Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9B242FAF8BF750D082D9833088BE87F76601AEEB568E18399C1CEECCC2EDFC7E/0/3139302e31352e3232342e302f32302d3234203d3e203237383831.roa
File:                     3139302e31352e3232342e302f32302d3234203d3e203237383831.roa (raw, json)
Hash identifier:          VAbUkXVryu5YDKl+HwUxuda3cDfhLMJ1GC5O8uEkOwk=
Subject key identifier:   43:D3:DB:5A:EE:BE:6A:FF:50:B8:FA:A3:23:F2:9B:0B:83:18:78:81
Certificate issuer:       /CN=DECCD2773167F746E0E146E321731A3F7D19EEEC
Certificate serial:       31000EFFE20C5AA5A7A2441E65F36A20A70A12C6
Authority key identifier: DE:CC:D2:77:31:67:F7:46:E0:E1:46:E3:21:73:1A:3F:7D:19:EE:EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DECCD2773167F746E0E146E321731A3F7D19EEEC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9B242FAF8BF750D082D9833088BE87F76601AEEB568E18399C1CEECCC2EDFC7E/0/3139302e31352e3232342e302f32302d3234203d3e203237383831.roa
Signing time:             Sat 20 Jun 2026 00:50:01 +0000
ROA not before:           Sat 20 Jun 2026 00:45:01 +0000
ROA not after:            Sat 19 Jun 2027 00:50:01 +0000
asID:                     27881
IP address blocks:        190.15.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9B242FAF8BF750D082D9833088BE87F76601AEEB568E18399C1CEECCC2EDFC7E/0/DECCD2773167F746E0E146E321731A3F7D19EEEC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9B242FAF8BF750D082D9833088BE87F76601AEEB568E18399C1CEECCC2EDFC7E/0/DECCD2773167F746E0E146E321731A3F7D19EEEC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DECCD2773167F746E0E146E321731A3F7D19EEEC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:00:0e:ff:e2:0c:5a:a5:a7:a2:44:1e:65:f3:6a:20:a7:0a:12:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DECCD2773167F746E0E146E321731A3F7D19EEEC
        Validity
            Not Before: Jun 20 00:45:01 2026 GMT
            Not After : Jun 19 00:50:01 2027 GMT
        Subject: CN=43D3DB5AEEBE6AFF50B8FAA323F29B0B83187881
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:3a:ce:36:ab:50:de:c2:de:af:80:dd:fa:ed:
                    1a:aa:ba:e6:df:fe:6b:8b:28:5e:df:f2:58:9a:ae:
                    5a:4b:de:c4:61:52:a8:93:f5:98:08:ef:87:49:76:
                    ca:42:20:d1:00:f1:93:b2:e5:46:96:ad:80:ac:d4:
                    da:dc:b0:49:74:28:c4:24:db:66:64:e3:c6:43:41:
                    56:00:2f:06:d3:0b:16:79:7a:16:57:64:dc:2a:77:
                    1e:c1:bb:28:7b:56:d8:1f:5e:c8:9c:f0:f4:0d:24:
                    7f:89:e2:88:7c:de:02:66:c2:2c:eb:da:ed:f9:df:
                    fc:cc:25:37:95:86:31:12:23:2a:10:de:9c:1b:35:
                    96:55:da:50:b1:29:63:13:34:5b:50:ba:e4:93:60:
                    b0:79:fb:40:6b:5f:01:c7:bb:90:de:98:f3:e8:cc:
                    7d:bd:36:8e:18:a1:af:1c:e3:b0:d1:9f:11:1e:0e:
                    93:8a:22:3c:11:dd:f1:15:cc:c8:a9:f6:9d:45:9a:
                    1f:35:d2:4d:67:5b:08:f6:6d:e3:e7:79:ac:03:a2:
                    e0:46:c3:9b:b1:5d:8c:76:d8:0d:3c:52:01:d2:e1:
                    ee:8c:ec:5e:48:df:32:ca:ae:1c:6e:5b:84:c2:cb:
                    a6:0e:b5:6c:1e:b8:cd:af:16:03:08:92:6a:89:8e:
                    c6:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:D3:DB:5A:EE:BE:6A:FF:50:B8:FA:A3:23:F2:9B:0B:83:18:78:81
            X509v3 Authority Key Identifier:
                keyid:DE:CC:D2:77:31:67:F7:46:E0:E1:46:E3:21:73:1A:3F:7D:19:EE:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9B242FAF8BF750D082D9833088BE87F76601AEEB568E18399C1CEECCC2EDFC7E/0/DECCD2773167F746E0E146E321731A3F7D19EEEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DECCD2773167F746E0E146E321731A3F7D19EEEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9B242FAF8BF750D082D9833088BE87F76601AEEB568E18399C1CEECCC2EDFC7E/0/3139302e31352e3232342e302f32302d3234203d3e203237383831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.15.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         76:0d:4b:b9:4b:2c:2f:a7:78:de:35:d5:b1:dd:69:30:e9:35:
         33:d2:24:81:88:33:0c:e1:26:c0:48:a1:82:32:bc:1e:bc:ba:
         25:fb:ee:24:ce:6c:3e:55:74:8f:96:43:86:ac:94:93:b7:93:
         a3:29:ed:4b:77:e4:b5:12:49:0e:85:f7:34:56:bd:72:e8:a5:
         2d:79:7a:2c:a7:6d:a8:d3:5a:49:38:8c:d1:cc:94:e8:cb:d3:
         1f:ac:13:e5:51:47:6c:80:5e:ca:f8:ad:d7:b9:37:03:f3:ec:
         00:5e:c7:d4:d7:62:b7:7d:9b:67:61:2b:03:fb:53:4c:e3:0b:
         82:ec:1d:5f:36:b4:fb:bb:e1:65:61:48:30:a1:e4:29:1c:8c:
         16:db:5a:f9:6b:12:1e:b1:ad:c8:64:99:e3:96:cf:4e:b8:6a:
         5c:51:ca:0e:28:23:39:a2:61:33:94:c6:3a:82:3f:21:37:4a:
         84:b9:b7:c3:f7:13:06:fe:cb:ab:7c:79:4e:cc:bb:d8:68:3b:
         33:78:1a:73:69:03:6a:31:1c:60:fb:80:83:49:cb:c3:e5:7c:
         3c:7f:f0:c4:e8:79:12:51:e2:a3:fc:73:3f:02:59:68:a8:d9:
         3e:a2:dc:6c:fb:0b:5d:78:4d:25:57:a0:08:04:e7:87:4b:7e:
         29:10:d4:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:56:14 2026 by rpki-client