Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3139312e39372e35332e302f32342d3234203d3e20323632353839.roa
File:                     3139312e39372e35332e302f32342d3234203d3e20323632353839.roa (raw, json)
Hash identifier:          AP5KPnRwdcGyyCSkgRZdZ1GoP7Zb4l5n1ygtlmkKuvw=
Subject key identifier:   EE:16:93:61:29:EF:0A:A8:60:57:C0:88:8D:B7:27:0C:C1:7F:FA:34
Certificate issuer:       /CN=8E9E896ADF8041E07AB6735225935260B837E74D
Certificate serial:       18B0F601172F650CDAFC6368E5613B5CCEB58DAE
Authority key identifier: 8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3139312e39372e35332e302f32342d3234203d3e20323632353839.roa
Signing time:             Wed 20 May 2026 14:43:21 +0000
ROA not before:           Wed 20 May 2026 14:38:21 +0000
ROA not after:            Wed 19 May 2027 14:43:21 +0000
asID:                     262589
IP address blocks:        191.97.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:b0:f6:01:17:2f:65:0c:da:fc:63:68:e5:61:3b:5c:ce:b5:8d:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E9E896ADF8041E07AB6735225935260B837E74D
        Validity
            Not Before: May 20 14:38:21 2026 GMT
            Not After : May 19 14:43:21 2027 GMT
        Subject: CN=EE16936129EF0AA86057C0888DB7270CC17FFA34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d9:6e:2e:eb:ed:00:11:0a:a3:1a:38:96:82:
                    16:f3:e8:74:15:a5:64:c6:c5:74:3f:5b:09:51:16:
                    9c:90:15:e5:42:58:15:65:9e:75:28:47:0b:fa:03:
                    0c:5f:90:bc:43:83:e0:66:24:d8:6f:82:68:97:bd:
                    28:a7:c2:fb:1a:6e:1c:cd:21:40:e2:16:cb:7a:1a:
                    25:37:59:50:c7:8b:67:38:7c:8a:39:b8:69:80:76:
                    d3:29:38:d3:eb:8d:62:1d:da:7c:7f:79:b4:b2:27:
                    3c:8b:4f:ca:0a:57:78:95:9b:7c:52:a0:1e:4c:41:
                    09:26:f0:a3:8c:c2:63:db:22:bd:8b:b6:4c:33:4b:
                    53:d7:12:dc:d0:ef:95:ad:2c:c0:44:d9:2b:a3:e1:
                    cd:c4:5d:5e:b8:7a:47:d4:72:29:1c:82:af:e7:5a:
                    5f:01:35:68:64:72:95:dd:43:30:06:c2:61:66:8c:
                    09:b1:8a:3c:7d:57:44:4a:e4:d3:c9:b6:92:e7:c7:
                    86:d1:9f:0b:4f:64:59:8e:8d:1b:25:21:29:d5:cd:
                    67:8b:1d:cd:f3:d7:a8:a1:4f:ef:3b:fc:fa:5e:40:
                    ee:e0:ae:5f:89:c7:af:77:1b:d8:7b:46:3c:6a:d4:
                    86:48:c8:d4:f4:76:d8:ee:56:81:bf:08:a7:5b:20:
                    99:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:16:93:61:29:EF:0A:A8:60:57:C0:88:8D:B7:27:0C:C1:7F:FA:34
            X509v3 Authority Key Identifier:
                keyid:8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3139312e39372e35332e302f32342d3234203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.97.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:c1:84:24:bd:21:6e:e6:de:8c:0a:9f:12:58:3c:52:85:4b:
         b3:32:07:d8:25:26:e8:b5:84:75:9e:34:94:2d:dc:ae:16:e2:
         c8:44:46:2b:53:e1:88:fa:39:95:f7:88:5e:dd:3d:a7:ec:36:
         03:70:34:61:6f:b5:21:c4:40:49:e2:25:dd:ec:6e:74:e7:d7:
         59:20:7e:28:df:71:ea:1c:2e:70:be:b6:73:b5:4d:ce:6e:8f:
         4d:7c:bd:59:58:15:0e:21:5a:8c:3f:49:32:f4:db:5b:86:14:
         ef:5e:13:6c:d1:16:80:24:60:31:be:d4:5b:25:42:7a:a2:98:
         cf:24:99:ca:ae:99:5b:2d:0d:cc:28:3f:66:35:3f:9a:f2:02:
         2f:f3:23:31:c7:51:29:61:b0:b8:a2:30:4e:3a:f5:88:7c:35:
         c9:c8:8d:95:f4:61:c0:ca:c7:4f:cb:e5:fe:27:a4:27:ef:c9:
         2d:51:ad:f7:3b:4a:f3:9e:b8:a7:df:6e:4d:2e:15:be:3e:f2:
         de:21:36:f5:38:cd:28:d3:98:28:b5:0d:3e:f9:fe:e4:ba:16:
         f5:00:bb:7a:b3:fb:5e:60:55:39:5c:99:58:14:d8:07:32:5c:
         68:5b:51:9e:80:a3:db:e5:6e:4c:fb:4d:99:0f:00:2a:5d:d7:
         fc:cf:0b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:21:50 2026 by rpki-client