Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3139302e3231362e3131302e302f32342d3234203d3e2033333536.roa
File:                     3139302e3231362e3131302e302f32342d3234203d3e2033333536.roa (raw, json)
Hash identifier:          fWSX+n5gVzIQP5zn2SIWm8ZjDoCtXoianRJKWYmMU40=
Subject key identifier:   14:BF:6B:5E:8F:4F:19:1A:1D:B7:9E:37:78:DD:75:D9:C6:1C:19:EF
Certificate issuer:       /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial:       3828ED2CA07269280B04FDCB71B3489914F47722
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3139302e3231362e3131302e302f32342d3234203d3e2033333536.roa
Signing time:             Tue 17 Mar 2026 21:10:00 +0000
ROA not before:           Tue 17 Mar 2026 21:05:00 +0000
ROA not after:            Tue 16 Mar 2027 21:10:00 +0000
asID:                     3356
IP address blocks:        190.216.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Mar 2026 17:17:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:28:ed:2c:a0:72:69:28:0b:04:fd:cb:71:b3:48:99:14:f4:77:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
        Validity
            Not Before: Mar 17 21:05:00 2026 GMT
            Not After : Mar 16 21:10:00 2027 GMT
        Subject: CN=14BF6B5E8F4F191A1DB79E3778DD75D9C61C19EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:a7:d1:1c:43:74:91:74:10:f0:33:e3:50:1c:
                    75:13:82:9f:de:d3:0e:09:f3:36:80:7f:cd:cb:0e:
                    a6:ec:35:9d:c5:09:9b:80:f3:bf:ec:79:19:80:e9:
                    0b:39:d0:4a:37:1a:3f:8b:5f:bb:aa:4a:9d:5b:08:
                    9f:34:c3:c1:70:eb:a3:a5:97:02:6f:5e:9f:f8:0d:
                    94:c7:c6:f2:71:d7:82:76:bc:25:a2:d4:65:98:e8:
                    d0:34:23:79:98:f9:2b:5e:08:1c:e1:3d:40:b2:c9:
                    af:f9:cf:26:46:e0:f5:ae:52:47:66:58:e7:93:a5:
                    99:8e:71:7d:a4:fd:3d:52:64:b1:68:77:3d:e3:9e:
                    c9:ab:8d:ac:25:bc:00:97:f2:78:3c:30:39:8b:8e:
                    bc:60:c5:08:5a:12:27:54:fe:d8:87:17:9e:7c:db:
                    26:71:f1:55:22:a5:db:a8:09:bf:9a:b3:d6:46:60:
                    de:c9:c3:29:34:9b:95:f1:7d:43:10:4f:31:c3:5b:
                    88:2d:fe:8e:ac:4f:c9:23:ff:37:20:59:9d:73:86:
                    55:d8:01:32:ed:66:f3:83:5a:ae:83:7b:3b:80:38:
                    4a:41:6d:b4:2b:38:f5:9f:b0:90:17:0a:4e:af:4a:
                    3b:ce:5d:e3:3f:bc:68:8c:dc:fc:a9:89:a1:c3:c9:
                    cc:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:BF:6B:5E:8F:4F:19:1A:1D:B7:9E:37:78:DD:75:D9:C6:1C:19:EF
            X509v3 Authority Key Identifier:
                keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3139302e3231362e3131302e302f32342d3234203d3e2033333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.216.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:cb:39:57:7c:9b:a5:f8:b6:1f:98:57:b8:61:99:3b:11:6a:
         92:73:96:ba:b4:96:9b:ec:5b:3a:a7:ae:e7:7e:62:ab:35:d6:
         bc:99:c0:be:62:16:ce:8e:2b:01:0c:51:8f:42:8c:54:46:f6:
         35:b5:42:bd:2d:0f:9c:c4:1b:03:78:66:c4:1b:70:13:7c:fe:
         15:e0:99:09:31:f5:3d:77:92:e6:aa:ca:da:c3:14:9f:48:c2:
         0d:aa:e2:47:1a:36:16:c1:ad:3a:ea:39:66:75:55:ad:1b:ad:
         5f:f7:e2:9f:4c:31:dd:c0:45:6d:12:3b:07:62:1a:2e:71:bc:
         d1:c5:03:d8:5e:1f:fa:88:b9:50:b8:f4:e9:11:dc:82:7e:7c:
         a6:2d:77:0e:6a:79:45:3c:dc:6c:43:b0:fc:f0:06:1b:2a:18:
         83:8c:28:1c:7b:fc:51:69:42:ab:9d:d6:6a:10:6c:fc:1c:ac:
         c7:fb:7e:cd:b9:46:e7:bc:ca:cd:55:ac:36:1d:a2:f9:24:34:
         cd:9c:ac:9a:eb:45:e3:b3:57:56:4d:9e:8b:db:c6:58:06:34:
         bb:06:4b:59:53:68:a2:b3:5f:8e:98:0a:46:3f:af:aa:82:75:
         76:d6:4b:a1:e0:b0:4e:b9:2b:31:3c:05:4d:94:fa:02:98:db:
         38:9f:03:33
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUOCjtLKByaSgLBP3LcbNImRT0dyIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzg3QzU1QTQ0ODFGMTlDOUI2MTg0OTQ0QjE4N0IzODEz
QjdDRUM1NjAeFw0yNjAzMTcyMTA1MDBaFw0yNzAzMTYyMTEwMDBaMDMxMTAvBgNV
BAMTKDE0QkY2QjVFOEY0RjE5MUExREI3OUUzNzc4REQ3NUQ5QzYxQzE5RUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsp9EcQ3SRdBDwM+NQHHUTgp/e
0w4J8zaAf83LDqbsNZ3FCZuA87/seRmA6Qs50Eo3Gj+LX7uqSp1bCJ80w8Fw66Ol
lwJvXp/4DZTHxvJx14J2vCWi1GWY6NA0I3mY+SteCBzhPUCyya/5zyZG4PWuUkdm
WOeTpZmOcX2k/T1SZLFodz3jnsmrjawlvACX8ng8MDmLjrxgxQhaEidU/tiHF558
2yZx8VUipduoCb+as9ZGYN7Jwyk0m5XxfUMQTzHDW4gt/o6sT8kj/zcgWZ1zhlXY
ATLtZvODWq6DezuAOEpBbbQrOPWfsJAXCk6vSjvOXeM/vGiM3PypiaHDycypAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUFL9rXo9PGRodt543eN112cYcGe8wHwYDVR0j
BBgwFoAUyHxVpEgfGcm2GElEsYezgTt87FYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wMEE2NkE2QTJBNkNGRTkzQzBGNkUzREZDMjBERDMzMUI1
ODBGQjIwMzgzQjYyRkU0QjI2QzAyOTRCNDY4N0M3LzAvQzg3QzU1QTQ0ODFGMTlD
OUI2MTg0OTQ0QjE4N0IzODEzQjdDRUM1Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DODdDNTVBNDQ4MUYxOUM5QjYx
ODQ5NDRCMTg3QjM4MTNCN0NFQzU2LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDBBNjZBNkEyQTZDRkU5M0MwRjZFM0RGQzIwREQzMzFCNTgwRkIyMDM4
M0I2MkZFNEIyNkMwMjk0QjQ2ODdDNy8wLzMxMzkzMDJlMzIzMTM2MmUzMTMxMzAy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMzMzMzUzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAL7YbjAN
BgkqhkiG9w0BAQsFAAOCAQEAfMs5V3ybpfi2H5hXuGGZOxFqknOWurSWm+xbOqeu
535iqzXWvJnAvmIWzo4rAQxRj0KMVEb2NbVCvS0PnMQbA3hmxBtwE3z+FeCZCTH1
PXeS5qrK2sMUn0jCDariRxo2FsGtOuo5ZnVVrRutX/fin0wx3cBFbRI7B2IaLnG8
0cUD2F4f+oi5ULj06RHcgn58pi13Dmp5RTzcbEOw/PAGGyoYg4woHHv8UWlCq53W
ahBs/Bysx/t+zblG57zKzVWsNh2i+SQ0zZysmutF47NXVk2ei9vGWAY0uwZLWVNo
orNfjpgKRj+vqoJ1dtZLoeCwTrkrMTwFTZT6ApjbOJ8DMw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:49:24 2026 by rpki-client