Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3139312e39372e35362e302f32312d3234203d3e203138363738.roa
File:                     3139312e39372e35362e302f32312d3234203d3e203138363738.roa (raw, json)
Hash identifier:          UHy+p9Bi9H/CTXPwS6DZ0eiwMkyzNBxRUgx5bkjZRL0=
Subject key identifier:   EC:52:6A:73:E4:CB:8B:1B:93:51:61:50:7D:B7:46:50:06:FA:D9:1C
Certificate issuer:       /CN=8E9E896ADF8041E07AB6735225935260B837E74D
Certificate serial:       26F3DD8E22721BD0FB4B5DDE9A90C03DEBF0D38B
Authority key identifier: 8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3139312e39372e35362e302f32312d3234203d3e203138363738.roa
Signing time:             Wed 08 Jul 2026 17:00:00 +0000
ROA not before:           Wed 08 Jul 2026 16:55:00 +0000
ROA not after:            Wed 07 Jul 2027 17:00:00 +0000
asID:                     18678
IP address blocks:        191.97.56.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:f3:dd:8e:22:72:1b:d0:fb:4b:5d:de:9a:90:c0:3d:eb:f0:d3:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E9E896ADF8041E07AB6735225935260B837E74D
        Validity
            Not Before: Jul  8 16:55:00 2026 GMT
            Not After : Jul  7 17:00:00 2027 GMT
        Subject: CN=EC526A73E4CB8B1B935161507DB7465006FAD91C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ae:2e:29:da:45:72:1e:64:71:d3:4c:30:56:
                    c4:7d:12:28:04:d1:3e:e2:33:cd:e0:78:2f:d7:01:
                    67:be:8e:63:c3:f9:44:3c:06:c2:36:f2:21:3a:43:
                    ef:c7:5c:52:c3:2b:52:b6:e5:50:5e:02:39:86:2d:
                    6e:ae:8f:c1:7b:9c:80:80:a6:55:ec:96:0c:18:e6:
                    46:7c:18:0c:6a:e0:b4:61:d2:11:5e:a6:64:cf:84:
                    c3:03:49:c7:90:c2:d9:6a:8e:88:00:c1:de:82:76:
                    0d:ab:c1:12:41:ba:7e:13:09:b0:98:8e:a3:f6:56:
                    ab:65:b8:33:25:8c:9f:76:5a:ed:4a:49:66:91:b1:
                    3e:9b:88:65:43:92:23:54:b0:f8:3c:e0:f6:1b:6f:
                    ba:cc:43:c5:29:fa:56:05:d4:ea:6c:27:05:ba:39:
                    e1:25:06:ca:92:75:e6:df:10:b8:5c:22:ef:db:52:
                    55:bb:19:da:8c:b6:a2:62:8c:30:14:d3:71:6e:55:
                    26:dd:f4:2e:16:d8:54:61:7d:22:72:0d:7a:1c:6f:
                    e7:83:24:98:17:c7:0a:f8:fe:77:6a:3d:e1:d3:ac:
                    8c:b0:37:b4:07:8e:81:d4:e8:2d:df:d4:67:7a:11:
                    09:a7:05:56:5c:da:a9:13:8a:67:cd:87:e8:d8:16:
                    07:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:52:6A:73:E4:CB:8B:1B:93:51:61:50:7D:B7:46:50:06:FA:D9:1C
            X509v3 Authority Key Identifier:
                keyid:8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3139312e39372e35362e302f32312d3234203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.97.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         84:83:73:cf:0a:42:3a:f6:ef:d0:53:36:6a:a5:11:5d:3c:f0:
         99:01:3d:57:d1:97:6d:f9:42:24:71:32:ca:fe:8a:64:c9:2f:
         01:a8:10:10:0a:fe:f1:ce:9e:a4:3d:80:71:3a:51:ee:87:4b:
         ca:8d:a6:b6:91:73:7f:27:5d:16:a7:5c:17:1c:ff:f1:80:e1:
         35:02:2b:57:a3:ef:05:1a:8a:64:3e:44:dd:90:5a:58:30:7d:
         53:21:b5:7d:6e:8c:14:03:26:6b:96:2d:79:3c:1e:9c:97:c9:
         6f:22:ec:38:e7:1e:4a:b4:19:b5:ad:2c:ed:09:92:2e:72:3b:
         83:fe:cb:8f:ce:a2:60:f6:15:bc:51:a3:3f:ed:15:60:f2:ce:
         7d:c7:9c:4b:48:29:f4:c2:4b:c5:6c:3a:69:ee:db:56:16:8e:
         09:27:47:1b:c2:81:53:d3:f6:9e:77:87:2b:87:86:99:df:53:
         04:87:aa:84:5f:ed:ba:8f:c6:b8:85:b6:72:b5:53:84:42:22:
         01:c2:9c:6c:a1:82:76:3e:0a:4f:06:ca:87:43:50:90:63:4c:
         54:86:53:12:ae:36:d2:22:bf:55:63:79:23:9e:23:19:bb:31:
         20:26:50:bc:17:ad:d7:76:18:a3:d9:2b:76:25:0a:ca:cb:3a:
         dc:d7:c8:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:58:27 2026 by rpki-client