Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3139302e3130382e39322e302f32342d3234203d3e203138363738.roa
File:                     3139302e3130382e39322e302f32342d3234203d3e203138363738.roa (raw, json)
Hash identifier:          rorY1qSmZLQgdC9tNnlJvp8iScEdfP9AOb2gi5px8hU=
Subject key identifier:   6F:E6:9F:2B:46:A2:15:98:D6:92:FB:FE:7D:D1:1B:73:73:5A:57:A6
Certificate issuer:       /CN=8E9E896ADF8041E07AB6735225935260B837E74D
Certificate serial:       24B2D99D9B3861847AFB69975070E7D3AB8348F0
Authority key identifier: 8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3139302e3130382e39322e302f32342d3234203d3e203138363738.roa
Signing time:             Wed 08 Jul 2026 02:51:27 +0000
ROA not before:           Wed 08 Jul 2026 02:46:27 +0000
ROA not after:            Wed 07 Jul 2027 02:51:27 +0000
asID:                     18678
IP address blocks:        190.108.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:b2:d9:9d:9b:38:61:84:7a:fb:69:97:50:70:e7:d3:ab:83:48:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E9E896ADF8041E07AB6735225935260B837E74D
        Validity
            Not Before: Jul  8 02:46:27 2026 GMT
            Not After : Jul  7 02:51:27 2027 GMT
        Subject: CN=6FE69F2B46A21598D692FBFE7DD11B73735A57A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:32:0d:d2:2f:15:74:82:f6:de:eb:4b:4e:dc:
                    88:33:01:2b:71:f3:37:cc:ac:21:c0:be:82:f4:93:
                    c9:14:e5:58:9c:1b:ce:01:67:06:73:9c:93:1f:d2:
                    30:2c:09:9b:f2:ea:34:03:2e:53:22:cb:4d:3d:36:
                    e4:ba:40:23:e9:79:77:17:9e:d4:a4:29:71:12:0b:
                    9f:2a:d1:08:d0:50:d2:be:d8:fe:74:77:9f:6a:9d:
                    2f:92:c0:f9:c3:b5:df:e0:a6:26:b7:f5:bf:1e:61:
                    45:e0:5e:9f:29:87:3b:f2:8c:2e:cc:9f:d8:b2:8e:
                    b6:ae:bb:26:1d:a4:66:3a:54:28:dd:e7:d7:d5:59:
                    1d:6e:4e:8c:47:6e:cd:99:27:ed:04:83:b9:91:97:
                    e1:e0:6b:85:c7:66:02:86:a9:6d:2a:e0:d0:ed:a4:
                    ba:54:3b:86:85:f0:5f:47:12:d6:5e:94:35:34:1c:
                    c7:16:df:65:21:5f:5d:7b:4a:53:65:f7:8e:8f:ec:
                    90:f3:08:79:dc:9a:ce:8f:1c:9e:0d:cd:a2:d8:21:
                    b1:dc:76:9d:c2:08:56:e6:49:77:98:31:a0:2e:92:
                    a3:71:95:75:72:98:ef:4c:35:88:90:6e:8c:a1:aa:
                    ee:87:85:4e:22:4a:a1:33:52:fc:d0:f6:fd:02:53:
                    53:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:E6:9F:2B:46:A2:15:98:D6:92:FB:FE:7D:D1:1B:73:73:5A:57:A6
            X509v3 Authority Key Identifier:
                keyid:8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3139302e3130382e39322e302f32342d3234203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.108.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:b4:f6:8a:e4:0d:b3:0f:95:00:80:2c:92:5e:ee:45:03:4b:
         e2:ec:52:9c:a8:16:a8:c3:68:82:4e:af:1a:31:88:c7:e0:83:
         f8:83:06:f3:ba:ea:59:d3:fb:99:d7:b9:a1:55:8a:83:e6:06:
         c5:1f:35:b9:82:d0:4b:2e:f3:cc:f1:db:d2:da:67:9b:04:94:
         29:10:7a:c4:3f:3e:9b:6c:70:84:fb:5b:32:be:7a:f4:0e:c3:
         68:fe:aa:4f:62:11:c2:04:b8:54:68:8c:b6:46:1c:2a:c3:f5:
         33:b2:cc:41:82:e5:0a:2d:66:6f:93:23:d5:b0:57:fd:35:b3:
         bd:9b:17:60:55:26:39:5d:ff:85:95:7b:0f:89:a9:6d:1b:51:
         fb:6e:d2:30:07:ba:bb:2d:3a:6a:85:d2:10:35:19:d3:a9:2d:
         23:60:0d:49:f1:0e:d4:07:62:3b:d5:15:ce:a9:a4:5c:a3:5a:
         20:c1:2d:a6:7a:ce:d8:b6:16:3d:3f:cb:68:04:95:fb:02:2c:
         11:e4:74:33:7d:0d:76:bb:36:75:bc:c8:96:ec:82:0b:c1:5e:
         38:12:51:ee:e2:5f:9a:b7:db:b9:c2:cf:69:46:c1:bc:b0:bb:
         72:08:05:52:15:35:8a:6f:1c:4c:af:61:ee:6d:e2:4a:4f:27:
         49:5c:d6:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:04:41 2026 by rpki-client