Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3139312e3132372e302e302f31362d3234203d3e203136363239.roa
File:                     3139312e3132372e302e302f31362d3234203d3e203136363239.roa (raw, json)
Hash identifier:          dLOuthMNDIPMJaA4CNHKpiYfDI8fcYkb1qv5irX4ySM=
Subject key identifier:   11:58:11:1F:07:DD:FD:F9:C6:0A:EF:E4:23:C9:C4:61:31:2C:8D:1A
Certificate issuer:       /CN=29B391F5577514E30F64EDF6E361905CA08CF572
Certificate serial:       4F9EE5AA49067F3BD0B1485F88567D434BAEA5BD
Authority key identifier: 29:B3:91:F5:57:75:14:E3:0F:64:ED:F6:E3:61:90:5C:A0:8C:F5:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3139312e3132372e302e302f31362d3234203d3e203136363239.roa
Signing time:             Thu 09 Apr 2026 15:45:01 +0000
ROA not before:           Thu 09 Apr 2026 15:40:01 +0000
ROA not after:            Thu 08 Apr 2027 15:45:01 +0000
asID:                     16629
IP address blocks:        191.127.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 04:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:9e:e5:aa:49:06:7f:3b:d0:b1:48:5f:88:56:7d:43:4b:ae:a5:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29B391F5577514E30F64EDF6E361905CA08CF572
        Validity
            Not Before: Apr  9 15:40:01 2026 GMT
            Not After : Apr  8 15:45:01 2027 GMT
        Subject: CN=1158111F07DDFDF9C60AEFE423C9C461312C8D1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:2b:9f:d9:51:70:b8:e9:4b:d3:4f:fb:0b:eb:
                    a3:f1:db:5c:1d:4a:7a:63:10:9f:c9:83:1f:94:5b:
                    10:13:55:db:36:5d:2b:fe:89:1e:a7:43:88:ad:2d:
                    db:12:a1:72:49:7a:86:04:e3:9b:16:66:6b:3b:ea:
                    69:2c:2c:6d:7c:47:e2:05:05:6b:ff:02:54:d8:2b:
                    52:0a:1b:2a:0a:1a:af:b4:1e:cf:29:64:eb:47:fb:
                    07:5b:e8:22:dc:5d:1a:38:af:b6:62:d2:58:75:17:
                    e4:53:12:aa:07:f4:60:de:b7:94:11:04:5b:82:e4:
                    01:56:f9:bf:30:23:d6:cd:85:21:08:ab:fd:eb:bd:
                    5b:52:25:55:17:20:77:c3:b2:b9:15:48:36:ef:c8:
                    bb:a7:65:ac:af:9e:ee:24:76:11:fa:f5:6b:4f:84:
                    19:16:b5:96:46:6c:7c:3a:cc:5b:16:60:2f:06:d4:
                    31:a1:23:23:83:80:ad:7c:8b:cf:9e:3a:1d:04:a6:
                    35:f1:e1:c1:78:42:20:07:fd:36:5b:6e:4a:cf:06:
                    8c:1b:5d:55:98:9d:34:ef:bf:a4:2b:f6:e1:10:c8:
                    f7:d9:67:52:9e:c8:d4:4b:b7:f9:81:c5:38:de:e9:
                    0e:d8:48:90:cb:e6:7d:ce:9b:57:b9:b1:78:92:60:
                    c1:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:58:11:1F:07:DD:FD:F9:C6:0A:EF:E4:23:C9:C4:61:31:2C:8D:1A
            X509v3 Authority Key Identifier:
                keyid:29:B3:91:F5:57:75:14:E3:0F:64:ED:F6:E3:61:90:5C:A0:8C:F5:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3139312e3132372e302e302f31362d3234203d3e203136363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.127.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         45:87:fb:59:73:00:5c:34:e7:cd:14:0c:90:ab:86:d4:bc:36:
         09:bd:bf:bd:20:31:26:e4:64:85:b5:53:cf:08:f0:0d:0e:05:
         8e:0e:c6:e3:f4:a5:6f:d1:90:bd:21:a9:d3:4e:8b:3a:c9:9b:
         0c:05:68:fb:e6:89:63:66:91:af:79:d9:e8:18:ad:c7:61:5e:
         10:ad:ab:ff:2b:18:d3:d1:9a:1f:91:cd:68:4d:37:ba:5d:45:
         2c:df:83:e5:d4:ee:81:35:f5:f7:18:f3:57:d5:2e:df:e9:ec:
         41:39:d6:57:b4:b8:e7:21:1c:f5:9a:6f:ce:21:33:00:f4:73:
         02:7b:00:1f:08:f7:37:56:aa:b0:8b:a4:f8:92:98:70:56:a1:
         a5:37:c5:60:59:c9:0f:96:f9:84:30:b7:20:c0:b3:f9:95:6f:
         89:5f:6f:e4:d7:f1:2a:d4:5a:b0:50:a3:72:77:68:20:45:25:
         17:55:48:05:72:d0:aa:11:3e:ac:4c:57:af:08:52:b4:1f:7d:
         0c:c6:af:f7:bf:6d:df:fe:d2:39:91:54:b4:e8:55:10:19:39:
         55:29:41:53:b9:c4:5b:84:ae:89:1a:6b:cc:dc:a0:e0:13:ba:
         0c:99:23:e5:e3:3b:f9:62:2f:4b:8a:5c:85:c8:3b:91:75:ca:
         b3:51:51:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:26:39 2026 by rpki-client