Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8BAA6F9A5890F75A7A18B1B3A6DFA00B185916180EA86327BA911CE3A440B654/0/3139302e3132332e3132302e302f32322d3234203d3e203532333231.roa
File:                     3139302e3132332e3132302e302f32322d3234203d3e203532333231.roa (raw, json)
Hash identifier:          94/+3zXjtgH64DIDxpfvBAP+ykZRw+isw/Yt5Ll4OKY=
Subject key identifier:   D7:E6:F3:0F:4A:5E:E9:D7:2B:47:ED:3A:55:EC:DA:3E:F9:70:DE:A1
Certificate issuer:       /CN=531C79BB5F44C69E53BEDF5DA241BA6FB7C2122A
Certificate serial:       05A5505971CE119B552D33E7D8373AAFFC81B26D
Authority key identifier: 53:1C:79:BB:5F:44:C6:9E:53:BE:DF:5D:A2:41:BA:6F:B7:C2:12:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/531C79BB5F44C69E53BEDF5DA241BA6FB7C2122A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8BAA6F9A5890F75A7A18B1B3A6DFA00B185916180EA86327BA911CE3A440B654/0/3139302e3132332e3132302e302f32322d3234203d3e203532333231.roa
Signing time:             Tue 02 Jun 2026 19:05:00 +0000
ROA not before:           Tue 02 Jun 2026 19:00:00 +0000
ROA not after:            Tue 01 Jun 2027 19:05:00 +0000
asID:                     52321
IP address blocks:        190.123.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8BAA6F9A5890F75A7A18B1B3A6DFA00B185916180EA86327BA911CE3A440B654/0/531C79BB5F44C69E53BEDF5DA241BA6FB7C2122A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8BAA6F9A5890F75A7A18B1B3A6DFA00B185916180EA86327BA911CE3A440B654/0/531C79BB5F44C69E53BEDF5DA241BA6FB7C2122A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/531C79BB5F44C69E53BEDF5DA241BA6FB7C2122A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 08:37:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:a5:50:59:71:ce:11:9b:55:2d:33:e7:d8:37:3a:af:fc:81:b2:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=531C79BB5F44C69E53BEDF5DA241BA6FB7C2122A
        Validity
            Not Before: Jun  2 19:00:00 2026 GMT
            Not After : Jun  1 19:05:00 2027 GMT
        Subject: CN=D7E6F30F4A5EE9D72B47ED3A55ECDA3EF970DEA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:37:fa:72:91:ab:30:08:a1:1b:3d:d5:27:5f:
                    67:69:69:4e:f1:0d:c0:55:f1:77:72:72:df:3e:10:
                    ad:1e:26:ec:ce:23:ff:1e:ba:93:6b:85:34:3a:2a:
                    72:b8:9b:59:55:14:9b:6f:2d:65:6b:6c:0b:df:47:
                    e8:1a:13:b4:b3:7b:21:50:16:9d:55:23:0b:dc:ae:
                    72:6c:80:b4:7c:44:aa:ea:63:a9:97:45:ef:43:6e:
                    d2:74:9e:77:d3:f3:da:48:d2:8b:6e:b5:ff:10:eb:
                    de:92:4b:0a:78:a5:96:ab:4c:92:44:e6:53:cc:b8:
                    9c:82:16:85:97:aa:71:4d:5d:54:4e:51:60:38:ff:
                    37:1f:96:7a:74:ca:cd:9b:b3:8b:6c:95:8f:57:ac:
                    bd:44:85:e8:16:7f:0f:d4:62:4e:64:d6:2a:54:69:
                    2f:f8:b1:82:2a:b7:74:55:45:76:83:8d:34:92:cc:
                    98:2c:3c:45:57:9c:5b:20:7f:a3:62:5a:1b:88:92:
                    33:a7:84:fc:89:6d:d5:e2:0b:02:82:e9:a6:1a:19:
                    9c:c1:a5:8f:e1:eb:8f:56:61:fc:15:17:5a:13:db:
                    7c:21:e4:1b:59:f0:cd:92:63:0e:64:30:14:c8:27:
                    3f:88:41:eb:c5:4a:86:6e:31:cb:69:0b:b8:f2:2b:
                    6f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:E6:F3:0F:4A:5E:E9:D7:2B:47:ED:3A:55:EC:DA:3E:F9:70:DE:A1
            X509v3 Authority Key Identifier:
                keyid:53:1C:79:BB:5F:44:C6:9E:53:BE:DF:5D:A2:41:BA:6F:B7:C2:12:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8BAA6F9A5890F75A7A18B1B3A6DFA00B185916180EA86327BA911CE3A440B654/0/531C79BB5F44C69E53BEDF5DA241BA6FB7C2122A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/531C79BB5F44C69E53BEDF5DA241BA6FB7C2122A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8BAA6F9A5890F75A7A18B1B3A6DFA00B185916180EA86327BA911CE3A440B654/0/3139302e3132332e3132302e302f32322d3234203d3e203532333231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:c7:6e:4f:33:65:aa:95:d7:0f:6d:5a:f0:65:02:c8:00:8c:
         11:bd:46:7d:f5:e6:08:d8:dc:09:3a:ca:d8:d7:b2:7d:6a:95:
         8a:f1:41:33:9a:f9:0a:e8:ef:4a:98:62:d8:6c:c9:5c:7d:d1:
         6b:94:b0:f4:e0:d8:9c:da:fc:5d:0a:1e:a2:59:de:ed:3c:4f:
         77:a9:56:41:af:f1:f1:50:05:3c:06:2a:47:d0:68:95:64:06:
         ff:64:75:e8:97:99:58:c1:e5:24:9f:57:94:1f:93:12:dd:d0:
         d9:cc:05:7a:09:1e:19:09:28:11:e1:8b:bf:b7:d6:25:71:e9:
         a4:c7:22:90:c8:b6:7f:da:14:49:4d:b5:a7:31:95:a1:65:4a:
         0d:bc:89:8a:72:35:94:3d:59:e0:da:ad:09:64:e1:f2:05:3a:
         b1:41:31:1b:ae:66:d5:64:65:c9:0a:ba:b1:d1:64:1e:73:ea:
         c8:36:0f:28:c3:c3:7f:c4:8c:2d:fd:dc:d1:64:5a:00:83:6c:
         4a:44:db:1c:52:3e:18:f4:19:03:a9:01:8f:b4:cb:cd:85:9e:
         fe:dc:9b:77:81:75:03:7c:86:51:75:5f:29:83:29:6f:fe:e4:
         3e:11:66:c3:cb:27:b2:cb:4e:70:41:07:78:55:f0:c6:95:26:
         15:b0:ff:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:33:17 2026 by rpki-client