Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/3139302e39382e3135302e302f32342d3234203d3e20323734323239.roa
File:                     3139302e39382e3135302e302f32342d3234203d3e20323734323239.roa (raw, json)
Hash identifier:          25OnV0FwRJq/8Cdb71DaZzVd7z++XObhALkcVJoQSn8=
Subject key identifier:   05:C4:46:1F:ED:82:87:74:B6:16:A5:05:56:43:E8:3E:3B:57:51:AB
Certificate issuer:       /CN=B61ABF237277FEAF24117EBBE28D9D57E442433A
Certificate serial:       1D718C7DD370D5D65F22F9EB826F4D3DD1769D49
Authority key identifier: B6:1A:BF:23:72:77:FE:AF:24:11:7E:BB:E2:8D:9D:57:E4:42:43:3A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/3139302e39382e3135302e302f32342d3234203d3e20323734323239.roa
Signing time:             Wed 13 May 2026 09:40:00 +0000
ROA not before:           Wed 13 May 2026 09:35:00 +0000
ROA not after:            Wed 12 May 2027 09:40:00 +0000
asID:                     274229
IP address blocks:        190.98.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:71:8c:7d:d3:70:d5:d6:5f:22:f9:eb:82:6f:4d:3d:d1:76:9d:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B61ABF237277FEAF24117EBBE28D9D57E442433A
        Validity
            Not Before: May 13 09:35:00 2026 GMT
            Not After : May 12 09:40:00 2027 GMT
        Subject: CN=05C4461FED828774B616A5055643E83E3B5751AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:48:e7:ad:09:40:f3:ff:99:15:e9:50:72:8f:
                    27:08:3f:27:15:a3:ff:d8:f5:54:f8:67:39:db:99:
                    8f:8c:bb:91:a7:53:ee:86:aa:11:1c:bf:43:98:5b:
                    a4:ac:16:85:57:ce:a3:23:97:c0:40:a6:34:e7:4e:
                    5d:a1:5f:8d:ed:af:6e:2b:6f:ca:10:8b:13:99:9d:
                    3b:cb:b2:89:cf:72:7e:44:b2:c8:1c:5f:1e:85:fb:
                    60:15:b0:c4:01:0c:43:06:fc:43:e1:9e:5a:07:55:
                    84:d0:d2:ab:06:98:1a:6f:04:18:8e:36:33:72:8a:
                    58:a1:1d:20:66:fa:4f:93:16:33:44:35:32:cf:d9:
                    da:7c:1b:04:01:ad:9c:4c:a9:36:5e:4f:e6:41:4c:
                    26:7b:cf:f9:52:d0:a3:c3:b5:ba:c4:de:5e:00:a9:
                    12:38:c1:ab:e0:5b:92:37:d6:2c:f1:38:10:cc:b5:
                    83:44:26:48:dc:d4:47:05:75:20:0d:b9:a5:51:c1:
                    68:5f:5f:57:e5:fe:bc:00:19:35:b9:79:6b:5b:86:
                    7f:4d:a2:db:f8:83:74:31:9b:1c:b6:1b:52:1a:32:
                    cb:a7:39:04:f5:d6:e3:83:5f:2d:72:08:ad:29:5b:
                    99:63:e9:20:a4:42:ca:47:b8:58:82:7b:1a:32:af:
                    70:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:C4:46:1F:ED:82:87:74:B6:16:A5:05:56:43:E8:3E:3B:57:51:AB
            X509v3 Authority Key Identifier:
                keyid:B6:1A:BF:23:72:77:FE:AF:24:11:7E:BB:E2:8D:9D:57:E4:42:43:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/3139302e39382e3135302e302f32342d3234203d3e20323734323239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.98.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:6e:4a:eb:1d:92:10:bb:d0:25:26:75:03:73:02:eb:ff:51:
         c7:09:97:a9:8b:dc:62:e0:c1:75:e1:ac:ac:de:82:17:93:2f:
         2f:f2:da:a8:96:40:4a:5e:24:e0:4f:2e:6b:35:cf:09:bf:ce:
         d4:31:6b:f6:1b:80:b0:27:c1:06:b7:1e:cb:e4:a8:b2:fd:7a:
         07:7d:d1:b0:87:e2:c0:f1:40:cf:62:e4:d8:db:1e:7f:43:7d:
         83:4a:c2:7f:b5:1a:86:8a:4f:42:b8:c4:bf:d1:c5:44:ca:37:
         20:fd:1b:f0:db:4b:4f:b0:9b:ee:90:a2:b9:79:01:e2:18:92:
         1b:57:63:5c:5a:99:e9:3c:c6:f3:28:c4:c2:2e:14:07:ba:ea:
         a2:06:b9:ae:2b:d3:ac:d8:ee:ef:08:6d:f1:96:27:22:d1:94:
         f2:d3:db:5f:ed:fa:12:80:be:63:4e:b4:f0:e2:cb:7d:a6:ee:
         5b:9d:bd:e6:f4:cd:c6:0d:b2:9b:8f:c1:4c:29:89:0a:15:73:
         cd:8c:94:97:ed:11:13:2c:cf:37:e6:aa:4e:db:00:b0:ee:ed:
         41:03:a5:40:2b:c8:7f:c0:e3:27:e3:cb:40:a3:6a:b9:b9:db:
         06:8b:15:89:64:c9:af:66:46:6b:1f:58:36:01:59:be:06:2d:
         b6:d5:2b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:41:51 2026 by rpki-client