Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9B242FAF8BF750D082D9833088BE87F76601AEEB568E18399C1CEECCC2EDFC7E/0/3139302e31352e3232342e302f31392d3234203d3e203237383831.roa
File:                     3139302e31352e3232342e302f31392d3234203d3e203237383831.roa (raw, json)
Hash identifier:          AEdu41V/wmwVJ+Molo6DNtR12FoHpLpgGxMTbapgHMc=
Subject key identifier:   2B:DE:B7:56:FE:8C:75:BE:2D:22:4B:20:CC:FF:03:3C:4D:17:01:66
Certificate issuer:       /CN=DECCD2773167F746E0E146E321731A3F7D19EEEC
Certificate serial:       48D2C2F99FC11F467FD7D67157B10BB208467433
Authority key identifier: DE:CC:D2:77:31:67:F7:46:E0:E1:46:E3:21:73:1A:3F:7D:19:EE:EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DECCD2773167F746E0E146E321731A3F7D19EEEC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9B242FAF8BF750D082D9833088BE87F76601AEEB568E18399C1CEECCC2EDFC7E/0/3139302e31352e3232342e302f31392d3234203d3e203237383831.roa
Signing time:             Mon 06 Oct 2025 20:49:41 +0000
ROA not before:           Mon 06 Oct 2025 20:44:41 +0000
ROA not after:            Mon 05 Oct 2026 20:49:41 +0000
asID:                     27881
IP address blocks:        190.15.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9B242FAF8BF750D082D9833088BE87F76601AEEB568E18399C1CEECCC2EDFC7E/0/DECCD2773167F746E0E146E321731A3F7D19EEEC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9B242FAF8BF750D082D9833088BE87F76601AEEB568E18399C1CEECCC2EDFC7E/0/DECCD2773167F746E0E146E321731A3F7D19EEEC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DECCD2773167F746E0E146E321731A3F7D19EEEC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 06:48:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:d2:c2:f9:9f:c1:1f:46:7f:d7:d6:71:57:b1:0b:b2:08:46:74:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DECCD2773167F746E0E146E321731A3F7D19EEEC
        Validity
            Not Before: Oct  6 20:44:41 2025 GMT
            Not After : Oct  5 20:49:41 2026 GMT
        Subject: CN=2BDEB756FE8C75BE2D224B20CCFF033C4D170166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:b0:d1:be:2a:5d:3f:3f:2c:22:ea:16:46:ff:
                    ab:47:5a:55:23:67:c5:6d:99:90:6f:9b:8a:cb:3c:
                    cd:bf:51:5f:f2:a8:cb:b3:80:1d:dd:69:78:4b:db:
                    1a:c6:4b:91:91:68:0c:47:27:bd:21:9b:67:57:a6:
                    de:78:03:d6:5c:c2:3d:9d:19:0a:4c:2c:4b:33:81:
                    d5:54:74:ff:a6:51:50:21:f4:d6:52:aa:85:b7:06:
                    e0:c7:70:2c:8d:ec:28:ec:66:a7:67:e1:03:86:5c:
                    1d:88:d3:00:8f:bf:33:76:98:0f:1a:8f:dd:3c:17:
                    aa:30:20:20:db:ea:6b:61:fb:32:6f:88:76:84:ad:
                    d5:6c:3a:f3:f5:ea:8a:e0:d2:fe:72:35:f0:cf:cd:
                    ba:99:68:7b:4c:1b:3b:d3:7b:11:11:52:28:0c:4f:
                    92:c8:5f:f8:d6:3c:ff:ad:05:e4:72:dc:a0:62:80:
                    e5:23:58:c5:d6:c1:e7:cf:b8:48:88:a2:3c:e8:8c:
                    f2:52:52:31:11:5b:12:ae:2a:97:09:c4:64:db:4c:
                    4d:2a:a2:b5:ec:4e:d3:f8:02:c4:79:02:be:d6:5c:
                    05:eb:91:b8:f2:da:93:a1:23:70:e6:a7:4c:cd:43:
                    08:4d:77:81:fe:f4:fb:08:dd:67:8a:87:75:02:63:
                    91:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:DE:B7:56:FE:8C:75:BE:2D:22:4B:20:CC:FF:03:3C:4D:17:01:66
            X509v3 Authority Key Identifier:
                keyid:DE:CC:D2:77:31:67:F7:46:E0:E1:46:E3:21:73:1A:3F:7D:19:EE:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9B242FAF8BF750D082D9833088BE87F76601AEEB568E18399C1CEECCC2EDFC7E/0/DECCD2773167F746E0E146E321731A3F7D19EEEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DECCD2773167F746E0E146E321731A3F7D19EEEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9B242FAF8BF750D082D9833088BE87F76601AEEB568E18399C1CEECCC2EDFC7E/0/3139302e31352e3232342e302f31392d3234203d3e203237383831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.15.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a8:d0:57:db:61:d6:ad:97:9c:6c:59:9c:a1:05:b1:8c:e2:b7:
         37:68:71:93:6a:94:ac:b0:7d:91:1f:46:bf:be:89:52:59:6f:
         12:00:24:d0:f6:f7:2c:93:1a:1b:7c:be:d6:ab:ec:20:ff:4d:
         af:1b:87:4d:04:1c:82:14:61:b1:6c:89:dc:62:58:e6:1d:1e:
         64:db:92:64:12:a4:dd:cf:5a:e8:61:38:eb:89:62:d7:c1:2f:
         0c:83:ed:ea:9e:01:7c:8a:6d:6f:9a:e0:23:c4:88:80:17:da:
         9c:64:28:aa:f5:f7:91:a4:44:e8:ce:33:84:93:98:b4:80:f4:
         24:86:54:09:ce:cb:b2:97:1e:e7:d5:80:24:ef:44:51:74:81:
         7c:b6:b4:8b:b1:67:2d:e1:4a:02:f2:38:56:79:a5:cf:64:d2:
         8e:a2:4f:74:96:e1:fe:35:66:d4:ce:fa:e0:fc:2b:8e:3f:3d:
         33:ff:6b:c0:ad:23:1b:1d:d0:b9:9e:5f:ca:68:a0:b1:5d:75:
         9f:92:56:7a:74:a1:5f:5f:e4:1e:5d:fd:9a:51:f3:33:a7:d9:
         56:64:9e:3d:2c:be:d0:37:de:27:9e:f2:fb:98:9b:80:8e:03:
         6c:f6:65:e2:03:cd:9e:cf:15:6a:57:89:4f:19:92:bb:41:68:
         12:3d:a3:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:37:44 2025 by rpki-client