Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3139302e39362e3132382e302f31392d3234203d3e2033383136.roa
File:                     3139302e39362e3132382e302f31392d3234203d3e2033383136.roa (raw, json)
Hash identifier:          ztThBcpd+nLPfXMfWFxfH+GNOSUYw8W5VaHd9vEfurw=
Subject key identifier:   5F:07:27:28:1F:ED:65:DD:CD:7F:CB:45:D9:9E:A9:47:CC:87:7B:7C
Certificate issuer:       /CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
Certificate serial:       5AFFA897BA5E9A37D353E59B95FB35ECD3FE306A
Authority key identifier: DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3139302e39362e3132382e302f31392d3234203d3e2033383136.roa
Signing time:             Thu 30 Apr 2026 18:40:27 +0000
ROA not before:           Thu 30 Apr 2026 18:35:27 +0000
ROA not after:            Thu 29 Apr 2027 18:40:27 +0000
asID:                     3816
IP address blocks:        190.96.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:ff:a8:97:ba:5e:9a:37:d3:53:e5:9b:95:fb:35:ec:d3:fe:30:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
        Validity
            Not Before: Apr 30 18:35:27 2026 GMT
            Not After : Apr 29 18:40:27 2027 GMT
        Subject: CN=5F0727281FED65DDCD7FCB45D99EA947CC877B7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4c:b6:b8:e0:06:2a:4d:8d:fc:1c:db:aa:66:
                    1c:a2:94:95:16:95:d6:73:79:f0:8f:27:37:59:07:
                    02:cb:ae:c9:73:d7:53:b1:94:90:14:43:06:be:53:
                    c2:f9:82:e4:3c:40:5b:78:9e:14:2e:16:ee:f6:0a:
                    74:30:27:84:ea:7a:71:2a:82:60:f2:92:e7:66:c3:
                    7e:fa:83:fa:24:45:5e:a6:47:a8:40:ce:ea:00:15:
                    5f:2f:99:d2:c9:23:ad:cd:a5:e1:b4:dd:14:7a:9c:
                    21:7c:69:5b:0d:6b:2d:e7:28:c7:c7:29:b9:af:ef:
                    e0:07:ba:1b:e8:df:36:b2:02:46:2c:20:7c:6e:64:
                    d5:9e:5f:ec:32:f7:c6:8f:87:e8:4d:59:11:1f:20:
                    cc:67:b0:35:04:d6:9f:a4:8c:31:b6:5e:34:f4:0c:
                    8b:d0:27:19:90:88:a7:c2:69:e8:79:7f:4d:a8:42:
                    ca:cf:7e:71:64:f1:dc:15:6c:07:26:0f:0b:cf:56:
                    e5:2d:76:c7:7a:6b:9e:27:88:c6:80:23:bf:77:78:
                    09:e0:1b:48:c5:eb:e3:37:02:02:65:09:fd:fe:92:
                    77:30:37:2a:81:20:0c:d9:02:48:e7:6c:28:a1:10:
                    3e:13:fe:ae:3a:86:48:ac:28:c7:81:90:4e:ed:cf:
                    c7:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:07:27:28:1F:ED:65:DD:CD:7F:CB:45:D9:9E:A9:47:CC:87:7B:7C
            X509v3 Authority Key Identifier:
                keyid:DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3139302e39362e3132382e302f31392d3234203d3e2033383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.96.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         43:58:9a:5f:28:02:88:e6:08:83:df:d9:0a:6c:f6:26:9c:2a:
         7b:5b:20:78:e9:e1:12:ce:12:d1:f6:77:db:8d:ce:d5:64:61:
         16:75:8d:13:d6:fe:58:cd:b1:52:15:47:0a:43:a3:0d:b2:66:
         28:f3:19:2a:69:ef:fc:aa:b0:80:d6:29:d0:c8:20:f5:36:e8:
         18:b6:12:a9:2e:c6:a5:4c:5f:19:da:d7:75:a0:ae:e8:ba:fa:
         b1:df:a9:f1:eb:02:9f:a7:95:41:d6:81:39:3f:e6:7f:98:09:
         e1:89:94:a0:8f:51:78:bb:de:ee:21:b4:d2:2a:d0:bc:16:0d:
         3c:92:48:0a:d1:50:f2:fb:10:f0:b4:88:4a:97:0b:43:81:8c:
         ed:c7:47:27:11:d5:4e:77:c9:e3:c3:f3:28:7e:e8:5b:dd:a5:
         7e:b5:f0:10:e8:d3:88:91:12:3a:98:23:2d:9d:22:65:90:eb:
         21:43:02:25:6f:f4:cf:1c:03:b4:8a:34:ab:91:6f:24:fb:04:
         fa:13:b8:c9:8d:24:99:36:fe:97:0c:cc:e2:44:f1:86:67:b1:
         b4:4a:d3:a0:a1:cc:ad:b3:54:a9:fe:f4:ba:a4:15:5f:c3:c7:
         17:e4:b2:4c:74:53:89:47:5e:8f:6e:1e:0f:91:f7:07:97:48:
         7f:31:d8:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:50:22 2026 by rpki-client