Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3139312e3132352e302e302f31362d3234203d3e2037343138.roa
File:                     3139312e3132352e302e302f31362d3234203d3e2037343138.roa (raw, json)
Hash identifier:          JSpOJZ4cc9gJmRj7KHZyBjmVFDvdkzXbCuIm8fiX0Rc=
Subject key identifier:   1C:F0:73:E5:6D:1E:43:15:5E:51:1D:D6:CF:14:E9:96:D7:13:FB:68
Certificate issuer:       /CN=29B391F5577514E30F64EDF6E361905CA08CF572
Certificate serial:       5D87DAF968D35CA2D9EF691ED9A99DE77EAAA34C
Authority key identifier: 29:B3:91:F5:57:75:14:E3:0F:64:ED:F6:E3:61:90:5C:A0:8C:F5:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3139312e3132352e302e302f31362d3234203d3e2037343138.roa
Signing time:             Thu 09 Apr 2026 15:45:01 +0000
ROA not before:           Thu 09 Apr 2026 15:40:01 +0000
ROA not after:            Thu 08 Apr 2027 15:45:01 +0000
asID:                     7418
IP address blocks:        191.125.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 04:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:87:da:f9:68:d3:5c:a2:d9:ef:69:1e:d9:a9:9d:e7:7e:aa:a3:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29B391F5577514E30F64EDF6E361905CA08CF572
        Validity
            Not Before: Apr  9 15:40:01 2026 GMT
            Not After : Apr  8 15:45:01 2027 GMT
        Subject: CN=1CF073E56D1E43155E511DD6CF14E996D713FB68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f2:43:0f:82:5f:df:ae:c3:33:24:e4:d1:10:
                    63:c9:0e:2c:0d:4d:10:df:fa:a0:70:5c:36:88:23:
                    6e:2b:51:0a:e2:28:49:e5:a7:eb:11:cc:ad:b0:67:
                    ae:8f:d0:0b:33:c0:e6:38:f5:4e:e3:12:f5:50:a4:
                    3c:62:d4:72:1d:e7:a7:e6:d9:cc:61:b9:9e:e9:54:
                    37:d3:98:a0:ea:95:2a:f4:b9:18:49:27:73:c5:10:
                    a8:3b:ae:91:db:77:5b:97:e5:a9:fa:51:70:a8:16:
                    cf:7b:ed:93:7e:81:f0:b9:34:d2:b4:4d:6e:3f:27:
                    c8:81:49:13:26:12:45:f8:12:19:cf:28:62:37:7e:
                    d9:66:c0:38:87:d0:61:6b:25:c7:6e:04:13:08:ca:
                    76:4a:e2:40:43:87:62:2d:1a:e4:ce:40:6f:cd:a8:
                    1b:55:b6:12:41:0d:a3:0e:fd:0a:0d:fd:61:60:2e:
                    d6:8d:dd:6e:54:5d:ca:f4:91:be:3a:f8:2f:a4:f4:
                    e5:6c:eb:38:0e:80:af:96:66:b1:42:d3:20:56:0a:
                    31:29:59:db:b3:2d:89:fb:e0:6a:1e:72:56:c8:d0:
                    d4:96:f8:9b:ca:18:09:dd:6c:ad:7d:ef:e6:c9:c3:
                    de:68:0a:11:e5:e3:7e:26:db:0a:d8:6d:33:1e:8a:
                    b5:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:F0:73:E5:6D:1E:43:15:5E:51:1D:D6:CF:14:E9:96:D7:13:FB:68
            X509v3 Authority Key Identifier:
                keyid:29:B3:91:F5:57:75:14:E3:0F:64:ED:F6:E3:61:90:5C:A0:8C:F5:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3139312e3132352e302e302f31362d3234203d3e2037343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.125.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         4c:6c:4a:54:a7:4f:0e:a1:1e:68:30:01:7b:d7:7c:2c:cf:54:
         fe:ae:7c:35:18:ce:54:21:d6:e6:6a:9e:f9:77:6a:d4:b2:ad:
         1c:f6:54:55:c3:c2:e2:b3:62:b3:be:25:c2:0c:d3:13:f1:31:
         34:78:39:e6:7c:77:83:02:59:05:21:96:42:27:44:7c:34:3a:
         bf:34:46:2e:50:c4:77:a9:96:43:65:0c:24:7d:7c:1a:98:d9:
         2b:da:29:6e:a6:82:38:6f:cc:d5:f6:86:19:c7:9b:0f:93:a2:
         a9:0a:11:11:26:dc:3b:78:26:3b:a8:55:1b:2c:80:97:f8:94:
         17:fd:ca:e3:ea:1c:1c:fe:88:2c:b3:11:49:cc:a5:0b:30:2e:
         dc:69:38:f8:b5:ba:d6:09:72:67:66:9c:72:1a:8a:c9:59:89:
         73:e5:40:a4:b9:5c:67:98:00:10:13:84:e4:a3:3e:13:95:79:
         d8:ac:bb:e1:c5:47:e1:9f:da:af:e7:0b:4d:94:0d:44:a0:7e:
         c1:74:9b:d7:63:77:02:5a:fb:6a:9b:07:2a:e9:24:4d:1c:a7:
         bb:c4:43:c2:57:33:b9:3d:b2:34:0a:01:c7:02:f7:71:1a:f2:
         76:b7:27:5a:35:76:85:18:f3:22:37:8a:6f:f2:fc:fb:a3:04:
         08:1a:e1:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:26:47 2026 by rpki-client