Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3139302e3130382e38352e302f32342d3234203d3e203138363738.roa
File:                     3139302e3130382e38352e302f32342d3234203d3e203138363738.roa (raw, json)
Hash identifier:          UL+EMI43mtoiGog4EYeLlpRYBoKLcHSQ+vuo8jcv8HQ=
Subject key identifier:   54:01:33:DD:EC:01:4D:3A:15:EE:7C:86:2D:0D:C0:34:85:2D:6A:41
Certificate issuer:       /CN=8E9E896ADF8041E07AB6735225935260B837E74D
Certificate serial:       084E0CE2D113E234004A6331650E85B596591542
Authority key identifier: 8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3139302e3130382e38352e302f32342d3234203d3e203138363738.roa
Signing time:             Fri 17 Jul 2026 15:00:37 +0000
ROA not before:           Fri 17 Jul 2026 14:55:37 +0000
ROA not after:            Fri 16 Jul 2027 15:00:37 +0000
asID:                     18678
IP address blocks:        190.108.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:4e:0c:e2:d1:13:e2:34:00:4a:63:31:65:0e:85:b5:96:59:15:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E9E896ADF8041E07AB6735225935260B837E74D
        Validity
            Not Before: Jul 17 14:55:37 2026 GMT
            Not After : Jul 16 15:00:37 2027 GMT
        Subject: CN=540133DDEC014D3A15EE7C862D0DC034852D6A41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:80:3d:c8:65:7e:65:eb:1c:86:08:ed:47:1a:
                    fe:96:f7:69:b8:f9:f3:e2:4d:a7:77:2b:ad:66:b9:
                    f6:7f:20:83:45:f6:48:e8:90:92:2d:bf:a3:12:7d:
                    15:b7:6c:51:09:25:e2:18:10:ee:1f:98:6d:ff:33:
                    77:0f:00:d8:bb:b4:b2:86:54:cb:ea:6b:c3:fb:bb:
                    24:d1:19:ec:db:da:5a:0f:a5:af:00:74:30:71:87:
                    64:52:95:9a:f1:2f:d6:87:a0:86:b7:4c:a9:d6:8d:
                    37:57:d4:2f:e2:61:2c:6e:cd:1e:6d:f1:1a:2b:e8:
                    06:c4:01:c9:97:46:ff:58:38:a6:48:c9:da:cf:a1:
                    5d:b5:10:5b:88:4d:ae:1c:06:ec:30:ab:e7:4d:bc:
                    d5:fa:55:29:ab:9e:51:ef:ae:7b:92:27:1c:c1:b2:
                    12:30:d3:c3:a2:e9:dc:bd:17:08:f9:e4:44:b9:6f:
                    b6:ef:8a:10:c0:1e:42:98:f3:e8:07:2b:06:6d:5f:
                    fa:f8:99:f4:62:f2:87:7e:26:6a:00:64:a5:79:8e:
                    7f:16:72:d7:d4:b4:39:0c:2a:7c:6c:12:72:1d:a4:
                    6a:9f:39:20:f8:75:59:65:7e:13:f1:2d:8b:31:54:
                    89:ae:9e:de:e9:32:66:a6:4a:f4:7c:7f:98:47:d2:
                    a7:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:01:33:DD:EC:01:4D:3A:15:EE:7C:86:2D:0D:C0:34:85:2D:6A:41
            X509v3 Authority Key Identifier:
                keyid:8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3139302e3130382e38352e302f32342d3234203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.108.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:98:fa:90:a4:d6:4b:11:41:1a:29:eb:d3:c4:f6:a4:21:50:
         84:da:91:f3:8c:d6:8f:5b:fc:6c:50:3a:ce:84:c4:5b:83:2b:
         55:64:69:09:5f:f3:1e:bc:6d:7b:15:e2:96:63:45:52:94:46:
         57:e4:b6:19:2d:15:cb:0e:30:23:c9:01:01:1a:52:fd:6c:24:
         db:ed:27:7b:ac:1f:e9:da:1f:22:0b:1e:06:8c:c2:70:39:75:
         18:67:c8:d6:f9:75:4c:d2:cb:c7:72:4d:25:61:df:7b:1d:66:
         fc:98:ca:31:49:a9:de:00:b6:cc:ed:d5:98:d8:66:6a:52:17:
         65:ec:30:02:67:0a:41:a2:d4:c1:2c:55:12:8c:57:5f:38:2f:
         36:0c:3b:9a:e9:8c:9e:fa:1d:9a:a6:3f:c0:b2:33:e3:2f:2b:
         c7:5d:70:e7:7e:b6:87:f4:61:50:f6:32:c4:c4:4c:04:74:a5:
         0b:c6:04:38:ce:03:b8:00:1f:de:07:a6:a6:73:bf:8f:b1:e0:
         ed:86:2f:c4:ff:07:c3:5c:fa:45:2c:fd:f4:79:ea:22:db:9a:
         0a:2f:bc:a7:0e:e3:24:df:97:49:ac:6c:62:94:54:16:f7:45:
         46:51:61:07:ba:2d:2c:86:3a:40:54:82:1e:48:fd:f1:d8:66:
         73:75:4c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:29:57 2026 by rpki-client