Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/286A91BA89AF978CCE2BB0FA7581486B216EA959BDF3E8E24B7EDCFF177D5193/0/3139302e39392e38342e302f32322d3232203d3e203134313738.roa
File:                     3139302e39392e38342e302f32322d3232203d3e203134313738.roa (raw, json)
Hash identifier:          9hkc9P2e5jdhGA+l44N6s3vA9KCENIQfD0K+9UYWs3M=
Subject key identifier:   98:4A:2C:A3:3D:20:DA:48:93:8A:ED:D7:69:77:91:7B:0F:55:9A:75
Certificate issuer:       /CN=7B516BC52FDBEAD0CF80516E1794A01BEFD23DDD
Certificate serial:       780EE57CBD57B91545EC83B7C7D38F3A580FC4B6
Authority key identifier: 7B:51:6B:C5:2F:DB:EA:D0:CF:80:51:6E:17:94:A0:1B:EF:D2:3D:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B516BC52FDBEAD0CF80516E1794A01BEFD23DDD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/286A91BA89AF978CCE2BB0FA7581486B216EA959BDF3E8E24B7EDCFF177D5193/0/3139302e39392e38342e302f32322d3232203d3e203134313738.roa
Signing time:             Thu 24 Sep 2026 07:20:00 +0000
ROA not before:           Thu 24 Sep 2026 07:15:00 +0000
ROA not after:            Thu 23 Sep 2027 07:20:00 +0000
asID:                     14178
IP address blocks:        190.99.84.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/286A91BA89AF978CCE2BB0FA7581486B216EA959BDF3E8E24B7EDCFF177D5193/0/7B516BC52FDBEAD0CF80516E1794A01BEFD23DDD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/286A91BA89AF978CCE2BB0FA7581486B216EA959BDF3E8E24B7EDCFF177D5193/0/7B516BC52FDBEAD0CF80516E1794A01BEFD23DDD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B516BC52FDBEAD0CF80516E1794A01BEFD23DDD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 09:25:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:0e:e5:7c:bd:57:b9:15:45:ec:83:b7:c7:d3:8f:3a:58:0f:c4:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B516BC52FDBEAD0CF80516E1794A01BEFD23DDD
        Validity
            Not Before: Sep 24 07:15:00 2026 GMT
            Not After : Sep 23 07:20:00 2027 GMT
        Subject: CN=984A2CA33D20DA48938AEDD76977917B0F559A75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d7:f7:0c:ff:90:95:14:fb:a6:90:4e:9a:7e:
                    42:dc:bf:6a:ff:17:94:92:36:1f:1c:5c:4d:69:fb:
                    b0:fd:15:ae:b4:3a:9a:aa:98:7e:d6:e2:f7:0f:56:
                    3c:0e:a5:b5:4e:9f:71:ec:db:d3:0c:3f:7d:78:e3:
                    98:1a:75:5c:4d:15:ba:93:d1:d0:24:7e:53:8c:a0:
                    c2:42:f2:84:5d:7c:ff:5b:7b:10:fc:4c:08:c3:03:
                    0a:42:5c:a3:63:ad:a7:e7:a1:91:59:ad:0a:a6:f4:
                    14:5d:2b:ff:6b:8c:75:b4:cc:b5:cf:43:42:30:5d:
                    0f:07:68:3c:a5:63:ed:e1:df:7b:00:c7:07:07:42:
                    58:d0:35:6a:0e:8c:bc:d9:bb:82:1b:00:92:33:6e:
                    08:bb:b0:ed:3a:66:b9:4e:a4:41:31:62:7a:4c:53:
                    8c:3f:52:54:26:ae:26:8f:ea:e2:20:87:61:03:6b:
                    a0:c4:58:55:68:5f:1a:83:82:f9:a1:45:e6:6a:44:
                    3c:85:23:df:9d:2a:52:2c:ae:37:5a:0b:b3:f3:27:
                    bd:ea:0d:1c:2a:20:14:b9:97:97:10:0d:45:7a:8b:
                    ea:e2:82:51:f2:db:b6:87:30:b9:d2:eb:5c:99:d1:
                    9d:b8:bc:78:b4:47:e9:70:9b:18:4a:64:1f:3b:0b:
                    80:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:4A:2C:A3:3D:20:DA:48:93:8A:ED:D7:69:77:91:7B:0F:55:9A:75
            X509v3 Authority Key Identifier:
                keyid:7B:51:6B:C5:2F:DB:EA:D0:CF:80:51:6E:17:94:A0:1B:EF:D2:3D:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/286A91BA89AF978CCE2BB0FA7581486B216EA959BDF3E8E24B7EDCFF177D5193/0/7B516BC52FDBEAD0CF80516E1794A01BEFD23DDD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B516BC52FDBEAD0CF80516E1794A01BEFD23DDD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/286A91BA89AF978CCE2BB0FA7581486B216EA959BDF3E8E24B7EDCFF177D5193/0/3139302e39392e38342e302f32322d3232203d3e203134313738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.99.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:a2:92:c4:13:50:ed:bb:ef:ca:5b:ae:b5:cc:f3:cf:e7:16:
         22:75:49:20:ae:ec:eb:df:45:22:11:af:9d:c7:16:4c:7e:ff:
         df:d7:8c:fc:80:04:42:19:81:91:f0:fc:f2:87:10:83:9a:05:
         d9:9f:ec:b3:1d:98:66:f8:9c:ca:30:c4:d0:34:31:21:f5:2e:
         be:ba:1f:f9:24:ce:53:6a:a6:6a:cb:af:62:99:13:76:25:1f:
         21:31:4d:24:9f:73:5d:5c:6d:32:ea:aa:d8:26:1c:49:a8:41:
         bf:c2:cb:ab:5e:d6:76:64:c9:61:6d:e7:7e:bc:93:b7:a8:02:
         48:53:32:1d:80:f2:f3:77:47:8b:2a:3c:cd:e6:34:bb:3d:28:
         5c:da:c3:0c:b9:c7:24:40:65:8b:41:7a:c0:78:78:fe:7e:48:
         8f:61:81:d5:e7:e9:51:33:19:47:6b:65:5b:66:f0:7a:da:e3:
         0c:e1:48:a2:37:06:55:e1:53:3a:c8:39:9c:70:83:15:53:99:
         1a:17:13:69:ef:d2:fb:e6:52:3e:ca:10:14:75:b5:12:6e:a2:
         af:b0:7d:ae:66:cb:68:2d:5d:a2:2e:8b:24:30:55:09:f3:71:
         b7:e7:2b:80:d7:8f:75:a5:45:6e:d9:c9:43:4f:03:d8:43:32:
         38:67:e0:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 20:43:57 2026 by rpki-client