Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3139302e3130322e3139322e302f31392d3234203d3e203133343839.roa
File:                     3139302e3130322e3139322e302f31392d3234203d3e203133343839.roa (raw, json)
Hash identifier:          rnIk1QLXTj09m2tqyjW6P1fGtLsaGdNnfY+IrsdpNpE=
Subject key identifier:   08:0A:D8:83:3D:5F:44:4C:40:31:34:C8:90:AB:1E:71:68:9B:62:80
Certificate issuer:       /CN=3F426F657C9D6BF6728B5D80B4D03FE245BCD97E
Certificate serial:       71862CA60A4BC67B9B88199B044A08FDECE99E63
Authority key identifier: 3F:42:6F:65:7C:9D:6B:F6:72:8B:5D:80:B4:D0:3F:E2:45:BC:D9:7E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3139302e3130322e3139322e302f31392d3234203d3e203133343839.roa
Signing time:             Thu 19 Mar 2026 13:05:00 +0000
ROA not before:           Thu 19 Mar 2026 13:00:00 +0000
ROA not after:            Thu 18 Mar 2027 13:05:00 +0000
asID:                     13489
IP address blocks:        190.102.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:86:2c:a6:0a:4b:c6:7b:9b:88:19:9b:04:4a:08:fd:ec:e9:9e:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F426F657C9D6BF6728B5D80B4D03FE245BCD97E
        Validity
            Not Before: Mar 19 13:00:00 2026 GMT
            Not After : Mar 18 13:05:00 2027 GMT
        Subject: CN=080AD8833D5F444C403134C890AB1E71689B6280
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:02:d8:79:e1:98:05:bf:7d:82:06:67:4e:17:
                    41:47:e9:61:4d:55:9d:82:e1:e3:55:4c:f2:a1:88:
                    bc:b9:16:0a:39:89:a2:38:4e:f2:c9:2f:10:62:9e:
                    04:40:6b:36:dc:a0:88:60:09:d2:ea:b1:e6:6f:ed:
                    60:f7:09:75:5e:4b:59:11:f9:71:39:f9:53:06:b6:
                    8c:d2:1a:53:61:b0:53:ed:86:60:e2:3f:5d:41:d7:
                    3a:3a:79:0a:45:05:08:3e:86:5c:83:e8:38:59:8d:
                    c6:25:4c:c7:01:db:da:07:c1:d1:be:a6:57:b9:0d:
                    76:6e:e3:21:4e:1c:b4:da:74:7e:f9:e1:fb:b1:14:
                    52:6b:07:4f:f2:b5:50:bb:28:84:cc:3a:9d:56:68:
                    1c:f4:29:79:65:48:a0:97:d3:af:5c:1f:cf:6e:a6:
                    b2:53:7e:21:06:b2:a3:ca:65:1b:63:a2:a0:da:7c:
                    22:16:f4:6a:c7:6f:65:62:63:c2:2a:24:5b:14:06:
                    a8:f8:f5:89:e1:85:c7:8e:ce:0b:1c:aa:1a:0b:3a:
                    16:48:5b:51:35:b0:83:99:8c:a0:f5:28:f8:b1:cd:
                    eb:63:2e:bc:49:0f:fa:78:65:1c:f2:43:e7:b8:7b:
                    f6:a0:5f:bb:ed:b7:22:17:0c:e7:01:67:76:f6:4a:
                    1b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:0A:D8:83:3D:5F:44:4C:40:31:34:C8:90:AB:1E:71:68:9B:62:80
            X509v3 Authority Key Identifier:
                keyid:3F:42:6F:65:7C:9D:6B:F6:72:8B:5D:80:B4:D0:3F:E2:45:BC:D9:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3139302e3130322e3139322e302f31392d3234203d3e203133343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.102.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         23:7c:ab:38:13:aa:1a:6a:09:93:70:9a:35:3a:bc:b4:04:80:
         35:8f:f0:09:3b:0a:10:30:7e:cb:25:ed:1b:ec:8e:a8:86:54:
         7b:36:59:b0:f6:60:d1:f3:aa:2c:f4:92:d7:54:61:78:a0:9f:
         6c:0d:65:50:cd:3e:68:df:31:e4:09:86:86:0b:07:d1:db:eb:
         b2:59:a3:00:65:4e:cb:d4:48:3f:7d:59:62:6b:00:0b:03:31:
         70:84:3c:e6:bb:42:cd:43:32:30:ba:77:83:57:04:c3:0a:8a:
         3a:57:24:a3:28:57:57:ed:f4:56:ff:25:46:f2:1f:8b:eb:df:
         85:4e:74:ca:95:b1:03:ad:2a:8c:7f:1f:a1:8b:96:8f:8f:6b:
         fb:b6:f3:65:57:5a:4a:95:c4:8a:cb:6b:66:65:67:57:05:3b:
         64:7f:77:12:10:85:ec:29:16:9b:fe:3e:56:7f:e8:ec:24:3c:
         e4:9d:96:cd:18:e9:85:eb:8c:76:aa:ef:84:5f:99:aa:89:7c:
         30:9a:d2:c1:6e:8e:6c:4e:91:4f:43:0e:21:e4:1f:a7:57:36:
         97:d9:78:cb:32:65:c1:9d:75:59:54:70:83:dd:c0:f5:1b:8e:
         64:00:68:74:1c:e6:7a:b6:6c:ef:05:b6:61:ef:5f:93:b2:0b:
         c9:86:04:91
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUcYYspgpLxnubiBmbBEoI/ezpnmMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0Y0MjZGNjU3QzlENkJGNjcyOEI1RDgwQjREMDNGRTI0
NUJDRDk3RTAeFw0yNjAzMTkxMzAwMDBaFw0yNzAzMTgxMzA1MDBaMDMxMTAvBgNV
BAMTKDA4MEFEODgzM0Q1RjQ0NEM0MDMxMzRDODkwQUIxRTcxNjg5QjYyODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1Ath54ZgFv32CBmdOF0FH6WFN
VZ2C4eNVTPKhiLy5Fgo5iaI4TvLJLxBingRAazbcoIhgCdLqseZv7WD3CXVeS1kR
+XE5+VMGtozSGlNhsFPthmDiP11B1zo6eQpFBQg+hlyD6DhZjcYlTMcB29oHwdG+
ple5DXZu4yFOHLTadH754fuxFFJrB0/ytVC7KITMOp1WaBz0KXllSKCX069cH89u
prJTfiEGsqPKZRtjoqDafCIW9GrHb2ViY8IqJFsUBqj49YnhhceOzgscqhoLOhZI
W1E1sIOZjKD1KPixzetjLrxJD/p4ZRzyQ+e4e/agX7vttyIXDOcBZ3b2ShuzAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUCArYgz1fRExAMTTIkKsecWibYoAwHwYDVR0j
BBgwFoAUP0JvZXyda/Zyi12AtNA/4kW82X4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQ0JFRTc5MkEyRDk3ODlGMjY5NDBDNEZBNUFEMDJBMkVG
MTlFRENBNjk2ODI4QTgxOEIwNUQyRUZFODBCNjVGLzAvM0Y0MjZGNjU3QzlENkJG
NjcyOEI1RDgwQjREMDNGRTI0NUJDRDk3RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zRjQyNkY2NTdDOUQ2QkY2NzI4
QjVEODBCNEQwM0ZFMjQ1QkNEOTdFLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUNCRUU3OTJBMkQ5Nzg5RjI2OTQwQzRGQTVBRDAyQTJFRjE5RURDQTY5
NjgyOEE4MThCMDVEMkVGRTgwQjY1Ri8wLzMxMzkzMDJlMzEzMDMyMmUzMTM5MzIy
ZTMwMmYzMTM5MmQzMjM0MjAzZDNlMjAzMTMzMzQzODM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFvmbA
MA0GCSqGSIb3DQEBCwUAA4IBAQAjfKs4E6oaagmTcJo1Ory0BIA1j/AJOwoQMH7L
Je0b7I6ohlR7Nlmw9mDR86os9JLXVGF4oJ9sDWVQzT5o3zHkCYaGCwfR2+uyWaMA
ZU7L1Eg/fVliawALAzFwhDzmu0LNQzIwuneDVwTDCoo6VySjKFdX7fRW/yVG8h+L
69+FTnTKlbEDrSqMfx+hi5aPj2v7tvNlV1pKlcSKy2tmZWdXBTtkf3cSEIXsKRab
/j5Wf+jsJDzknZbNGOmF64x2qu+EX5mqiXwwmtLBbo5sTpFPQw4h5B+nVzaX2XjL
MmXBnXVZVHCD3cD1G45kAGh0HOZ6tmzvBbZh71+TsgvJhgSR
-----END CERTIFICATE-----
Generated at Thu Mar 26 22:59:31 2026 by rpki-client