Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B4B9AA7740AEAAC1942C6D49BD0C759EECBC0A6F31BE3828958A9A9A763ABB11/0/3135392e31362e33322e302f31392d3234203d3e20323632393134.roa
File:                     3135392e31362e33322e302f31392d3234203d3e20323632393134.roa (raw, json)
Hash identifier:          boOal+74NIsP8Z40PQNqUTz9Zpz7NmDGxgY/913tzHY=
Subject key identifier:   9B:A5:50:6B:36:AC:B1:1E:54:6E:9D:F9:69:78:B7:5A:6A:1C:D9:48
Certificate issuer:       /CN=D3ECA9E328BAD678A3AD28C9C53518EF9ED06703
Certificate serial:       5796F6278381F0B66155AFB35813041936F54662
Authority key identifier: D3:EC:A9:E3:28:BA:D6:78:A3:AD:28:C9:C5:35:18:EF:9E:D0:67:03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B4B9AA7740AEAAC1942C6D49BD0C759EECBC0A6F31BE3828958A9A9A763ABB11/0/3135392e31362e33322e302f31392d3234203d3e20323632393134.roa
Signing time:             Mon 20 Apr 2026 21:20:00 +0000
ROA not before:           Mon 20 Apr 2026 21:15:00 +0000
ROA not after:            Mon 19 Apr 2027 21:20:00 +0000
asID:                     262914
IP address blocks:        159.16.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B4B9AA7740AEAAC1942C6D49BD0C759EECBC0A6F31BE3828958A9A9A763ABB11/0/D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B4B9AA7740AEAAC1942C6D49BD0C759EECBC0A6F31BE3828958A9A9A763ABB11/0/D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:96:f6:27:83:81:f0:b6:61:55:af:b3:58:13:04:19:36:f5:46:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3ECA9E328BAD678A3AD28C9C53518EF9ED06703
        Validity
            Not Before: Apr 20 21:15:00 2026 GMT
            Not After : Apr 19 21:20:00 2027 GMT
        Subject: CN=9BA5506B36ACB11E546E9DF96978B75A6A1CD948
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:48:6f:97:d2:10:e9:01:27:b6:20:5e:75:e2:
                    3f:6b:b8:77:c5:31:6a:82:e8:b5:82:6e:1c:c4:5f:
                    b5:e4:fe:1c:5c:96:9d:ca:28:ef:a4:46:3e:fd:d4:
                    8b:9d:35:32:dd:3d:0a:78:ee:23:03:f0:f8:51:a6:
                    18:f3:cc:53:38:23:84:ff:5f:cc:87:d3:b5:cf:3e:
                    20:be:2f:74:3f:1e:0a:e6:3b:b7:e8:0a:1e:b2:9c:
                    e5:90:6c:b6:a5:2b:b8:32:30:90:1d:8a:dd:fe:71:
                    68:a8:68:12:03:0b:02:e8:41:52:4a:83:c6:83:e5:
                    f3:44:55:fa:3c:a6:a8:08:04:e0:2b:cf:32:c0:c8:
                    65:ac:88:3f:10:18:6d:ea:be:e2:4c:6a:57:e7:ae:
                    9c:f2:82:08:04:bf:9e:30:f3:8c:90:99:da:35:ee:
                    8a:99:ba:6c:b7:a6:6f:56:23:99:db:87:9d:8f:4d:
                    94:c9:55:3c:3e:77:c6:8c:86:76:a9:02:fb:87:59:
                    7c:a7:f3:70:38:41:0f:9c:bc:0f:94:aa:39:82:94:
                    1c:18:64:15:28:95:8d:62:fe:ca:fb:2a:28:d0:88:
                    00:4b:3f:f1:7b:4b:31:3c:bd:55:a6:0a:f0:4a:14:
                    9a:40:91:21:6e:62:18:63:10:85:7b:c6:d6:6e:b7:
                    52:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:A5:50:6B:36:AC:B1:1E:54:6E:9D:F9:69:78:B7:5A:6A:1C:D9:48
            X509v3 Authority Key Identifier:
                keyid:D3:EC:A9:E3:28:BA:D6:78:A3:AD:28:C9:C5:35:18:EF:9E:D0:67:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B4B9AA7740AEAAC1942C6D49BD0C759EECBC0A6F31BE3828958A9A9A763ABB11/0/D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B4B9AA7740AEAAC1942C6D49BD0C759EECBC0A6F31BE3828958A9A9A763ABB11/0/3135392e31362e33322e302f31392d3234203d3e20323632393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.16.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         67:ff:69:14:72:26:88:00:29:38:32:67:9e:ef:e9:26:74:89:
         c8:33:c6:2b:af:97:71:91:cf:98:49:09:d9:c9:81:27:0b:01:
         17:8a:6c:91:dc:df:f6:93:c1:5b:6c:99:e0:58:6a:74:e6:0d:
         c1:50:90:a3:6b:0f:04:cd:db:3c:b2:f6:17:28:d1:db:1c:4a:
         08:d0:b6:d6:17:ef:3f:8b:36:b7:6f:75:e8:2e:eb:4f:66:c7:
         50:09:8f:24:12:22:58:16:11:ca:47:34:b1:43:8e:e9:a4:e4:
         5b:a5:07:57:fe:4e:01:dc:da:c6:22:71:00:2c:a3:4b:a0:dc:
         2f:48:e0:81:21:c5:8d:3b:6c:0b:11:59:a8:80:8a:f5:23:a9:
         ee:5a:ee:f7:b8:76:20:9c:91:92:f5:f8:1b:16:8c:b2:f0:85:
         83:f5:07:7e:88:04:92:89:55:06:38:29:64:fa:6b:82:1a:5c:
         9e:60:8c:02:a0:10:53:35:48:5a:35:1c:0f:92:6b:8d:50:d9:
         a4:dc:75:fb:2a:b2:ff:75:8f:8e:7b:e1:be:70:8d:d3:f5:35:
         ba:ea:dd:df:44:76:f5:52:f3:50:fe:f4:1b:6a:6e:f0:fe:f4:
         37:1c:a8:4c:c5:72:14:72:6c:01:82:48:0c:c6:0e:d2:73:58:
         23:f5:b1:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:56:39 2026 by rpki-client