Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9B242FAF8BF750D082D9833088BE87F76601AEEB568E18399C1CEECCC2EDFC7E/0/3139302e372e3232342e302f31392d3234203d3e203237383831.roa
File:                     3139302e372e3232342e302f31392d3234203d3e203237383831.roa (raw, json)
Hash identifier:          IV1FMiyz55bmI2rrartzNFoxAfITX+gDH1uBgiC3Cfg=
Subject key identifier:   CE:45:4F:3E:98:D1:CB:EB:BC:32:33:71:92:4D:6F:14:04:C3:EF:F2
Certificate issuer:       /CN=DECCD2773167F746E0E146E321731A3F7D19EEEC
Certificate serial:       98DFBB913D3A129475AE5527170A36822CD28D
Authority key identifier: DE:CC:D2:77:31:67:F7:46:E0:E1:46:E3:21:73:1A:3F:7D:19:EE:EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DECCD2773167F746E0E146E321731A3F7D19EEEC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9B242FAF8BF750D082D9833088BE87F76601AEEB568E18399C1CEECCC2EDFC7E/0/3139302e372e3232342e302f31392d3234203d3e203237383831.roa
Signing time:             Mon 06 Oct 2025 20:49:41 +0000
ROA not before:           Mon 06 Oct 2025 20:44:41 +0000
ROA not after:            Mon 05 Oct 2026 20:49:41 +0000
asID:                     27881
IP address blocks:        190.7.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9B242FAF8BF750D082D9833088BE87F76601AEEB568E18399C1CEECCC2EDFC7E/0/DECCD2773167F746E0E146E321731A3F7D19EEEC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9B242FAF8BF750D082D9833088BE87F76601AEEB568E18399C1CEECCC2EDFC7E/0/DECCD2773167F746E0E146E321731A3F7D19EEEC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DECCD2773167F746E0E146E321731A3F7D19EEEC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            98:df:bb:91:3d:3a:12:94:75:ae:55:27:17:0a:36:82:2c:d2:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DECCD2773167F746E0E146E321731A3F7D19EEEC
        Validity
            Not Before: Oct  6 20:44:41 2025 GMT
            Not After : Oct  5 20:49:41 2026 GMT
        Subject: CN=CE454F3E98D1CBEBBC323371924D6F1404C3EFF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:07:4a:52:da:db:59:65:5f:c0:13:07:ab:ef:
                    8e:7e:ff:b3:32:59:ff:82:44:03:24:eb:bd:75:24:
                    74:1f:9f:25:dd:37:d9:d1:e6:2c:b4:6d:fc:84:3f:
                    18:dd:7a:04:f4:dc:e3:a1:6f:a6:ac:ea:5b:2f:20:
                    44:71:6c:42:af:d2:ab:08:70:64:39:93:2d:03:a8:
                    f1:5e:87:b2:e2:7c:a5:e4:4e:f2:2f:c1:88:6f:07:
                    7b:f1:97:f8:5a:7c:94:9a:d8:33:b5:c4:74:fd:12:
                    55:17:b3:b5:ce:86:18:6a:0f:f7:50:f6:e0:7b:fd:
                    14:29:b7:3e:26:4d:76:f1:91:c5:b4:80:48:58:92:
                    c1:62:7a:8e:62:29:f6:a3:1c:a4:3b:d2:82:42:c5:
                    99:b7:3b:6c:0f:37:56:a6:ef:4f:75:13:e5:17:61:
                    01:c4:04:06:8b:1e:f1:b2:36:9c:48:21:f7:85:34:
                    3a:ba:20:0f:24:6c:73:b8:7e:91:b9:74:5f:18:19:
                    00:c3:78:cd:43:af:f6:72:c2:bd:4e:dc:f2:5a:24:
                    01:a2:35:f8:be:b9:a1:e7:82:a5:df:bb:25:c5:92:
                    d9:29:fe:d8:d4:b4:fb:c3:9b:ae:b1:07:2b:06:0f:
                    c4:b5:42:54:2a:8b:c3:1d:ee:a5:80:1d:75:78:5d:
                    61:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:45:4F:3E:98:D1:CB:EB:BC:32:33:71:92:4D:6F:14:04:C3:EF:F2
            X509v3 Authority Key Identifier:
                keyid:DE:CC:D2:77:31:67:F7:46:E0:E1:46:E3:21:73:1A:3F:7D:19:EE:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9B242FAF8BF750D082D9833088BE87F76601AEEB568E18399C1CEECCC2EDFC7E/0/DECCD2773167F746E0E146E321731A3F7D19EEEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DECCD2773167F746E0E146E321731A3F7D19EEEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9B242FAF8BF750D082D9833088BE87F76601AEEB568E18399C1CEECCC2EDFC7E/0/3139302e372e3232342e302f31392d3234203d3e203237383831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.7.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         48:a2:ab:ee:f6:46:4c:29:b9:f8:f7:9e:a9:47:48:76:d1:83:
         c5:e7:82:11:0a:9c:c9:4d:c2:e3:ea:47:74:05:1e:46:f8:5a:
         a6:99:2c:10:1b:95:a5:cd:76:a0:d4:6d:3e:29:f7:37:7f:78:
         a2:38:75:69:f3:12:52:ee:f6:4f:0f:00:40:4b:45:f6:a2:61:
         ca:3d:c0:85:59:62:0e:ab:bc:7c:42:2a:20:6a:b2:8f:1d:39:
         19:f0:77:71:a1:6f:32:89:76:f9:65:b2:0a:97:f8:16:86:6e:
         36:44:73:a4:60:0c:f6:9d:3d:64:30:02:9a:0c:0d:2a:84:e3:
         b0:12:0c:31:6d:f1:b6:21:ff:9a:10:30:16:ac:f9:95:dd:44:
         ea:53:65:eb:76:d2:2c:b8:9d:53:b6:99:67:be:da:cd:fd:a0:
         26:cd:93:56:09:64:bd:cd:e7:9e:e7:d1:ff:10:e4:d2:a9:ca:
         bb:e7:11:bd:22:62:9d:90:4e:8b:0c:72:47:97:51:ee:82:a9:
         98:a4:e1:4f:d8:7c:a4:5a:d7:12:0b:be:b7:76:44:fc:15:3f:
         7d:cd:46:56:30:e1:8b:44:66:a1:48:3a:72:3b:a7:6b:08:a8:
         70:05:c5:84:99:01:3a:ae:0f:f8:c1:af:32:df:50:b2:b3:0c:
         e1:a0:79:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:26:19 2025 by rpki-client