Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29E00CE602B393B4179BA729DC98233823CC21365F1BDFBC94438459CD1328B2/0/3139302e3130332e3131352e302f32342d3234203d3e20323635353534.roa
File:                     3139302e3130332e3131352e302f32342d3234203d3e20323635353534.roa (raw, json)
Hash identifier:          xMSb0jLPIphSzd+JLUH1yzp5P32PNbGQZ7dBqC5gUQI=
Subject key identifier:   CA:34:90:38:74:AB:FB:72:CC:01:B8:9B:99:9B:3E:BE:D6:25:D1:D3
Certificate issuer:       /CN=A7298BAA1ED1E19DCC8B3C9B9E123E921EED7907
Certificate serial:       2726BDCF1585104F5E1B636499CBDC39B4C52785
Authority key identifier: A7:29:8B:AA:1E:D1:E1:9D:CC:8B:3C:9B:9E:12:3E:92:1E:ED:79:07
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7298BAA1ED1E19DCC8B3C9B9E123E921EED7907.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29E00CE602B393B4179BA729DC98233823CC21365F1BDFBC94438459CD1328B2/0/3139302e3130332e3131352e302f32342d3234203d3e20323635353534.roa
Signing time:             Wed 15 Jul 2026 13:54:59 +0000
ROA not before:           Wed 15 Jul 2026 13:49:59 +0000
ROA not after:            Wed 14 Jul 2027 13:54:59 +0000
asID:                     265554
IP address blocks:        190.103.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/29E00CE602B393B4179BA729DC98233823CC21365F1BDFBC94438459CD1328B2/0/A7298BAA1ED1E19DCC8B3C9B9E123E921EED7907.crl
                          rsync://repository.lacnic.net/rpki/lacnic/29E00CE602B393B4179BA729DC98233823CC21365F1BDFBC94438459CD1328B2/0/A7298BAA1ED1E19DCC8B3C9B9E123E921EED7907.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7298BAA1ED1E19DCC8B3C9B9E123E921EED7907.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:26:bd:cf:15:85:10:4f:5e:1b:63:64:99:cb:dc:39:b4:c5:27:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7298BAA1ED1E19DCC8B3C9B9E123E921EED7907
        Validity
            Not Before: Jul 15 13:49:59 2026 GMT
            Not After : Jul 14 13:54:59 2027 GMT
        Subject: CN=CA34903874ABFB72CC01B89B999B3EBED625D1D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f4:96:be:d8:1b:31:55:a1:69:93:ea:dc:38:
                    55:69:54:59:9d:c1:a8:11:a7:34:d7:b1:2a:30:64:
                    a2:a9:36:0b:e7:6e:5e:0f:b5:2e:94:ca:14:a5:df:
                    93:78:bb:1b:e2:09:24:e2:81:a4:40:d9:06:e9:37:
                    b6:30:91:36:bb:27:69:e7:17:ca:c8:86:45:cc:36:
                    2d:10:5a:be:4a:52:19:ea:62:93:7d:27:d6:00:50:
                    1f:d2:ee:95:19:77:78:95:5c:e4:be:b6:d2:48:12:
                    9b:80:df:f7:9c:d9:43:bc:8d:0c:75:24:56:cf:06:
                    24:e0:6b:2e:ab:7d:40:45:d1:a3:35:3f:e5:1c:7e:
                    51:fa:7c:cb:41:11:40:78:dd:3b:3f:ff:14:c5:c4:
                    4c:08:76:20:10:91:f2:4d:7b:28:cf:92:bf:b5:7c:
                    15:ee:ab:e1:0d:e2:b4:5b:01:cc:10:db:50:ed:6a:
                    64:95:38:81:7e:85:6b:d0:11:19:91:f7:ff:25:c4:
                    be:78:fa:cf:d6:64:1a:26:ee:36:be:c8:65:b4:65:
                    a8:82:7f:18:84:f9:da:3a:51:8d:f4:5f:66:99:2e:
                    d7:42:64:a3:f0:e2:b6:eb:cf:29:56:77:5e:9a:a3:
                    af:04:f3:a3:f2:59:a4:21:fb:5d:43:a8:07:7d:ce:
                    5b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:34:90:38:74:AB:FB:72:CC:01:B8:9B:99:9B:3E:BE:D6:25:D1:D3
            X509v3 Authority Key Identifier:
                keyid:A7:29:8B:AA:1E:D1:E1:9D:CC:8B:3C:9B:9E:12:3E:92:1E:ED:79:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29E00CE602B393B4179BA729DC98233823CC21365F1BDFBC94438459CD1328B2/0/A7298BAA1ED1E19DCC8B3C9B9E123E921EED7907.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7298BAA1ED1E19DCC8B3C9B9E123E921EED7907.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29E00CE602B393B4179BA729DC98233823CC21365F1BDFBC94438459CD1328B2/0/3139302e3130332e3131352e302f32342d3234203d3e20323635353534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.103.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:f2:26:44:e0:ec:9e:45:31:b1:d4:49:88:88:60:ae:59:e1:
         d2:75:17:db:fb:0a:09:a9:ef:17:a9:a6:bd:90:34:f5:c9:85:
         11:29:3d:6b:99:ed:de:0f:37:74:14:b9:e4:15:e8:71:f9:0d:
         29:cf:82:da:3d:49:39:87:c5:8f:4e:79:bd:79:a2:a5:8f:4d:
         c9:d6:41:92:f2:f6:bc:89:44:3a:ad:60:ea:19:c0:42:77:72:
         27:3b:83:21:8b:b4:e3:72:87:ef:62:7d:d4:1e:23:3b:9f:d0:
         81:e0:74:42:28:6b:3e:15:79:31:d7:2b:a3:45:4e:c5:4b:04:
         52:e4:9d:3a:ad:ba:d9:9d:20:70:5a:ee:b0:49:e8:c3:97:df:
         ec:b6:ed:53:0c:78:0c:25:25:bb:0b:a6:ad:8b:8c:6e:61:94:
         54:5e:ba:a3:80:d8:a6:e7:64:cc:ed:9d:0f:f5:5c:3c:08:1a:
         2d:86:53:50:f2:70:79:08:07:97:de:bf:70:a9:af:8f:68:49:
         46:51:24:61:55:1f:f7:7a:e8:46:e5:d2:82:ea:e3:7e:10:08:
         5a:c0:af:eb:36:fc:29:15:47:8e:f7:2b:dc:12:5e:a8:58:5e:
         fd:b2:25:82:9c:86:60:fb:eb:5f:0a:ca:db:05:b4:71:81:bb:
         e9:ad:d9:aa
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUJya9zxWFEE9eG2NkmcvcObTFJ4UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTcyOThCQUExRUQxRTE5RENDOEIzQzlCOUUxMjNFOTIx
RUVENzkwNzAeFw0yNjA3MTUxMzQ5NTlaFw0yNzA3MTQxMzU0NTlaMDMxMTAvBgNV
BAMTKENBMzQ5MDM4NzRBQkZCNzJDQzAxQjg5Qjk5OUIzRUJFRDYyNUQxRDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm9Ja+2BsxVaFpk+rcOFVpVFmd
wagRpzTXsSowZKKpNgvnbl4PtS6UyhSl35N4uxviCSTigaRA2QbpN7YwkTa7J2nn
F8rIhkXMNi0QWr5KUhnqYpN9J9YAUB/S7pUZd3iVXOS+ttJIEpuA3/ec2UO8jQx1
JFbPBiTgay6rfUBF0aM1P+UcflH6fMtBEUB43Ts//xTFxEwIdiAQkfJNeyjPkr+1
fBXuq+EN4rRbAcwQ21DtamSVOIF+hWvQERmR9/8lxL54+s/WZBom7ja+yGW0ZaiC
fxiE+do6UY30X2aZLtdCZKPw4rbrzylWd16ao68E86PyWaQh+11DqAd9zlszAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUyjSQOHSr+3LMAbibmZs+vtYl0dMwHwYDVR0j
BBgwFoAUpymLqh7R4Z3MizybnhI+kh7teQcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yOUUwMENFNjAyQjM5M0I0MTc5QkE3MjlEQzk4MjMzODIz
Q0MyMTM2NUYxQkRGQkM5NDQzODQ1OUNEMTMyOEIyLzAvQTcyOThCQUExRUQxRTE5
RENDOEIzQzlCOUUxMjNFOTIxRUVENzkwNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BNzI5OEJBQTFFRDFFMTlEQ0M4
QjNDOUI5RTEyM0U5MjFFRUQ3OTA3LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjlFMDBDRTYwMkIzOTNCNDE3OUJBNzI5REM5ODIzMzgyM0NDMjEzNjVG
MUJERkJDOTQ0Mzg0NTlDRDEzMjhCMi8wLzMxMzkzMDJlMzEzMDMzMmUzMTMxMzUy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzUzNTM1MzQucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC+
Z3MwDQYJKoZIhvcNAQELBQADggEBAEDyJkTg7J5FMbHUSYiIYK5Z4dJ1F9v7Cgmp
7xeppr2QNPXJhREpPWuZ7d4PN3QUueQV6HH5DSnPgto9STmHxY9Oeb15oqWPTcnW
QZLy9ryJRDqtYOoZwEJ3cic7gyGLtONyh+9ifdQeIzuf0IHgdEIoaz4VeTHXK6NF
TsVLBFLknTqtutmdIHBa7rBJ6MOX3+y27VMMeAwlJbsLpq2LjG5hlFReuqOA2Kbn
ZMztnQ/1XDwIGi2GU1DycHkIB5fev3Cpr49oSUZRJGFVH/d66Ebl0oLq434QCFrA
r+s2/CkVR473K9wSXqhYXv2yJYKchmD7618KytsFtHGBu+mt2ao=
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:15:36 2026 by rpki-client