Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/3139302e3130352e3139352e302f32342d3234203d3e203630303232.roa
File:                     3139302e3130352e3139352e302f32342d3234203d3e203630303232.roa (raw, json)
Hash identifier:          0pnDpfQnVF8+5/2XpX5urTW2Chguy+exGaE+csUXaRQ=
Subject key identifier:   B2:4B:5B:56:4D:E3:39:A6:C5:B0:35:3C:6F:62:83:90:DC:FC:FD:96
Certificate issuer:       /CN=305D06C24AF1C29D223292689F4201FDBCC0C091
Certificate serial:       7F3AEFF792652853C0EE975EE4CBAD9CC20BA46F
Authority key identifier: 30:5D:06:C2:4A:F1:C2:9D:22:32:92:68:9F:42:01:FD:BC:C0:C0:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305D06C24AF1C29D223292689F4201FDBCC0C091.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/3139302e3130352e3139352e302f32342d3234203d3e203630303232.roa
Signing time:             Sat 04 Jul 2026 22:50:58 +0000
ROA not before:           Sat 04 Jul 2026 22:45:58 +0000
ROA not after:            Sat 03 Jul 2027 22:50:58 +0000
asID:                     60022
IP address blocks:        190.105.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/305D06C24AF1C29D223292689F4201FDBCC0C091.crl
                          rsync://repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/305D06C24AF1C29D223292689F4201FDBCC0C091.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305D06C24AF1C29D223292689F4201FDBCC0C091.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:3a:ef:f7:92:65:28:53:c0:ee:97:5e:e4:cb:ad:9c:c2:0b:a4:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=305D06C24AF1C29D223292689F4201FDBCC0C091
        Validity
            Not Before: Jul  4 22:45:58 2026 GMT
            Not After : Jul  3 22:50:58 2027 GMT
        Subject: CN=B24B5B564DE339A6C5B0353C6F628390DCFCFD96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:fd:42:b5:58:05:ae:ba:95:a3:54:99:d3:67:
                    7e:a8:ad:e1:c7:f3:44:a5:a4:22:29:75:a3:7a:a0:
                    f2:dd:c0:3b:70:35:80:21:d6:98:4c:6b:8b:65:9b:
                    d8:2d:3e:4d:e5:91:07:d9:9f:0c:af:73:61:c5:5c:
                    ac:88:e9:dd:9f:80:5a:fd:6e:0a:29:5e:75:ef:0f:
                    e3:0b:65:48:6c:f2:b9:05:0b:22:45:06:46:1d:98:
                    96:13:61:b1:8e:e5:f9:4e:98:e1:57:dd:8b:36:62:
                    ab:6b:56:83:70:db:4f:03:35:4e:72:ac:fb:da:e1:
                    1d:b3:38:cb:6b:b4:e1:3b:32:81:44:d6:b2:a3:de:
                    81:c8:25:99:bf:c7:bc:f4:01:8a:eb:0d:1b:80:c1:
                    2f:03:81:c4:94:52:67:5f:e6:e6:d6:25:1e:9a:3c:
                    a1:4f:53:3f:bc:e3:9f:a0:02:ee:ae:8c:25:43:c1:
                    cc:99:0c:56:0a:fd:75:4e:64:cb:35:f6:62:dd:1f:
                    69:00:15:1d:94:17:0a:cf:cf:d9:da:01:c5:c4:7e:
                    59:73:ab:f8:ea:20:d1:63:94:ca:9a:fa:61:62:fe:
                    81:9b:57:a3:29:19:34:95:a8:8f:e7:1f:37:68:02:
                    fb:f3:78:b3:1a:62:a8:d6:f7:f6:7f:c1:3c:8e:5b:
                    ce:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:4B:5B:56:4D:E3:39:A6:C5:B0:35:3C:6F:62:83:90:DC:FC:FD:96
            X509v3 Authority Key Identifier:
                keyid:30:5D:06:C2:4A:F1:C2:9D:22:32:92:68:9F:42:01:FD:BC:C0:C0:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/305D06C24AF1C29D223292689F4201FDBCC0C091.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305D06C24AF1C29D223292689F4201FDBCC0C091.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/3139302e3130352e3139352e302f32342d3234203d3e203630303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.105.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:83:d1:2e:7c:ee:7a:9d:6c:b9:df:73:0b:e4:5d:a9:41:e1:
         80:c0:ae:2c:a3:0f:71:2f:33:7a:ab:68:42:66:7e:74:4a:c0:
         1f:a1:ea:99:23:ed:64:f3:68:6b:7a:ae:c0:27:28:36:b2:79:
         49:76:fe:32:5c:1a:bf:79:b0:65:0c:82:c6:17:ee:ad:ca:78:
         2c:10:9c:b7:7b:ae:bb:e9:7b:81:5a:b7:e9:d6:5a:76:f0:50:
         28:2c:d6:50:94:b7:e4:75:66:c0:f7:7b:d3:7a:f7:a8:a5:76:
         bc:61:9b:de:be:dd:fb:b0:1b:62:b5:51:98:82:ff:16:dd:f5:
         fa:11:fc:44:fe:16:57:3c:a4:02:b1:87:ea:56:b0:a0:a7:a7:
         45:55:98:00:38:79:ab:64:ef:24:01:fa:33:6e:da:23:7c:b6:
         e2:0b:f4:97:ec:cf:f6:e8:51:16:da:5f:8e:b9:82:c5:ca:0c:
         a4:0d:5d:7e:9a:d3:0c:41:da:35:17:a5:47:78:a4:7e:eb:bd:
         c7:f0:22:8e:54:8c:3c:ba:a5:db:c3:e6:75:a5:59:b5:00:6e:
         93:09:31:09:ca:b5:c1:10:f2:d1:98:a6:b8:c4:c5:c6:2b:7c:
         bf:b9:d6:1b:92:47:c7:ea:8a:d6:6b:c4:ca:cc:2f:8c:22:5f:
         67:9e:67:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:41:05 2026 by rpki-client