Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48C022FDAC21F4F471FCBE48305007541B6B18C90892D3D40B974FED8357F746/0/3139302e3132342e34382e302f32322d3232203d3e20323730303634.roa
File:                     3139302e3132342e34382e302f32322d3232203d3e20323730303634.roa (raw, json)
Hash identifier:          xOVrR/DJsA595y5pfATq8k2pSnXZ6c7Li6ddKlmKrnU=
Subject key identifier:   AE:61:1F:4E:FC:57:6F:07:29:3B:A4:6F:24:11:1C:FD:FE:BA:E1:EA
Certificate issuer:       /CN=D1124389491FB420AF7FDE7F9D2323ACF465291F
Certificate serial:       565596F19C703905524257E9AC50E220D613BA7D
Authority key identifier: D1:12:43:89:49:1F:B4:20:AF:7F:DE:7F:9D:23:23:AC:F4:65:29:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D1124389491FB420AF7FDE7F9D2323ACF465291F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/48C022FDAC21F4F471FCBE48305007541B6B18C90892D3D40B974FED8357F746/0/3139302e3132342e34382e302f32322d3232203d3e20323730303634.roa
Signing time:             Sat 09 May 2026 17:41:51 +0000
ROA not before:           Sat 09 May 2026 17:36:51 +0000
ROA not after:            Sat 08 May 2027 17:41:51 +0000
asID:                     270064
IP address blocks:        190.124.48.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48C022FDAC21F4F471FCBE48305007541B6B18C90892D3D40B974FED8357F746/0/D1124389491FB420AF7FDE7F9D2323ACF465291F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48C022FDAC21F4F471FCBE48305007541B6B18C90892D3D40B974FED8357F746/0/D1124389491FB420AF7FDE7F9D2323ACF465291F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D1124389491FB420AF7FDE7F9D2323ACF465291F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 16 May 2026 13:25:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:55:96:f1:9c:70:39:05:52:42:57:e9:ac:50:e2:20:d6:13:ba:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1124389491FB420AF7FDE7F9D2323ACF465291F
        Validity
            Not Before: May  9 17:36:51 2026 GMT
            Not After : May  8 17:41:51 2027 GMT
        Subject: CN=AE611F4EFC576F07293BA46F24111CFDFEBAE1EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:18:d7:60:f1:c1:8c:22:3a:9a:7e:8a:0e:4f:
                    96:02:a1:ca:77:62:62:bb:73:b5:c6:6e:f8:a0:ec:
                    b9:26:ff:3b:a1:d8:90:da:62:b3:b2:12:f7:9b:12:
                    44:02:2a:7c:4a:13:56:b3:85:31:59:47:0c:fe:75:
                    82:07:08:65:82:0d:41:b2:f8:98:77:e2:4c:2f:73:
                    45:ab:2f:77:b4:6a:6a:ff:8d:e0:01:81:01:1f:88:
                    61:5e:29:84:e1:8b:91:fe:d6:50:36:6f:0b:f0:20:
                    76:40:b1:fd:16:56:a4:ff:de:11:c9:14:06:6c:7d:
                    21:8c:1f:f0:d0:68:4f:90:5d:b3:ca:2d:ad:e0:be:
                    02:2d:29:4d:66:fd:97:6e:f3:4b:a7:fd:e5:df:56:
                    ac:05:26:b6:1f:bb:43:32:b9:5e:d6:43:7f:f0:f9:
                    0f:c1:25:2e:20:d6:c1:ef:3d:fb:62:30:b5:28:27:
                    ed:69:8d:25:01:5a:47:da:4e:7c:da:1e:0f:6d:c9:
                    89:84:61:c4:52:ec:e0:90:3b:73:36:95:db:18:01:
                    5a:49:16:ab:52:c7:78:4a:92:ae:94:55:27:7e:4d:
                    b7:a3:49:c8:07:0d:cf:aa:5c:f8:c1:d7:48:25:2a:
                    dc:e7:3d:43:57:d1:cf:55:3a:8f:ce:5e:de:d1:9b:
                    e4:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:61:1F:4E:FC:57:6F:07:29:3B:A4:6F:24:11:1C:FD:FE:BA:E1:EA
            X509v3 Authority Key Identifier:
                keyid:D1:12:43:89:49:1F:B4:20:AF:7F:DE:7F:9D:23:23:AC:F4:65:29:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48C022FDAC21F4F471FCBE48305007541B6B18C90892D3D40B974FED8357F746/0/D1124389491FB420AF7FDE7F9D2323ACF465291F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D1124389491FB420AF7FDE7F9D2323ACF465291F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/48C022FDAC21F4F471FCBE48305007541B6B18C90892D3D40B974FED8357F746/0/3139302e3132342e34382e302f32322d3232203d3e20323730303634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.124.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:22:1e:6b:54:86:09:4b:4d:6e:f6:b0:1f:3f:41:06:dd:e8:
         f3:dc:70:25:71:0e:e4:75:b2:36:fc:3c:74:10:46:73:fe:51:
         e4:60:3d:73:d0:84:86:4c:82:92:af:66:90:d4:31:37:1e:bd:
         9f:ff:78:e1:21:00:bb:99:41:c5:19:74:2c:1b:e6:20:68:51:
         31:ce:ee:97:c7:91:ad:1d:7d:6f:c6:bd:bd:92:66:19:6b:f9:
         e4:48:14:8b:92:54:8d:be:61:14:12:6a:a5:85:99:52:fc:de:
         4a:25:9f:59:4f:da:34:d4:69:84:63:04:46:bf:7b:b7:b8:91:
         e9:03:b2:4c:7d:24:a7:03:00:8b:90:30:e2:6c:a3:4f:38:75:
         dd:01:6e:ca:e7:e5:27:bc:c3:f6:6b:4a:8f:5f:80:f2:47:97:
         8b:8c:90:12:1a:32:3e:e4:44:b7:b2:d0:7d:d8:a1:49:d5:20:
         a5:3d:d6:32:52:d7:65:4b:83:07:d0:aa:49:98:27:a2:1a:9a:
         b5:a9:39:db:bb:2d:be:cc:a4:71:52:d7:f2:87:1d:38:da:e4:
         32:a5:a6:6b:c4:64:d4:e1:21:bb:5c:32:10:52:64:fa:e4:87:
         bb:00:d1:03:27:72:be:05:35:00:82:e9:88:c9:fd:df:f1:a3:
         14:8c:81:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:49:27 2026 by rpki-client