Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0605569D230FA3823AA6BD3D450DAC2A253EFE0BD696D74BCC1EF72EF07C0F7B/0/3139302e3132322e3134372e302f32342d3234203d3e20323732383334.roa
File:                     3139302e3132322e3134372e302f32342d3234203d3e20323732383334.roa (raw, json)
Hash identifier:          RshdAXEbYXcRlsMBXD/FcZwuAlODntBYiR0I1U2j3NM=
Subject key identifier:   A1:1B:B3:A3:E4:FB:A9:F8:D0:A0:8D:94:9E:FC:D9:81:1C:DE:A4:17
Certificate issuer:       /CN=35583A052563DF8180BE45295D67FAA5A3A18996
Certificate serial:       39D3A2F86273B07DA26DEF31A966CD062B8D2AB1
Authority key identifier: 35:58:3A:05:25:63:DF:81:80:BE:45:29:5D:67:FA:A5:A3:A1:89:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35583A052563DF8180BE45295D67FAA5A3A18996.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0605569D230FA3823AA6BD3D450DAC2A253EFE0BD696D74BCC1EF72EF07C0F7B/0/3139302e3132322e3134372e302f32342d3234203d3e20323732383334.roa
Signing time:             Tue 03 Mar 2026 16:15:00 +0000
ROA not before:           Tue 03 Mar 2026 16:10:00 +0000
ROA not after:            Tue 02 Mar 2027 16:15:00 +0000
asID:                     272834
IP address blocks:        190.122.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0605569D230FA3823AA6BD3D450DAC2A253EFE0BD696D74BCC1EF72EF07C0F7B/0/35583A052563DF8180BE45295D67FAA5A3A18996.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0605569D230FA3823AA6BD3D450DAC2A253EFE0BD696D74BCC1EF72EF07C0F7B/0/35583A052563DF8180BE45295D67FAA5A3A18996.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35583A052563DF8180BE45295D67FAA5A3A18996.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 13:44:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:d3:a2:f8:62:73:b0:7d:a2:6d:ef:31:a9:66:cd:06:2b:8d:2a:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35583A052563DF8180BE45295D67FAA5A3A18996
        Validity
            Not Before: Mar  3 16:10:00 2026 GMT
            Not After : Mar  2 16:15:00 2027 GMT
        Subject: CN=A11BB3A3E4FBA9F8D0A08D949EFCD9811CDEA417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:75:75:86:30:9d:8d:c9:21:11:7f:66:51:02:
                    9c:60:83:cd:b8:fd:4e:29:2c:3e:3b:a5:8d:93:c5:
                    39:0c:ae:2f:50:ca:7a:15:36:bd:16:56:f3:81:58:
                    40:20:23:fd:18:2f:1d:a8:cf:34:7d:d2:32:2d:ae:
                    f1:a8:42:1b:f7:aa:8a:09:f6:82:4a:95:0f:fa:38:
                    92:76:4d:ac:53:fa:a0:e3:ff:e8:6f:72:0a:b1:14:
                    45:6f:04:b4:50:0a:8c:c1:1b:ec:0b:1e:07:3f:5c:
                    61:65:cd:8d:7b:e6:1b:c0:78:86:74:54:eb:ec:ab:
                    22:96:ac:47:5d:1e:5f:6c:d2:43:97:75:d3:e8:87:
                    ba:0f:77:3b:1a:c2:42:66:28:6d:0c:dc:5e:cf:d8:
                    2b:92:da:8d:67:05:cf:cd:2e:44:72:11:47:28:43:
                    b6:f6:d3:20:69:be:ec:bf:2b:51:6c:f8:a0:b8:9e:
                    d4:93:c9:80:1b:79:52:b8:3a:e9:e8:5d:a4:59:11:
                    db:ad:46:af:7f:03:a0:24:25:35:c1:e4:0a:a2:63:
                    da:2f:92:83:01:6b:4b:e2:28:ec:9f:7a:29:c2:79:
                    30:57:da:0f:8a:4a:ca:0e:3f:b9:4a:20:62:6c:cd:
                    95:6c:66:de:1e:db:9c:83:60:ca:da:99:60:93:2b:
                    fb:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:1B:B3:A3:E4:FB:A9:F8:D0:A0:8D:94:9E:FC:D9:81:1C:DE:A4:17
            X509v3 Authority Key Identifier:
                keyid:35:58:3A:05:25:63:DF:81:80:BE:45:29:5D:67:FA:A5:A3:A1:89:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0605569D230FA3823AA6BD3D450DAC2A253EFE0BD696D74BCC1EF72EF07C0F7B/0/35583A052563DF8180BE45295D67FAA5A3A18996.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35583A052563DF8180BE45295D67FAA5A3A18996.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0605569D230FA3823AA6BD3D450DAC2A253EFE0BD696D74BCC1EF72EF07C0F7B/0/3139302e3132322e3134372e302f32342d3234203d3e20323732383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.122.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:c8:bf:aa:41:c8:f2:1b:7f:57:46:1f:8b:f9:13:47:bb:98:
         76:12:e2:16:e3:12:76:a1:b1:34:db:f0:8c:f5:96:30:41:76:
         43:4d:55:2e:f8:b1:7e:97:63:b8:e8:4e:76:6f:a6:23:94:66:
         99:39:ab:a7:2e:90:f9:44:11:a1:70:35:dd:88:13:f3:a1:be:
         aa:89:44:4a:f1:5f:3e:96:02:c3:ee:28:50:6c:1a:e9:f4:4e:
         70:01:d9:23:b9:c5:d4:57:6a:ad:56:42:48:c5:c1:f1:f2:98:
         73:d0:0c:ef:6a:94:60:89:71:97:b8:fb:f4:44:94:32:a4:06:
         46:90:a7:e3:35:b1:5b:81:37:39:90:26:80:20:56:e1:16:06:
         4d:c8:f1:11:06:49:c3:7f:2f:73:a8:23:ea:c5:c8:46:9b:c4:
         bd:ee:df:df:ce:ea:1f:ca:6b:27:ad:31:df:59:a5:79:00:f0:
         44:92:7f:06:41:cd:1f:fa:ca:8a:1f:39:7a:8c:ec:47:86:7a:
         a5:ca:d7:de:24:74:63:d4:5e:94:1c:84:3d:33:12:1a:60:87:
         8e:20:04:14:c4:b7:85:05:03:4f:65:53:7e:f4:ec:c2:99:cc:
         1a:7b:82:90:35:fc:07:70:a5:1f:78:90:61:c3:94:5d:00:b3:
         89:d1:11:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:52:34 2026 by rpki-client