:35:ad:73:ee:94:46:fd:9c:a2:68:da:f2:da:ed:
         17:f1:be:af:64:9b:2d:ca:2b:9f:8c:3d:32:bc:60:f8:ad:8f:
         98:a4:48:a2:ed:62:8c:e5:4a:22:35:a2:62:30:94:aa:e7:20:
         ec:6f:5f:40:81:74:73:ca:33:63:bd:ec:8e:94:55:5b:8f:3a:
         f5:0d:8c:06:bf:84:df:97:f6:35:fa:f8:d1:c9:3b:d3:7d:cb:
         a2:27:77:60:03:19:49:67:f8:3d:e8:57:77:47:9a:b8:87:89:
         78:26:9c:a0:f7:ec:a9:45:7a:c8:6e:7a:0a:d4:dd:3c:50:3c:
         49:86:84:b0:25:c7:cf:a7:2d:78:8d:c1:30:11:47:f7:b7:0c:
         6a:71:04:2b:39:08:4d:58:cb:97:6d:27:28:d9:bc:fc:9d:34:
         7b:bc:6c:df:37:2a:43:ec:54:99:7b:f7:5b:3a:17:eb:2a:d7:
         1e:dd:4a:9b:c8:20:60:b5:ff:00:e0:ee:20:0c:2d:c4:96:fe:
         2a:12:4b:a1:4c:b2:9a:98:f5:cc:d4:d4:ef:7c:75:bd:30:0b:
         61:0c:44:97:61:e4:9f:ce:17:51:3c:8a:9b:67:49:dc:14:b1:
         2e:93:84:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 23:48:01 2026 by rpki-client