Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134392e3132382e302f32322d3234203d3e203134373534.roa
File:                     3139302e3134392e3132382e302f32322d3234203d3e203134373534.roa (raw, json)
Hash identifier:          GK03SQwlzeiZIpaedHL2QSAidj+0nAG6gyF19poLELc=
Subject key identifier:   38:70:DB:AD:0E:C8:A8:92:4E:28:2D:C5:71:5E:7A:48:E3:82:5F:EA
Certificate issuer:       /CN=30B067F4705EDF16C63ED51B9F8946787B07F237
Certificate serial:       25707CFD8BEE6CCC06BBD332F6BE06B9B5548615
Authority key identifier: 30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134392e3132382e302f32322d3234203d3e203134373534.roa
Signing time:             Tue 28 Apr 2026 07:55:00 +0000
ROA not before:           Tue 28 Apr 2026 07:50:00 +0000
ROA not after:            Tue 27 Apr 2027 07:55:00 +0000
asID:                     14754
IP address blocks:        190.149.128.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl
                          rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 16 May 2026 16:19:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:70:7c:fd:8b:ee:6c:cc:06:bb:d3:32:f6:be:06:b9:b5:54:86:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30B067F4705EDF16C63ED51B9F8946787B07F237
        Validity
            Not Before: Apr 28 07:50:00 2026 GMT
            Not After : Apr 27 07:55:00 2027 GMT
        Subject: CN=3870DBAD0EC8A8924E282DC5715E7A48E3825FEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:3e:59:6a:72:8b:e9:7e:11:25:7a:b9:5b:45:
                    79:ae:59:1c:14:06:eb:0d:db:d6:3f:a3:b0:fd:53:
                    53:7f:6d:3c:7f:f0:62:43:e4:3d:7d:63:fb:38:5f:
                    43:69:0a:a3:a5:10:0e:dc:4a:da:b0:e6:4e:f0:b2:
                    ba:74:4f:f4:f3:cd:a4:1d:b9:c1:4a:83:c1:7f:e3:
                    f0:a1:3d:68:e6:f5:b0:80:32:28:28:0b:81:2d:c1:
                    9e:d6:99:ff:ec:7b:cf:f9:94:69:e6:c1:87:7d:8f:
                    e7:3f:49:9d:2d:05:78:30:b2:95:fd:0e:86:7a:4f:
                    79:49:20:fb:86:01:59:bd:d0:74:7d:48:8a:2f:33:
                    3e:a0:20:1e:9a:8c:9f:ab:52:6a:dd:4b:9c:78:87:
                    47:b8:4e:34:3f:b4:5f:14:70:7d:df:1d:c4:ce:fa:
                    bf:90:59:81:1c:c7:6f:f3:52:cc:40:2d:b1:4c:53:
                    e1:02:f2:92:42:6e:39:21:86:36:a4:4a:ee:f1:74:
                    8f:e1:7e:e5:43:90:f0:e5:45:10:81:d2:26:9a:17:
                    a3:94:f2:4b:8f:83:01:79:f5:1a:9a:2e:dc:bb:0c:
                    38:39:62:c1:05:d3:e8:ff:55:d4:ee:d5:fe:2d:cf:
                    5b:8a:b8:8e:f5:f7:4b:87:66:5e:9e:46:a2:aa:66:
                    93:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:70:DB:AD:0E:C8:A8:92:4E:28:2D:C5:71:5E:7A:48:E3:82:5F:EA
            X509v3 Authority Key Identifier:
                keyid:30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134392e3132382e302f32322d3234203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.149.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:e7:f0:aa:d6:38:38:6b:73:5a:80:58:cb:93:81:20:28:da:
         d2:b4:66:2b:f5:33:b7:ab:f0:4f:b6:cf:bf:14:5c:27:09:18:
         5d:79:cd:a7:cb:34:4d:5c:11:d9:4e:64:53:84:18:a8:f1:37:
         09:2c:44:5f:b8:71:02:2c:47:af:45:77:0c:67:ba:66:77:70:
         58:69:0d:16:b8:fe:34:4b:f9:de:cb:e0:16:c1:75:5a:c5:42:
         1f:a5:e3:c7:15:21:e3:61:e8:10:13:1a:98:87:21:f3:87:ce:
         ab:c8:81:03:43:b0:4e:0b:f8:23:a9:e7:7b:1e:84:85:6c:bd:
         87:51:a3:21:24:26:d3:18:4c:c6:d0:2f:8b:7c:2c:a1:c0:53:
         c1:5e:89:74:d1:3d:3f:ab:17:8a:71:d0:87:35:3b:36:eb:94:
         b9:c9:00:ba:06:c6:0d:71:46:9e:69:2d:4e:1b:89:fc:a6:e1:
         f3:5c:54:a8:5f:e6:98:7c:8b:bb:1c:f4:cd:ba:ae:04:cf:a1:
         f3:44:72:8b:86:24:ae:a1:bc:ca:e8:31:48:2a:4e:3c:5c:e4:
         90:6b:c1:63:58:f5:5f:0c:c1:de:c4:3c:22:30:84:47:34:66:
         34:a4:96:26:0f:bd:f6:98:1b:f5:67:c8:b3:ca:35:f4:6e:63:
         3e:4a:98:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:24:19 2026 by rpki-client