Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e38382e3134342e302f32312d3234203d3e203532323333.roa
File:                     3139302e38382e3134342e302f32312d3234203d3e203532323333.roa (raw, json)
Hash identifier:          thfBhqhv2zGa00GTm2BYp+AOmPKoAEkaSjj45ANJ6/o=
Subject key identifier:   E0:5D:59:FD:52:26:53:53:BA:CC:2E:63:09:8F:EF:F0:D2:C2:28:71
Certificate issuer:       /CN=237D63DAE61C3211909C89DEBD463B26F873E44B
Certificate serial:       5270D35BF282486F635CDE74281BAB33318917BC
Authority key identifier: 23:7D:63:DA:E6:1C:32:11:90:9C:89:DE:BD:46:3B:26:F8:73:E4:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e38382e3134342e302f32312d3234203d3e203532323333.roa
Signing time:             Wed 25 Mar 2026 13:20:00 +0000
ROA not before:           Wed 25 Mar 2026 13:15:00 +0000
ROA not after:            Wed 24 Mar 2027 13:20:00 +0000
asID:                     52233
IP address blocks:        190.88.144.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:70:d3:5b:f2:82:48:6f:63:5c:de:74:28:1b:ab:33:31:89:17:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=237D63DAE61C3211909C89DEBD463B26F873E44B
        Validity
            Not Before: Mar 25 13:15:00 2026 GMT
            Not After : Mar 24 13:20:00 2027 GMT
        Subject: CN=E05D59FD52265353BACC2E63098FEFF0D2C22871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f3:f4:8c:cf:12:bb:aa:8e:bc:f1:eb:72:c1:
                    f2:1d:5f:c6:83:f0:79:99:e7:44:bb:bd:f8:ee:f8:
                    34:02:5f:f5:12:7f:f4:24:55:28:f3:e6:3e:2a:52:
                    3a:57:da:d1:20:63:69:ca:94:a5:a2:8c:0e:12:87:
                    ff:af:36:0a:59:71:bb:d7:ae:78:06:f8:ed:82:fc:
                    74:97:9f:38:86:80:de:08:0c:db:b5:1a:57:cd:98:
                    af:33:59:63:9d:95:df:6e:42:7d:fa:92:e4:6e:32:
                    ef:49:51:04:98:2e:59:d2:4c:98:94:44:3f:43:40:
                    48:b9:85:02:e9:97:93:f6:85:36:b5:b6:5a:e6:cd:
                    d6:61:de:e6:6f:38:e1:b0:55:f4:a4:25:e5:6b:f0:
                    6d:5a:5a:1e:17:e4:3e:07:68:fc:47:18:11:45:63:
                    32:73:b3:3d:19:e2:a4:ac:8b:e9:1f:c5:a7:f3:38:
                    9b:5b:d9:bd:1d:dd:ec:5d:52:77:71:b1:db:4b:50:
                    24:45:a7:45:df:85:bd:46:90:ff:b7:9c:c2:c4:4e:
                    7e:cc:c7:86:dd:56:42:4e:ec:05:8c:5b:c5:0a:79:
                    09:3b:61:7e:07:cf:43:9d:d5:79:7f:9e:89:b2:87:
                    5a:0d:29:86:40:3c:8d:33:16:e5:de:76:f4:cb:bc:
                    df:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:5D:59:FD:52:26:53:53:BA:CC:2E:63:09:8F:EF:F0:D2:C2:28:71
            X509v3 Authority Key Identifier:
                keyid:23:7D:63:DA:E6:1C:32:11:90:9C:89:DE:BD:46:3B:26:F8:73:E4:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e38382e3134342e302f32312d3234203d3e203532323333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.88.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         31:bc:5f:d6:d6:69:2d:ee:26:f7:12:15:ca:0e:0a:2c:66:d2:
         48:a2:c2:15:20:29:68:46:02:21:ed:e9:a6:f9:bf:07:28:71:
         a5:f8:1c:b8:5c:49:0d:21:94:6e:2e:7d:58:60:bb:ee:76:a4:
         a9:4c:8c:3b:41:2a:e6:82:82:ab:38:f4:79:82:88:da:3c:51:
         12:f6:1b:bb:72:77:17:df:6b:fe:0e:01:b0:b5:74:e1:99:11:
         4a:eb:56:e5:24:8f:58:73:bb:2f:6e:60:ce:71:37:7d:fc:a0:
         b7:21:c4:74:d1:7f:48:bd:f6:0f:e8:46:d3:1c:39:03:5e:a4:
         d6:35:dd:ec:40:29:0a:45:45:c9:21:22:96:a6:98:2b:ef:07:
         21:7c:e0:bf:73:97:85:9d:b5:a9:d4:51:72:7a:b1:57:00:35:
         ff:18:05:94:ab:ef:01:6f:22:6d:ca:5c:a6:bf:e9:61:21:5e:
         95:bb:60:27:b9:b1:6f:bb:78:04:2a:30:38:09:ad:99:26:f5:
         47:7f:15:35:34:a5:bf:5a:a4:2e:5c:96:95:69:be:13:3e:39:
         20:38:67:f0:00:5d:30:68:73:a6:8c:e0:47:65:e0:b3:92:86:
         d4:b7:87:53:dc:de:97:b6:7d:3b:b6:cb:87:45:64:b8:1b:54:
         db:56:44:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 04:51:17 2026 by rpki-client