Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3139302e3130382e38372e302f32342d3234203d3e203138363738.roa
File:                     3139302e3130382e38372e302f32342d3234203d3e203138363738.roa (raw, json)
Hash identifier:          vQMYigIhvLLxgQI7tnUifGeqy/5fUyw5waBfWmXZbBA=
Subject key identifier:   8B:2A:5C:92:D3:7B:67:2F:09:1B:2D:97:EA:DD:77:E5:67:60:F3:D2
Certificate issuer:       /CN=8E9E896ADF8041E07AB6735225935260B837E74D
Certificate serial:       4B0502BD065CD8F02AC387DD429CCC6341C7F855
Authority key identifier: 8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3139302e3130382e38372e302f32342d3234203d3e203138363738.roa
Signing time:             Fri 17 Jul 2026 15:00:38 +0000
ROA not before:           Fri 17 Jul 2026 14:55:38 +0000
ROA not after:            Fri 16 Jul 2027 15:00:38 +0000
asID:                     18678
IP address blocks:        190.108.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:05:02:bd:06:5c:d8:f0:2a:c3:87:dd:42:9c:cc:63:41:c7:f8:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E9E896ADF8041E07AB6735225935260B837E74D
        Validity
            Not Before: Jul 17 14:55:38 2026 GMT
            Not After : Jul 16 15:00:38 2027 GMT
        Subject: CN=8B2A5C92D37B672F091B2D97EADD77E56760F3D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:2e:73:17:80:15:28:f8:4d:df:fa:98:2b:cf:
                    64:a0:dc:52:87:04:b9:5e:2f:88:84:01:b8:69:57:
                    26:5e:91:10:97:6d:9f:b6:11:1a:47:82:46:b7:27:
                    be:ee:26:47:94:0e:cb:d8:35:70:14:f7:a6:87:2c:
                    e5:fe:9a:c6:2b:bd:fe:d6:26:56:57:1b:47:37:1d:
                    e4:6a:1e:f0:bc:a4:c6:3b:9f:66:45:36:c3:31:60:
                    a4:77:82:24:6c:23:5e:7f:d0:89:30:e3:21:7c:3b:
                    c2:7a:23:f1:7f:e8:91:79:5c:5e:43:15:88:35:f0:
                    ec:2c:72:dd:c2:dc:b3:99:0d:d5:2f:db:0e:38:08:
                    cd:6f:18:ec:56:77:6f:b9:8b:3d:6b:b8:26:59:58:
                    11:69:e2:82:6d:43:d8:85:35:53:97:e8:e0:9e:aa:
                    ac:f4:97:32:43:8d:a2:02:5d:ef:44:43:88:38:66:
                    59:67:2a:3f:ad:9b:54:7f:aa:cd:6e:94:d9:80:dd:
                    93:6e:e3:2d:17:05:58:a5:a8:28:aa:72:42:af:be:
                    59:86:67:bd:83:0e:8e:26:8d:d0:d6:50:eb:85:eb:
                    83:1b:8f:3e:a7:c3:65:d9:64:10:99:3b:a8:64:97:
                    4b:de:e1:2e:aa:17:ad:39:ac:9f:5a:e6:9c:ca:40:
                    5b:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:2A:5C:92:D3:7B:67:2F:09:1B:2D:97:EA:DD:77:E5:67:60:F3:D2
            X509v3 Authority Key Identifier:
                keyid:8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3139302e3130382e38372e302f32342d3234203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.108.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:4e:59:84:90:56:dd:7e:8c:a7:a1:ed:87:c4:05:cc:d1:55:
         84:59:2d:cd:06:9d:8a:cc:c8:bb:74:66:99:fb:38:be:04:c0:
         e6:93:f4:13:91:5e:fc:16:8c:13:97:f1:85:39:60:0b:1d:e6:
         f8:9f:af:46:23:47:a8:83:f6:9e:15:c3:49:c9:c5:47:0c:b3:
         95:ef:0c:06:1e:8b:1d:c8:08:80:66:00:d7:0d:d2:d0:32:d5:
         d8:77:b2:45:2d:5e:89:36:7d:77:b5:28:b2:da:78:37:09:c2:
         63:cd:a6:fb:f4:a7:7d:fa:63:d6:57:90:ed:b2:d5:54:ec:be:
         da:37:23:e7:1f:39:87:2f:a7:73:b9:2b:18:46:18:5c:fe:4f:
         b5:1a:d5:0e:03:6c:b5:52:18:21:86:3f:e7:5b:12:99:ff:ff:
         46:07:6b:2c:19:10:80:cb:ff:57:4a:9f:e4:1e:1b:07:9f:31:
         5a:92:16:e2:fa:f3:3c:30:a6:b9:07:92:80:eb:ce:00:be:f5:
         9d:0d:75:f8:43:7e:76:85:83:ff:8a:41:cc:da:3e:3c:f7:c8:
         95:9f:db:ca:3d:7a:22:58:28:3b:6e:0e:ee:70:5a:1c:ba:d3:
         f0:5e:51:7b:a9:77:5c:d6:d7:f5:4d:de:c9:8e:12:4f:ef:41:
         ef:c8:e3:67
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUSwUCvQZc2PAqw4fdQpzMY0HH+FUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEU5RTg5NkFERjgwNDFFMDdBQjY3MzUyMjU5MzUyNjBC
ODM3RTc0RDAeFw0yNjA3MTcxNDU1MzhaFw0yNzA3MTYxNTAwMzhaMDMxMTAvBgNV
BAMTKDhCMkE1QzkyRDM3QjY3MkYwOTFCMkQ5N0VBREQ3N0U1Njc2MEYzRDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJLnMXgBUo+E3f+pgrz2Sg3FKH
BLleL4iEAbhpVyZekRCXbZ+2ERpHgka3J77uJkeUDsvYNXAU96aHLOX+msYrvf7W
JlZXG0c3HeRqHvC8pMY7n2ZFNsMxYKR3giRsI15/0Ikw4yF8O8J6I/F/6JF5XF5D
FYg18Owsct3C3LOZDdUv2w44CM1vGOxWd2+5iz1ruCZZWBFp4oJtQ9iFNVOX6OCe
qqz0lzJDjaICXe9EQ4g4ZllnKj+tm1R/qs1ulNmA3ZNu4y0XBVilqCiqckKvvlmG
Z72DDo4mjdDWUOuF64Mbjz6nw2XZZBCZO6hkl0ve4S6qF605rJ9a5pzKQFvdAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUiypcktN7Zy8JGy2X6t135Wdg89IwHwYDVR0j
BBgwFoAUjp6Jat+AQeB6tnNSJZNSYLg3500wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CQUEzRUUwQUUwNjI1OTNBREJBNUNFQUI2RUE0MTRFOTQy
RUUyRDlCQTIzNDZCRDAyQjFERDFBRkU5NDE1MzQwLzAvOEU5RTg5NkFERjgwNDFF
MDdBQjY3MzUyMjU5MzUyNjBCODM3RTc0RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84RTlFODk2QURGODA0MUUwN0FC
NjczNTIyNTkzNTI2MEI4MzdFNzRELmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQkFBM0VFMEFFMDYyNTkzQURCQTVDRUFCNkVBNDE0RTk0MkVFMkQ5QkEy
MzQ2QkQwMkIxREQxQUZFOTQxNTM0MC8wLzMxMzkzMDJlMzEzMDM4MmUzODM3MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzODM2MzczOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAL5sVzAN
BgkqhkiG9w0BAQsFAAOCAQEAh05ZhJBW3X6Mp6Hth8QFzNFVhFktzQadiszIu3Rm
mfs4vgTA5pP0E5Fe/BaME5fxhTlgCx3m+J+vRiNHqIP2nhXDScnFRwyzle8MBh6L
HcgIgGYA1w3S0DLV2HeyRS1eiTZ9d7Uostp4NwnCY82m+/Snffpj1leQ7bLVVOy+
2jcj5x85hy+nc7krGEYYXP5PtRrVDgNstVIYIYY/51sSmf//RgdrLBkQgMv/V0qf
5B4bB58xWpIW4vrzPDCmuQeSgOvOAL71nQ11+EN+doWD/4pBzNo+PPfIlZ/byj16
IlgoO24O7nBaHLrT8F5Re6l3XNbX9U3eyY4ST+9B78jjZw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:36:16 2026 by rpki-client