Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3139312e39372e36322e302f32342d3234203d3e203138363738.roa
File:                     3139312e39372e36322e302f32342d3234203d3e203138363738.roa (raw, json)
Hash identifier:          g0fV3JDRZkQj4cJAqac2du9WAMOd8koS9wqJvLff6UU=
Subject key identifier:   C3:C9:97:97:E0:F6:A6:BC:6C:1D:06:C8:4D:95:60:9E:A9:4A:EB:83
Certificate issuer:       /CN=8E9E896ADF8041E07AB6735225935260B837E74D
Certificate serial:       7394E8D1359990DE2BA6DC2B732619258AFC1209
Authority key identifier: 8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3139312e39372e36322e302f32342d3234203d3e203138363738.roa
Signing time:             Mon 06 Jul 2026 19:51:12 +0000
ROA not before:           Mon 06 Jul 2026 19:46:12 +0000
ROA not after:            Mon 05 Jul 2027 19:51:12 +0000
asID:                     18678
IP address blocks:        191.97.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:94:e8:d1:35:99:90:de:2b:a6:dc:2b:73:26:19:25:8a:fc:12:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E9E896ADF8041E07AB6735225935260B837E74D
        Validity
            Not Before: Jul  6 19:46:12 2026 GMT
            Not After : Jul  5 19:51:12 2027 GMT
        Subject: CN=C3C99797E0F6A6BC6C1D06C84D95609EA94AEB83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:04:ce:e8:ea:14:b0:0b:be:80:bd:46:85:2a:
                    d6:4b:98:ca:30:9b:82:5b:25:9b:98:80:af:0e:27:
                    2e:90:3b:5d:fb:97:b7:7a:d6:97:c8:20:8c:2d:7c:
                    04:73:39:1f:34:bd:47:44:31:8d:97:fe:7b:a6:b1:
                    81:91:a3:b2:c6:25:0d:94:bb:f3:79:9b:e1:7d:f9:
                    09:33:2b:68:2a:ab:3a:0d:31:4b:ad:2d:11:80:6c:
                    b8:19:2b:fd:e5:85:66:e1:b8:16:5c:a2:59:e2:33:
                    3d:47:b8:f2:d8:14:fd:4c:86:5f:87:a3:2f:d2:94:
                    63:6a:f0:fa:84:c6:fa:79:86:7b:1f:12:47:ea:f0:
                    56:8e:c2:69:c5:ae:1a:be:e6:b3:41:c4:f7:3b:50:
                    27:67:f5:c8:26:2c:53:aa:5c:e3:2f:01:cb:59:35:
                    a9:db:99:54:6f:21:4f:49:b2:21:01:f2:40:49:00:
                    66:22:a7:f0:76:6b:67:09:c1:cc:4c:e1:22:be:0c:
                    c8:67:aa:b7:a0:56:79:c5:e6:94:c8:5a:97:0e:c8:
                    8d:88:97:d8:6d:8e:eb:3c:82:31:91:eb:12:b5:70:
                    9f:19:fd:61:71:67:c4:4d:d1:b4:08:07:18:ca:07:
                    3b:19:24:d4:d6:66:b7:c9:90:21:06:70:d3:8f:34:
                    1c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:C9:97:97:E0:F6:A6:BC:6C:1D:06:C8:4D:95:60:9E:A9:4A:EB:83
            X509v3 Authority Key Identifier:
                keyid:8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3139312e39372e36322e302f32342d3234203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.97.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:94:2d:e0:8f:18:36:e6:ea:a6:9b:c2:bc:f0:52:6c:21:f9:
         73:8b:30:c0:83:a1:63:27:23:ea:79:40:64:17:85:42:90:27:
         8f:eb:cb:19:8c:5c:f8:9b:fc:98:5b:de:9d:8e:ea:a2:29:f3:
         72:a3:4a:22:4d:8f:d6:2f:8d:ff:6d:28:63:30:1f:42:7e:98:
         89:a5:4e:5d:39:a1:10:66:56:82:76:46:07:ca:00:a8:e5:f6:
         a6:da:39:3c:97:cf:b0:0c:1a:63:5d:f0:81:18:fa:1d:a4:5b:
         10:63:c7:cf:ea:a5:21:cb:e6:41:27:d1:78:31:d8:e5:5a:bc:
         13:57:ec:aa:f9:5a:5c:f9:b4:20:12:74:c0:8e:e8:4c:e7:18:
         2f:39:2f:2d:98:b9:ca:3c:bc:b1:2e:aa:da:c0:f3:83:25:41:
         dd:f6:99:66:32:c7:9a:ec:ab:19:46:f4:99:c1:14:41:f6:2b:
         13:bc:bf:e5:9b:78:d7:2a:a8:0c:1c:fa:89:8b:48:cf:f4:2f:
         3f:cf:56:ed:81:69:1f:dc:86:06:02:52:27:ae:a0:94:e2:d3:
         e3:bf:58:ba:25:a3:7d:4e:f6:9c:b1:ae:88:0b:9b:91:d9:80:
         4b:a9:0a:13:5d:fc:a9:21:7c:f3:1d:11:60:75:95:61:08:b2:
         e2:27:d8:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:46:04 2026 by rpki-client