Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3139312e3132352e302e302f31362d3234203d3e2037343138.roa
File:                     3139312e3132352e302e302f31362d3234203d3e2037343138.roa (raw, json)
Hash identifier:          v8WsxwX1BOYidjspkny3Jb7fdMeZqms4zer2BGis4Xo=
Subject key identifier:   7A:BE:D7:03:94:67:AA:86:8C:FC:06:18:19:4B:10:22:49:EE:E8:2D
Certificate issuer:       /CN=29B391F5577514E30F64EDF6E361905CA08CF572
Certificate serial:       48D5F8ABC78B1F347EBB29B3DC3FE4C4E0F956F3
Authority key identifier: 29:B3:91:F5:57:75:14:E3:0F:64:ED:F6:E3:61:90:5C:A0:8C:F5:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3139312e3132352e302e302f31362d3234203d3e2037343138.roa
Signing time:             Tue 05 May 2026 20:30:00 +0000
ROA not before:           Tue 05 May 2026 20:25:00 +0000
ROA not after:            Tue 04 May 2027 20:30:00 +0000
asID:                     7418
IP address blocks:        191.125.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 16 May 2026 20:17:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:d5:f8:ab:c7:8b:1f:34:7e:bb:29:b3:dc:3f:e4:c4:e0:f9:56:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29B391F5577514E30F64EDF6E361905CA08CF572
        Validity
            Not Before: May  5 20:25:00 2026 GMT
            Not After : May  4 20:30:00 2027 GMT
        Subject: CN=7ABED7039467AA868CFC0618194B102249EEE82D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8c:0f:a4:0a:f8:c8:d0:47:96:2e:e5:53:a9:
                    20:ec:9d:b3:e3:2c:14:8a:02:d7:9d:bf:09:24:8d:
                    4b:5f:fd:c0:b5:0d:61:46:14:0e:4c:1e:65:f3:e4:
                    78:6c:67:a1:57:7f:b5:52:a8:2b:c0:00:e4:0a:17:
                    ff:bc:5f:8c:81:65:c2:ec:8b:c6:9d:67:c8:54:01:
                    b9:28:e6:8c:a6:a5:0c:fd:2c:10:58:1a:3f:69:49:
                    85:82:71:50:6d:a8:14:cd:43:8c:bd:01:26:6b:f2:
                    bb:65:bd:f4:67:7f:32:7a:6d:15:81:32:59:67:4d:
                    b3:04:4b:44:34:b1:0c:b8:7d:41:0a:5f:d7:26:b6:
                    90:07:a3:33:19:61:ec:b7:50:8b:b8:be:27:6a:7d:
                    15:84:17:0e:77:11:e8:a5:c6:b0:1a:77:28:6d:59:
                    35:cf:b2:b5:40:75:4d:de:84:7c:10:86:97:43:be:
                    ff:4f:0b:68:43:14:ab:6d:87:68:63:51:15:36:c4:
                    fa:a5:43:b6:a9:f8:cb:8f:28:f4:91:25:90:89:d1:
                    5f:02:e8:4f:b5:b5:3c:76:6a:a5:e8:f3:94:a0:14:
                    b9:db:4f:b6:9b:06:6c:bd:5d:66:4c:81:5d:c2:85:
                    f7:3b:79:75:a2:96:f2:e7:95:b9:b1:d2:ba:e1:44:
                    1a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:BE:D7:03:94:67:AA:86:8C:FC:06:18:19:4B:10:22:49:EE:E8:2D
            X509v3 Authority Key Identifier:
                keyid:29:B3:91:F5:57:75:14:E3:0F:64:ED:F6:E3:61:90:5C:A0:8C:F5:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3139312e3132352e302e302f31362d3234203d3e2037343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.125.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         1c:6e:f8:34:0a:df:12:c5:17:9f:97:b3:3e:2f:b5:dc:f1:ea:
         94:5c:8e:60:3c:cf:f2:52:23:e0:d6:64:18:fa:17:17:ec:14:
         1c:ed:4e:20:c6:8a:d1:28:2f:f2:65:6e:24:9b:c6:2a:33:10:
         a9:6f:00:70:54:d8:9c:bf:eb:3f:6b:86:27:50:b2:26:87:dc:
         89:79:a0:a1:d8:e4:7c:ee:3a:a5:7d:e8:c7:3a:9b:46:66:7b:
         0e:80:7d:f3:da:fe:5b:6e:81:1a:4d:cd:3a:25:19:92:62:e9:
         75:93:e0:ae:81:8d:97:66:7d:ea:45:b5:e5:22:67:48:6d:38:
         f4:59:19:d0:f6:92:ea:c3:56:00:bd:d2:2f:f2:ff:97:90:f3:
         16:9c:29:6c:4a:5c:16:84:32:23:36:95:1f:ea:ce:89:de:ce:
         c1:ae:b7:4b:e0:47:e0:47:34:a9:cc:e6:ba:66:1f:b8:4a:49:
         75:46:18:db:df:13:db:56:43:ee:f5:2b:4c:fa:f8:77:ff:ee:
         75:65:bd:69:1b:c7:ca:c6:5d:25:2c:0d:33:77:25:3c:c4:85:
         78:a9:75:2c:84:0e:9e:bd:c3:af:ab:28:cd:12:5e:72:4b:2f:
         d5:67:43:ed:cb:4e:ce:e8:3d:e5:b0:b6:07:00:a1:af:59:5e:
         85:80:6f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:36:10 2026 by rpki-client