Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/84E9CFD0BCC44D1CF08FDA245B0A3088B0249CA1F629FA2EC30BEE800680995C/0/3139312e3234312e3134302e302f32332d3233203d3e20323730313036.roa
File:                     3139312e3234312e3134302e302f32332d3233203d3e20323730313036.roa (raw, json)
Hash identifier:          Uk9TMjUqPH0nTBiEY9ngHEtJeg3GquR7GUWAckf+t9Y=
Subject key identifier:   AB:C1:A7:4F:1D:32:9D:4A:B5:5A:94:EB:DC:AE:53:50:B8:DB:9E:66
Certificate issuer:       /CN=8F3AF6492C8FEF731CBFEDBFD08A6B918FDA4D83
Certificate serial:       75CAEC920BA1F248DEA34C0CA38436D2D9F0BA27
Authority key identifier: 8F:3A:F6:49:2C:8F:EF:73:1C:BF:ED:BF:D0:8A:6B:91:8F:DA:4D:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F3AF6492C8FEF731CBFEDBFD08A6B918FDA4D83.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/84E9CFD0BCC44D1CF08FDA245B0A3088B0249CA1F629FA2EC30BEE800680995C/0/3139312e3234312e3134302e302f32332d3233203d3e20323730313036.roa
Signing time:             Thu 09 Apr 2026 17:38:13 +0000
ROA not before:           Thu 09 Apr 2026 17:33:13 +0000
ROA not after:            Thu 08 Apr 2027 17:38:13 +0000
asID:                     270106
IP address blocks:        191.241.140.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/84E9CFD0BCC44D1CF08FDA245B0A3088B0249CA1F629FA2EC30BEE800680995C/0/8F3AF6492C8FEF731CBFEDBFD08A6B918FDA4D83.crl
                          rsync://repository.lacnic.net/rpki/lacnic/84E9CFD0BCC44D1CF08FDA245B0A3088B0249CA1F629FA2EC30BEE800680995C/0/8F3AF6492C8FEF731CBFEDBFD08A6B918FDA4D83.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F3AF6492C8FEF731CBFEDBFD08A6B918FDA4D83.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 04:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:ca:ec:92:0b:a1:f2:48:de:a3:4c:0c:a3:84:36:d2:d9:f0:ba:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F3AF6492C8FEF731CBFEDBFD08A6B918FDA4D83
        Validity
            Not Before: Apr  9 17:33:13 2026 GMT
            Not After : Apr  8 17:38:13 2027 GMT
        Subject: CN=ABC1A74F1D329D4AB55A94EBDCAE5350B8DB9E66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:98:34:73:0a:f5:66:c6:3e:fa:73:c5:73:af:
                    10:6b:ec:2a:37:ad:4f:30:08:a1:eb:40:c0:40:7f:
                    f6:f5:41:21:ba:06:41:dd:84:26:90:88:4e:02:f4:
                    1b:ea:f4:c3:17:78:ec:a5:74:d1:e5:18:af:49:c3:
                    5a:3f:30:83:e3:b0:5d:ea:6a:35:5b:aa:90:9e:0e:
                    86:27:76:d5:15:e1:25:e5:5f:f1:b5:96:4c:b1:f8:
                    4b:ee:11:33:bb:e6:45:65:dd:f6:61:cb:02:b1:90:
                    b4:2f:c0:cc:ee:eb:b7:1e:45:a1:49:8a:3f:bb:9c:
                    5b:fc:c3:38:a5:1e:e7:70:80:e8:04:75:61:f8:72:
                    55:6c:38:20:e9:e1:18:fa:1f:d2:8d:88:0f:8c:5e:
                    79:2f:5f:e7:a6:16:1e:f9:bc:13:ee:2b:35:d5:3e:
                    fd:a5:a5:e5:2a:18:d0:10:53:37:34:f1:62:1c:77:
                    7e:b5:e8:d3:04:44:35:39:c3:9a:15:41:d9:2d:57:
                    9d:c2:ba:7e:0c:e5:b6:f9:b7:df:d4:93:61:ea:ad:
                    48:74:ab:3d:30:26:51:8e:7d:59:b8:95:3d:75:c2:
                    97:68:12:b4:4c:4f:62:0d:2d:fd:97:58:5f:64:85:
                    0a:c6:88:db:23:5e:d7:60:a3:c6:2c:2a:c0:98:6f:
                    03:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:C1:A7:4F:1D:32:9D:4A:B5:5A:94:EB:DC:AE:53:50:B8:DB:9E:66
            X509v3 Authority Key Identifier:
                keyid:8F:3A:F6:49:2C:8F:EF:73:1C:BF:ED:BF:D0:8A:6B:91:8F:DA:4D:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/84E9CFD0BCC44D1CF08FDA245B0A3088B0249CA1F629FA2EC30BEE800680995C/0/8F3AF6492C8FEF731CBFEDBFD08A6B918FDA4D83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F3AF6492C8FEF731CBFEDBFD08A6B918FDA4D83.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/84E9CFD0BCC44D1CF08FDA245B0A3088B0249CA1F629FA2EC30BEE800680995C/0/3139312e3234312e3134302e302f32332d3233203d3e20323730313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c8:5e:13:36:e1:f3:27:db:74:53:e5:9d:44:39:72:ba:6f:77:
         6c:99:d4:c7:ef:6e:7e:b6:26:82:e2:be:3d:1f:a8:47:40:23:
         ae:04:00:a9:5b:5f:ea:48:6f:c8:fb:77:8d:9c:6d:e5:24:fe:
         ab:6d:06:f5:eb:7b:73:bc:92:3a:e8:18:2b:9f:56:9b:9b:52:
         2b:be:c5:63:bb:63:0f:c9:fb:6c:74:92:29:48:17:1f:78:36:
         34:5e:f0:e2:8a:8d:21:44:b5:c9:18:84:e0:8f:2f:85:c5:e0:
         59:1e:87:d7:69:f5:dd:18:cd:d9:27:81:f8:33:70:7d:3e:ef:
         c7:f7:d1:78:04:a6:5b:73:ee:d7:a9:7e:f9:a0:d9:bd:6d:ad:
         5e:af:5e:a5:77:b8:e1:b9:3e:ed:3a:6c:9e:27:e6:4b:30:d8:
         76:7d:ec:05:ff:c4:f9:b0:75:61:83:6f:c5:2e:44:93:40:b4:
         46:a0:5d:fb:ae:36:f6:1b:78:4e:a9:5b:de:67:25:74:23:f3:
         87:16:04:95:20:ce:ee:d6:69:f1:cf:b8:9e:34:2b:ba:a3:db:
         77:ea:9f:51:15:10:79:e0:20:e6:97:39:2d:65:d3:ac:8b:fe:
         db:32:59:2f:a6:63:b5:30:0f:79:8a:8f:17:88:7b:32:57:a2:
         18:b0:3d:b3
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUdcrskguh8kjeo0wMo4Q20tnwuicwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEYzQUY2NDkyQzhGRUY3MzFDQkZFREJGRDA4QTZCOTE4
RkRBNEQ4MzAeFw0yNjA0MDkxNzMzMTNaFw0yNzA0MDgxNzM4MTNaMDMxMTAvBgNV
BAMTKEFCQzFBNzRGMUQzMjlENEFCNTVBOTRFQkRDQUU1MzUwQjhEQjlFNjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHmDRzCvVmxj76c8VzrxBr7Co3
rU8wCKHrQMBAf/b1QSG6BkHdhCaQiE4C9Bvq9MMXeOyldNHlGK9Jw1o/MIPjsF3q
ajVbqpCeDoYndtUV4SXlX/G1lkyx+EvuETO75kVl3fZhywKxkLQvwMzu67ceRaFJ
ij+7nFv8wzilHudwgOgEdWH4clVsOCDp4Rj6H9KNiA+MXnkvX+emFh75vBPuKzXV
Pv2lpeUqGNAQUzc08WIcd3616NMERDU5w5oVQdktV53Cun4M5bb5t9/Uk2HqrUh0
qz0wJlGOfVm4lT11wpdoErRMT2INLf2XWF9khQrGiNsjXtdgo8YsKsCYbwOtAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUq8GnTx0ynUq1WpTr3K5TULjbnmYwHwYDVR0j
BBgwFoAUjzr2SSyP73Mcv+2/0IprkY/aTYMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84NEU5Q0ZEMEJDQzQ0RDFDRjA4RkRBMjQ1QjBBMzA4OEIw
MjQ5Q0ExRjYyOUZBMkVDMzBCRUU4MDA2ODA5OTVDLzAvOEYzQUY2NDkyQzhGRUY3
MzFDQkZFREJGRDA4QTZCOTE4RkRBNEQ4My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84RjNBRjY0OTJDOEZFRjczMUNC
RkVEQkZEMDhBNkI5MThGREE0RDgzLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODRFOUNGRDBCQ0M0NEQxQ0YwOEZEQTI0NUIwQTMwODhCMDI0OUNBMUY2
MjlGQTJFQzMwQkVFODAwNjgwOTk1Qy8wLzMxMzkzMTJlMzIzNDMxMmUzMTM0MzAy
ZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM3MzAzMTMwMzYucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAG/
8YwwDQYJKoZIhvcNAQELBQADggEBAMheEzbh8yfbdFPlnUQ5crpvd2yZ1Mfvbn62
JoLivj0fqEdAI64EAKlbX+pIb8j7d42cbeUk/qttBvXre3O8kjroGCufVpubUiu+
xWO7Yw/J+2x0kilIFx94NjRe8OKKjSFEtckYhOCPL4XF4Fkeh9dp9d0Yzdkngfgz
cH0+78f30XgEpltz7tepfvmg2b1trV6vXqV3uOG5Pu06bJ4n5ksw2HZ97AX/xPmw
dWGDb8UuRJNAtEagXfuuNvYbeE6pW95nJXQj84cWBJUgzu7WafHPuJ40K7qj23fq
n1EVEHngIOaXOS1l06yL/tsyWS+mY7UwD3mKjxeIezJXohiwPbM=
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:04:56 2026 by rpki-client