Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3139302e3130382e39332e302f32342d3234203d3e203138363738.roa
File:                     3139302e3130382e39332e302f32342d3234203d3e203138363738.roa (raw, json)
Hash identifier:          zJfmpQ4wq3BzJ0iqSnH+MOm5BwDLUPnJBQ8MJVfESiU=
Subject key identifier:   0F:50:F2:9F:F7:7A:89:5C:41:E9:90:CB:65:B5:3E:27:98:82:FD:73
Certificate issuer:       /CN=8E9E896ADF8041E07AB6735225935260B837E74D
Certificate serial:       39D34363ED373ADD96CA8246A2C51206DED8C2A4
Authority key identifier: 8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3139302e3130382e39332e302f32342d3234203d3e203138363738.roa
Signing time:             Fri 17 Jul 2026 15:00:38 +0000
ROA not before:           Fri 17 Jul 2026 14:55:38 +0000
ROA not after:            Fri 16 Jul 2027 15:00:38 +0000
asID:                     18678
IP address blocks:        190.108.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:d3:43:63:ed:37:3a:dd:96:ca:82:46:a2:c5:12:06:de:d8:c2:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E9E896ADF8041E07AB6735225935260B837E74D
        Validity
            Not Before: Jul 17 14:55:38 2026 GMT
            Not After : Jul 16 15:00:38 2027 GMT
        Subject: CN=0F50F29FF77A895C41E990CB65B53E279882FD73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0a:09:66:37:c0:8e:3d:d4:96:e0:0f:7a:dd:
                    00:29:cd:64:c6:c7:a9:c5:dc:ab:e4:4a:dd:bf:d5:
                    df:27:6a:e5:03:a0:0c:02:d7:30:a4:ec:40:80:e5:
                    3c:8d:34:5e:ea:2a:41:c8:e2:f1:b0:a2:ce:4b:57:
                    de:84:f0:e3:45:32:6f:47:09:e2:b7:7b:18:cd:cd:
                    1a:c5:57:0c:2b:a0:31:e0:12:1d:82:a9:25:52:1a:
                    0c:08:12:5e:3b:4c:f9:b8:8b:01:92:73:86:f1:17:
                    e8:be:9b:b1:ea:e4:b2:4b:e7:0c:b0:bf:b2:80:e5:
                    d3:b2:f2:90:af:b6:28:96:68:a4:8f:bf:dc:c9:69:
                    85:06:5c:c8:0c:3e:fd:69:5b:ff:a3:f7:3b:68:75:
                    97:69:09:95:da:38:87:15:ae:d7:3e:86:96:dd:5f:
                    3b:ca:32:9f:56:a0:21:1e:f5:88:8f:05:0f:02:3d:
                    4b:1c:b5:17:90:00:ea:22:f0:64:56:31:71:48:7e:
                    d8:90:b5:cb:1b:fc:5c:3c:61:de:bd:a6:26:88:a8:
                    d8:0c:11:4b:1d:28:f3:d8:3e:24:3b:ee:96:39:19:
                    8c:64:64:26:7d:f7:c3:19:a1:89:57:bf:42:4a:ec:
                    d1:23:04:10:88:ad:de:d2:8c:4c:8d:2d:da:23:bb:
                    1d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:50:F2:9F:F7:7A:89:5C:41:E9:90:CB:65:B5:3E:27:98:82:FD:73
            X509v3 Authority Key Identifier:
                keyid:8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3139302e3130382e39332e302f32342d3234203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.108.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:a6:4b:83:52:c8:94:7b:80:c7:c8:1b:5c:ff:42:aa:37:5b:
         8b:7b:ae:f1:e8:14:02:62:11:8c:ed:b6:f1:d0:40:3f:12:81:
         05:58:1d:f5:43:33:cb:98:0a:94:1a:20:2d:bc:df:eb:6d:1a:
         24:72:cb:32:36:a1:b5:59:25:0d:d3:c8:77:33:33:c9:df:fa:
         e0:f1:a0:a4:7f:84:a2:88:f6:a1:f4:79:19:d5:a4:dc:be:92:
         f6:3c:a1:1e:74:02:8f:69:59:20:db:86:59:91:c2:6a:e1:eb:
         4b:b3:38:22:8b:18:b5:99:2e:aa:18:39:bc:ee:27:d1:2e:ab:
         d0:33:85:64:6e:4a:69:cb:4f:02:29:6b:cc:b3:0e:a4:c1:59:
         2e:6f:81:36:52:55:1f:f3:24:42:52:03:8f:f1:e3:e1:53:22:
         30:c1:e4:74:fd:31:aa:ff:d7:5a:02:3d:8b:c0:9e:8e:64:c2:
         43:83:38:42:e2:25:64:a7:ad:86:54:a0:0f:01:3b:e9:f2:21:
         ca:57:83:e2:1e:14:75:80:e9:4e:61:d5:c8:21:aa:28:56:52:
         55:ba:8c:97:fd:0b:e0:df:bf:df:be:13:e1:6f:fc:84:28:44:
         f8:34:6e:f4:f6:a6:27:b1:a2:fa:db:1f:c2:bb:5d:c9:39:62:
         f1:37:e9:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:11:16 2026 by rpki-client