Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3139302e37312e38352e302f32342d3234203d3e20323732383239.roa
File:                     3139302e37312e38352e302f32342d3234203d3e20323732383239.roa (raw, json)
Hash identifier:          gZBjW8qIfCK8QkKuJWNig02emf4m2xf7Ms7BzTcHoF8=
Subject key identifier:   48:D2:6C:92:F7:77:C5:CA:AD:2F:81:48:ED:00:F3:E3:88:FF:FD:85
Certificate issuer:       /CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
Certificate serial:       03190881130E646BF7B38A8D9068DE67342A88CD
Authority key identifier: 34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3139302e37312e38352e302f32342d3234203d3e20323732383239.roa
Signing time:             Tue 31 Mar 2026 14:15:00 +0000
ROA not before:           Tue 31 Mar 2026 14:10:00 +0000
ROA not after:            Tue 30 Mar 2027 14:15:00 +0000
asID:                     272829
IP address blocks:        190.71.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Apr 2026 10:46:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:19:08:81:13:0e:64:6b:f7:b3:8a:8d:90:68:de:67:34:2a:88:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
        Validity
            Not Before: Mar 31 14:10:00 2026 GMT
            Not After : Mar 30 14:15:00 2027 GMT
        Subject: CN=48D26C92F777C5CAAD2F8148ED00F3E388FFFD85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:1f:70:ef:16:a8:c9:6e:14:85:21:95:49:22:
                    f1:18:7a:59:9e:0b:e9:02:d5:64:f7:f3:92:7a:34:
                    88:2e:72:20:2e:05:04:96:db:f6:a5:38:18:de:8a:
                    e3:f0:f9:a5:5b:79:f8:07:d2:0c:1a:2c:36:95:19:
                    ec:71:3e:9c:96:b5:d4:f6:86:36:73:b0:dd:d1:01:
                    0d:ea:8a:28:db:8b:d9:e8:88:e7:2f:09:90:01:16:
                    86:62:95:c8:b6:8d:bb:7c:b6:2a:c5:77:69:8d:62:
                    d9:64:63:0d:ad:1c:07:48:cc:93:2a:ad:5b:2f:d2:
                    db:50:9f:ce:b6:15:4b:8f:4c:aa:9b:ea:40:24:0f:
                    10:6f:8b:08:90:b1:9a:76:2e:db:c6:33:0c:d1:2d:
                    05:29:09:57:85:bf:f4:00:fe:52:ac:c4:5f:89:dd:
                    55:f4:bb:b3:a0:42:ae:ab:3b:3b:f0:a9:b3:93:06:
                    de:aa:99:a0:24:a3:68:25:b4:cf:8c:9a:9a:f7:d3:
                    14:08:b7:8d:d1:6d:8e:aa:6f:78:16:9d:20:31:f6:
                    f2:db:22:f5:ed:26:4c:30:94:95:3e:25:51:47:dd:
                    67:c3:23:2f:cf:6c:7f:3d:58:6a:de:f6:3f:3f:c1:
                    76:a4:46:01:ea:1e:72:26:fa:51:79:4f:43:05:d7:
                    19:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:D2:6C:92:F7:77:C5:CA:AD:2F:81:48:ED:00:F3:E3:88:FF:FD:85
            X509v3 Authority Key Identifier:
                keyid:34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3139302e37312e38352e302f32342d3234203d3e20323732383239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.71.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:6e:a7:e3:b4:02:cb:47:27:07:c4:eb:23:f5:aa:32:ff:af:
         7b:fc:b7:ac:c1:a4:8a:f1:7d:2e:b4:82:9c:e3:2a:7f:e6:a9:
         d0:e1:f2:42:2f:60:8d:3b:de:75:c6:f0:6b:9b:24:ee:d1:b8:
         e6:f2:72:c9:de:29:41:c7:3f:2e:75:28:ad:93:1e:71:ab:d3:
         b1:4e:23:d9:60:a0:08:17:e3:30:90:74:68:32:1d:b3:33:73:
         b7:3c:46:6b:17:e0:e3:c0:de:98:33:37:f5:60:d6:41:41:c9:
         f3:1c:bd:99:0e:76:c4:15:bf:d8:3c:2c:c8:f1:8c:91:f6:e7:
         52:ba:56:bb:81:28:ff:d7:f1:16:4e:7c:b1:ca:63:51:74:86:
         97:65:cb:bd:c8:9b:f1:59:e9:38:bb:f7:8f:72:07:ed:ee:65:
         70:04:c6:f8:e5:b4:84:5c:0e:64:07:ea:89:a7:77:4a:e0:c4:
         ba:ad:5b:9e:c0:97:95:87:19:84:3d:b3:6f:d6:f9:d9:9e:c0:
         29:23:70:2d:30:71:58:bc:5c:78:5a:f3:6c:06:0e:f3:19:a0:
         70:46:d7:cb:1e:59:07:ff:e9:c4:99:9a:11:1f:28:9c:98:98:
         11:8d:d6:3b:4e:0d:6d:5f:73:a2:63:4c:c6:6f:16:88:72:e9:
         a8:6e:a4:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:03:20 2026 by rpki-client