Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5CB9848E9893725A7D22E0CBCE9B9EDCA70AC5F5B2DE28C64352B5D7BDCD4696/0/3139302e392e3132352e302f32342d3234203d3e20323731383839.roa
File:                     3139302e392e3132352e302f32342d3234203d3e20323731383839.roa (raw, json)
Hash identifier:          uXGs3Ad7iR+jhcl5u7oKuW4gR63EAkBxr9pRRQtopIc=
Subject key identifier:   F0:13:4D:04:DF:A1:04:E7:F6:FB:32:F2:77:8F:0B:18:26:1E:44:4D
Certificate issuer:       /CN=E4680E7DB5E2661029DADF95F18EDCCD3A194B02
Certificate serial:       0C3634BA4E35F3199CC279078679BD32455D346C
Authority key identifier: E4:68:0E:7D:B5:E2:66:10:29:DA:DF:95:F1:8E:DC:CD:3A:19:4B:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E4680E7DB5E2661029DADF95F18EDCCD3A194B02.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5CB9848E9893725A7D22E0CBCE9B9EDCA70AC5F5B2DE28C64352B5D7BDCD4696/0/3139302e392e3132352e302f32342d3234203d3e20323731383839.roa
Signing time:             Wed 24 Jun 2026 04:49:25 +0000
ROA not before:           Wed 24 Jun 2026 04:44:25 +0000
ROA not after:            Wed 23 Jun 2027 04:49:25 +0000
asID:                     271889
IP address blocks:        190.9.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5CB9848E9893725A7D22E0CBCE9B9EDCA70AC5F5B2DE28C64352B5D7BDCD4696/0/E4680E7DB5E2661029DADF95F18EDCCD3A194B02.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5CB9848E9893725A7D22E0CBCE9B9EDCA70AC5F5B2DE28C64352B5D7BDCD4696/0/E4680E7DB5E2661029DADF95F18EDCCD3A194B02.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E4680E7DB5E2661029DADF95F18EDCCD3A194B02.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:36:34:ba:4e:35:f3:19:9c:c2:79:07:86:79:bd:32:45:5d:34:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4680E7DB5E2661029DADF95F18EDCCD3A194B02
        Validity
            Not Before: Jun 24 04:44:25 2026 GMT
            Not After : Jun 23 04:49:25 2027 GMT
        Subject: CN=F0134D04DFA104E7F6FB32F2778F0B18261E444D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b1:36:ec:ed:92:01:a0:2f:57:03:ce:96:da:
                    0c:9c:8c:6a:c4:dd:1a:12:fc:c3:7e:4e:ec:db:4c:
                    e3:94:5d:94:58:9f:00:70:98:10:68:aa:6c:1a:c9:
                    e1:4d:20:92:f8:a9:17:77:7a:18:ec:6d:3b:47:dc:
                    a3:b5:97:3b:8a:a1:69:49:1b:04:a5:b7:80:7c:02:
                    d4:90:c8:9d:84:3d:e4:67:12:27:f8:f1:1c:b4:26:
                    d7:cd:88:97:a6:1f:4e:3f:a1:83:e0:30:26:1f:19:
                    63:ba:c4:55:ad:25:34:51:fb:0c:bd:43:8d:1b:a3:
                    4d:5f:69:16:3f:5e:c7:5b:a6:ff:30:0e:0f:39:aa:
                    cd:a6:1f:7b:c0:e3:fa:4f:94:75:cb:20:b8:8b:e0:
                    36:f6:b8:b8:5b:75:b3:93:74:2f:6f:1e:e7:10:af:
                    07:9d:5f:d6:1a:ff:fd:04:39:91:68:9d:cf:18:4a:
                    e8:5c:d4:af:56:e9:6c:23:de:ae:9c:de:7a:14:e4:
                    63:ec:c6:cf:3b:f7:e7:f5:f3:f0:99:86:45:9e:05:
                    cd:e4:81:d9:e2:95:fd:7b:36:7a:69:82:a9:bf:f4:
                    4a:0e:c6:a6:49:e3:f1:d7:86:2e:45:06:35:d2:01:
                    3f:28:76:e1:2a:f9:cc:02:0e:4c:36:3d:11:15:cb:
                    db:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:13:4D:04:DF:A1:04:E7:F6:FB:32:F2:77:8F:0B:18:26:1E:44:4D
            X509v3 Authority Key Identifier:
                keyid:E4:68:0E:7D:B5:E2:66:10:29:DA:DF:95:F1:8E:DC:CD:3A:19:4B:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5CB9848E9893725A7D22E0CBCE9B9EDCA70AC5F5B2DE28C64352B5D7BDCD4696/0/E4680E7DB5E2661029DADF95F18EDCCD3A194B02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E4680E7DB5E2661029DADF95F18EDCCD3A194B02.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5CB9848E9893725A7D22E0CBCE9B9EDCA70AC5F5B2DE28C64352B5D7BDCD4696/0/3139302e392e3132352e302f32342d3234203d3e20323731383839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.9.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:2e:b3:28:e9:6f:07:e8:6d:09:db:4e:80:b2:d3:48:fe:15:
         71:05:39:93:32:f0:9c:a7:d6:97:0c:3f:d4:51:85:2f:7b:b7:
         28:fd:1a:1b:42:c0:92:16:98:b6:6e:ad:5b:37:a0:d2:a9:cf:
         8e:0f:c4:37:7c:cb:4e:86:d0:70:78:00:d0:fd:2d:49:80:f8:
         25:02:63:a8:34:91:82:db:02:06:65:df:06:56:f1:a3:58:db:
         f8:c1:20:77:53:00:e2:0f:a5:ed:19:21:57:48:07:70:bd:cc:
         7a:d4:6b:42:d6:43:86:5f:a5:9c:bf:32:74:9f:56:e0:bb:35:
         cc:1c:86:cd:f7:a6:eb:01:63:ed:a1:72:7b:1e:5a:7c:61:11:
         80:20:22:25:9d:27:47:93:b1:06:01:6f:c9:79:6e:47:66:c8:
         6a:be:04:90:55:ea:59:3f:11:7e:c5:b3:3b:ca:a9:e4:51:e5:
         a8:22:78:88:95:53:df:ff:2a:bb:29:7b:25:08:65:c1:3f:2e:
         c2:3d:f9:04:fd:40:56:4b:b3:e3:0f:ff:d8:52:3d:bc:2a:b1:
         fb:85:01:56:5d:0e:77:a6:63:14:f5:83:02:01:90:e1:49:15:
         0c:1d:44:f9:46:dd:ad:3a:f6:87:ea:55:eb:6c:0e:6c:e1:c9:
         f5:3c:92:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:48:01 2026 by rpki-client