Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/8899E7FA6BC08BE40F2B5F59D0A9C8ABE185D0DC13B8307E0971E96439A2E6AA/0/3139302e342e3131322e302f32302d3234203d3e20323632313936.roa
File:                     3139302e342e3131322e302f32302d3234203d3e20323632313936.roa (raw, json)
Hash identifier:          e9ccvepDiaammE+jZ8y016qBidLWq27+td80qYlYbwQ=
Subject key identifier:   E5:01:4A:99:62:79:ED:8E:77:36:5D:88:77:D1:55:0D:C2:8F:53:2C
Certificate issuer:       /CN=236265F485589146D372FF70F0BD7364753EFBD3
Certificate serial:       020F1C245DF4B72E749D8DFEB4E18B9132BFA15F
Authority key identifier: 23:62:65:F4:85:58:91:46:D3:72:FF:70:F0:BD:73:64:75:3E:FB:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/236265F485589146D372FF70F0BD7364753EFBD3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8899E7FA6BC08BE40F2B5F59D0A9C8ABE185D0DC13B8307E0971E96439A2E6AA/0/3139302e342e3131322e302f32302d3234203d3e20323632313936.roa
Signing time:             Wed 07 Oct 2026 20:39:07 +0000
ROA not before:           Wed 07 Oct 2026 20:34:07 +0000
ROA not after:            Wed 06 Oct 2027 20:39:07 +0000
asID:                     262196
IP address blocks:        190.4.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8899E7FA6BC08BE40F2B5F59D0A9C8ABE185D0DC13B8307E0971E96439A2E6AA/0/236265F485589146D372FF70F0BD7364753EFBD3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8899E7FA6BC08BE40F2B5F59D0A9C8ABE185D0DC13B8307E0971E96439A2E6AA/0/236265F485589146D372FF70F0BD7364753EFBD3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/236265F485589146D372FF70F0BD7364753EFBD3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 12:47:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:0f:1c:24:5d:f4:b7:2e:74:9d:8d:fe:b4:e1:8b:91:32:bf:a1:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=236265F485589146D372FF70F0BD7364753EFBD3
        Validity
            Not Before: Oct  7 20:34:07 2026 GMT
            Not After : Oct  6 20:39:07 2027 GMT
        Subject: CN=E5014A996279ED8E77365D8877D1550DC28F532C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:11:ff:98:a8:e9:e7:8a:08:48:6b:6b:a7:e3:
                    fa:88:c6:98:8f:98:89:b0:b5:9e:92:0c:1e:ab:29:
                    0e:4c:4b:41:e7:4e:ab:8b:96:10:5e:6a:2e:ed:55:
                    fd:03:8a:be:8f:b9:8b:7d:52:38:a4:c5:f8:ca:c1:
                    53:e6:35:82:59:d7:00:99:cc:ad:a7:06:bc:4a:e2:
                    19:4c:e3:62:78:85:82:07:49:70:30:1c:9e:4f:6e:
                    26:01:4c:e4:af:d1:21:07:62:f4:51:2e:1b:58:1d:
                    c9:35:b7:40:06:7f:37:63:86:01:fd:3f:d4:7d:a2:
                    55:70:1c:ed:20:57:63:0b:97:f4:1b:40:00:8b:80:
                    61:57:c6:97:79:59:9c:71:c9:18:92:33:01:bd:ab:
                    35:c6:97:97:9d:b5:9a:9a:3b:d3:3e:8d:cb:46:52:
                    59:c9:ac:91:68:c6:fc:29:c2:9c:d5:20:ea:8c:bd:
                    31:51:d5:54:04:50:cc:a0:f2:bc:2b:c1:c7:32:3a:
                    6c:7f:85:7c:fd:d2:3d:b4:2a:44:be:e3:d6:b4:a3:
                    21:25:cc:3a:f3:65:33:33:e0:d8:46:89:58:e4:e0:
                    d1:3c:d7:98:dc:ee:c7:4c:32:5f:bb:42:58:a5:8a:
                    05:36:60:6a:e0:f5:9d:68:17:cc:93:22:e7:8c:b7:
                    f5:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:01:4A:99:62:79:ED:8E:77:36:5D:88:77:D1:55:0D:C2:8F:53:2C
            X509v3 Authority Key Identifier:
                keyid:23:62:65:F4:85:58:91:46:D3:72:FF:70:F0:BD:73:64:75:3E:FB:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8899E7FA6BC08BE40F2B5F59D0A9C8ABE185D0DC13B8307E0971E96439A2E6AA/0/236265F485589146D372FF70F0BD7364753EFBD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/236265F485589146D372FF70F0BD7364753EFBD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8899E7FA6BC08BE40F2B5F59D0A9C8ABE185D0DC13B8307E0971E96439A2E6AA/0/3139302e342e3131322e302f32302d3234203d3e20323632313936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.4.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8b:86:cc:e7:e0:5d:23:82:53:ca:7f:bf:45:b7:e3:15:ba:9b:
         0c:f1:3c:a7:27:54:55:91:d8:5b:06:f1:4f:d3:a3:37:b7:59:
         c6:e6:0e:aa:18:ca:a0:44:07:07:b3:8e:f4:79:97:41:23:c9:
         d4:18:71:93:5c:81:68:5d:ee:2a:36:9f:e0:04:2a:c6:d5:d6:
         53:4c:ca:b6:57:6f:39:cb:c0:71:a9:70:68:8c:cc:49:3c:e1:
         a7:2f:8a:e3:1b:e7:99:e7:96:04:16:a2:b8:69:8c:db:d4:9f:
         66:f5:bb:a2:c1:f6:81:2c:b9:82:de:c6:68:b3:8a:3e:02:19:
         23:21:6d:ed:ee:a9:57:15:89:b3:62:e1:f5:f9:4a:7f:fa:ec:
         ed:0e:58:52:eb:54:f9:69:00:12:02:a1:29:30:df:9a:35:b6:
         52:3a:0c:d7:81:4e:77:d6:3b:79:ca:44:b3:4d:83:a6:d4:ad:
         1c:9a:44:eb:b6:8b:6a:c8:a0:7b:6c:8a:ba:01:fe:43:c9:4f:
         06:58:4c:80:94:52:8a:e1:96:66:45:dd:3e:ed:d3:ef:ab:93:
         89:70:ee:31:36:4a:fd:80:2e:ec:43:a2:87:0f:48:fa:e1:5f:
         20:c4:e8:94:80:2d:de:88:14:11:43:24:ab:ce:da:67:a1:29:
         4f:c6:0f:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:34:04 2026 by rpki-client