Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/84E9CFD0BCC44D1CF08FDA245B0A3088B0249CA1F629FA2EC30BEE800680995C/0/3139312e3234312e3134322e302f32332d3233203d3e20323730313036.roa
File:                     3139312e3234312e3134322e302f32332d3233203d3e20323730313036.roa (raw, json)
Hash identifier:          sewhOuW/UGWG0SqIOLG5XQ5BZAjQLo6FU90GCqa1db0=
Subject key identifier:   77:38:C0:8D:C1:8D:15:32:80:DC:1D:1A:F2:77:5F:26:83:6D:C9:9D
Certificate issuer:       /CN=8F3AF6492C8FEF731CBFEDBFD08A6B918FDA4D83
Certificate serial:       549C0B86719E4A0AA61456648E68E95ED74A79DA
Authority key identifier: 8F:3A:F6:49:2C:8F:EF:73:1C:BF:ED:BF:D0:8A:6B:91:8F:DA:4D:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F3AF6492C8FEF731CBFEDBFD08A6B918FDA4D83.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/84E9CFD0BCC44D1CF08FDA245B0A3088B0249CA1F629FA2EC30BEE800680995C/0/3139312e3234312e3134322e302f32332d3233203d3e20323730313036.roa
Signing time:             Thu 09 Apr 2026 17:38:12 +0000
ROA not before:           Thu 09 Apr 2026 17:33:12 +0000
ROA not after:            Thu 08 Apr 2027 17:38:12 +0000
asID:                     270106
IP address blocks:        191.241.142.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/84E9CFD0BCC44D1CF08FDA245B0A3088B0249CA1F629FA2EC30BEE800680995C/0/8F3AF6492C8FEF731CBFEDBFD08A6B918FDA4D83.crl
                          rsync://repository.lacnic.net/rpki/lacnic/84E9CFD0BCC44D1CF08FDA245B0A3088B0249CA1F629FA2EC30BEE800680995C/0/8F3AF6492C8FEF731CBFEDBFD08A6B918FDA4D83.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F3AF6492C8FEF731CBFEDBFD08A6B918FDA4D83.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 04:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:9c:0b:86:71:9e:4a:0a:a6:14:56:64:8e:68:e9:5e:d7:4a:79:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F3AF6492C8FEF731CBFEDBFD08A6B918FDA4D83
        Validity
            Not Before: Apr  9 17:33:12 2026 GMT
            Not After : Apr  8 17:38:12 2027 GMT
        Subject: CN=7738C08DC18D153280DC1D1AF2775F26836DC99D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:62:98:4d:9e:cb:2f:d5:1f:5a:72:63:88:f7:
                    2c:e8:0d:43:7a:d7:45:34:6f:e6:01:56:f3:80:7f:
                    d7:97:de:9b:0f:eb:d5:58:2a:f2:f1:c9:55:fd:8b:
                    f8:3d:80:2c:0b:32:2b:f9:b7:d7:aa:f7:78:40:57:
                    60:2e:d1:71:25:33:6f:f5:e8:71:71:cc:0e:7c:b2:
                    40:08:2d:b6:63:6b:b1:63:1a:ab:30:f7:17:46:ab:
                    74:fc:09:fb:63:53:9c:81:96:68:8f:2c:58:f4:7f:
                    0f:4e:4e:ea:7c:3e:39:08:ba:00:ce:d3:24:65:db:
                    da:b1:65:8d:e3:14:97:04:a9:bd:74:d5:75:18:38:
                    c1:2b:33:97:4f:fe:c5:ab:e2:84:cb:ee:da:3c:ff:
                    2f:5d:da:be:0b:1d:d5:f6:7f:3d:60:b5:4d:4b:e7:
                    01:84:01:ee:62:d9:0d:1a:7e:e8:e3:bb:0c:c8:f9:
                    c9:f5:1e:33:ed:89:4e:84:8e:d5:01:53:e6:fb:7b:
                    99:e1:d5:1e:eb:ef:3d:64:4d:a5:06:8b:ce:a3:93:
                    6c:83:b4:f8:b5:73:dd:90:10:e9:eb:44:e4:e8:dd:
                    12:f6:ad:94:5a:07:1d:18:a8:04:d7:8a:60:20:4b:
                    a4:af:da:45:db:43:bf:c2:1c:f2:c4:b3:74:85:8f:
                    2e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:38:C0:8D:C1:8D:15:32:80:DC:1D:1A:F2:77:5F:26:83:6D:C9:9D
            X509v3 Authority Key Identifier:
                keyid:8F:3A:F6:49:2C:8F:EF:73:1C:BF:ED:BF:D0:8A:6B:91:8F:DA:4D:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/84E9CFD0BCC44D1CF08FDA245B0A3088B0249CA1F629FA2EC30BEE800680995C/0/8F3AF6492C8FEF731CBFEDBFD08A6B918FDA4D83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F3AF6492C8FEF731CBFEDBFD08A6B918FDA4D83.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/84E9CFD0BCC44D1CF08FDA245B0A3088B0249CA1F629FA2EC30BEE800680995C/0/3139312e3234312e3134322e302f32332d3233203d3e20323730313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b9:0a:a7:ee:88:ba:94:30:fa:00:ad:1c:c2:a6:8a:dc:5f:3e:
         e6:0a:20:f6:0b:2e:f6:80:11:67:d4:7d:41:62:28:9d:d4:c3:
         2d:a6:a6:c4:ea:12:3e:89:82:a2:e1:67:cc:e6:48:6f:7e:49:
         24:54:e9:7f:2d:65:57:8b:ff:ae:32:ef:61:2f:42:d7:fb:12:
         f3:22:46:b4:8e:70:56:a9:d4:99:0c:7b:e5:35:47:e4:0e:3e:
         2f:da:1f:ed:a9:ac:17:2b:e5:ca:e7:c1:3c:e6:97:50:01:eb:
         30:a6:f5:8d:94:b7:71:d5:ae:ae:69:ee:28:e1:dd:3b:e7:68:
         61:d1:d0:eb:5c:15:c0:15:49:3b:18:56:b4:05:1e:2d:04:3e:
         dd:f2:9f:10:3e:36:ba:e4:42:67:28:87:ae:8c:a0:dd:9d:f1:
         ad:e8:d1:6b:13:cf:62:79:5d:df:35:16:61:37:60:07:2d:64:
         74:f5:8d:7f:03:42:9c:da:21:3e:db:94:7f:d2:ad:dd:66:4c:
         5d:6e:5f:08:f6:ff:3b:a2:df:77:21:eb:87:1d:de:fb:d0:8f:
         d7:7f:ee:6f:9c:55:24:cf:83:27:e7:43:e3:21:12:20:b0:be:
         48:0b:9b:2b:86:11:4b:4d:a5:22:48:b2:60:e4:8b:6e:f0:d7:
         bd:a0:c6:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:45:10 2026 by rpki-client