Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e38382e3133322e302f32342d3234203d3e203532323333.roa
File:                     3139302e38382e3133322e302f32342d3234203d3e203532323333.roa (raw, json)
Hash identifier:          TcnO1cSilUKuGimnuxpQvTc2GZEWoHFMzE6fViXxI+c=
Subject key identifier:   04:CD:95:84:8A:80:32:C6:5D:34:D5:25:57:AC:7E:6F:7D:5A:A5:3E
Certificate issuer:       /CN=237D63DAE61C3211909C89DEBD463B26F873E44B
Certificate serial:       5709D48115BBF8A4593B05B69BA791BE056A7F9F
Authority key identifier: 23:7D:63:DA:E6:1C:32:11:90:9C:89:DE:BD:46:3B:26:F8:73:E4:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e38382e3133322e302f32342d3234203d3e203532323333.roa
Signing time:             Wed 30 Sep 2026 16:37:28 +0000
ROA not before:           Wed 30 Sep 2026 16:32:28 +0000
ROA not after:            Wed 29 Sep 2027 16:37:28 +0000
asID:                     52233
IP address blocks:        190.88.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 06:49:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:09:d4:81:15:bb:f8:a4:59:3b:05:b6:9b:a7:91:be:05:6a:7f:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=237D63DAE61C3211909C89DEBD463B26F873E44B
        Validity
            Not Before: Sep 30 16:32:28 2026 GMT
            Not After : Sep 29 16:37:28 2027 GMT
        Subject: CN=04CD95848A8032C65D34D52557AC7E6F7D5AA53E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:38:8f:7a:dc:9f:e7:8f:fc:8b:47:85:39:d5:
                    aa:69:88:6b:1f:c0:b1:3a:8c:30:dd:53:8f:a1:52:
                    c1:dc:3b:af:2e:7b:f0:10:5f:42:a6:72:34:51:a1:
                    be:2a:7d:99:f1:35:88:85:dc:04:2a:9f:ef:c8:b1:
                    38:2a:75:e9:18:3f:f3:c8:ed:1a:dd:5c:4a:fc:2b:
                    01:5f:a3:e1:5f:e3:33:df:d6:e4:54:7d:4e:48:51:
                    a8:45:83:4e:f1:74:d4:55:72:0c:be:52:a6:e7:ff:
                    08:3a:2f:fe:3c:07:9b:d5:ba:1a:13:67:43:fd:7f:
                    6f:df:c5:4a:e9:a2:74:fe:d7:42:9d:6f:43:c7:df:
                    9e:7d:b9:23:a7:ed:54:39:e0:37:dc:67:46:e9:ff:
                    5e:23:50:44:fa:53:3d:95:71:91:f3:42:59:a4:b4:
                    97:f2:0d:22:f7:2f:b7:21:e3:74:7f:dc:0b:0c:fd:
                    75:7f:7b:2e:11:52:69:d9:95:99:30:83:a4:1f:10:
                    f6:ed:c2:e6:fe:a0:1d:c7:4c:74:1e:d1:46:df:fc:
                    d5:34:09:4d:9b:93:f1:1a:7f:07:8f:0b:be:7c:db:
                    57:a0:a0:e3:33:f0:c1:72:de:70:06:05:11:c7:47:
                    b3:c8:73:88:d7:cf:e5:15:3f:56:6e:fc:74:80:37:
                    50:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:CD:95:84:8A:80:32:C6:5D:34:D5:25:57:AC:7E:6F:7D:5A:A5:3E
            X509v3 Authority Key Identifier:
                keyid:23:7D:63:DA:E6:1C:32:11:90:9C:89:DE:BD:46:3B:26:F8:73:E4:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e38382e3133322e302f32342d3234203d3e203532323333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.88.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:6d:95:a8:d5:54:a0:d5:f8:f0:5b:ab:0e:38:4d:de:d8:1b:
         35:35:db:cd:db:e6:e4:1e:5a:6d:40:44:aa:ac:54:60:c4:64:
         ef:14:cd:71:2f:b0:97:48:bf:95:24:76:29:ad:2a:87:e5:3a:
         c3:8a:84:2d:71:e8:5b:e0:67:4c:7f:3f:b8:4d:fc:4c:a9:c9:
         7b:fb:10:25:ff:4e:2a:6c:e4:fc:2c:c8:4c:14:d0:4c:0b:fa:
         69:ac:da:03:86:57:cb:bc:65:9a:aa:ed:a3:33:7f:70:bb:07:
         46:36:f4:e8:33:60:09:18:cb:85:66:9c:ed:8f:a4:b0:6c:ac:
         dd:99:85:c4:1a:67:c5:d0:d3:16:c6:72:14:8d:31:49:ba:a7:
         7b:79:af:43:0d:36:49:e4:9a:22:49:ef:21:84:e8:c9:83:18:
         cc:b6:cf:50:c6:3c:3d:f6:7e:48:3e:a6:60:aa:32:28:f3:33:
         42:40:a8:21:44:df:a8:24:54:63:79:35:4f:25:af:25:fd:a9:
         d7:f1:ab:c1:0b:43:72:2e:06:13:73:ca:ce:9f:92:ae:48:54:
         81:a0:80:f6:9c:91:2b:e0:04:75:b1:ce:d4:af:76:86:17:ac:
         9e:c8:36:c5:48:9a:2f:21:af:39:2a:78:22:c7:25:38:e4:d3:
         2b:23:ae:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 23:15:41 2026 by rpki-client