Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/84E9CFD0BCC44D1CF08FDA245B0A3088B0249CA1F629FA2EC30BEE800680995C/0/3139312e3234312e3134302e302f32342d3234203d3e20323730313036.roa
File:                     3139312e3234312e3134302e302f32342d3234203d3e20323730313036.roa (raw, json)
Hash identifier:          WSir687N0ztCcFhv6It8s/KSOpss2lNtE/+iHnoIOHY=
Subject key identifier:   E4:79:37:C8:19:18:E7:66:FE:D8:0C:E9:1C:51:BE:1F:58:6A:7A:6A
Certificate issuer:       /CN=8F3AF6492C8FEF731CBFEDBFD08A6B918FDA4D83
Certificate serial:       4794E2326116F10904E91107F98387DA3C6400DA
Authority key identifier: 8F:3A:F6:49:2C:8F:EF:73:1C:BF:ED:BF:D0:8A:6B:91:8F:DA:4D:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F3AF6492C8FEF731CBFEDBFD08A6B918FDA4D83.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/84E9CFD0BCC44D1CF08FDA245B0A3088B0249CA1F629FA2EC30BEE800680995C/0/3139312e3234312e3134302e302f32342d3234203d3e20323730313036.roa
Signing time:             Thu 09 Apr 2026 17:38:12 +0000
ROA not before:           Thu 09 Apr 2026 17:33:12 +0000
ROA not after:            Thu 08 Apr 2027 17:38:12 +0000
asID:                     270106
IP address blocks:        191.241.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/84E9CFD0BCC44D1CF08FDA245B0A3088B0249CA1F629FA2EC30BEE800680995C/0/8F3AF6492C8FEF731CBFEDBFD08A6B918FDA4D83.crl
                          rsync://repository.lacnic.net/rpki/lacnic/84E9CFD0BCC44D1CF08FDA245B0A3088B0249CA1F629FA2EC30BEE800680995C/0/8F3AF6492C8FEF731CBFEDBFD08A6B918FDA4D83.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F3AF6492C8FEF731CBFEDBFD08A6B918FDA4D83.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 04:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:94:e2:32:61:16:f1:09:04:e9:11:07:f9:83:87:da:3c:64:00:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F3AF6492C8FEF731CBFEDBFD08A6B918FDA4D83
        Validity
            Not Before: Apr  9 17:33:12 2026 GMT
            Not After : Apr  8 17:38:12 2027 GMT
        Subject: CN=E47937C81918E766FED80CE91C51BE1F586A7A6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:06:12:dd:0c:d6:28:44:68:69:fe:91:b4:68:
                    e4:01:0e:82:27:9f:99:76:9d:33:6e:dd:c1:26:24:
                    1a:e8:4b:8c:0d:3a:96:16:40:ea:6a:cf:c9:d8:43:
                    0e:21:38:bb:0e:9f:69:d9:ff:68:87:0b:61:34:bc:
                    2c:2d:2f:be:41:66:b0:1c:e7:c8:9c:ad:63:0b:ff:
                    b5:80:fe:84:c1:75:5f:2b:ce:f6:13:95:f8:f5:36:
                    7a:77:e9:87:03:82:0c:54:97:ff:7d:2b:11:66:43:
                    71:75:c5:fb:26:6f:73:b9:88:36:77:8f:6c:d0:cc:
                    d2:72:eb:bf:75:e7:39:53:f2:0d:e3:16:74:0c:8e:
                    a6:99:57:48:1c:5f:4d:7c:5d:69:4e:cd:77:ff:66:
                    b0:07:b3:71:b7:fa:6b:59:6c:32:6d:95:dc:9c:12:
                    76:2e:9a:cd:11:b9:f3:ac:88:e6:0d:73:f1:74:29:
                    03:b3:60:1b:4e:51:88:e9:ab:23:0d:d9:b7:74:90:
                    60:43:e3:34:46:ab:27:28:7b:3f:36:96:6e:43:38:
                    72:4e:32:87:74:12:5a:25:3b:e2:b8:b9:91:10:46:
                    40:ef:cc:92:ec:47:46:80:1d:b5:3a:07:f3:9f:0d:
                    2c:93:3f:98:3c:18:d7:76:f9:a3:a5:bc:95:b3:ca:
                    68:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:79:37:C8:19:18:E7:66:FE:D8:0C:E9:1C:51:BE:1F:58:6A:7A:6A
            X509v3 Authority Key Identifier:
                keyid:8F:3A:F6:49:2C:8F:EF:73:1C:BF:ED:BF:D0:8A:6B:91:8F:DA:4D:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/84E9CFD0BCC44D1CF08FDA245B0A3088B0249CA1F629FA2EC30BEE800680995C/0/8F3AF6492C8FEF731CBFEDBFD08A6B918FDA4D83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F3AF6492C8FEF731CBFEDBFD08A6B918FDA4D83.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/84E9CFD0BCC44D1CF08FDA245B0A3088B0249CA1F629FA2EC30BEE800680995C/0/3139312e3234312e3134302e302f32342d3234203d3e20323730313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:4e:4a:4a:84:1c:e4:04:9e:84:2f:9b:1c:be:e5:0d:8d:5b:
         b9:ed:cb:58:18:5d:08:b9:31:b3:88:47:23:8b:a7:e5:ab:19:
         15:4f:87:36:87:c6:0d:ad:1b:df:25:0d:44:f0:10:6e:fe:4f:
         b3:c7:23:aa:c9:97:eb:c5:ff:07:f1:8a:5f:bf:c4:85:da:26:
         57:ab:d9:d1:f3:b4:72:b0:94:3d:50:3b:e4:39:d6:b4:06:b4:
         a5:9e:64:d4:9a:66:fe:d4:91:f7:84:f7:36:31:a2:6d:9c:33:
         ce:f0:99:9d:5d:27:da:d2:e6:3d:18:df:ec:a5:38:f2:00:59:
         ff:63:e6:c8:da:d9:f3:6b:32:4c:47:38:b0:8e:54:bb:3b:19:
         0f:43:1a:e0:a5:89:5a:e7:43:46:52:27:d5:63:85:45:b4:42:
         6d:32:ff:ee:e2:cc:20:d3:cc:6b:39:08:a5:3f:87:05:64:a6:
         31:a8:f1:d4:1f:1c:82:07:b2:31:cf:86:cd:17:6b:ef:d4:36:
         1d:1d:74:61:50:93:8e:79:94:78:33:f9:22:5f:94:54:72:2e:
         68:69:28:2c:dc:6d:d1:ea:31:54:84:eb:9a:14:12:b2:36:51:
         6e:16:e0:2a:33:67:cc:fc:b6:96:fb:31:d2:f1:54:89:a5:85:
         3a:64:db:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:59:14 2026 by rpki-client