Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/8932D131E7BE168280491EDC0D0F03DD235D59B58B3A49215E09DC13849F5B66/0/3139322e3130302e3138322e302f32342d3234203d3e203631343739.roa
File:                     3139322e3130302e3138322e302f32342d3234203d3e203631343739.roa (raw, json)
Hash identifier:          HszCrvxcDJrbkIwcxrx/nRPSQZzUinhzq0yvu84f2Io=
Subject key identifier:   18:CC:B4:D6:B4:F7:38:35:EB:77:19:74:7C:84:06:34:02:C2:F1:C0
Certificate issuer:       /CN=95710A2B3DEBF374D2DF81D862066A74FFE49C9E
Certificate serial:       4E8B4D670347318FC4328572736AE424173CBCB1
Authority key identifier: 95:71:0A:2B:3D:EB:F3:74:D2:DF:81:D8:62:06:6A:74:FF:E4:9C:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/95710A2B3DEBF374D2DF81D862066A74FFE49C9E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8932D131E7BE168280491EDC0D0F03DD235D59B58B3A49215E09DC13849F5B66/0/3139322e3130302e3138322e302f32342d3234203d3e203631343739.roa
Signing time:             Fri 25 Sep 2026 20:15:00 +0000
ROA not before:           Fri 25 Sep 2026 20:10:00 +0000
ROA not after:            Fri 24 Sep 2027 20:15:00 +0000
asID:                     61479
IP address blocks:        192.100.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8932D131E7BE168280491EDC0D0F03DD235D59B58B3A49215E09DC13849F5B66/0/95710A2B3DEBF374D2DF81D862066A74FFE49C9E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8932D131E7BE168280491EDC0D0F03DD235D59B58B3A49215E09DC13849F5B66/0/95710A2B3DEBF374D2DF81D862066A74FFE49C9E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/95710A2B3DEBF374D2DF81D862066A74FFE49C9E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 09:25:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:8b:4d:67:03:47:31:8f:c4:32:85:72:73:6a:e4:24:17:3c:bc:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95710A2B3DEBF374D2DF81D862066A74FFE49C9E
        Validity
            Not Before: Sep 25 20:10:00 2026 GMT
            Not After : Sep 24 20:15:00 2027 GMT
        Subject: CN=18CCB4D6B4F73835EB7719747C84063402C2F1C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0e:7b:7f:2a:d9:f0:08:af:c4:14:df:c5:d6:
                    a2:81:3f:07:23:76:cf:ae:e9:0b:33:69:0f:11:23:
                    bf:25:5d:00:dc:5b:b8:b6:00:80:5f:ea:54:d3:01:
                    b1:0c:73:3d:e4:47:b7:fc:aa:08:a3:f6:6d:80:ca:
                    31:62:ac:d0:ce:4e:20:84:88:d4:a4:b4:0d:aa:05:
                    fc:17:89:ca:3e:4b:07:ae:cd:93:f1:7d:e9:93:4b:
                    e9:5f:82:d5:68:f1:96:0a:c8:f1:46:07:4b:96:5a:
                    c9:bd:b5:bd:dd:3e:90:03:eb:4e:07:5c:4e:97:9a:
                    b6:de:06:51:73:d8:44:f1:7c:9b:3e:cf:c3:4f:06:
                    47:36:5f:bd:94:e8:76:4a:bf:3d:5f:58:38:80:4c:
                    30:b9:67:61:c2:ad:1b:a5:32:f4:a4:e3:b0:09:69:
                    9a:83:96:d4:af:3f:ad:9e:4a:11:f5:15:cf:9b:14:
                    0a:4c:47:18:47:2e:2c:56:c6:e2:22:c5:c9:72:85:
                    75:98:2b:d7:8a:38:eb:08:da:17:ee:62:e3:5a:27:
                    33:59:c2:14:65:94:be:13:1c:c2:95:41:28:46:7c:
                    bc:01:30:05:4e:33:bd:fd:58:98:8e:5c:14:11:53:
                    23:6f:5f:ed:40:a0:06:d5:ec:c0:5f:c5:45:e2:80:
                    fb:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:CC:B4:D6:B4:F7:38:35:EB:77:19:74:7C:84:06:34:02:C2:F1:C0
            X509v3 Authority Key Identifier:
                keyid:95:71:0A:2B:3D:EB:F3:74:D2:DF:81:D8:62:06:6A:74:FF:E4:9C:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8932D131E7BE168280491EDC0D0F03DD235D59B58B3A49215E09DC13849F5B66/0/95710A2B3DEBF374D2DF81D862066A74FFE49C9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/95710A2B3DEBF374D2DF81D862066A74FFE49C9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8932D131E7BE168280491EDC0D0F03DD235D59B58B3A49215E09DC13849F5B66/0/3139322e3130302e3138322e302f32342d3234203d3e203631343739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.100.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:92:56:a8:d0:60:b4:41:fe:cf:3a:77:7c:73:7c:27:fd:1e:
         6e:5e:ff:cc:c6:ae:a9:53:c2:68:78:75:e1:b6:29:58:fd:27:
         5a:13:04:53:17:7f:3f:94:23:46:5b:7a:12:ff:aa:21:17:db:
         f0:74:5f:1b:6c:d8:c8:e2:ef:94:c4:59:8b:85:cb:ef:fd:34:
         85:f2:1f:37:00:55:be:70:62:37:08:bb:c0:a8:f8:69:53:78:
         65:e2:bf:20:e9:f4:68:7f:98:a3:6b:77:81:3a:58:aa:af:c2:
         78:91:af:35:dc:57:8c:a7:3b:67:a4:3c:78:ca:2a:7e:94:f8:
         25:7d:6a:bb:69:09:52:72:03:09:85:a6:6e:fc:cf:b3:c5:d9:
         c4:d5:00:80:8e:80:94:34:8c:c4:1b:b5:22:21:87:46:31:59:
         51:04:78:c2:b0:cb:dd:45:d2:63:40:c9:9d:6c:16:8b:49:7c:
         7c:e6:de:7d:6a:b3:b9:f5:e4:7a:b3:3b:e8:6f:11:91:d9:7b:
         1e:aa:9b:61:4b:a3:4d:6f:2c:03:47:3c:15:a2:a8:5e:63:57:
         de:43:c0:00:8b:90:85:34:6f:88:fa:a3:03:f2:b2:37:8a:fc:
         e6:5b:19:ce:37:1c:bc:8c:42:18:ab:f0:0d:44:9a:3f:63:b8:
         4f:96:4d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 23:44:26 2026 by rpki-client