Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/BAD81124FB081E081FDB16A56084A489A5848CA8FEF145D38477F24008026904/0/3139322e3130302e3233342e302f32342d3234203d3e203131353139.roa
File:                     3139322e3130302e3233342e302f32342d3234203d3e203131353139.roa (raw, json)
Hash identifier:          PPQH+Bl9vA3GfslyH7rW+CyHgeJ8ZwmQKtTvic1WCs8=
Subject key identifier:   60:B9:DF:1B:09:9D:FB:69:B0:3D:23:B6:0C:F0:F9:D0:E7:42:E6:48
Certificate issuer:       /CN=24B55248027DBB0BEA90E6AE3465153C7D9FCAA9
Certificate serial:       5A73BCADBDC0BAE1915C2792492F2804EB801BD9
Authority key identifier: 24:B5:52:48:02:7D:BB:0B:EA:90:E6:AE:34:65:15:3C:7D:9F:CA:A9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24B55248027DBB0BEA90E6AE3465153C7D9FCAA9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BAD81124FB081E081FDB16A56084A489A5848CA8FEF145D38477F24008026904/0/3139322e3130302e3233342e302f32342d3234203d3e203131353139.roa
Signing time:             Wed 28 Oct 2026 08:10:00 +0000
ROA not before:           Wed 28 Oct 2026 08:05:00 +0000
ROA not after:            Wed 27 Oct 2027 08:10:00 +0000
asID:                     11519
IP address blocks:        192.100.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BAD81124FB081E081FDB16A56084A489A5848CA8FEF145D38477F24008026904/0/24B55248027DBB0BEA90E6AE3465153C7D9FCAA9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BAD81124FB081E081FDB16A56084A489A5848CA8FEF145D38477F24008026904/0/24B55248027DBB0BEA90E6AE3465153C7D9FCAA9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24B55248027DBB0BEA90E6AE3465153C7D9FCAA9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 08 Nov 2026 00:06:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:73:bc:ad:bd:c0:ba:e1:91:5c:27:92:49:2f:28:04:eb:80:1b:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24B55248027DBB0BEA90E6AE3465153C7D9FCAA9
        Validity
            Not Before: Oct 28 08:05:00 2026 GMT
            Not After : Oct 27 08:10:00 2027 GMT
        Subject: CN=60B9DF1B099DFB69B03D23B60CF0F9D0E742E648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:00:27:b1:d2:47:17:15:d7:00:47:84:11:4b:
                    3d:b7:48:ed:67:61:9c:df:ab:33:2f:bc:06:c6:9b:
                    40:bc:24:2a:96:6f:b1:ab:3b:30:0e:43:17:d5:d6:
                    37:c0:57:a5:9e:4f:47:50:d2:6d:fb:06:68:4a:59:
                    24:b5:1e:74:ca:51:ef:de:ea:3e:ad:f5:72:e5:c4:
                    fc:10:3d:7b:6c:ca:32:9f:50:67:95:cb:7e:9b:66:
                    a0:b5:23:d0:32:67:1c:b0:fb:5f:f1:60:b9:c4:c6:
                    d1:b4:c0:27:5f:e7:d0:14:35:63:20:41:e8:ca:01:
                    6e:25:07:42:bb:7b:40:d3:70:13:9a:b8:01:55:26:
                    f3:8c:5a:08:f3:00:9b:14:16:51:fc:0c:bc:55:69:
                    95:02:09:09:99:0d:dc:f3:cc:11:39:02:e9:b1:db:
                    21:b6:c2:d3:be:fe:76:32:74:39:6f:10:39:a5:d6:
                    6d:62:f9:b8:d2:b4:12:69:37:85:0f:ab:ed:48:44:
                    4d:af:1e:12:25:84:75:77:24:5d:2a:67:84:63:a5:
                    1b:f7:1b:96:a8:ab:70:51:5c:94:f9:c7:69:70:84:
                    44:49:ce:58:f1:b4:1c:4e:6a:ef:2b:3a:ec:cb:81:
                    d4:6d:cb:c8:f6:ee:4d:14:a7:cf:77:0f:bf:8a:7b:
                    27:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:B9:DF:1B:09:9D:FB:69:B0:3D:23:B6:0C:F0:F9:D0:E7:42:E6:48
            X509v3 Authority Key Identifier:
                keyid:24:B5:52:48:02:7D:BB:0B:EA:90:E6:AE:34:65:15:3C:7D:9F:CA:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BAD81124FB081E081FDB16A56084A489A5848CA8FEF145D38477F24008026904/0/24B55248027DBB0BEA90E6AE3465153C7D9FCAA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24B55248027DBB0BEA90E6AE3465153C7D9FCAA9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BAD81124FB081E081FDB16A56084A489A5848CA8FEF145D38477F24008026904/0/3139322e3130302e3233342e302f32342d3234203d3e203131353139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.100.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:27:97:42:56:97:69:1a:2c:d5:ba:4f:2c:09:8c:09:0f:a8:
         15:8b:1e:de:58:f4:3b:cc:b0:d0:70:b3:81:1d:74:94:7b:19:
         29:e6:4d:49:1a:20:99:cb:e6:31:cb:d8:7c:8f:c0:d8:07:e0:
         90:c2:b6:04:3e:01:6f:98:c5:3e:fb:2c:d4:96:b7:3e:03:9e:
         45:95:b0:06:7b:e5:d7:a1:d6:dd:9d:3b:3c:51:4d:b4:fc:d7:
         2a:13:b2:5e:f4:0f:09:f9:53:d1:3c:01:66:3d:81:28:ef:5c:
         f0:c0:14:ec:48:96:68:ce:eb:26:2c:35:20:f3:7f:7d:1e:92:
         f1:48:65:b8:cc:d1:b4:22:f7:a2:f5:1e:5f:a2:51:a9:4c:40:
         96:2b:af:ed:6b:c7:0c:5f:db:a3:bd:6a:91:ea:ec:9f:20:3a:
         51:66:f1:b2:25:c6:6d:de:69:7a:de:78:45:3d:16:7f:00:7a:
         76:f6:ea:e1:2f:5e:c3:43:6c:4f:b6:78:aa:6a:09:ab:6b:fc:
         83:80:f8:8b:f3:d7:97:7d:99:33:ea:11:70:8f:b6:9c:1c:7e:
         b6:23:67:b0:5e:33:b9:f8:78:31:1b:bd:96:3e:0a:be:86:71:
         fa:33:51:b0:3f:db:11:a2:0d:d8:d2:25:00:82:5f:76:16:dc:
         d1:e7:18:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 01:51:15 2026 by rpki-client