Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E5323A07BD5269F065D35634EF1C8C8EA9E4864463AFC65D718FC0AB5BFA235D/0/3139322e3134302e35382e302f32332d3234203d3e20323636383535.roa
File:                     3139322e3134302e35382e302f32332d3234203d3e20323636383535.roa (raw, json)
Hash identifier:          8UGztT8qTdTFHHeCH06jrXCSqZewlGq71hjazWRdUa0=
Subject key identifier:   39:90:AF:1B:6B:A2:C6:3C:DF:EE:49:88:93:19:DB:F1:9B:5C:F1:D7
Certificate issuer:       /CN=8C797120238F0722DF341ADB8DF5F4192C0C7988
Certificate serial:       5813AEF67F366A5A821DBA733BAED487514BB20E
Authority key identifier: 8C:79:71:20:23:8F:07:22:DF:34:1A:DB:8D:F5:F4:19:2C:0C:79:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8C797120238F0722DF341ADB8DF5F4192C0C7988.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E5323A07BD5269F065D35634EF1C8C8EA9E4864463AFC65D718FC0AB5BFA235D/0/3139322e3134302e35382e302f32332d3234203d3e20323636383535.roa
Signing time:             Wed 08 Apr 2026 16:00:00 +0000
ROA not before:           Wed 08 Apr 2026 15:55:00 +0000
ROA not after:            Wed 07 Apr 2027 16:00:00 +0000
asID:                     266855
IP address blocks:        192.140.58.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E5323A07BD5269F065D35634EF1C8C8EA9E4864463AFC65D718FC0AB5BFA235D/0/8C797120238F0722DF341ADB8DF5F4192C0C7988.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5323A07BD5269F065D35634EF1C8C8EA9E4864463AFC65D718FC0AB5BFA235D/0/8C797120238F0722DF341ADB8DF5F4192C0C7988.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8C797120238F0722DF341ADB8DF5F4192C0C7988.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 04:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:13:ae:f6:7f:36:6a:5a:82:1d:ba:73:3b:ae:d4:87:51:4b:b2:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C797120238F0722DF341ADB8DF5F4192C0C7988
        Validity
            Not Before: Apr  8 15:55:00 2026 GMT
            Not After : Apr  7 16:00:00 2027 GMT
        Subject: CN=3990AF1B6BA2C63CDFEE49889319DBF19B5CF1D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:1f:10:5b:f2:14:26:66:1d:c6:9e:2d:dd:b9:
                    90:92:cc:18:9b:88:28:d0:8a:69:0f:30:31:54:74:
                    e7:2d:c7:f4:25:74:6a:bf:3a:e3:60:10:dc:53:c7:
                    f9:56:5c:e1:b0:5e:e6:09:c1:69:c9:70:d9:1d:fe:
                    73:07:b9:d3:a2:bb:72:0a:ee:94:e2:7e:ea:f6:02:
                    66:69:95:c3:34:06:66:96:3c:66:ca:76:95:6d:e5:
                    69:32:64:69:ee:ff:01:4a:d3:e4:af:12:c1:98:6d:
                    26:0e:fb:3e:e9:ed:ae:82:49:c9:ee:c0:2f:f9:42:
                    05:24:0a:85:74:a1:d7:8f:78:8a:4e:6f:b5:79:28:
                    81:4a:5b:29:99:a6:fc:1e:04:7b:94:92:b9:94:a4:
                    24:ae:d2:a2:9b:5d:32:38:4c:0f:57:fb:74:f8:9d:
                    9f:6e:69:94:6a:7c:38:62:db:24:17:e8:89:24:db:
                    73:69:1e:bb:9e:2c:0a:06:c1:c9:e3:23:e3:2f:d4:
                    02:63:fd:f9:cf:c3:c6:06:bd:bd:e2:8e:34:37:b5:
                    68:71:31:a5:17:9b:83:06:2a:16:ab:46:b4:db:56:
                    f3:9f:cf:2b:d6:19:77:a2:0a:89:5e:51:51:f5:df:
                    38:e0:7c:d5:2e:f6:95:cd:cf:ee:05:b6:06:c2:70:
                    3c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:90:AF:1B:6B:A2:C6:3C:DF:EE:49:88:93:19:DB:F1:9B:5C:F1:D7
            X509v3 Authority Key Identifier:
                keyid:8C:79:71:20:23:8F:07:22:DF:34:1A:DB:8D:F5:F4:19:2C:0C:79:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E5323A07BD5269F065D35634EF1C8C8EA9E4864463AFC65D718FC0AB5BFA235D/0/8C797120238F0722DF341ADB8DF5F4192C0C7988.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8C797120238F0722DF341ADB8DF5F4192C0C7988.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E5323A07BD5269F065D35634EF1C8C8EA9E4864463AFC65D718FC0AB5BFA235D/0/3139322e3134302e35382e302f32332d3234203d3e20323636383535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         83:75:8e:d2:52:23:f4:19:41:8f:ce:e5:96:bd:44:c7:a8:1c:
         df:e2:83:b3:ae:ec:b8:de:e2:7a:56:e3:e0:d6:16:ea:a1:8b:
         24:74:2b:db:a6:d0:15:6a:d8:38:ed:22:ad:fb:ed:73:13:cd:
         58:c5:ce:d6:0c:81:53:6c:cb:c5:e0:37:88:19:d5:69:d7:f1:
         8d:24:71:d3:e5:58:e9:34:e5:cd:24:91:4a:48:42:23:12:1e:
         67:ec:9b:2d:99:56:0a:61:62:19:77:af:be:2a:46:4f:ee:07:
         d5:85:17:d7:94:64:24:27:56:9c:83:aa:e6:19:58:e5:cb:e2:
         c8:38:52:a3:06:39:51:96:a7:0c:a0:e3:d2:ce:76:b4:5c:6d:
         7e:ff:95:ac:29:fe:87:cf:0a:4d:4a:d2:bb:ed:ad:03:23:56:
         68:74:b7:b0:d4:8e:11:07:05:af:4b:a9:ec:d5:f2:01:cc:2e:
         f9:99:a6:28:a2:69:24:6d:f1:57:34:15:3f:c7:26:93:1c:55:
         d0:08:09:4a:33:6e:d3:fa:6a:6d:f6:85:71:55:49:b0:24:a5:
         b6:bf:a0:75:b9:28:c7:5d:55:6e:5e:ff:b2:b3:58:0e:88:c5:
         32:a5:b6:44:98:18:dd:7c:f5:b0:1f:94:7c:fd:56:f1:69:fe:
         7b:07:ec:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:01:29 2026 by rpki-client