Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3139302e3138322e3230392e302f32342d3234203d3e20323636373936.roa
File:                     3139302e3138322e3230392e302f32342d3234203d3e20323636373936.roa (raw, json)
Hash identifier:          w29Q8WS1MNE0znnCd7SBb07p3CwNEQ5QrdSfXqLHAFo=
Subject key identifier:   BD:33:33:CC:B1:5A:AD:84:1F:62:BE:4D:C9:CA:1B:D0:1A:BE:A8:DA
Certificate issuer:       /CN=F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA
Certificate serial:       64DC591AF321FCCBAC1A86A2BD13DFBD7E65B26F
Authority key identifier: F1:C3:5B:9C:F4:5B:DD:AB:E8:29:A9:F7:8B:C2:4D:C5:8A:FD:7E:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3139302e3138322e3230392e302f32342d3234203d3e20323636373936.roa
Signing time:             Thu 25 Jun 2026 16:49:45 +0000
ROA not before:           Thu 25 Jun 2026 16:44:45 +0000
ROA not after:            Thu 24 Jun 2027 16:49:45 +0000
asID:                     266796
IP address blocks:        190.182.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:dc:59:1a:f3:21:fc:cb:ac:1a:86:a2:bd:13:df:bd:7e:65:b2:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA
        Validity
            Not Before: Jun 25 16:44:45 2026 GMT
            Not After : Jun 24 16:49:45 2027 GMT
        Subject: CN=BD3333CCB15AAD841F62BE4DC9CA1BD01ABEA8DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6e:49:05:c9:d0:fd:5e:1f:dd:fa:7f:ab:87:
                    0d:d9:51:2c:9c:ca:0b:99:ce:3a:8c:99:4d:69:62:
                    b0:91:53:7b:d8:c1:34:9e:49:06:6d:f8:db:6a:fc:
                    88:48:1c:47:97:e4:d4:5a:2d:01:5b:3b:65:a5:5d:
                    12:df:77:a2:92:06:15:b4:8f:4f:e1:1d:9f:bf:78:
                    27:74:05:68:f1:7d:3b:8a:c6:51:b1:3c:8a:8d:f5:
                    4c:bb:37:70:c6:78:a8:47:96:92:28:8f:f0:d9:20:
                    e6:c7:5f:87:b8:ea:3a:d8:d3:f7:11:56:bb:8a:38:
                    b5:b2:31:fe:85:f4:f6:a8:73:25:f1:b0:c8:cf:80:
                    21:de:39:ac:30:47:cb:ec:9f:87:75:f9:e8:7c:1d:
                    e7:79:12:04:0a:9a:17:aa:41:b4:3a:e4:8d:2e:82:
                    ae:23:98:d4:b4:15:81:53:34:36:0d:aa:f7:52:be:
                    f2:be:9c:e2:72:72:be:91:85:74:c5:29:86:53:4d:
                    20:49:69:a7:6c:63:25:a2:64:f7:4d:2a:67:ea:58:
                    a3:66:67:24:e8:73:34:54:d5:c4:69:5e:1a:6b:d5:
                    d1:7b:66:4c:bf:96:a5:0f:78:fa:7d:69:b0:75:3e:
                    83:b6:70:c6:88:94:12:15:c0:3c:6a:7d:5e:86:58:
                    92:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:33:33:CC:B1:5A:AD:84:1F:62:BE:4D:C9:CA:1B:D0:1A:BE:A8:DA
            X509v3 Authority Key Identifier:
                keyid:F1:C3:5B:9C:F4:5B:DD:AB:E8:29:A9:F7:8B:C2:4D:C5:8A:FD:7E:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3139302e3138322e3230392e302f32342d3234203d3e20323636373936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.182.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:be:77:d4:13:18:4e:aa:e3:f2:ad:b2:c8:c3:da:2e:e9:ac:
         1b:6d:ab:75:e6:7e:dc:b8:f3:83:7b:ec:b5:ef:4f:d2:fe:c2:
         cd:7f:65:b9:b8:89:39:67:a8:55:cd:44:84:7d:e9:15:e8:fd:
         95:cb:e7:83:3e:37:0c:36:5c:e6:df:73:6e:21:dc:3a:31:21:
         ec:c4:d1:6f:b2:8c:a8:a8:91:21:c7:28:de:73:11:1d:dc:16:
         86:5a:1a:f1:71:bf:83:56:4d:a9:74:cb:c0:28:90:30:15:64:
         fc:06:99:b2:2b:d4:59:7f:e5:a5:c6:7b:77:25:74:91:12:b6:
         ac:5e:58:21:fe:7e:b0:3d:04:9c:94:40:ff:db:25:cc:ff:33:
         8f:f9:90:69:cb:b1:ee:23:cc:9a:01:94:fe:3e:67:7c:09:80:
         19:41:e5:22:80:38:37:35:4d:91:68:a2:9c:ad:81:71:63:25:
         87:c9:c2:77:64:14:d8:f4:46:4d:27:c5:66:d6:64:6d:7e:02:
         9b:fa:88:27:21:55:6d:db:9e:23:87:b9:fd:48:a1:6f:fc:5c:
         6f:7b:1f:08:bb:ba:54:95:a0:88:72:ae:8d:a9:40:7f:06:4d:
         eb:65:04:75:35:73:2e:4d:de:6b:16:22:af:e4:66:ac:e8:ff:
         2d:6c:4a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:48:05 2026 by rpki-client