Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/D4B6F0F9DBE33FDC0D10F2623436C98BD3DD339E174F3934048DC08CDE6EA646/0/3138372e3136342e302e302f31372d3234203d3e203138373334.roa
File:                     3138372e3136342e302e302f31372d3234203d3e203138373334.roa (raw, json)
Hash identifier:          8dtrADWsmoNYu9RoJMugYU39TdE8ZQRmwK3md/LafQ4=
Subject key identifier:   D4:95:48:BB:3B:C0:C2:67:C1:CF:0C:3C:E7:96:45:8C:3B:FF:2B:CF
Certificate issuer:       /CN=9F078022C5EAA80D6F3FB43FCDC73FADC9791878
Certificate serial:       063199E224CD80C509B5C06ACB890CCB01B5286B
Authority key identifier: 9F:07:80:22:C5:EA:A8:0D:6F:3F:B4:3F:CD:C7:3F:AD:C9:79:18:78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F078022C5EAA80D6F3FB43FCDC73FADC9791878.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D4B6F0F9DBE33FDC0D10F2623436C98BD3DD339E174F3934048DC08CDE6EA646/0/3138372e3136342e302e302f31372d3234203d3e203138373334.roa
Signing time:             Mon 28 Sep 2026 19:37:14 +0000
ROA not before:           Mon 28 Sep 2026 19:32:14 +0000
ROA not after:            Mon 27 Sep 2027 19:37:14 +0000
asID:                     18734
IP address blocks:        187.164.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D4B6F0F9DBE33FDC0D10F2623436C98BD3DD339E174F3934048DC08CDE6EA646/0/9F078022C5EAA80D6F3FB43FCDC73FADC9791878.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D4B6F0F9DBE33FDC0D10F2623436C98BD3DD339E174F3934048DC08CDE6EA646/0/9F078022C5EAA80D6F3FB43FCDC73FADC9791878.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F078022C5EAA80D6F3FB43FCDC73FADC9791878.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 09:25:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:31:99:e2:24:cd:80:c5:09:b5:c0:6a:cb:89:0c:cb:01:b5:28:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F078022C5EAA80D6F3FB43FCDC73FADC9791878
        Validity
            Not Before: Sep 28 19:32:14 2026 GMT
            Not After : Sep 27 19:37:14 2027 GMT
        Subject: CN=D49548BB3BC0C267C1CF0C3CE796458C3BFF2BCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2a:37:51:cd:98:ea:3f:14:8d:75:cc:31:7f:
                    b9:c4:dc:16:c4:2c:0d:43:3d:7e:54:ca:b0:1a:28:
                    d5:b7:7e:49:25:8d:6f:a5:e7:2c:16:b7:2e:e3:fb:
                    af:b3:ff:ef:77:12:37:a3:d6:fe:6e:fd:1e:8d:f1:
                    49:6c:a2:02:6a:c0:d2:b8:9c:6a:f4:6c:57:e4:73:
                    95:db:bb:bf:38:44:ae:b7:28:a4:bd:85:5d:f0:dd:
                    5a:4a:90:f0:9c:21:86:22:27:d0:4a:8c:ef:35:af:
                    8c:01:7a:47:a2:0a:01:25:97:4c:d0:16:b6:8b:e5:
                    d6:1a:0b:00:f1:28:fa:12:a5:ad:26:65:1e:3b:4b:
                    6b:3f:5f:bb:c2:e8:ff:8d:26:d9:78:8b:63:6b:88:
                    d0:e2:40:df:59:5e:a1:35:e2:5a:5d:63:8a:b1:2e:
                    69:f3:26:a3:31:c1:a2:e6:07:74:1c:d0:4e:d2:85:
                    2d:95:88:c6:da:56:64:48:81:ca:6c:48:9d:9e:05:
                    7f:a5:04:df:90:73:bb:9d:1e:f5:c4:4f:35:ff:a6:
                    90:9f:18:56:8a:aa:d5:1c:df:12:41:f1:cb:3b:87:
                    fc:af:d7:42:ed:fc:bc:f0:62:46:3f:5b:c8:80:e9:
                    16:33:b5:e6:26:62:8d:c3:76:ff:9c:b6:d1:11:31:
                    a7:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:95:48:BB:3B:C0:C2:67:C1:CF:0C:3C:E7:96:45:8C:3B:FF:2B:CF
            X509v3 Authority Key Identifier:
                keyid:9F:07:80:22:C5:EA:A8:0D:6F:3F:B4:3F:CD:C7:3F:AD:C9:79:18:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D4B6F0F9DBE33FDC0D10F2623436C98BD3DD339E174F3934048DC08CDE6EA646/0/9F078022C5EAA80D6F3FB43FCDC73FADC9791878.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F078022C5EAA80D6F3FB43FCDC73FADC9791878.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D4B6F0F9DBE33FDC0D10F2623436C98BD3DD339E174F3934048DC08CDE6EA646/0/3138372e3136342e302e302f31372d3234203d3e203138373334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.164.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         2a:75:06:f7:20:6d:00:be:b8:9d:25:8b:bd:24:09:f3:d9:10:
         99:a5:61:7c:aa:e0:5d:c8:7e:27:48:b3:f3:16:90:17:d8:28:
         67:c7:27:e6:e1:e0:be:44:5e:04:f5:d5:68:1d:ec:e1:57:97:
         17:3b:e9:77:e7:7c:88:7f:9c:99:40:cf:fb:63:80:b2:20:07:
         3b:e7:cd:da:53:77:04:a3:9a:a4:8f:81:5b:5a:ee:a1:32:d1:
         0f:a1:f9:24:a9:10:4f:c6:81:68:6d:e7:e8:7b:b9:c2:80:10:
         b1:f0:41:67:1d:cb:47:a5:75:3b:90:31:f0:3e:0c:46:0e:3e:
         3f:62:56:9c:60:1a:02:6c:a9:35:40:b4:45:df:ef:db:18:06:
         ab:3b:e1:1c:77:f0:1e:6a:4e:d8:17:56:0c:ef:38:34:73:d7:
         a4:2c:96:0c:34:3d:66:f2:d7:b9:52:f6:33:5d:a2:ef:8e:34:
         48:87:22:47:de:95:59:55:23:2b:3b:58:e7:32:d3:ec:2b:69:
         ca:e4:7e:69:aa:b3:9a:40:06:a8:43:ac:c8:57:f6:aa:81:ad:
         d5:9b:e8:39:2f:86:64:11:2a:dd:ef:39:c1:3b:65:86:3e:24:
         e8:f2:75:01:ec:72:f0:07:3a:6d:0e:7d:0d:d4:99:5e:e7:fc:
         c1:c4:41:0a
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUBjGZ4iTNgMUJtcBqy4kMywG1KGswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUYwNzgwMjJDNUVBQTgwRDZGM0ZCNDNGQ0RDNzNGQURD
OTc5MTg3ODAeFw0yNjA5MjgxOTMyMTRaFw0yNzA5MjcxOTM3MTRaMDMxMTAvBgNV
BAMTKEQ0OTU0OEJCM0JDMEMyNjdDMUNGMEMzQ0U3OTY0NThDM0JGRjJCQ0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnKjdRzZjqPxSNdcwxf7nE3BbE
LA1DPX5UyrAaKNW3fkkljW+l5ywWty7j+6+z/+93Ejej1v5u/R6N8UlsogJqwNK4
nGr0bFfkc5Xbu784RK63KKS9hV3w3VpKkPCcIYYiJ9BKjO81r4wBekeiCgEll0zQ
FraL5dYaCwDxKPoSpa0mZR47S2s/X7vC6P+NJtl4i2NriNDiQN9ZXqE14lpdY4qx
LmnzJqMxwaLmB3Qc0E7ShS2ViMbaVmRIgcpsSJ2eBX+lBN+Qc7udHvXETzX/ppCf
GFaKqtUc3xJB8cs7h/yv10Lt/LzwYkY/W8iA6RYzteYmYo3Ddv+cttERMadlAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQU1JVIuzvAwmfBzww855ZFjDv/K88wHwYDVR0j
BBgwFoAUnweAIsXqqA1vP7Q/zcc/rcl5GHgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENEI2RjBGOURCRTMzRkRDMEQxMEYyNjIzNDM2Qzk4QkQz
REQzMzlFMTc0RjM5MzQwNDhEQzA4Q0RFNkVBNjQ2LzAvOUYwNzgwMjJDNUVBQTgw
RDZGM0ZCNDNGQ0RDNzNGQURDOTc5MTg3OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85RjA3ODAyMkM1RUFBODBENkYz
RkI0M0ZDREM3M0ZBREM5NzkxODc4LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDRCNkYwRjlEQkUzM0ZEQzBEMTBGMjYyMzQzNkM5OEJEM0REMzM5RTE3
NEYzOTM0MDQ4REMwOENERTZFQTY0Ni8wLzMxMzgzNzJlMzEzNjM0MmUzMDJlMzAy
ZjMxMzcyZDMyMzQyMDNkM2UyMDMxMzgzNzMzMzQucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAe7pAAwDQYJ
KoZIhvcNAQELBQADggEBACp1BvcgbQC+uJ0li70kCfPZEJmlYXyq4F3IfidIs/MW
kBfYKGfHJ+bh4L5EXgT11Wgd7OFXlxc76XfnfIh/nJlAz/tjgLIgBzvnzdpTdwSj
mqSPgVta7qEy0Q+h+SSpEE/GgWht5+h7ucKAELHwQWcdy0eldTuQMfA+DEYOPj9i
VpxgGgJsqTVAtEXf79sYBqs74Rx38B5qTtgXVgzvODRz16Qslgw0PWby17lS9jNd
ou+ONEiHIkfelVlVIys7WOcy0+wracrkfmmqs5pABqhDrMhX9qqBrdWb6DkvhmQR
Kt3vOcE7ZYY+JOjydQHscvAHOm0OfQ3UmV7n/MHEQQo=
-----END CERTIFICATE-----
Generated at Tue Oct 13 14:06:15 2026 by rpki-client