Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/816B2F7D66A633B3CE8C265EFB4DC6361F6813A3FC929333FDEBAD7EE166BBB3/0/3139302e31352e3235312e302f32342d3234203d3e203232343131.roa
File:                     3139302e31352e3235312e302f32342d3234203d3e203232343131.roa (raw, json)
Hash identifier:          KIE1MXwCeOy4M7MO1Ga09IdGOo+TMvoN8NeZONFC6DE=
Subject key identifier:   B5:3F:91:29:33:08:9D:73:DC:BC:D3:2A:D7:0E:98:6A:F4:8F:3F:37
Certificate issuer:       /CN=AF4A18D238F70FCA7608E0CF91F044302F886A78
Certificate serial:       4CEA9FF9821CD58123CE2F8EAA07882F3F34D62B
Authority key identifier: AF:4A:18:D2:38:F7:0F:CA:76:08:E0:CF:91:F0:44:30:2F:88:6A:78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF4A18D238F70FCA7608E0CF91F044302F886A78.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/816B2F7D66A633B3CE8C265EFB4DC6361F6813A3FC929333FDEBAD7EE166BBB3/0/3139302e31352e3235312e302f32342d3234203d3e203232343131.roa
Signing time:             Tue 24 Mar 2026 21:30:00 +0000
ROA not before:           Tue 24 Mar 2026 21:25:00 +0000
ROA not after:            Tue 23 Mar 2027 21:30:00 +0000
asID:                     22411
IP address blocks:        190.15.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/816B2F7D66A633B3CE8C265EFB4DC6361F6813A3FC929333FDEBAD7EE166BBB3/0/AF4A18D238F70FCA7608E0CF91F044302F886A78.crl
                          rsync://repository.lacnic.net/rpki/lacnic/816B2F7D66A633B3CE8C265EFB4DC6361F6813A3FC929333FDEBAD7EE166BBB3/0/AF4A18D238F70FCA7608E0CF91F044302F886A78.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF4A18D238F70FCA7608E0CF91F044302F886A78.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Mar 2026 17:17:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:ea:9f:f9:82:1c:d5:81:23:ce:2f:8e:aa:07:88:2f:3f:34:d6:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF4A18D238F70FCA7608E0CF91F044302F886A78
        Validity
            Not Before: Mar 24 21:25:00 2026 GMT
            Not After : Mar 23 21:30:00 2027 GMT
        Subject: CN=B53F912933089D73DCBCD32AD70E986AF48F3F37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0c:d6:1a:7b:2a:ae:84:e5:d3:43:3c:63:82:
                    4f:bc:ea:26:a9:87:f7:06:0d:16:71:6a:83:d5:f0:
                    9a:95:ff:39:9e:8b:84:94:bb:d9:5f:6e:de:1e:8c:
                    90:1c:6a:20:5a:be:89:25:75:0a:00:28:56:e1:ec:
                    1e:76:01:2e:4e:5f:1c:e2:64:9c:23:76:c4:a4:bf:
                    c6:5f:af:d8:af:7a:8b:17:2f:77:36:8f:32:a1:d4:
                    af:87:9d:4c:44:47:c8:fd:4d:19:55:05:00:33:69:
                    09:3c:60:18:6e:72:18:97:84:85:57:61:0d:a1:5d:
                    81:f2:17:bd:fd:6b:d1:0d:2f:e6:5d:0f:ce:a6:5a:
                    f3:0f:38:7c:4b:bb:33:bb:17:a6:63:90:54:62:1e:
                    4d:e5:1f:c2:bf:4f:35:68:ff:a5:9e:1d:50:7c:79:
                    0b:26:5d:ed:d0:7e:cb:e7:a0:b3:c0:dc:58:e4:a9:
                    df:04:04:c5:d0:94:6a:80:46:e1:b2:7b:88:2d:63:
                    69:71:ab:ec:b7:eb:58:b0:9e:47:ae:94:eb:a4:81:
                    7b:94:30:66:3c:e2:00:e3:4b:a5:ce:51:54:56:1a:
                    b0:9f:09:02:2a:a8:bc:9d:80:86:26:0e:8f:e0:7f:
                    80:df:1a:a1:b6:4a:2b:2b:4a:a3:b4:f4:46:d0:19:
                    49:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:3F:91:29:33:08:9D:73:DC:BC:D3:2A:D7:0E:98:6A:F4:8F:3F:37
            X509v3 Authority Key Identifier:
                keyid:AF:4A:18:D2:38:F7:0F:CA:76:08:E0:CF:91:F0:44:30:2F:88:6A:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/816B2F7D66A633B3CE8C265EFB4DC6361F6813A3FC929333FDEBAD7EE166BBB3/0/AF4A18D238F70FCA7608E0CF91F044302F886A78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF4A18D238F70FCA7608E0CF91F044302F886A78.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/816B2F7D66A633B3CE8C265EFB4DC6361F6813A3FC929333FDEBAD7EE166BBB3/0/3139302e31352e3235312e302f32342d3234203d3e203232343131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.15.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:c2:c3:6d:63:df:8c:cb:74:41:d5:a1:74:00:49:b6:cb:3c:
         f0:47:f9:cb:b4:cc:57:53:ab:89:e4:89:36:29:77:ab:31:22:
         e8:b5:84:d4:56:ee:58:61:cb:71:f2:aa:b0:50:c7:f3:d5:c6:
         24:1f:40:43:8e:3c:f5:02:83:27:c0:a1:d1:7f:87:55:04:d1:
         6b:7d:71:d4:6b:99:a1:cc:68:89:c4:0b:13:13:1f:0c:46:d5:
         fd:f9:3e:d6:69:29:cc:53:0e:e6:6a:ad:43:a0:f5:5c:93:d1:
         b5:9e:50:70:6b:33:42:d0:40:91:b8:2b:c1:35:9c:5b:01:b0:
         e7:21:28:d1:8c:7c:9b:91:fe:91:02:7a:73:e3:67:0e:66:2d:
         02:dd:e9:e4:01:48:52:f9:34:9e:16:eb:aa:63:70:72:d4:38:
         f9:99:63:2b:ac:e8:bf:76:75:41:ab:56:92:ea:51:c6:e0:29:
         93:b1:eb:e7:9e:e6:b3:da:b7:0e:fe:4f:45:5a:38:1a:6a:6d:
         86:55:2a:9b:b8:8a:5d:74:27:01:07:22:36:67:06:ce:f9:14:
         36:30:3d:b2:1e:d3:6c:52:8b:96:fc:d4:73:b4:7a:e6:58:fe:
         da:45:85:1f:7d:f4:d0:9e:92:8c:a3:d4:e0:be:45:2e:b9:c5:
         f5:4d:2b:8b
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUTOqf+YIc1YEjzi+OqgeILz801iswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUY0QTE4RDIzOEY3MEZDQTc2MDhFMENGOTFGMDQ0MzAy
Rjg4NkE3ODAeFw0yNjAzMjQyMTI1MDBaFw0yNzAzMjMyMTMwMDBaMDMxMTAvBgNV
BAMTKEI1M0Y5MTI5MzMwODlENzNEQ0JDRDMyQUQ3MEU5ODZBRjQ4RjNGMzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/DNYaeyquhOXTQzxjgk+86iap
h/cGDRZxaoPV8JqV/zmei4SUu9lfbt4ejJAcaiBavokldQoAKFbh7B52AS5OXxzi
ZJwjdsSkv8Zfr9iveosXL3c2jzKh1K+HnUxER8j9TRlVBQAzaQk8YBhuchiXhIVX
YQ2hXYHyF739a9ENL+ZdD86mWvMPOHxLuzO7F6ZjkFRiHk3lH8K/TzVo/6WeHVB8
eQsmXe3QfsvnoLPA3Fjkqd8EBMXQlGqARuGye4gtY2lxq+y361iwnkeulOukgXuU
MGY84gDjS6XOUVRWGrCfCQIqqLydgIYmDo/gf4DfGqG2SisrSqO09EbQGUktAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUtT+RKTMInXPcvNMq1w6YavSPPzcwHwYDVR0j
BBgwFoAUr0oY0jj3D8p2CODPkfBEMC+IangwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84MTZCMkY3RDY2QTYzM0IzQ0U4QzI2NUVGQjREQzYzNjFG
NjgxM0EzRkM5MjkzMzNGREVCQUQ3RUUxNjZCQkIzLzAvQUY0QTE4RDIzOEY3MEZD
QTc2MDhFMENGOTFGMDQ0MzAyRjg4NkE3OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BRjRBMThEMjM4RjcwRkNBNzYw
OEUwQ0Y5MUYwNDQzMDJGODg2QTc4LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODE2QjJGN0Q2NkE2MzNCM0NFOEMyNjVFRkI0REM2MzYxRjY4MTNBM0ZD
OTI5MzMzRkRFQkFEN0VFMTY2QkJCMy8wLzMxMzkzMDJlMzEzNTJlMzIzNTMxMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMjM0MzEzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAL4P+zAN
BgkqhkiG9w0BAQsFAAOCAQEAM8LDbWPfjMt0QdWhdABJtss88Ef5y7TMV1OrieSJ
Nil3qzEi6LWE1FbuWGHLcfKqsFDH89XGJB9AQ4489QKDJ8Ch0X+HVQTRa31x1GuZ
ocxoicQLExMfDEbV/fk+1mkpzFMO5mqtQ6D1XJPRtZ5QcGszQtBAkbgrwTWcWwGw
5yEo0Yx8m5H+kQJ6c+NnDmYtAt3p5AFIUvk0nhbrqmNwctQ4+ZljK6zov3Z1QatW
kupRxuApk7Hr557ms9q3Dv5PRVo4GmpthlUqm7iKXXQnAQciNmcGzvkUNjA9sh7T
bFKLlvzUc7R65lj+2kWFH3300J6SjKPU4L5FLrnF9U0riw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:43:17 2026 by rpki-client