Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/3139312e39372e31362e302f32322d3234203d3e20323634383434.roa
File:                     3139312e39372e31362e302f32322d3234203d3e20323634383434.roa (raw, json)
Hash identifier:          MEOX8cb/xn0PzPSkD5BZOrCXIBBzlral/GxElCiDJtI=
Subject key identifier:   43:58:A6:52:A9:C8:1F:D0:2D:79:24:8F:F5:43:14:53:4B:2D:7D:C1
Certificate issuer:       /CN=CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC
Certificate serial:       4AC9B8D9DA9034F7C22944478A07B65C4EF436C7
Authority key identifier: CE:FF:58:50:7A:F1:A0:6A:EF:DA:67:DD:8D:65:12:5C:36:4A:4D:EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/3139312e39372e31362e302f32322d3234203d3e20323634383434.roa
Signing time:             Wed 08 Apr 2026 19:38:05 +0000
ROA not before:           Wed 08 Apr 2026 19:33:05 +0000
ROA not after:            Wed 07 Apr 2027 19:38:05 +0000
asID:                     264844
IP address blocks:        191.97.16.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 04:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:c9:b8:d9:da:90:34:f7:c2:29:44:47:8a:07:b6:5c:4e:f4:36:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC
        Validity
            Not Before: Apr  8 19:33:05 2026 GMT
            Not After : Apr  7 19:38:05 2027 GMT
        Subject: CN=4358A652A9C81FD02D79248FF54314534B2D7DC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9f:fd:d1:6e:27:f0:c5:f6:6e:4c:e5:38:84:
                    83:0c:26:38:d6:13:b4:75:47:e8:6f:70:10:cb:3d:
                    e8:d3:ef:49:ef:4b:66:b9:f6:08:ec:79:01:21:f6:
                    14:15:e6:2a:d7:f6:61:3f:17:c4:98:76:87:d3:51:
                    43:ff:cd:8a:5e:dc:91:4b:fe:4b:65:8c:15:1e:aa:
                    0d:c1:11:f6:c1:66:62:86:3a:3e:93:83:2e:f2:80:
                    f2:f0:77:a5:8b:22:57:ba:66:8b:9f:ae:e2:b0:12:
                    24:f8:55:40:27:0b:67:15:33:4e:a1:0e:3d:ca:ae:
                    7c:f1:46:e8:a2:e7:b1:40:6a:37:24:28:d9:9e:9d:
                    f0:d5:ee:c3:b9:c0:86:c9:f3:26:ba:ee:06:a4:44:
                    c9:07:c8:b9:18:59:71:6d:e0:6f:28:df:b9:46:4e:
                    37:34:3f:c4:63:70:55:4a:fe:a7:e3:45:14:64:2a:
                    f6:2a:7c:71:b5:66:25:3c:78:03:b0:01:c0:5d:b4:
                    d3:13:a5:37:cd:43:d1:38:cc:85:4f:8a:b4:8c:cf:
                    25:2e:dd:7e:af:71:fe:f6:a6:26:aa:70:d2:25:d6:
                    61:5b:de:9c:0d:38:e5:0a:08:da:72:04:56:c4:08:
                    6c:5d:c8:d1:12:0b:5e:53:b3:ad:71:38:6d:bf:27:
                    fb:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:58:A6:52:A9:C8:1F:D0:2D:79:24:8F:F5:43:14:53:4B:2D:7D:C1
            X509v3 Authority Key Identifier:
                keyid:CE:FF:58:50:7A:F1:A0:6A:EF:DA:67:DD:8D:65:12:5C:36:4A:4D:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/3139312e39372e31362e302f32322d3234203d3e20323634383434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.97.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:e7:d3:1a:16:03:46:e9:ee:aa:9f:64:2d:77:33:1d:70:03:
         e5:d9:e2:d5:cd:ee:74:ae:a3:22:de:ce:cb:13:ac:d6:b6:9d:
         e6:3f:cf:a5:ec:91:4f:9e:f1:dd:f0:44:83:e5:53:46:65:57:
         5c:c1:92:56:20:bf:ab:0e:e2:35:ba:f0:bd:b4:9f:43:27:d8:
         9c:6c:bd:fc:dd:e8:41:7c:8d:28:2d:09:41:9a:2b:b9:99:4e:
         ad:07:22:02:d6:63:39:f9:e4:8c:97:7c:17:cb:c8:18:08:b3:
         fd:34:be:21:bd:29:49:c5:bf:af:b8:61:3c:2f:21:e5:9a:89:
         74:36:44:ec:1c:37:16:36:e7:ac:87:80:fa:27:f6:5d:81:07:
         05:59:4e:1e:c8:37:be:8e:d3:99:ce:77:77:3b:d9:0d:71:98:
         47:aa:a6:bb:c1:ba:f8:1e:43:f0:f8:9f:a2:62:cf:e1:2b:39:
         4d:b5:39:34:a4:1a:08:dc:e3:25:d7:c3:4d:a4:9c:f9:ca:aa:
         25:16:14:72:8d:f0:24:31:d8:62:23:1c:42:80:c5:84:fd:af:
         82:a0:2c:d2:6b:13:aa:be:9d:8b:21:b2:d0:95:76:a9:de:10:
         0f:27:8f:b2:29:e1:d4:53:87:87:7f:1f:17:10:70:3f:8a:99:
         36:7e:94:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:37:24 2026 by rpki-client