Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/8CC932B03D6952D9CFB7DD488680D1E68D7D30273E75A82588A41F03F9EE2B14/0/3139302e3130392e36332e302f32342d3234203d3e20323733393734.roa
File:                     3139302e3130392e36332e302f32342d3234203d3e20323733393734.roa (raw, json)
Hash identifier:          TMAl35gJpZJKeZ0PQrfpkiTejrMUnr2mcTCrtqOZDGY=
Subject key identifier:   50:7C:81:75:80:9F:98:99:BA:3A:E5:A4:2D:7C:AE:B4:5C:0E:68:C8
Certificate issuer:       /CN=728EE6FF4449D830A7DD35ACE47778AB8CA0E274
Certificate serial:       42A5BD3B402186BF01F1270083CFF53E006E1546
Authority key identifier: 72:8E:E6:FF:44:49:D8:30:A7:DD:35:AC:E4:77:78:AB:8C:A0:E2:74
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/728EE6FF4449D830A7DD35ACE47778AB8CA0E274.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8CC932B03D6952D9CFB7DD488680D1E68D7D30273E75A82588A41F03F9EE2B14/0/3139302e3130392e36332e302f32342d3234203d3e20323733393734.roa
Signing time:             Wed 23 Sep 2026 21:50:00 +0000
ROA not before:           Wed 23 Sep 2026 21:45:00 +0000
ROA not after:            Wed 22 Sep 2027 21:50:00 +0000
asID:                     273974
IP address blocks:        190.109.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8CC932B03D6952D9CFB7DD488680D1E68D7D30273E75A82588A41F03F9EE2B14/0/728EE6FF4449D830A7DD35ACE47778AB8CA0E274.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8CC932B03D6952D9CFB7DD488680D1E68D7D30273E75A82588A41F03F9EE2B14/0/728EE6FF4449D830A7DD35ACE47778AB8CA0E274.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/728EE6FF4449D830A7DD35ACE47778AB8CA0E274.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 06:54:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:a5:bd:3b:40:21:86:bf:01:f1:27:00:83:cf:f5:3e:00:6e:15:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=728EE6FF4449D830A7DD35ACE47778AB8CA0E274
        Validity
            Not Before: Sep 23 21:45:00 2026 GMT
            Not After : Sep 22 21:50:00 2027 GMT
        Subject: CN=507C8175809F9899BA3AE5A42D7CAEB45C0E68C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ac:d2:1b:ad:b8:b8:b4:7a:0a:27:75:a2:10:
                    ea:b2:50:0e:9d:a9:39:fa:6f:6c:89:69:ab:eb:64:
                    b8:ca:c5:a0:d7:68:28:0d:dd:26:2f:c8:3e:b3:eb:
                    58:0e:a5:b1:59:ad:e0:8b:a9:8a:1e:80:a4:56:13:
                    9e:14:0b:41:00:f0:e3:3b:87:05:6f:12:29:e5:0c:
                    59:07:c7:6a:2a:0c:c5:82:15:6c:55:e5:60:6e:bd:
                    b6:23:ef:38:7a:12:5a:cd:49:3e:c6:e0:2b:fd:d3:
                    90:0f:30:ff:1c:a2:4e:06:1c:57:99:51:d3:81:57:
                    66:1a:91:46:23:a8:c0:36:5b:ee:72:02:d9:09:36:
                    2d:bc:83:05:43:d0:fe:e1:d9:cf:d2:28:93:17:72:
                    a2:03:19:af:1f:e5:59:f5:f0:11:af:55:45:ab:f5:
                    01:db:46:d0:f8:2f:d2:ac:6b:a2:1b:b2:c6:26:6f:
                    bf:f4:e5:ca:9b:81:95:ac:ed:df:eb:f3:f7:f4:c4:
                    1e:9e:3b:c7:4f:37:6d:95:dd:44:25:28:10:5c:26:
                    83:0a:f2:d8:64:1f:80:38:59:96:a9:a3:c3:f4:4f:
                    f4:17:e6:46:fb:b2:14:16:e9:12:eb:56:3c:ad:d2:
                    44:d6:87:ff:61:b9:90:70:be:55:8f:aa:7f:00:0a:
                    e4:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:7C:81:75:80:9F:98:99:BA:3A:E5:A4:2D:7C:AE:B4:5C:0E:68:C8
            X509v3 Authority Key Identifier:
                keyid:72:8E:E6:FF:44:49:D8:30:A7:DD:35:AC:E4:77:78:AB:8C:A0:E2:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8CC932B03D6952D9CFB7DD488680D1E68D7D30273E75A82588A41F03F9EE2B14/0/728EE6FF4449D830A7DD35ACE47778AB8CA0E274.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/728EE6FF4449D830A7DD35ACE47778AB8CA0E274.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8CC932B03D6952D9CFB7DD488680D1E68D7D30273E75A82588A41F03F9EE2B14/0/3139302e3130392e36332e302f32342d3234203d3e20323733393734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.109.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:0f:e8:f4:40:18:7f:c6:69:60:b6:13:17:21:01:6a:8e:db:
         76:d7:ba:01:8c:70:12:59:8f:97:a9:df:60:e8:a8:c5:ad:0e:
         e7:8d:64:8c:d3:39:24:6f:7f:4a:e7:62:1a:29:79:92:cb:fa:
         12:26:9d:51:f7:8a:89:94:f2:00:14:e0:5a:32:34:3d:9a:b7:
         08:66:fc:c4:19:8a:42:91:df:46:93:13:4a:e3:15:8b:01:57:
         26:47:5b:43:b0:46:18:e8:49:93:da:99:25:aa:ba:68:2a:2a:
         3a:2f:28:5d:c7:de:ce:02:81:96:f8:7a:07:6c:f6:c0:19:ed:
         42:2f:d9:fe:8d:5e:17:99:85:07:aa:c9:5d:73:6b:9a:04:e6:
         58:f0:16:a5:aa:8a:7b:72:ba:ef:9c:cb:91:dd:84:07:35:29:
         86:db:6d:33:c3:28:02:d0:5b:a4:54:2c:64:40:9e:42:30:45:
         f3:a0:e0:62:19:5e:08:d1:a2:e6:0c:de:ea:e2:c3:b5:0e:14:
         04:db:1f:b5:6f:6c:a9:db:d9:1c:74:ec:1a:bd:5c:27:dd:f2:
         89:7b:71:cc:18:7f:59:cc:d3:fd:c7:a5:ba:e2:a4:54:48:be:
         cb:b9:91:38:0e:5b:db:38:72:eb:eb:e1:11:20:24:10:df:ca:
         94:20:f9:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 19:47:56 2026 by rpki-client