Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/3139302e39382e3132382e302f31392d3139203d3e203132393536.roa
File:                     3139302e39382e3132382e302f31392d3139203d3e203132393536.roa (raw, json)
Hash identifier:          //rLyL67YM0ngb0unFILVKE6m6XTudJ1WJKKDxATHxo=
Subject key identifier:   B8:89:3B:9B:96:E2:3D:98:E9:71:24:E2:51:42:7C:E3:5C:FA:B2:4B
Certificate issuer:       /CN=B61ABF237277FEAF24117EBBE28D9D57E442433A
Certificate serial:       1411778D3DEDB7ECFB84CEE66DD4A55631DD92EB
Authority key identifier: B6:1A:BF:23:72:77:FE:AF:24:11:7E:BB:E2:8D:9D:57:E4:42:43:3A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/3139302e39382e3132382e302f31392d3139203d3e203132393536.roa
Signing time:             Wed 27 Aug 2025 10:41:17 +0000
ROA not before:           Wed 27 Aug 2025 10:36:17 +0000
ROA not after:            Wed 26 Aug 2026 10:41:17 +0000
asID:                     12956
IP address blocks:        190.98.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Oct 2025 23:53:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:11:77:8d:3d:ed:b7:ec:fb:84:ce:e6:6d:d4:a5:56:31:dd:92:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B61ABF237277FEAF24117EBBE28D9D57E442433A
        Validity
            Not Before: Aug 27 10:36:17 2025 GMT
            Not After : Aug 26 10:41:17 2026 GMT
        Subject: CN=B8893B9B96E23D98E97124E251427CE35CFAB24B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1f:6a:63:38:d6:0a:e5:a7:77:d4:86:dc:e4:
                    f0:9d:5b:ec:74:c7:ec:62:c5:00:81:f6:f0:a3:4a:
                    01:5d:13:6a:54:03:28:34:9b:90:2a:a3:60:03:27:
                    74:26:ea:c8:9d:9a:68:3b:10:10:51:82:05:6d:d6:
                    4e:16:b6:4d:b7:e9:de:52:23:e0:0c:e8:87:cb:f6:
                    7a:06:65:23:6b:50:88:8a:c4:fe:da:61:95:aa:e3:
                    56:9c:5d:bd:38:7c:0d:76:a6:e8:cd:3b:d1:94:a9:
                    c2:a1:67:49:d5:7d:4b:b7:71:ad:03:ea:7c:4c:79:
                    dd:c4:dd:8c:4e:0f:95:5a:44:2e:71:d6:2d:5e:7c:
                    c4:8f:e9:e8:49:f0:8e:1b:d9:5a:37:1b:5b:a4:4d:
                    ad:00:ae:37:5d:df:77:59:f9:34:71:bc:d7:4d:f8:
                    e2:d1:55:d3:ee:dd:79:56:ca:f0:0e:1c:ca:13:ee:
                    9a:15:38:30:98:dd:3c:ed:fb:3b:b3:7a:c0:27:9e:
                    b4:38:a8:4e:95:e3:b2:7b:9b:67:55:88:5d:f4:f9:
                    c1:84:c1:68:b4:2e:29:a6:6c:3f:60:b6:2b:e1:65:
                    95:7e:41:fe:2d:cc:bc:4d:06:4f:9b:2e:88:18:fc:
                    61:37:8e:05:db:13:22:9d:02:7e:77:51:d5:4a:2d:
                    19:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:89:3B:9B:96:E2:3D:98:E9:71:24:E2:51:42:7C:E3:5C:FA:B2:4B
            X509v3 Authority Key Identifier:
                keyid:B6:1A:BF:23:72:77:FE:AF:24:11:7E:BB:E2:8D:9D:57:E4:42:43:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/3139302e39382e3132382e302f31392d3139203d3e203132393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.98.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         cc:f6:c6:75:ee:c8:fd:35:b5:5e:b4:47:ee:7e:75:96:e1:84:
         a6:e4:71:18:a9:c4:03:82:56:c2:51:64:09:35:e0:cb:8d:f8:
         55:da:7a:74:62:fd:83:1b:e9:ae:a6:08:9f:3a:25:b9:5d:61:
         f4:e2:0e:d2:34:0a:59:d8:a0:d7:cf:eb:99:1e:7a:6e:8b:8f:
         70:b4:2a:f5:6d:be:6f:d3:af:3f:39:54:0e:9c:a9:3d:16:33:
         1b:d5:28:f0:65:48:43:46:a6:e1:78:9a:cd:ca:72:eb:ce:ad:
         39:a5:a5:2f:02:3b:47:80:3d:1c:c3:09:c5:49:09:ab:8e:e8:
         10:d6:8e:0b:00:7c:00:2a:88:67:ba:3c:62:38:7b:96:a3:3a:
         de:ae:4a:27:1c:07:d1:29:fd:9e:8a:0a:a7:52:c7:b2:87:48:
         24:93:19:d0:80:8a:1d:0b:f4:bf:f5:e7:b0:9a:de:b3:19:d4:
         af:aa:d2:d2:37:eb:db:ed:e3:90:81:d7:d4:73:9e:27:ed:0a:
         c9:d3:24:80:bb:63:22:e1:ca:fd:37:1f:0d:f2:38:e3:3f:46:
         a2:5c:6a:38:23:c5:1c:f9:7c:74:09:ad:1b:4f:e9:c6:5c:4e:
         63:73:61:f0:c8:5b:c5:a6:c9:f1:79:e0:c6:8d:c0:e0:13:86:
         72:e9:96:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:21:40 2025 by rpki-client