Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/816B2F7D66A633B3CE8C265EFB4DC6361F6813A3FC929333FDEBAD7EE166BBB3/0/3139302e31352e3235322e302f32322d3234203d3e203232343131.roa
File:                     3139302e31352e3235322e302f32322d3234203d3e203232343131.roa (raw, json)
Hash identifier:          8Q8GGMYedOIDG+12q+rjc97yOgiL439lhCNGu3I/E8k=
Subject key identifier:   D2:1A:7E:EA:B6:65:94:AA:9F:A3:1B:06:C9:07:17:48:9A:47:4F:61
Certificate issuer:       /CN=AF4A18D238F70FCA7608E0CF91F044302F886A78
Certificate serial:       69E3B57DB8AF5D866C671A600482FBD2EAD92CA1
Authority key identifier: AF:4A:18:D2:38:F7:0F:CA:76:08:E0:CF:91:F0:44:30:2F:88:6A:78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF4A18D238F70FCA7608E0CF91F044302F886A78.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/816B2F7D66A633B3CE8C265EFB4DC6361F6813A3FC929333FDEBAD7EE166BBB3/0/3139302e31352e3235322e302f32322d3234203d3e203232343131.roa
Signing time:             Tue 24 Mar 2026 21:30:00 +0000
ROA not before:           Tue 24 Mar 2026 21:25:00 +0000
ROA not after:            Tue 23 Mar 2027 21:30:00 +0000
asID:                     22411
IP address blocks:        190.15.252.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/816B2F7D66A633B3CE8C265EFB4DC6361F6813A3FC929333FDEBAD7EE166BBB3/0/AF4A18D238F70FCA7608E0CF91F044302F886A78.crl
                          rsync://repository.lacnic.net/rpki/lacnic/816B2F7D66A633B3CE8C265EFB4DC6361F6813A3FC929333FDEBAD7EE166BBB3/0/AF4A18D238F70FCA7608E0CF91F044302F886A78.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF4A18D238F70FCA7608E0CF91F044302F886A78.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Mar 2026 17:17:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:e3:b5:7d:b8:af:5d:86:6c:67:1a:60:04:82:fb:d2:ea:d9:2c:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF4A18D238F70FCA7608E0CF91F044302F886A78
        Validity
            Not Before: Mar 24 21:25:00 2026 GMT
            Not After : Mar 23 21:30:00 2027 GMT
        Subject: CN=D21A7EEAB66594AA9FA31B06C90717489A474F61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:0c:16:45:94:7b:cb:a5:13:bb:06:d0:06:98:
                    d1:de:37:f7:f1:37:04:eb:97:12:4d:61:21:d3:a6:
                    7b:4e:26:c8:1a:0c:d1:9e:3d:fa:61:a4:9e:2d:15:
                    d2:3e:e9:58:3b:42:ca:b5:d3:af:95:ea:62:ef:92:
                    3c:4d:34:0c:20:66:cf:93:a2:19:17:df:7a:73:1a:
                    a9:3b:ed:20:b1:df:cc:80:33:fc:82:50:e7:59:04:
                    af:91:45:78:5f:b1:e8:f9:41:15:df:69:eb:c0:9e:
                    87:40:9e:9e:e5:6f:2c:17:cd:1d:b1:ad:69:68:01:
                    cf:d0:7c:76:19:28:d0:33:a7:24:88:0b:53:6d:7f:
                    b9:71:c8:d2:bb:07:38:a3:ad:ca:6e:0d:b1:be:ea:
                    23:9c:2c:ba:d5:55:6d:7c:11:8e:25:db:54:72:02:
                    9b:70:a7:3b:c7:61:f6:ad:55:7a:da:89:ed:1d:39:
                    fd:a8:da:9d:9f:5c:b3:4b:e0:f9:26:9e:d0:01:21:
                    78:53:80:14:32:50:d1:a9:a6:86:3c:4b:be:8a:d5:
                    ad:2c:5b:1a:79:0b:b2:f7:22:cc:2f:39:5a:25:19:
                    c4:89:03:ed:5d:d7:b8:5a:2c:54:6a:d4:aa:2f:6d:
                    a6:bd:46:71:64:27:ad:7c:07:81:03:6f:57:84:c0:
                    2a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:1A:7E:EA:B6:65:94:AA:9F:A3:1B:06:C9:07:17:48:9A:47:4F:61
            X509v3 Authority Key Identifier:
                keyid:AF:4A:18:D2:38:F7:0F:CA:76:08:E0:CF:91:F0:44:30:2F:88:6A:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/816B2F7D66A633B3CE8C265EFB4DC6361F6813A3FC929333FDEBAD7EE166BBB3/0/AF4A18D238F70FCA7608E0CF91F044302F886A78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF4A18D238F70FCA7608E0CF91F044302F886A78.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/816B2F7D66A633B3CE8C265EFB4DC6361F6813A3FC929333FDEBAD7EE166BBB3/0/3139302e31352e3235322e302f32322d3234203d3e203232343131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.15.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:a8:38:8c:e6:bb:3a:37:17:13:04:89:2d:0b:ee:46:d9:3b:
         21:34:ba:db:a8:08:10:30:d8:30:d4:8f:53:32:4c:95:08:4f:
         38:53:e6:b7:d8:7a:1d:7b:06:38:a1:22:93:e4:12:e2:91:99:
         a3:1b:c1:fc:98:65:0a:06:4e:25:d4:f2:bd:a7:42:4f:c5:3a:
         7e:1c:68:4c:b6:ff:37:05:37:d4:ce:d1:f0:39:d4:4b:f8:67:
         ae:4d:38:e7:0a:c0:9f:15:a3:2e:b4:bc:9b:9f:0f:f0:83:76:
         64:54:fe:df:a0:25:29:70:78:33:52:f1:30:b2:a9:8b:43:93:
         1d:b1:47:25:30:f7:a3:d7:e3:b5:db:a5:5c:b9:fc:30:73:96:
         db:35:78:cd:11:a8:b3:e1:de:9e:3a:f2:b8:c4:ec:4a:8c:14:
         5d:ec:7b:7f:67:4c:8b:3e:7b:50:10:3d:5e:b5:f9:3a:8c:88:
         25:db:86:f7:a8:1d:ed:94:8f:fa:1a:33:3d:15:46:6b:41:c2:
         92:55:31:e1:49:2f:49:46:b6:85:dc:14:7c:9d:f1:7b:00:d2:
         74:9b:31:b7:ea:f7:a9:46:90:62:bd:62:52:be:77:cc:b0:7b:
         c9:94:0d:35:44:d3:7d:00:ea:3f:cb:be:e5:2d:62:67:cf:35:
         cc:8d:82:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:42:41 2026 by rpki-client