Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/3139302e3132312e3231322e302f32342d3234203d3e203630303232.roa
File:                     3139302e3132312e3231322e302f32342d3234203d3e203630303232.roa (raw, json)
Hash identifier:          Yn3lMx9qcyVZVpfSk+h0XvpF/lHSd509TyWmvEoS+n8=
Subject key identifier:   01:C8:69:2B:A2:26:75:C1:E6:20:C4:AE:92:36:16:0E:60:54:94:8B
Certificate issuer:       /CN=305D06C24AF1C29D223292689F4201FDBCC0C091
Certificate serial:       6A809096DEBC20019A388D2FDFEB89814ED9DC10
Authority key identifier: 30:5D:06:C2:4A:F1:C2:9D:22:32:92:68:9F:42:01:FD:BC:C0:C0:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305D06C24AF1C29D223292689F4201FDBCC0C091.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/3139302e3132312e3231322e302f32342d3234203d3e203630303232.roa
Signing time:             Sat 04 Jul 2026 22:50:59 +0000
ROA not before:           Sat 04 Jul 2026 22:45:59 +0000
ROA not after:            Sat 03 Jul 2027 22:50:59 +0000
asID:                     60022
IP address blocks:        190.121.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/305D06C24AF1C29D223292689F4201FDBCC0C091.crl
                          rsync://repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/305D06C24AF1C29D223292689F4201FDBCC0C091.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305D06C24AF1C29D223292689F4201FDBCC0C091.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:80:90:96:de:bc:20:01:9a:38:8d:2f:df:eb:89:81:4e:d9:dc:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=305D06C24AF1C29D223292689F4201FDBCC0C091
        Validity
            Not Before: Jul  4 22:45:59 2026 GMT
            Not After : Jul  3 22:50:59 2027 GMT
        Subject: CN=01C8692BA22675C1E620C4AE9236160E6054948B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:2a:59:c9:a7:2b:6b:50:13:dd:a4:c2:28:8d:
                    cc:7e:e8:f3:7c:87:c4:44:d8:e0:1a:d2:c4:59:1e:
                    ed:61:0b:25:68:55:2b:bc:e2:3e:6f:4e:1b:a2:2c:
                    c3:df:2a:11:74:d4:1e:69:db:ac:0a:1e:98:07:bf:
                    80:4f:25:66:d9:75:d7:ae:59:33:f0:e7:d2:15:36:
                    b3:8e:1c:af:82:93:c2:6f:06:a9:1d:10:7f:92:82:
                    5a:d3:e9:68:d6:cb:c7:77:11:61:16:6f:b7:21:94:
                    ae:35:99:db:66:13:79:44:14:cc:3a:4a:4c:3c:f8:
                    16:fa:a3:2f:f6:29:88:07:76:7b:65:44:fe:e8:a3:
                    c1:28:ab:73:6a:b3:28:1b:87:b3:40:21:07:e1:5e:
                    34:51:bb:46:df:ee:2c:35:ac:33:ff:45:32:f2:75:
                    70:0a:8c:18:89:04:5b:c8:64:90:5e:7b:1b:e1:70:
                    3b:e3:3e:5d:a1:97:b1:ac:5f:56:ec:5e:92:26:e2:
                    d7:38:c8:2d:84:68:e0:40:ba:89:29:3d:fc:9c:6d:
                    ef:e6:16:bd:ad:2c:33:ee:57:b9:e2:9b:6f:1f:a7:
                    55:a6:26:af:be:ec:00:c5:c1:08:1a:9d:10:a3:4d:
                    ba:13:7c:f1:0c:b7:df:1d:ea:0c:1c:b0:b8:a6:26:
                    65:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:C8:69:2B:A2:26:75:C1:E6:20:C4:AE:92:36:16:0E:60:54:94:8B
            X509v3 Authority Key Identifier:
                keyid:30:5D:06:C2:4A:F1:C2:9D:22:32:92:68:9F:42:01:FD:BC:C0:C0:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/305D06C24AF1C29D223292689F4201FDBCC0C091.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305D06C24AF1C29D223292689F4201FDBCC0C091.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/3139302e3132312e3231322e302f32342d3234203d3e203630303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.121.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:dc:16:41:ab:bf:75:fb:88:91:2f:c2:99:83:a4:c4:b7:5b:
         c8:c1:f9:76:81:55:7c:32:cf:97:a0:65:a5:9b:89:d3:d9:f0:
         fd:ea:3e:39:4b:51:49:93:70:33:35:50:72:e6:2c:6a:38:ff:
         66:9e:36:90:27:42:e6:87:2c:fc:9c:d1:0c:37:c7:e9:a9:95:
         1a:55:74:19:80:47:6b:90:3f:4c:8e:74:30:79:c8:f3:9e:6e:
         b1:a1:b6:5b:23:9d:06:55:1a:7c:01:ca:3e:08:28:78:fe:f9:
         d0:57:af:70:fe:1d:da:d1:5e:bd:14:a3:ff:c2:ee:99:05:93:
         dc:9a:73:13:83:8c:d8:23:67:ab:21:a1:cf:47:d0:69:24:a9:
         cf:b9:64:a9:3e:42:f7:60:29:8c:d9:41:1e:38:c6:81:0e:78:
         11:f8:8b:7e:61:22:1c:1d:eb:31:0d:39:a0:d3:10:df:e5:e6:
         1e:42:26:ac:b4:58:4d:64:25:2b:8a:2e:53:e5:6c:e8:fe:27:
         69:ce:20:a4:03:0d:45:39:fc:ae:95:53:1a:df:a8:f5:c6:a2:
         7d:e6:dd:38:6c:c2:85:06:c8:58:6a:05:ac:75:18:6d:8d:3a:
         f0:ce:4e:d8:4d:f8:83:66:e8:bc:a7:a5:bc:4e:6a:5d:cf:bc:
         a4:af:b0:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:41:48 2026 by rpki-client