Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2F99FF5801B2459EEC31A6FFF2D986852EF2EF686382661B869B9A371D6DF6E1/0/3139302e3130372e3234382e302f32312d3234203d3e203238313034.roa
File:                     3139302e3130372e3234382e302f32312d3234203d3e203238313034.roa (raw, json)
Hash identifier:          hv6zcBmUPNj4EJfxB3ZxLAlvAxDnN/C80a8QlmvMyak=
Subject key identifier:   5B:8F:3C:0B:CC:92:41:3E:40:CF:A7:23:8A:6B:92:E8:2D:E6:F1:F8
Certificate issuer:       /CN=07B279A78014BD804AEF302752B00CB986444A33
Certificate serial:       3165D2FEDEBC7569FDDEEFC3272CA80B1CA2C63F
Authority key identifier: 07:B2:79:A7:80:14:BD:80:4A:EF:30:27:52:B0:0C:B9:86:44:4A:33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/07B279A78014BD804AEF302752B00CB986444A33.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2F99FF5801B2459EEC31A6FFF2D986852EF2EF686382661B869B9A371D6DF6E1/0/3139302e3130372e3234382e302f32312d3234203d3e203238313034.roa
Signing time:             Thu 25 Jun 2026 15:49:43 +0000
ROA not before:           Thu 25 Jun 2026 15:44:43 +0000
ROA not after:            Thu 24 Jun 2027 15:49:43 +0000
asID:                     28104
IP address blocks:        190.107.248.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2F99FF5801B2459EEC31A6FFF2D986852EF2EF686382661B869B9A371D6DF6E1/0/07B279A78014BD804AEF302752B00CB986444A33.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2F99FF5801B2459EEC31A6FFF2D986852EF2EF686382661B869B9A371D6DF6E1/0/07B279A78014BD804AEF302752B00CB986444A33.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/07B279A78014BD804AEF302752B00CB986444A33.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 03:34:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:65:d2:fe:de:bc:75:69:fd:de:ef:c3:27:2c:a8:0b:1c:a2:c6:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07B279A78014BD804AEF302752B00CB986444A33
        Validity
            Not Before: Jun 25 15:44:43 2026 GMT
            Not After : Jun 24 15:49:43 2027 GMT
        Subject: CN=5B8F3C0BCC92413E40CFA7238A6B92E82DE6F1F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f0:9d:2c:25:f9:6c:a4:28:36:98:a5:5c:f3:
                    a8:5b:ee:7b:ef:23:8b:ef:ac:c2:7d:54:17:90:7f:
                    03:3c:bf:b8:d6:33:f6:8a:24:25:95:6a:3d:a0:b8:
                    1d:a7:07:41:1b:61:e6:2b:13:83:e5:28:a8:9a:cd:
                    37:9b:d9:ce:8f:fc:ba:dc:91:cb:f9:74:35:0b:0a:
                    e5:a2:27:bd:9c:9f:13:d7:8c:c0:c3:f4:f3:43:4e:
                    38:c2:89:69:9b:85:96:3f:75:3d:11:9b:82:aa:f1:
                    cd:8b:cc:e2:ef:b4:31:d6:7d:8b:ae:d8:1a:58:2d:
                    57:d1:d1:86:3f:2d:c4:15:76:f9:62:c7:90:e6:e4:
                    78:fd:90:33:b4:e3:ee:d8:6a:4d:d2:48:ca:d3:a9:
                    78:7e:71:50:14:6b:56:fd:c5:b2:b9:88:b6:a1:79:
                    21:b6:54:00:12:9b:99:1f:fc:9c:84:d8:4a:0f:28:
                    90:c1:67:47:3a:8c:3c:18:5c:30:47:75:1d:b6:c1:
                    78:91:fc:8f:fc:43:30:00:bc:f0:37:54:bf:3b:06:
                    35:ac:9a:27:47:33:71:c5:65:a4:62:da:e5:50:ac:
                    54:66:1d:a6:9c:53:1e:a6:53:b1:aa:17:58:33:e3:
                    8c:1a:47:dd:a8:93:c2:a4:a7:64:63:ea:7d:13:b5:
                    01:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:8F:3C:0B:CC:92:41:3E:40:CF:A7:23:8A:6B:92:E8:2D:E6:F1:F8
            X509v3 Authority Key Identifier:
                keyid:07:B2:79:A7:80:14:BD:80:4A:EF:30:27:52:B0:0C:B9:86:44:4A:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2F99FF5801B2459EEC31A6FFF2D986852EF2EF686382661B869B9A371D6DF6E1/0/07B279A78014BD804AEF302752B00CB986444A33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/07B279A78014BD804AEF302752B00CB986444A33.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2F99FF5801B2459EEC31A6FFF2D986852EF2EF686382661B869B9A371D6DF6E1/0/3139302e3130372e3234382e302f32312d3234203d3e203238313034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9a:b1:03:ea:50:54:81:34:64:74:48:ad:08:b0:44:75:8b:ff:
         0a:cc:20:64:6d:35:4d:d1:f8:8a:2c:7a:55:2e:f7:94:78:39:
         ca:a9:73:40:f7:2d:5e:7d:ca:13:d5:cf:af:61:6a:28:57:f4:
         11:de:72:68:a1:29:38:c3:d3:50:da:ce:e9:82:69:cf:90:d9:
         54:81:41:9a:cf:26:66:4e:0d:dc:55:02:23:8e:31:01:cc:52:
         4b:d8:35:c6:29:e3:2d:5f:be:f3:3f:e3:cb:e4:7b:91:85:4b:
         aa:19:94:72:3d:ec:6b:98:81:d3:68:d0:25:cd:02:45:9a:cc:
         b9:b3:e3:5e:f2:09:f6:89:b7:ff:e0:5d:37:dc:ea:fe:b5:af:
         ea:e6:ba:21:53:6b:78:38:5b:0e:39:89:c4:e4:8b:a6:c4:c1:
         1f:f6:20:b7:99:61:f5:be:0f:30:2e:af:b3:b5:12:58:42:73:
         39:10:c0:69:9f:ce:29:54:03:d6:b7:47:13:2a:0d:a8:eb:d6:
         cb:f2:df:45:5b:a1:63:e9:1f:fd:84:ea:8a:4b:20:df:d9:43:
         ea:c8:77:b7:42:59:27:f3:9c:df:3b:74:96:77:28:df:b1:40:
         3a:4b:84:7a:5f:b0:b7:9a:07:f9:ed:18:00:ce:cc:ef:f6:40:
         da:62:88:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 03:32:12 2026 by rpki-client