Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0605569D230FA3823AA6BD3D450DAC2A253EFE0BD696D74BCC1EF72EF07C0F7B/0/3139302e31342e33352e302f32342d3234203d3e203532343533.roa
File:                     3139302e31342e33352e302f32342d3234203d3e203532343533.roa (raw, json)
Hash identifier:          tNBbzwArlhbGknukqJOULMO2gRRxsxvIrQBlGgPadUw=
Subject key identifier:   D5:D3:96:78:04:4F:E9:BB:A7:23:94:6F:0F:01:51:37:6B:56:51:1E
Certificate issuer:       /CN=35583A052563DF8180BE45295D67FAA5A3A18996
Certificate serial:       7F05E117D27B83D0D407B1A3BD8A8881188A3C6F
Authority key identifier: 35:58:3A:05:25:63:DF:81:80:BE:45:29:5D:67:FA:A5:A3:A1:89:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35583A052563DF8180BE45295D67FAA5A3A18996.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0605569D230FA3823AA6BD3D450DAC2A253EFE0BD696D74BCC1EF72EF07C0F7B/0/3139302e31342e33352e302f32342d3234203d3e203532343533.roa
Signing time:             Tue 03 Mar 2026 16:20:00 +0000
ROA not before:           Tue 03 Mar 2026 16:15:00 +0000
ROA not after:            Tue 02 Mar 2027 16:20:00 +0000
asID:                     52453
IP address blocks:        190.14.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0605569D230FA3823AA6BD3D450DAC2A253EFE0BD696D74BCC1EF72EF07C0F7B/0/35583A052563DF8180BE45295D67FAA5A3A18996.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0605569D230FA3823AA6BD3D450DAC2A253EFE0BD696D74BCC1EF72EF07C0F7B/0/35583A052563DF8180BE45295D67FAA5A3A18996.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35583A052563DF8180BE45295D67FAA5A3A18996.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 13:44:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:05:e1:17:d2:7b:83:d0:d4:07:b1:a3:bd:8a:88:81:18:8a:3c:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35583A052563DF8180BE45295D67FAA5A3A18996
        Validity
            Not Before: Mar  3 16:15:00 2026 GMT
            Not After : Mar  2 16:20:00 2027 GMT
        Subject: CN=D5D39678044FE9BBA723946F0F0151376B56511E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e5:1a:e9:bd:01:c6:15:30:e6:f0:45:09:19:
                    af:e1:a2:78:88:e6:6b:a6:54:fc:64:ab:8b:5a:6c:
                    52:24:97:10:14:cb:dd:fd:d8:34:a9:94:6d:f2:b9:
                    70:59:c5:af:cb:7e:df:5e:8d:3b:45:c3:5f:06:07:
                    5b:b2:0d:e2:a2:44:70:48:75:b8:34:67:49:90:67:
                    cf:5d:c6:15:d2:e7:f6:a3:5b:6b:d6:1d:64:92:96:
                    76:51:22:d6:86:fb:24:8f:23:0f:30:e2:06:fa:81:
                    2f:c9:b0:dd:48:0b:2b:7d:9e:cb:69:81:eb:46:da:
                    5a:b9:d5:94:1f:9d:c1:08:1d:55:77:05:65:09:46:
                    10:4a:ac:a3:8a:2a:d3:42:b3:a9:0e:83:8a:e6:c9:
                    b6:96:b5:3b:5e:c4:ed:0c:d8:9d:95:62:3d:ee:a4:
                    42:33:50:25:67:2e:70:1e:9f:54:a9:1b:6a:f3:e3:
                    83:31:e8:b0:4a:27:c3:00:d5:77:89:4f:27:44:cd:
                    59:87:fb:6c:61:72:b8:8c:de:40:c0:9f:bf:18:78:
                    87:31:59:c9:ff:e2:a6:4a:7e:b7:dc:5b:f1:a4:fb:
                    58:12:45:7e:7f:b8:76:53:6c:ea:6e:ee:3c:6a:89:
                    c0:c1:04:6b:44:90:de:9c:5a:58:8e:66:0b:c0:9a:
                    29:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:D3:96:78:04:4F:E9:BB:A7:23:94:6F:0F:01:51:37:6B:56:51:1E
            X509v3 Authority Key Identifier:
                keyid:35:58:3A:05:25:63:DF:81:80:BE:45:29:5D:67:FA:A5:A3:A1:89:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0605569D230FA3823AA6BD3D450DAC2A253EFE0BD696D74BCC1EF72EF07C0F7B/0/35583A052563DF8180BE45295D67FAA5A3A18996.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35583A052563DF8180BE45295D67FAA5A3A18996.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0605569D230FA3823AA6BD3D450DAC2A253EFE0BD696D74BCC1EF72EF07C0F7B/0/3139302e31342e33352e302f32342d3234203d3e203532343533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.14.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:c1:ea:e7:7b:e5:09:d7:9e:9e:db:30:01:34:fb:2c:b9:02:
         cc:31:ae:d8:31:f4:12:5b:18:be:5d:1f:87:82:b0:08:cb:8a:
         51:f4:d8:fa:c0:2d:10:82:26:62:10:98:3d:f5:26:bd:08:47:
         bf:3e:2a:92:19:4a:0b:33:e4:60:4f:45:9b:c8:ad:5a:4a:52:
         4f:92:9e:24:5c:48:1f:74:50:00:b0:ff:c2:80:20:0c:e4:86:
         87:2b:b4:70:3c:83:74:dc:57:3f:33:b0:e6:f8:46:a8:49:f0:
         d7:49:26:ed:1f:e6:5e:2f:22:8b:30:47:64:08:f3:9a:82:da:
         cb:69:98:04:0d:35:1e:9b:2f:bd:50:79:40:4a:74:01:8d:82:
         6d:0d:46:4d:f7:a7:7d:07:5a:4a:20:cb:48:58:48:e3:e9:34:
         54:6d:5e:00:a0:69:1c:b9:42:8f:5e:c2:e5:44:5d:f5:be:82:
         8b:d9:d6:b7:9f:39:a4:c3:82:63:9c:c5:1f:c6:5a:1a:a9:e7:
         21:ec:7a:5d:f4:d6:1f:20:7f:2c:c7:60:08:e7:44:c5:8e:4f:
         b0:b5:1e:c1:fd:d8:17:e5:3c:16:81:74:da:bd:f2:ae:d3:77:
         96:71:89:c8:e5:06:18:f8:18:1a:26:b1:27:86:da:97:86:c1:
         2e:00:8d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:47:32 2026 by rpki-client