Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3139302e3130382e38382e302f32342d3234203d3e203138363738.roa
File:                     3139302e3130382e38382e302f32342d3234203d3e203138363738.roa (raw, json)
Hash identifier:          9pSg6Am3I6K+lzCCn0ccvtiDaaOaAb5PfF97goxh+gA=
Subject key identifier:   87:D6:94:A7:07:9E:45:22:67:BA:A5:A6:96:09:82:DD:79:DC:AA:64
Certificate issuer:       /CN=8E9E896ADF8041E07AB6735225935260B837E74D
Certificate serial:       4359C470871FAD92EC63DA3C54A82AF17467907D
Authority key identifier: 8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3139302e3130382e38382e302f32342d3234203d3e203138363738.roa
Signing time:             Fri 17 Jul 2026 16:00:39 +0000
ROA not before:           Fri 17 Jul 2026 15:55:39 +0000
ROA not after:            Fri 16 Jul 2027 16:00:39 +0000
asID:                     18678
IP address blocks:        190.108.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:59:c4:70:87:1f:ad:92:ec:63:da:3c:54:a8:2a:f1:74:67:90:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E9E896ADF8041E07AB6735225935260B837E74D
        Validity
            Not Before: Jul 17 15:55:39 2026 GMT
            Not After : Jul 16 16:00:39 2027 GMT
        Subject: CN=87D694A7079E452267BAA5A6960982DD79DCAA64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:fb:6b:8f:9f:b3:5e:ba:0f:1c:69:2f:00:f0:
                    b8:8f:5e:72:27:38:f9:32:81:83:be:6f:ca:9a:6c:
                    b4:fa:ca:ae:f1:6b:31:0c:5f:e3:ab:ba:2d:c8:2f:
                    38:1d:b1:38:a6:b1:d3:b4:9b:26:64:95:38:23:ef:
                    78:89:6c:84:5d:23:78:49:0b:28:99:94:88:a6:df:
                    cd:3a:01:73:95:1f:56:ee:9b:d9:01:45:e9:3a:e4:
                    de:41:f2:0c:86:0f:47:8e:ce:11:b6:bb:1f:3c:a6:
                    31:e2:b9:a7:16:39:99:b8:f4:3d:0c:cf:9b:e8:a7:
                    dd:50:c1:7b:08:38:12:f4:c3:f6:a8:e1:f8:01:38:
                    59:7d:07:3a:b4:e2:5b:81:b3:05:ce:31:d0:ae:a4:
                    47:c6:72:30:64:5f:8a:93:b1:2b:a8:6d:d0:9a:ac:
                    53:4b:51:49:5f:dc:b0:1b:f3:6e:97:ad:30:4a:61:
                    08:5f:d2:87:66:54:d6:85:8e:e3:a2:e8:3c:16:21:
                    b1:72:3b:40:74:99:6e:54:5a:5a:7d:1c:10:8f:86:
                    cc:b0:3b:68:9b:28:28:a4:20:38:e0:bf:6a:23:79:
                    3f:ba:33:a5:70:70:e2:14:f6:44:6a:32:6c:80:ec:
                    d3:27:6a:76:86:32:8c:dd:07:98:1c:ce:5b:f5:ad:
                    20:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:D6:94:A7:07:9E:45:22:67:BA:A5:A6:96:09:82:DD:79:DC:AA:64
            X509v3 Authority Key Identifier:
                keyid:8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3139302e3130382e38382e302f32342d3234203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.108.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:bb:ef:95:49:f2:21:ba:e9:ee:1e:57:2b:18:b1:a7:be:0d:
         5d:7b:13:90:ef:c5:e3:d9:28:3f:a7:2e:3b:34:48:a6:c3:87:
         f0:ad:9d:e7:61:37:9c:d2:c7:c1:4d:00:ef:b8:3e:dd:bd:16:
         57:7f:49:71:9a:7e:da:84:f7:9d:52:dc:7b:d7:e1:8f:a3:ff:
         de:f3:06:77:76:b5:32:4f:8d:fa:4d:33:70:c0:51:63:49:dd:
         20:8a:d2:62:00:7e:0d:85:77:06:4a:79:57:7e:9c:f7:aa:60:
         f6:4f:e2:13:14:81:f3:5b:ed:d2:6c:56:c0:c0:f9:6b:65:f0:
         17:bd:9c:72:2d:97:a7:7f:db:67:ae:23:fd:b0:22:e8:2a:a4:
         74:7d:5f:a9:b2:e8:48:dc:4c:a1:c1:f2:0c:cc:23:46:1d:f7:
         cc:87:54:b2:53:b2:37:70:37:7e:53:f4:db:4e:45:30:35:82:
         42:b9:90:f5:f9:cf:dc:60:1d:b1:22:dc:e3:73:6a:33:34:a2:
         9a:5b:34:81:b8:14:27:28:f9:d6:ff:f3:4d:4d:2b:b9:22:57:
         7f:e7:19:a0:88:93:a1:42:02:ec:4e:29:57:b3:d7:5b:dc:23:
         b3:b8:53:9d:bf:57:42:53:e8:a8:bb:74:83:47:97:51:83:2e:
         53:ee:de:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:17:14 2026 by rpki-client