Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9B242FAF8BF750D082D9833088BE87F76601AEEB568E18399C1CEECCC2EDFC7E/0/3139302e31352e3234302e302f32312d3234203d3e203237383831.roa
File:                     3139302e31352e3234302e302f32312d3234203d3e203237383831.roa (raw, json)
Hash identifier:          ysW0sEqYD2Y6DLgIys0z6CDbf8vcCJW0thC1v65wHkA=
Subject key identifier:   D0:EE:D7:A0:75:83:9C:14:C7:B4:82:0B:F5:80:34:51:02:68:98:96
Certificate issuer:       /CN=DECCD2773167F746E0E146E321731A3F7D19EEEC
Certificate serial:       245CDD9C337725A12DAA706D0246F32981E9984C
Authority key identifier: DE:CC:D2:77:31:67:F7:46:E0:E1:46:E3:21:73:1A:3F:7D:19:EE:EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DECCD2773167F746E0E146E321731A3F7D19EEEC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9B242FAF8BF750D082D9833088BE87F76601AEEB568E18399C1CEECCC2EDFC7E/0/3139302e31352e3234302e302f32312d3234203d3e203237383831.roa
Signing time:             Sat 20 Jun 2026 00:50:00 +0000
ROA not before:           Sat 20 Jun 2026 00:45:00 +0000
ROA not after:            Sat 19 Jun 2027 00:50:00 +0000
asID:                     27881
IP address blocks:        190.15.240.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9B242FAF8BF750D082D9833088BE87F76601AEEB568E18399C1CEECCC2EDFC7E/0/DECCD2773167F746E0E146E321731A3F7D19EEEC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9B242FAF8BF750D082D9833088BE87F76601AEEB568E18399C1CEECCC2EDFC7E/0/DECCD2773167F746E0E146E321731A3F7D19EEEC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DECCD2773167F746E0E146E321731A3F7D19EEEC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:5c:dd:9c:33:77:25:a1:2d:aa:70:6d:02:46:f3:29:81:e9:98:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DECCD2773167F746E0E146E321731A3F7D19EEEC
        Validity
            Not Before: Jun 20 00:45:00 2026 GMT
            Not After : Jun 19 00:50:00 2027 GMT
        Subject: CN=D0EED7A075839C14C7B4820BF580345102689896
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:06:46:9b:32:6d:b2:66:8d:06:7b:2c:5d:d2:
                    f2:2c:2d:9b:e9:19:9e:f3:08:15:97:c4:8b:e8:81:
                    f3:2a:21:d8:de:75:ae:9e:a9:ed:0f:9a:00:11:70:
                    8f:56:a7:0b:7d:8c:da:b4:97:44:b9:c0:df:64:3b:
                    f7:43:15:53:69:18:ea:48:17:df:4d:5e:d7:07:e2:
                    42:7e:ca:d9:1b:48:dd:0a:cf:04:ae:59:c6:5f:ff:
                    91:c1:e1:71:a9:e8:39:94:19:94:2e:33:73:2f:b3:
                    b7:36:c3:c4:fd:f4:9b:ee:34:a9:5d:ed:3c:76:5a:
                    da:34:f9:a2:6c:ba:6f:13:ba:22:06:88:1f:91:8a:
                    6a:47:0c:e6:e7:cc:47:8a:94:5c:72:24:91:60:5e:
                    88:25:d7:50:c1:52:17:02:42:4a:04:e8:af:3c:27:
                    82:12:a7:bd:06:32:cf:1e:16:ea:fe:9e:c3:a2:5a:
                    af:52:85:22:2f:53:1b:be:8e:60:8c:8a:58:d0:35:
                    d8:0b:a2:75:2d:0a:f8:ee:cb:ab:09:f7:31:83:cf:
                    e2:aa:87:c1:38:80:da:78:d7:a1:03:a1:e5:66:93:
                    f7:09:fa:41:2d:8a:7d:6f:89:23:1d:18:9f:2e:c9:
                    e0:94:43:fa:0e:a8:e1:4f:22:cb:63:da:b8:a9:a5:
                    a2:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:EE:D7:A0:75:83:9C:14:C7:B4:82:0B:F5:80:34:51:02:68:98:96
            X509v3 Authority Key Identifier:
                keyid:DE:CC:D2:77:31:67:F7:46:E0:E1:46:E3:21:73:1A:3F:7D:19:EE:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9B242FAF8BF750D082D9833088BE87F76601AEEB568E18399C1CEECCC2EDFC7E/0/DECCD2773167F746E0E146E321731A3F7D19EEEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DECCD2773167F746E0E146E321731A3F7D19EEEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9B242FAF8BF750D082D9833088BE87F76601AEEB568E18399C1CEECCC2EDFC7E/0/3139302e31352e3234302e302f32312d3234203d3e203237383831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.15.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a3:41:75:e5:70:fa:19:99:1d:8c:77:a5:38:42:7d:e8:05:2a:
         11:9e:4a:e5:00:8a:eb:78:57:30:33:06:5e:8e:c5:54:02:bd:
         18:53:8f:04:50:51:ec:93:1f:51:57:8d:6e:4b:f6:f0:b8:04:
         40:2a:18:cd:e7:b3:88:95:f0:3a:f7:4a:6a:9d:5d:ef:9f:18:
         dc:78:d5:2b:5f:c4:fb:0f:2f:5f:ac:2b:6a:74:f5:34:39:76:
         f9:93:f3:eb:8c:f9:b9:1a:4f:bb:69:9e:ff:2d:55:bc:99:42:
         3e:4b:f5:2a:4b:fd:72:af:44:c5:dc:bc:b0:b2:38:e4:ee:10:
         c0:f1:1b:93:9f:e3:fe:ee:05:93:d5:30:3a:13:83:ca:d5:fd:
         2f:22:3e:05:0b:22:d0:6a:4b:61:36:32:98:41:b4:2f:b8:6b:
         39:0b:09:52:98:55:82:a1:fc:8d:f9:43:68:fc:a1:6e:a9:21:
         0c:45:41:c3:d4:81:4c:3f:e0:0b:48:60:19:78:ca:e5:20:df:
         70:45:ac:00:13:a8:8b:1e:d1:06:b1:91:ca:fb:24:32:49:68:
         85:b1:5f:ff:a6:c2:a9:52:7f:9b:00:6a:c3:1f:c5:1a:c1:b8:
         bc:a2:b1:7a:3d:d3:77:3f:0a:5c:08:d2:1e:6f:62:f8:cb:72:
         6d:8d:2d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:32:08 2026 by rpki-client