Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A6ABCAE06994B25D303E0DF561A94D8C0CB5A913013F2A9B77B604A1325D69CC/0/3139302e31352e3235302e302f32342d3234203d3e20323734323531.roa
File:                     3139302e31352e3235302e302f32342d3234203d3e20323734323531.roa (raw, json)
Hash identifier:          QexB8YInhtPc28fCl8T6RQBn9HX830td7ps+m5IuLzY=
Subject key identifier:   D5:6D:FD:98:65:3F:F7:63:D7:B0:54:03:F2:7F:FD:E1:70:32:2B:30
Certificate issuer:       /CN=2B4028A489B5AC3783BE499256A832ADD8A8A582
Certificate serial:       14979EC137EA4EA9039EB5CED2AC778BFEEB0722
Authority key identifier: 2B:40:28:A4:89:B5:AC:37:83:BE:49:92:56:A8:32:AD:D8:A8:A5:82
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4028A489B5AC3783BE499256A832ADD8A8A582.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A6ABCAE06994B25D303E0DF561A94D8C0CB5A913013F2A9B77B604A1325D69CC/0/3139302e31352e3235302e302f32342d3234203d3e20323734323531.roa
Signing time:             Wed 06 May 2026 19:10:00 +0000
ROA not before:           Wed 06 May 2026 19:05:00 +0000
ROA not after:            Wed 05 May 2027 19:10:00 +0000
asID:                     274251
IP address blocks:        190.15.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A6ABCAE06994B25D303E0DF561A94D8C0CB5A913013F2A9B77B604A1325D69CC/0/2B4028A489B5AC3783BE499256A832ADD8A8A582.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A6ABCAE06994B25D303E0DF561A94D8C0CB5A913013F2A9B77B604A1325D69CC/0/2B4028A489B5AC3783BE499256A832ADD8A8A582.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4028A489B5AC3783BE499256A832ADD8A8A582.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:97:9e:c1:37:ea:4e:a9:03:9e:b5:ce:d2:ac:77:8b:fe:eb:07:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4028A489B5AC3783BE499256A832ADD8A8A582
        Validity
            Not Before: May  6 19:05:00 2026 GMT
            Not After : May  5 19:10:00 2027 GMT
        Subject: CN=D56DFD98653FF763D7B05403F27FFDE170322B30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:fd:de:9e:a7:4c:01:6c:2b:b4:1b:c4:e2:23:
                    58:e7:e2:ff:6a:09:b3:4a:87:67:54:c7:50:37:29:
                    1a:65:fd:a7:40:69:42:ec:f8:0d:53:85:c0:34:1e:
                    58:84:01:59:28:51:10:87:87:e9:b0:62:63:c7:21:
                    ee:e4:36:73:a3:da:64:0b:36:14:82:b4:21:78:f4:
                    a2:d4:9d:16:e7:14:16:96:14:22:c0:a8:6c:7c:2e:
                    76:29:08:9c:85:b6:47:4e:5c:84:38:fe:d4:34:bd:
                    53:ed:9e:4a:ed:3c:ea:29:f2:88:0e:fb:2a:72:7f:
                    01:55:cf:13:4b:c5:65:a4:ea:c4:41:00:4c:3c:db:
                    a9:36:60:71:4b:5e:87:c7:6c:6c:ed:d2:cf:7b:66:
                    79:ed:19:5c:37:18:de:7d:0f:32:46:be:a9:67:61:
                    be:fe:30:9e:bd:71:63:65:1b:ff:a4:bf:87:f9:7c:
                    34:b4:20:62:8a:23:12:46:e5:3a:54:cd:36:78:d5:
                    9f:41:b9:39:79:97:21:05:dc:8f:f0:dc:02:d5:62:
                    76:28:d8:54:39:c6:3c:a0:6b:c8:7c:d7:1c:2f:ad:
                    3a:1a:16:b0:ec:3b:17:91:97:4d:27:f7:9d:77:3c:
                    fa:71:7c:af:21:9e:9a:ea:c3:ac:d9:1f:92:f2:e6:
                    0d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:6D:FD:98:65:3F:F7:63:D7:B0:54:03:F2:7F:FD:E1:70:32:2B:30
            X509v3 Authority Key Identifier:
                keyid:2B:40:28:A4:89:B5:AC:37:83:BE:49:92:56:A8:32:AD:D8:A8:A5:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A6ABCAE06994B25D303E0DF561A94D8C0CB5A913013F2A9B77B604A1325D69CC/0/2B4028A489B5AC3783BE499256A832ADD8A8A582.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4028A489B5AC3783BE499256A832ADD8A8A582.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A6ABCAE06994B25D303E0DF561A94D8C0CB5A913013F2A9B77B604A1325D69CC/0/3139302e31352e3235302e302f32342d3234203d3e20323734323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.15.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:29:cd:cc:da:6c:4c:99:61:3c:d6:eb:6e:02:b0:9b:6f:23:
         61:38:45:2d:4f:a1:be:54:3b:64:a8:14:c1:38:4f:fa:4c:4e:
         ac:e9:3f:f8:b3:1f:29:a3:cd:95:25:ea:84:e3:34:b7:9f:08:
         6d:41:af:e0:ec:d1:a6:dd:7b:de:4f:90:0a:4b:7b:10:26:f7:
         64:45:bf:4e:f8:f2:02:e7:3a:cd:87:a3:a0:a6:7f:da:14:98:
         1b:ea:b4:f1:3a:e5:23:2a:57:c5:79:77:fe:2b:64:7d:37:4e:
         19:e6:f4:56:6b:b0:e1:63:02:a7:e2:ef:c7:15:77:a1:77:c9:
         ac:00:71:01:b2:92:c4:3e:06:0d:01:87:2a:36:87:3a:61:cf:
         52:55:ba:88:63:5c:c3:c1:5f:d9:10:6f:6a:74:3c:91:c5:98:
         b8:93:6a:5f:37:73:e3:87:0b:64:34:88:4b:69:c1:a4:2a:8e:
         ea:3d:3e:28:fb:6c:79:d0:e5:0d:94:6a:88:a0:bf:26:3f:2d:
         40:46:af:1d:ea:ca:cf:c8:75:c6:11:5d:76:55:05:c2:17:88:
         03:3b:7a:d6:d6:0a:21:bd:10:94:aa:dc:ea:a4:61:cd:e1:2e:
         b6:ca:e0:17:aa:66:6c:87:18:19:99:b4:6c:33:7f:82:58:63:
         0c:a4:74:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:47:56 2026 by rpki-client