Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/69D44F36490705CF133929528BB6793C3344D10F79254B6246513125A1042020/0/3139302e302e39362e302f31392d3234203d3e203238303338.roa
File:                     3139302e302e39362e302f31392d3234203d3e203238303338.roa (raw, json)
Hash identifier:          7uz94SSOFC1Rv5Q0mgue0wezFensTrBR6tLH51CZtFM=
Subject key identifier:   31:9A:C6:A4:2B:A2:68:94:13:2F:78:87:B2:BF:64:78:98:19:21:27
Certificate issuer:       /CN=CB3D66305FCD8F1974E1E4AD92D8D4F187BA51E8
Certificate serial:       417D5EEA0213491395B0987548461B7C7DA65785
Authority key identifier: CB:3D:66:30:5F:CD:8F:19:74:E1:E4:AD:92:D8:D4:F1:87:BA:51:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB3D66305FCD8F1974E1E4AD92D8D4F187BA51E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/69D44F36490705CF133929528BB6793C3344D10F79254B6246513125A1042020/0/3139302e302e39362e302f31392d3234203d3e203238303338.roa
Signing time:             Wed 27 Aug 2025 20:41:29 +0000
ROA not before:           Wed 27 Aug 2025 20:36:29 +0000
ROA not after:            Wed 26 Aug 2026 20:41:29 +0000
asID:                     28038
IP address blocks:        190.0.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/69D44F36490705CF133929528BB6793C3344D10F79254B6246513125A1042020/0/CB3D66305FCD8F1974E1E4AD92D8D4F187BA51E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/69D44F36490705CF133929528BB6793C3344D10F79254B6246513125A1042020/0/CB3D66305FCD8F1974E1E4AD92D8D4F187BA51E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB3D66305FCD8F1974E1E4AD92D8D4F187BA51E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:7d:5e:ea:02:13:49:13:95:b0:98:75:48:46:1b:7c:7d:a6:57:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB3D66305FCD8F1974E1E4AD92D8D4F187BA51E8
        Validity
            Not Before: Aug 27 20:36:29 2025 GMT
            Not After : Aug 26 20:41:29 2026 GMT
        Subject: CN=319AC6A42BA26894132F7887B2BF647898192127
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:6e:96:ce:95:da:8e:75:ca:c4:c6:44:94:16:
                    17:ed:49:21:7a:d8:51:a1:21:72:de:8c:ef:80:89:
                    26:3c:f9:1e:0c:10:1e:0f:75:3e:24:11:7b:47:2c:
                    41:8a:86:f4:fd:de:34:31:eb:f0:9b:c8:b1:f5:61:
                    9a:32:ba:8d:54:53:05:3c:5f:2d:83:14:6b:20:93:
                    fe:48:da:b7:ee:12:49:31:60:6c:f8:8f:73:23:b9:
                    21:5a:5d:b6:7a:48:6d:d6:13:71:9f:5d:d8:e0:cd:
                    8b:57:79:fe:1b:ed:d3:80:7d:62:60:1c:2c:7d:a9:
                    b7:31:2c:66:8b:a6:bf:de:92:08:9c:81:88:41:15:
                    c4:8f:75:40:b8:c2:eb:8c:c4:fa:49:0d:0a:28:4a:
                    79:db:69:5b:ac:8a:eb:9e:4c:fb:bc:b3:b0:63:d8:
                    1c:77:f8:09:58:e5:7e:c3:ab:35:ea:00:f7:79:0c:
                    66:0a:be:f8:14:2e:c1:79:95:e6:1a:d3:cf:58:de:
                    a7:65:4c:2b:8b:fd:71:e5:57:07:cb:1e:61:c6:cb:
                    9b:fb:84:c8:8c:7c:a9:22:ec:d2:65:74:70:0a:bc:
                    a2:c9:9b:cc:f8:95:0c:9e:11:9d:a3:03:ff:06:1f:
                    94:f6:a1:6f:80:a7:42:f3:a4:6a:c6:be:d1:e0:db:
                    1d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:9A:C6:A4:2B:A2:68:94:13:2F:78:87:B2:BF:64:78:98:19:21:27
            X509v3 Authority Key Identifier:
                keyid:CB:3D:66:30:5F:CD:8F:19:74:E1:E4:AD:92:D8:D4:F1:87:BA:51:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/69D44F36490705CF133929528BB6793C3344D10F79254B6246513125A1042020/0/CB3D66305FCD8F1974E1E4AD92D8D4F187BA51E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB3D66305FCD8F1974E1E4AD92D8D4F187BA51E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/69D44F36490705CF133929528BB6793C3344D10F79254B6246513125A1042020/0/3139302e302e39362e302f31392d3234203d3e203238303338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.0.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         85:c2:4d:29:57:e0:a6:3c:e8:7c:40:ee:25:3d:91:33:b8:25:
         9f:6b:27:e6:a9:3e:b9:2e:23:0a:37:78:48:20:5f:fb:92:c9:
         58:5e:90:d5:4d:6e:07:58:b4:d7:51:1e:12:3a:56:b1:b5:6c:
         aa:6a:9c:9c:02:70:03:8f:73:a5:46:7c:29:89:af:dc:24:a5:
         c6:c1:e5:0a:be:c5:40:56:c1:95:d7:6c:ea:54:cf:cd:52:c4:
         df:8c:4a:a8:bc:a7:3f:55:4e:10:94:e4:cf:c5:b5:e6:ba:5f:
         f4:cf:7f:65:39:c3:f0:58:47:5b:fd:fe:d5:45:13:8d:0a:88:
         18:73:5b:67:d7:01:11:8f:12:4b:5c:6f:da:65:b7:e8:e4:9c:
         e6:82:dd:b6:9d:72:47:de:fc:b6:67:10:4b:b5:56:d7:bd:1e:
         2e:62:b4:f2:d1:c4:81:b7:95:da:63:71:fa:c4:41:7f:f8:11:
         ce:c1:4f:5e:5e:36:b7:00:e7:95:53:27:8b:fc:12:6e:c5:fe:
         0c:4c:43:75:fd:ce:59:f3:44:5e:81:a8:d4:e5:05:b5:34:e5:
         b8:8a:3f:9b:6f:6e:8c:26:d1:5e:1f:d3:c5:6d:3b:c4:68:8c:
         36:d8:6e:9c:2a:66:26:a2:ce:48:84:fc:f0:0a:3a:aa:bf:1d:
         06:11:ce:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:51:08 2025 by rpki-client