Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1A2D6D80BB3773B1F555A8C9B8F8D21CFEB652F6BF04435B1F88AEEFB6AC19C0/0/3139302e39332e33372e302f32342d3234203d3e20313734.roa
File:                     3139302e39332e33372e302f32342d3234203d3e20313734.roa (raw, json)
Hash identifier:          ZGYTJIn33DwJ/0QP+Ushxvh4nBWkoneiiyFDZNn/DoE=
Subject key identifier:   F7:06:CE:CD:01:2B:5A:38:88:CF:14:6B:AD:8D:30:F3:CF:16:A8:77
Certificate issuer:       /CN=5408B30DE5B83D183566781EE9CE33FDF27A8870
Certificate serial:       0A3A106646A9AB5FBFF665C9D31C49EB07A6732A
Authority key identifier: 54:08:B3:0D:E5:B8:3D:18:35:66:78:1E:E9:CE:33:FD:F2:7A:88:70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5408B30DE5B83D183566781EE9CE33FDF27A8870.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1A2D6D80BB3773B1F555A8C9B8F8D21CFEB652F6BF04435B1F88AEEFB6AC19C0/0/3139302e39332e33372e302f32342d3234203d3e20313734.roa
Signing time:             Thu 26 Mar 2026 15:36:03 +0000
ROA not before:           Thu 26 Mar 2026 15:31:03 +0000
ROA not after:            Thu 25 Mar 2027 15:36:03 +0000
asID:                     174
IP address blocks:        190.93.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1A2D6D80BB3773B1F555A8C9B8F8D21CFEB652F6BF04435B1F88AEEFB6AC19C0/0/5408B30DE5B83D183566781EE9CE33FDF27A8870.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1A2D6D80BB3773B1F555A8C9B8F8D21CFEB652F6BF04435B1F88AEEFB6AC19C0/0/5408B30DE5B83D183566781EE9CE33FDF27A8870.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5408B30DE5B83D183566781EE9CE33FDF27A8870.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 17:54:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:3a:10:66:46:a9:ab:5f:bf:f6:65:c9:d3:1c:49:eb:07:a6:73:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5408B30DE5B83D183566781EE9CE33FDF27A8870
        Validity
            Not Before: Mar 26 15:31:03 2026 GMT
            Not After : Mar 25 15:36:03 2027 GMT
        Subject: CN=F706CECD012B5A3888CF146BAD8D30F3CF16A877
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f6:9f:3e:62:52:a6:87:40:db:e3:31:fb:e1:
                    88:e9:cb:4a:c9:3b:60:1e:98:36:0e:be:4e:00:e9:
                    20:bc:e2:9b:77:f0:a2:e3:8a:81:97:25:34:9a:83:
                    c0:fb:d8:b1:c2:07:5f:14:12:47:e5:97:2a:e0:54:
                    93:1b:46:5e:ab:2e:f7:8f:b9:03:a2:08:11:13:0e:
                    24:98:62:1c:d4:36:6f:75:41:38:de:d7:a2:9d:ad:
                    6a:ef:01:66:b4:98:ac:95:66:a0:09:ca:5c:2a:11:
                    3c:0b:4f:c6:44:6a:8d:42:5b:8e:54:46:b5:57:35:
                    01:52:e0:9e:a0:66:38:be:4a:6a:99:2d:91:aa:3f:
                    50:22:c8:18:11:99:d1:cb:f6:6e:d9:02:fa:0b:58:
                    32:cd:01:53:ce:5e:20:ab:06:8e:2f:96:23:67:2e:
                    c9:62:18:31:1c:d4:1e:9f:d2:dc:91:2e:11:39:bc:
                    d2:8a:b3:f4:01:e0:b0:d2:f1:f0:ba:05:25:f4:3c:
                    fc:e8:73:4b:51:5e:0e:45:c1:80:ea:4a:2a:c2:48:
                    28:77:e3:b3:77:f2:29:7b:74:a2:de:77:ff:28:af:
                    69:33:04:60:7a:95:fc:56:f0:09:d5:47:64:bd:85:
                    1f:bb:a4:a4:37:33:63:5e:28:6a:ab:8e:3e:8d:42:
                    50:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:06:CE:CD:01:2B:5A:38:88:CF:14:6B:AD:8D:30:F3:CF:16:A8:77
            X509v3 Authority Key Identifier:
                keyid:54:08:B3:0D:E5:B8:3D:18:35:66:78:1E:E9:CE:33:FD:F2:7A:88:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1A2D6D80BB3773B1F555A8C9B8F8D21CFEB652F6BF04435B1F88AEEFB6AC19C0/0/5408B30DE5B83D183566781EE9CE33FDF27A8870.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5408B30DE5B83D183566781EE9CE33FDF27A8870.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1A2D6D80BB3773B1F555A8C9B8F8D21CFEB652F6BF04435B1F88AEEFB6AC19C0/0/3139302e39332e33372e302f32342d3234203d3e20313734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:3e:74:18:75:92:68:ae:e5:bf:cd:f4:2f:dc:ce:a6:24:c1:
         97:91:34:e4:3a:ed:11:b5:d3:3a:6d:b0:e2:3a:ac:13:24:c1:
         22:48:53:29:a2:b8:4b:f5:e2:e2:6d:ac:4e:55:3b:6f:27:09:
         44:4b:31:6b:c3:62:4a:c0:9a:72:5f:97:ce:63:e8:4c:b4:19:
         8e:af:1d:0a:71:6a:31:21:80:bf:09:4d:84:44:79:3d:b9:8b:
         94:67:eb:f6:62:00:dc:86:ba:db:33:3c:e7:80:dc:1b:6e:9a:
         35:fb:7a:9f:af:0f:64:27:fa:66:f1:14:dc:af:e5:df:bd:aa:
         bf:d0:54:9f:a5:be:c0:d1:1d:dd:67:a2:7d:17:76:76:92:e1:
         79:c0:3b:10:2d:c2:b7:b2:54:b8:c3:fc:4e:85:c6:52:52:d5:
         f8:44:77:92:2a:96:81:15:04:77:01:8f:62:ec:86:6c:37:a0:
         d1:de:98:bb:ea:70:09:f6:5a:d9:31:ac:18:ec:1b:0d:c2:77:
         f4:b8:b1:a8:06:fb:26:aa:cf:06:97:f1:50:c2:1e:3f:db:fc:
         3f:99:3c:79:07:87:14:7f:68:9c:7d:48:51:3e:42:16:8b:a2:
         c6:22:0e:02:00:22:85:bf:ae:10:02:04:5c:4a:4a:62:95:d6:
         32:07:03:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:19:55 2026 by rpki-client