Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3139312e39372e35322e302f32342d3234203d3e203138363738.roa
File:                     3139312e39372e35322e302f32342d3234203d3e203138363738.roa (raw, json)
Hash identifier:          onjyjRLNmkyFSD6lRa72v0BCFEoVP77BQ/Ndde9KU6Y=
Subject key identifier:   63:37:21:22:16:92:79:B7:D1:EB:4C:BB:4F:47:47:95:7B:32:6A:95
Certificate issuer:       /CN=8E9E896ADF8041E07AB6735225935260B837E74D
Certificate serial:       68A0EB386C944B52FA2945859B8DDAC880B22185
Authority key identifier: 8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3139312e39372e35322e302f32342d3234203d3e203138363738.roa
Signing time:             Tue 07 Jul 2026 20:51:25 +0000
ROA not before:           Tue 07 Jul 2026 20:46:25 +0000
ROA not after:            Tue 06 Jul 2027 20:51:25 +0000
asID:                     18678
IP address blocks:        191.97.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:a0:eb:38:6c:94:4b:52:fa:29:45:85:9b:8d:da:c8:80:b2:21:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E9E896ADF8041E07AB6735225935260B837E74D
        Validity
            Not Before: Jul  7 20:46:25 2026 GMT
            Not After : Jul  6 20:51:25 2027 GMT
        Subject: CN=63372122169279B7D1EB4CBB4F4747957B326A95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:bf:7c:b4:25:12:e4:1f:d8:af:cd:c5:06:03:
                    84:9a:02:88:16:73:b5:16:d1:14:04:3d:d1:8e:17:
                    f2:6a:e8:62:08:c2:a4:07:e1:a2:5d:3e:18:37:73:
                    32:2f:f4:42:40:db:da:99:83:09:e0:0a:f1:ec:5a:
                    c4:17:5d:c1:c3:df:03:dd:c3:b9:60:b8:69:7b:04:
                    93:d5:ce:de:84:e8:6b:88:a1:70:ff:cf:a5:0e:2c:
                    79:e4:f8:dd:dc:6f:26:5a:a5:c7:c6:49:74:5f:15:
                    ec:82:8c:20:3f:d8:c6:73:d6:91:c6:7e:bb:6c:e2:
                    3e:e4:06:b5:6c:aa:77:18:5d:f7:e9:34:d3:4b:f7:
                    fa:00:db:c4:f5:d5:2c:e7:1c:ce:df:b9:cc:c4:21:
                    d6:45:a3:f8:14:67:dc:7d:87:3e:0f:0e:1e:ba:80:
                    8e:5b:01:88:32:a2:64:9a:53:ad:90:99:fb:88:42:
                    9c:93:82:30:6c:0f:e8:89:a5:ac:63:05:43:6f:8f:
                    56:e0:7b:3d:16:5c:de:33:09:22:31:6d:4b:00:fb:
                    03:dd:30:3d:d7:83:d1:4d:bd:19:ce:e3:48:7b:f4:
                    6e:87:82:12:42:ce:24:1a:c4:b3:e8:35:9d:36:3a:
                    fb:8a:7a:38:e2:9a:eb:e2:8e:bf:12:cc:42:bc:fd:
                    17:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:37:21:22:16:92:79:B7:D1:EB:4C:BB:4F:47:47:95:7B:32:6A:95
            X509v3 Authority Key Identifier:
                keyid:8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3139312e39372e35322e302f32342d3234203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.97.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:c5:63:2a:dc:70:9c:ca:8b:0d:83:be:64:fb:d0:a2:dc:4b:
         e1:d2:e8:75:7f:7a:cf:18:93:84:f5:e4:9c:2d:5f:bd:20:b8:
         cb:ca:55:b8:69:66:95:d9:08:26:df:ad:11:76:8e:0f:34:73:
         9b:2e:3b:58:59:8f:29:3d:14:eb:81:5a:1e:8c:8b:7a:11:4e:
         49:48:40:d6:4b:c2:74:41:fe:ef:d7:9c:7e:19:96:f5:1c:f5:
         08:1e:9c:2d:4b:45:9d:85:a0:0b:fd:23:34:d1:5f:e6:8a:9e:
         4c:0a:94:39:ca:31:b0:06:b4:31:d8:14:c9:7d:dc:69:fd:6b:
         5e:73:95:85:51:83:92:97:82:20:e4:56:d5:5d:0f:09:04:f4:
         e7:8a:8d:29:3c:40:fe:4b:68:a7:5d:2d:0e:e8:6a:5f:6d:67:
         f4:84:7b:7a:da:35:ce:4a:52:4a:3c:68:e7:88:bd:a5:99:ea:
         cc:91:4e:28:52:1f:c8:73:5f:23:80:dc:b9:c0:4e:2e:aa:75:
         3c:60:61:44:0a:df:2e:b2:46:7e:29:f1:39:ac:a7:f5:02:de:
         3e:82:0d:ba:5b:5b:aa:21:16:fe:3c:6c:0e:e6:b4:2f:60:a9:
         db:88:2b:38:c5:7f:2b:5d:12:61:75:c8:4c:98:8c:b7:8e:5b:
         b2:37:70:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:42:22 2026 by rpki-client