Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3139312e39372e35392e302f32342d3234203d3e203138363738.roa
File:                     3139312e39372e35392e302f32342d3234203d3e203138363738.roa (raw, json)
Hash identifier:          6+mlg+wxW4F6+Hg50vNxajqyISLVAToJ6HCabGLr8KM=
Subject key identifier:   E9:27:D4:B5:89:58:85:F4:CE:FF:F1:04:48:48:9F:21:BB:EA:2F:27
Certificate issuer:       /CN=8E9E896ADF8041E07AB6735225935260B837E74D
Certificate serial:       37B0742E5A38FCD5D406756F998C1273F011D874
Authority key identifier: 8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3139312e39372e35392e302f32342d3234203d3e203138363738.roa
Signing time:             Mon 06 Jul 2026 19:51:12 +0000
ROA not before:           Mon 06 Jul 2026 19:46:12 +0000
ROA not after:            Mon 05 Jul 2027 19:51:12 +0000
asID:                     18678
IP address blocks:        191.97.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:b0:74:2e:5a:38:fc:d5:d4:06:75:6f:99:8c:12:73:f0:11:d8:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E9E896ADF8041E07AB6735225935260B837E74D
        Validity
            Not Before: Jul  6 19:46:12 2026 GMT
            Not After : Jul  5 19:51:12 2027 GMT
        Subject: CN=E927D4B5895885F4CEFFF10448489F21BBEA2F27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:84:13:3a:1d:6b:5b:3c:5f:2f:4d:29:ec:0b:
                    d7:67:0a:bc:de:62:93:b3:bb:c4:a5:34:28:7b:d2:
                    b4:2d:69:9e:2b:66:62:9e:a0:fb:72:a4:c3:33:09:
                    b0:fb:36:47:69:f1:2d:ab:1a:fd:93:a0:16:d2:4c:
                    fa:72:08:b9:ec:52:fa:ff:b3:ec:74:18:41:f2:65:
                    c2:3f:46:41:08:cb:f8:33:b1:34:5c:6a:11:46:1c:
                    61:ce:b9:d2:a6:2e:4e:51:49:18:19:28:07:a9:db:
                    e4:aa:58:0b:b6:f3:c1:87:ae:c0:02:bd:0a:ce:b1:
                    84:a5:d8:12:0c:d9:ce:e9:0f:4e:9b:b9:7d:76:b9:
                    38:3c:58:85:ec:ae:62:0e:8c:61:96:20:62:0b:2a:
                    39:b9:b0:f0:2f:00:e6:17:4c:ee:6d:ea:5a:c4:c0:
                    c0:f8:13:1a:e0:4a:ad:ca:1f:0b:c3:7f:92:ed:b2:
                    c8:fe:57:2f:a3:92:02:ca:6c:74:98:3f:0c:2e:15:
                    49:09:1a:ce:e4:f0:0d:dd:3a:95:42:db:23:7d:fa:
                    a5:1f:df:f4:b0:9d:f2:fc:fe:8d:1b:ad:f8:4a:0a:
                    e8:29:2b:78:6e:4f:50:a0:0c:05:6c:37:e1:94:89:
                    a8:08:d0:23:e3:1b:26:cb:aa:84:15:bc:02:45:8e:
                    a9:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:27:D4:B5:89:58:85:F4:CE:FF:F1:04:48:48:9F:21:BB:EA:2F:27
            X509v3 Authority Key Identifier:
                keyid:8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3139312e39372e35392e302f32342d3234203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.97.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:01:63:29:2a:16:de:f2:a0:b9:d6:0a:a8:4b:6d:8f:f1:14:
         af:80:c6:ad:c6:a8:a5:87:13:20:1e:3f:cd:d6:b9:82:22:3a:
         c3:e1:57:3b:2a:b8:a4:b4:4a:9f:29:77:f5:bb:f5:5b:a0:41:
         a3:6b:dc:51:d4:a1:db:da:52:3c:ad:85:25:4e:8f:7e:da:32:
         f8:fc:f1:a0:a7:01:60:03:b3:af:0a:69:65:40:72:59:6f:b0:
         7b:24:ce:d0:3c:cb:f6:3e:b9:f4:95:6e:ef:d5:b5:32:e3:0e:
         5c:d1:7d:bb:29:8f:09:bb:43:95:0c:93:2e:03:c2:93:05:54:
         f9:96:43:89:cf:6c:38:d7:d9:17:8d:34:02:5a:47:34:7c:20:
         8c:be:3b:31:e0:c6:aa:39:5a:5d:e1:27:d7:51:cf:e4:1a:bf:
         33:22:9e:7c:c8:de:fa:a6:ef:23:28:6c:29:33:f7:68:d2:b2:
         c4:53:a2:68:1b:a2:4c:ce:d5:eb:b2:8e:b5:77:ad:d7:47:8a:
         2e:ea:10:d7:38:7f:52:f3:69:41:4b:85:18:b9:69:fc:03:56:
         d7:f9:e5:ad:c7:29:2b:5e:e5:82:09:e2:64:f4:f1:92:f9:dc:
         7e:df:a1:b3:e0:2f:64:2f:09:9c:c4:7f:bc:ba:d4:48:72:df:
         ab:9f:d9:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:42:27 2026 by rpki-client