Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3139302e3130362e3230392e302f32342d3234203d3e203233323433.roa
File:                     3139302e3130362e3230392e302f32342d3234203d3e203233323433.roa (raw, json)
Hash identifier:          Htd9BpzvEYSVZ38q672o/UNvavl+uYYZUkj2GmhTPG4=
Subject key identifier:   31:BA:BF:4E:48:19:A4:A3:75:91:6D:9E:A2:F3:04:04:C5:D1:2E:BF
Certificate issuer:       /CN=8E1499D12067F2BEA1287B63425EA3B70FCAFFC1
Certificate serial:       697A4575A5BFC68E500EDC1513C577DA374915CA
Authority key identifier: 8E:14:99:D1:20:67:F2:BE:A1:28:7B:63:42:5E:A3:B7:0F:CA:FF:C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3139302e3130362e3230392e302f32342d3234203d3e203233323433.roa
Signing time:             Tue 22 Sep 2026 00:36:21 +0000
ROA not before:           Tue 22 Sep 2026 00:31:21 +0000
ROA not after:            Tue 21 Sep 2027 00:36:21 +0000
asID:                     23243
IP address blocks:        190.106.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 20 Oct 2026 14:35:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:7a:45:75:a5:bf:c6:8e:50:0e:dc:15:13:c5:77:da:37:49:15:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E1499D12067F2BEA1287B63425EA3B70FCAFFC1
        Validity
            Not Before: Sep 22 00:31:21 2026 GMT
            Not After : Sep 21 00:36:21 2027 GMT
        Subject: CN=31BABF4E4819A4A375916D9EA2F30404C5D12EBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:ee:ef:3e:20:73:11:0b:27:7a:4f:26:0d:72:
                    51:7a:ba:87:5b:ab:38:8a:c8:3b:d4:ba:53:bb:8c:
                    40:07:3a:87:78:9a:78:58:01:31:cf:73:16:49:fe:
                    50:2b:24:65:0a:bb:3c:75:ff:19:68:72:ce:2b:5e:
                    e0:48:07:6d:29:00:fc:b7:c3:09:5e:ca:68:bc:47:
                    88:6b:7e:51:14:f8:c5:d1:ef:94:19:50:e9:98:7f:
                    c1:6c:3f:4d:ac:24:67:78:56:9f:0d:d6:18:bc:9a:
                    b7:55:3e:93:74:3f:20:6f:26:8c:24:8e:46:1e:77:
                    00:2b:81:a4:a0:fd:43:69:c4:ab:79:62:f7:32:47:
                    2a:ca:de:0a:c6:b9:6e:d8:71:45:33:e2:8f:db:77:
                    28:c4:bd:7d:79:91:5a:9e:32:b5:58:28:16:eb:3d:
                    c8:fb:5d:f6:64:fa:a6:f4:c9:42:81:ce:fd:51:35:
                    30:6b:68:80:b4:47:7a:78:b6:c0:33:34:75:4c:0e:
                    2c:df:4d:0e:55:46:89:94:22:52:74:aa:fc:44:56:
                    50:6e:af:d8:3d:ac:c2:44:95:a3:7a:e0:d5:12:d7:
                    73:e5:dc:e3:1b:e6:e1:2b:64:4f:43:e9:fd:06:e3:
                    e4:cc:64:59:73:49:16:1b:63:5a:76:10:06:3b:cf:
                    39:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:BA:BF:4E:48:19:A4:A3:75:91:6D:9E:A2:F3:04:04:C5:D1:2E:BF
            X509v3 Authority Key Identifier:
                keyid:8E:14:99:D1:20:67:F2:BE:A1:28:7B:63:42:5E:A3:B7:0F:CA:FF:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3139302e3130362e3230392e302f32342d3234203d3e203233323433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.106.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:eb:59:0c:29:c7:ea:58:8b:e9:a5:58:47:af:d0:be:87:1e:
         8d:61:fc:1d:fa:99:8a:f1:77:27:c7:88:90:e2:1b:b0:bd:94:
         0e:72:56:e7:a0:c1:c1:52:3c:83:d3:ba:63:a3:47:a5:be:24:
         49:18:6b:2d:b7:bf:6e:3d:1e:1b:fd:c2:30:f7:69:0b:8b:3b:
         57:32:7c:c7:b9:4b:9e:57:5b:3b:34:1d:98:be:80:59:24:4b:
         e9:a8:04:5f:e9:9a:e0:cc:97:0f:1a:63:ce:2c:76:f9:e7:b1:
         38:80:35:51:7d:72:94:63:0c:49:7f:a7:0c:95:d7:7b:21:6d:
         7c:23:3c:98:fc:63:d6:40:32:1d:3f:88:ab:fe:56:97:88:41:
         72:5d:1f:0f:0c:11:94:df:c2:09:cd:f7:10:c7:26:c2:1e:12:
         0c:6d:97:f1:e6:f4:e9:80:0a:41:11:3d:e2:d0:60:b9:bd:39:
         38:3a:8e:3e:92:f9:fd:ef:e9:87:b5:f3:58:2f:49:fe:88:2e:
         52:c8:49:7b:52:b9:e8:32:21:b2:d2:bf:71:fd:e3:b9:e4:7d:
         29:a6:6c:72:5a:30:09:27:1b:77:e6:52:e8:40:9f:3f:af:26:
         bd:b8:d6:c2:e4:75:04:9d:1b:06:fe:29:f5:34:84:79:de:85:
         b6:79:89:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 03:04:28 2026 by rpki-client