Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AE88E1895A1AA42D5A10A7ED389A0BACFD7B4874CBAB86A7B790A78C1457EFC/0/3139302e382e3136342e302f32322d3234203d3e20323634363238.roa
File:                     3139302e382e3136342e302f32322d3234203d3e20323634363238.roa (raw, json)
Hash identifier:          SC3Dk/QoQplZk7v3ipWS7g+w5zavuo+h83ht30/CUAs=
Subject key identifier:   91:B2:82:EE:A6:99:BE:F0:1E:B1:19:82:FF:AF:83:B5:9C:6A:88:BE
Certificate issuer:       /CN=597B422C63F4E901AB522655E1EDFD64C35BD133
Certificate serial:       4D46F0721BF90E902D9502DB272ECFA591A52DED
Authority key identifier: 59:7B:42:2C:63:F4:E9:01:AB:52:26:55:E1:ED:FD:64:C3:5B:D1:33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/597B422C63F4E901AB522655E1EDFD64C35BD133.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AE88E1895A1AA42D5A10A7ED389A0BACFD7B4874CBAB86A7B790A78C1457EFC/0/3139302e382e3136342e302f32322d3234203d3e20323634363238.roa
Signing time:             Mon 18 Aug 2025 13:40:00 +0000
ROA not before:           Mon 18 Aug 2025 13:35:00 +0000
ROA not after:            Mon 17 Aug 2026 13:40:00 +0000
asID:                     264628
IP address blocks:        190.8.164.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1AE88E1895A1AA42D5A10A7ED389A0BACFD7B4874CBAB86A7B790A78C1457EFC/0/597B422C63F4E901AB522655E1EDFD64C35BD133.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1AE88E1895A1AA42D5A10A7ED389A0BACFD7B4874CBAB86A7B790A78C1457EFC/0/597B422C63F4E901AB522655E1EDFD64C35BD133.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/597B422C63F4E901AB522655E1EDFD64C35BD133.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:46:f0:72:1b:f9:0e:90:2d:95:02:db:27:2e:cf:a5:91:a5:2d:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=597B422C63F4E901AB522655E1EDFD64C35BD133
        Validity
            Not Before: Aug 18 13:35:00 2025 GMT
            Not After : Aug 17 13:40:00 2026 GMT
        Subject: CN=91B282EEA699BEF01EB11982FFAF83B59C6A88BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:80:ef:a2:65:40:2d:b2:83:49:15:f5:88:2b:
                    ca:1a:9e:30:f6:0b:8d:8e:2f:c6:92:eb:4b:43:56:
                    5b:d6:3f:42:b8:10:8e:9a:5c:67:69:2f:13:77:bd:
                    85:89:44:d6:62:04:5a:35:76:76:85:b8:ad:bc:0f:
                    fb:38:27:e6:af:e1:e1:c5:99:d2:09:aa:ff:13:59:
                    7c:8b:ab:fb:22:57:10:9b:79:f8:d1:b2:2b:4f:09:
                    8c:6b:25:8a:ae:7a:b8:e5:0b:52:45:74:d1:89:7c:
                    49:80:d6:75:14:57:90:a4:b0:c8:22:25:e2:e8:fd:
                    73:e4:03:ee:3b:c8:dd:08:67:ba:50:fd:ea:be:35:
                    d4:c4:bd:5c:fe:8a:35:8d:ba:c9:cb:79:b7:5e:63:
                    0c:7f:2e:9d:93:7e:23:34:52:a0:22:64:9d:c2:b5:
                    2e:4e:81:18:03:3d:d9:82:f1:04:d6:e5:5e:12:e4:
                    b9:8a:fd:fe:c3:60:33:02:4a:fa:6a:8b:4f:e9:99:
                    7e:f1:6f:df:60:4d:89:34:30:6a:00:97:b7:12:ad:
                    87:c0:20:b6:d9:15:64:68:54:2b:1a:98:4e:62:3d:
                    12:27:04:62:29:8e:5b:f1:2b:db:7b:fb:26:21:cf:
                    49:c6:59:69:63:ce:60:76:65:0f:fd:e9:dc:9e:16:
                    87:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:B2:82:EE:A6:99:BE:F0:1E:B1:19:82:FF:AF:83:B5:9C:6A:88:BE
            X509v3 Authority Key Identifier:
                keyid:59:7B:42:2C:63:F4:E9:01:AB:52:26:55:E1:ED:FD:64:C3:5B:D1:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AE88E1895A1AA42D5A10A7ED389A0BACFD7B4874CBAB86A7B790A78C1457EFC/0/597B422C63F4E901AB522655E1EDFD64C35BD133.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/597B422C63F4E901AB522655E1EDFD64C35BD133.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AE88E1895A1AA42D5A10A7ED389A0BACFD7B4874CBAB86A7B790A78C1457EFC/0/3139302e382e3136342e302f32322d3234203d3e20323634363238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.8.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:5b:7e:d6:73:71:00:0f:11:46:39:6b:f2:24:57:10:a7:d5:
         61:fe:c4:63:11:de:27:c8:a3:0a:ce:fc:08:0b:2c:4c:97:5a:
         27:b5:35:a6:92:99:52:ce:71:7c:22:f9:7b:fc:60:cf:01:7e:
         a9:e2:b2:b5:ff:8b:7c:fe:a6:4b:a1:67:5d:43:60:0f:e2:57:
         cf:63:5d:f9:01:30:61:7d:e0:73:50:e9:b8:80:84:26:ef:3f:
         36:95:94:0f:2d:13:35:bb:31:e3:4b:e9:91:68:aa:09:5f:fb:
         5d:81:22:26:46:dc:21:a9:6f:de:ce:75:98:66:e1:b7:fc:40:
         0e:d6:06:d2:61:91:98:14:53:e9:03:be:0a:20:52:25:9a:70:
         de:62:12:9e:e6:8b:e1:33:a1:23:88:40:25:db:56:36:79:2c:
         46:b2:4f:6f:7d:d6:b9:3d:bf:42:a5:53:ee:1a:e9:67:d0:00:
         fe:84:f5:83:85:c6:35:aa:9f:00:01:83:6e:59:cf:b0:da:7c:
         40:fe:17:22:a3:54:d4:3a:ef:3e:2e:cc:36:06:12:82:fb:5f:
         a1:9f:a0:fa:09:99:1f:db:05:b0:03:f9:81:ec:a1:b3:13:b3:
         1d:92:ca:31:cb:43:97:c1:a5:78:a5:a9:aa:23:67:d7:c0:cf:
         a1:f3:cb:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:59:08 2025 by rpki-client