Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/8CC932B03D6952D9CFB7DD488680D1E68D7D30273E75A82588A41F03F9EE2B14/0/3139302e3130392e33322e302f31392d3234203d3e20323632313934.roa
File:                     3139302e3130392e33322e302f31392d3234203d3e20323632313934.roa (raw, json)
Hash identifier:          H9DaRdfNVVQ3J8PsdpYSG2tJyGRsR+qFpOHwGaBwUss=
Subject key identifier:   6E:60:07:D4:04:6D:5E:A0:C9:82:8F:7C:B6:F9:AC:AA:FD:04:46:F2
Certificate issuer:       /CN=728EE6FF4449D830A7DD35ACE47778AB8CA0E274
Certificate serial:       44690DFC2359C64228192995F9FFEF8302B35489
Authority key identifier: 72:8E:E6:FF:44:49:D8:30:A7:DD:35:AC:E4:77:78:AB:8C:A0:E2:74
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/728EE6FF4449D830A7DD35ACE47778AB8CA0E274.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8CC932B03D6952D9CFB7DD488680D1E68D7D30273E75A82588A41F03F9EE2B14/0/3139302e3130392e33322e302f31392d3234203d3e20323632313934.roa
Signing time:             Tue 13 Oct 2026 20:40:13 +0000
ROA not before:           Tue 13 Oct 2026 20:35:13 +0000
ROA not after:            Tue 12 Oct 2027 20:40:13 +0000
asID:                     262194
IP address blocks:        190.109.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8CC932B03D6952D9CFB7DD488680D1E68D7D30273E75A82588A41F03F9EE2B14/0/728EE6FF4449D830A7DD35ACE47778AB8CA0E274.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8CC932B03D6952D9CFB7DD488680D1E68D7D30273E75A82588A41F03F9EE2B14/0/728EE6FF4449D830A7DD35ACE47778AB8CA0E274.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/728EE6FF4449D830A7DD35ACE47778AB8CA0E274.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 18:47:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:69:0d:fc:23:59:c6:42:28:19:29:95:f9:ff:ef:83:02:b3:54:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=728EE6FF4449D830A7DD35ACE47778AB8CA0E274
        Validity
            Not Before: Oct 13 20:35:13 2026 GMT
            Not After : Oct 12 20:40:13 2027 GMT
        Subject: CN=6E6007D4046D5EA0C9828F7CB6F9ACAAFD0446F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:be:3f:83:5a:3e:9f:b7:83:93:82:e1:0c:4d:
                    f6:36:0d:36:3f:c9:91:32:85:e4:bd:ce:e2:86:67:
                    0e:2d:6c:39:dc:72:b3:9d:a7:99:68:0f:54:aa:ec:
                    08:3c:b4:8c:e1:83:68:7e:df:52:73:15:63:70:06:
                    99:ab:af:61:12:b7:69:6d:17:20:25:22:63:6b:1a:
                    56:5a:0d:47:ea:1f:c7:55:ad:b1:35:97:fc:79:21:
                    d9:01:77:03:c2:5e:3e:c5:a9:7b:36:61:74:b2:4d:
                    90:1d:ea:d2:f5:b6:0c:ee:e9:da:54:7c:5e:8b:43:
                    74:36:aa:62:9c:e4:d3:9c:08:db:72:dc:ca:93:5e:
                    53:1e:69:7d:16:b9:47:5e:c3:e6:7d:2a:ce:4c:eb:
                    f8:d0:b5:42:a1:65:fd:bc:c4:24:cf:60:ba:ed:72:
                    88:12:2e:38:e3:1b:9c:6f:46:88:43:72:9b:f0:34:
                    28:e6:42:c6:5d:5b:88:a2:ea:a5:5d:bf:4d:99:e9:
                    c0:b9:52:75:cf:9b:d0:75:0d:f0:20:9f:f3:e2:fa:
                    b3:51:7b:3c:7a:b7:39:99:e1:08:5f:6c:92:28:44:
                    f8:36:79:46:87:f3:ef:d0:7a:bc:e7:ba:a1:fe:cc:
                    40:79:68:8f:dc:c4:7a:c0:a5:29:4c:ea:18:7c:03:
                    1d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:60:07:D4:04:6D:5E:A0:C9:82:8F:7C:B6:F9:AC:AA:FD:04:46:F2
            X509v3 Authority Key Identifier:
                keyid:72:8E:E6:FF:44:49:D8:30:A7:DD:35:AC:E4:77:78:AB:8C:A0:E2:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8CC932B03D6952D9CFB7DD488680D1E68D7D30273E75A82588A41F03F9EE2B14/0/728EE6FF4449D830A7DD35ACE47778AB8CA0E274.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/728EE6FF4449D830A7DD35ACE47778AB8CA0E274.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8CC932B03D6952D9CFB7DD488680D1E68D7D30273E75A82588A41F03F9EE2B14/0/3139302e3130392e33322e302f31392d3234203d3e20323632313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.109.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         5b:b5:8a:16:5f:82:16:e6:cc:87:e5:fc:9b:af:30:58:2a:67:
         a9:a4:1b:01:d0:5c:e6:53:e0:f1:e7:43:2e:a1:45:1d:5b:87:
         51:ac:18:99:53:ca:ec:62:5c:4e:c1:93:72:0f:48:22:88:2a:
         ef:30:ce:e3:b5:51:16:db:be:bc:76:95:7f:2f:e5:79:ac:4e:
         f3:f7:6e:fd:cd:70:6c:64:c9:86:40:98:10:7b:40:45:e9:cb:
         cf:aa:51:ed:c6:b9:d5:8b:b9:f1:d4:46:46:b2:10:b5:67:1a:
         ac:b7:eb:56:99:01:35:39:67:a8:cf:b1:d0:cb:64:aa:a6:95:
         dc:5a:c1:2c:46:ba:4d:88:9f:8a:6c:46:5a:e9:ad:2e:ce:b7:
         ef:90:26:a7:37:03:80:85:b8:83:64:14:e0:5b:93:e2:24:c5:
         71:eb:90:f6:6c:dc:7a:fd:ad:7d:58:14:91:8f:76:70:de:47:
         ba:e3:3b:b9:1d:a5:17:d5:92:c6:1f:19:4b:72:f4:25:b5:65:
         2b:4e:39:93:48:22:44:e1:d7:05:a2:83:a3:0c:8a:49:3a:d5:
         5e:ef:53:95:52:1d:f4:30:b8:f9:f1:d4:8e:86:9a:d1:cb:4e:
         0c:01:97:19:0d:07:80:f3:0d:0b:31:11:1c:60:dc:6f:8c:0d:
         38:56:e9:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 21:04:18 2026 by rpki-client