Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/3139302e3139362e3232342e302f32342d3234203d3e20323634363838.roa
File:                     3139302e3139362e3232342e302f32342d3234203d3e20323634363838.roa (raw, json)
Hash identifier:          wPH8lsnnYP5MnPvu/XdW/mCbOi5pewWhshVLa40xqqY=
Subject key identifier:   4B:8C:75:9C:17:0B:51:48:06:DF:B9:60:98:33:CF:36:DC:62:AC:9E
Certificate issuer:       /CN=A8157BBF3584469317EB4058D1B9B379DC9D17D9
Certificate serial:       052411C8B80890FE3FD610148DE5FCDCBE3DE250
Authority key identifier: A8:15:7B:BF:35:84:46:93:17:EB:40:58:D1:B9:B3:79:DC:9D:17:D9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/3139302e3139362e3232342e302f32342d3234203d3e20323634363838.roa
Signing time:             Thu 09 Oct 2025 19:49:52 +0000
ROA not before:           Thu 09 Oct 2025 19:44:52 +0000
ROA not after:            Thu 08 Oct 2026 19:49:52 +0000
asID:                     264688
IP address blocks:        190.196.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 23 Oct 2025 21:10:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:24:11:c8:b8:08:90:fe:3f:d6:10:14:8d:e5:fc:dc:be:3d:e2:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8157BBF3584469317EB4058D1B9B379DC9D17D9
        Validity
            Not Before: Oct  9 19:44:52 2025 GMT
            Not After : Oct  8 19:49:52 2026 GMT
        Subject: CN=4B8C759C170B514806DFB9609833CF36DC62AC9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f4:38:53:82:b2:55:ce:9d:a8:37:56:ff:9f:
                    87:e3:cc:59:20:9a:51:9b:99:16:0c:68:ce:f5:e5:
                    2f:3b:75:7f:2f:b8:d4:e7:33:f4:38:af:25:52:bf:
                    e3:e4:e3:47:ce:bb:bd:b5:ce:aa:12:cc:07:a5:72:
                    bb:bd:2f:4c:b3:09:26:00:c5:74:90:9e:bc:ba:e1:
                    8e:97:11:81:aa:57:af:99:7f:c6:6c:41:63:bc:a6:
                    f6:74:eb:27:22:9b:e9:55:cd:79:35:b3:c8:cd:d9:
                    4e:54:be:1a:f9:f4:2c:85:fd:1d:e7:1c:3a:47:38:
                    ea:d2:03:fa:be:5b:33:79:c4:65:b2:bc:14:31:72:
                    6e:b6:2b:fe:bf:b7:44:f4:ea:ef:9e:f9:2c:26:4c:
                    70:92:c6:a0:18:c9:7b:47:70:23:b6:6b:48:62:a9:
                    6d:d3:87:ce:dd:75:b7:61:3d:da:fd:97:89:3a:c3:
                    1b:44:c6:40:38:45:6c:f8:90:44:f6:c1:e8:a4:22:
                    1b:11:b2:4a:af:0a:85:c0:13:17:24:96:f3:ff:cd:
                    1c:c7:cc:7d:0c:c7:e7:40:26:bb:4e:63:ce:5d:74:
                    b0:e7:dc:b8:e5:ed:cc:2b:6d:e7:d8:69:fb:34:d1:
                    18:a2:20:04:07:03:6e:14:0c:56:46:35:70:f0:86:
                    35:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:8C:75:9C:17:0B:51:48:06:DF:B9:60:98:33:CF:36:DC:62:AC:9E
            X509v3 Authority Key Identifier:
                keyid:A8:15:7B:BF:35:84:46:93:17:EB:40:58:D1:B9:B3:79:DC:9D:17:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/3139302e3139362e3232342e302f32342d3234203d3e20323634363838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.196.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:1e:64:01:12:aa:b7:5e:d0:57:8f:ed:08:79:5f:e6:13:2d:
         cd:b7:81:06:7b:62:d6:c6:56:27:a1:26:38:ee:8e:4c:79:43:
         f4:e0:79:83:8d:3d:62:c0:cb:3c:27:3b:58:d7:37:8b:b0:4f:
         cb:69:ab:81:c9:8d:ba:af:25:ac:6a:2e:af:49:e0:03:25:47:
         52:46:97:d7:6c:45:27:31:6d:af:00:c4:f6:a1:c4:62:97:84:
         af:38:19:f5:32:0c:bd:d4:34:91:6e:41:b6:db:f9:e3:3d:22:
         28:8e:02:d3:a4:b8:1c:97:ad:75:98:76:16:fb:b9:12:e0:5e:
         ee:e9:26:d2:f9:b0:a6:ad:98:da:67:0f:71:55:83:ba:bf:3e:
         47:6b:cf:d2:e6:0d:25:63:6a:dd:d7:e4:97:0f:95:d2:b3:34:
         f4:e8:66:1b:f3:ab:8a:25:15:5d:4a:74:82:5f:c0:83:bb:53:
         ba:64:22:42:14:78:7a:b5:21:61:bf:08:52:bf:95:6f:4c:a5:
         ff:0c:a5:f6:f9:a7:9e:a8:95:35:a4:cf:be:b4:fe:8b:9a:9c:
         88:80:e0:7c:9d:a4:b9:a9:f6:1a:a3:59:b0:40:35:02:24:d5:
         e0:7c:2c:78:dd:cd:f5:74:65:7b:b8:c8:5a:10:3f:fd:40:d2:
         37:f3:97:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:14:46 2025 by rpki-client