Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/3139302e39382e3136302e302f31392d3139203d3e203132393536.roa
File:                     3139302e39382e3136302e302f31392d3139203d3e203132393536.roa (raw, json)
Hash identifier:          8RIsDwja1iPdFqkcvpbMKp+laNNr0FdtGEI95fOo/HM=
Subject key identifier:   BD:1A:92:92:9B:9F:63:5C:31:5C:8F:D1:47:66:5B:87:F8:5E:36:3D
Certificate issuer:       /CN=B61ABF237277FEAF24117EBBE28D9D57E442433A
Certificate serial:       069D13840FBCC9776F33731C4CB6502C22E0B416
Authority key identifier: B6:1A:BF:23:72:77:FE:AF:24:11:7E:BB:E2:8D:9D:57:E4:42:43:3A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/3139302e39382e3136302e302f31392d3139203d3e203132393536.roa
Signing time:             Mon 06 Oct 2025 11:49:35 +0000
ROA not before:           Mon 06 Oct 2025 11:44:35 +0000
ROA not after:            Mon 05 Oct 2026 11:49:35 +0000
asID:                     12956
IP address blocks:        190.98.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Oct 2025 23:53:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:9d:13:84:0f:bc:c9:77:6f:33:73:1c:4c:b6:50:2c:22:e0:b4:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B61ABF237277FEAF24117EBBE28D9D57E442433A
        Validity
            Not Before: Oct  6 11:44:35 2025 GMT
            Not After : Oct  5 11:49:35 2026 GMT
        Subject: CN=BD1A92929B9F635C315C8FD147665B87F85E363D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e1:fb:68:24:75:27:8e:c1:8c:ca:bd:77:c0:
                    7d:60:2a:11:b6:a1:6a:68:a1:cc:4b:e6:96:cd:81:
                    c2:4c:6e:e8:9c:cc:63:15:80:36:ca:7b:8f:45:3b:
                    2e:d5:1a:d3:cc:23:80:06:1f:9d:58:8d:20:2f:77:
                    65:1a:eb:94:6d:d1:cc:7c:c6:96:77:cf:14:2f:b8:
                    61:13:5a:a9:e6:8d:94:c3:27:a0:99:2a:7a:7b:a8:
                    a6:e5:1a:c8:96:98:fa:58:b8:35:cb:fd:61:bf:d6:
                    2d:ac:69:9a:cb:36:5b:33:74:fb:ad:1e:42:51:a1:
                    2d:9e:76:58:50:ff:5c:ee:51:38:1f:97:db:2b:d3:
                    20:16:b9:57:87:58:93:fc:e7:23:29:17:91:42:69:
                    57:9a:91:e0:61:2c:14:db:32:a1:c7:b3:19:ab:e9:
                    64:ff:52:98:8f:4e:97:9e:09:9b:88:20:e9:dd:43:
                    82:32:18:ed:7b:e2:8e:12:61:60:f9:2a:a2:29:2e:
                    34:d0:4c:94:f9:e4:bf:db:43:3a:b9:d2:d0:13:83:
                    2a:50:e2:77:f5:e0:e5:19:f2:70:d5:95:ab:73:24:
                    49:2b:85:a7:94:34:e3:ad:0d:86:41:c6:93:6e:72:
                    48:56:ff:12:b1:1b:34:90:27:f8:e6:45:26:3f:a4:
                    fa:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:1A:92:92:9B:9F:63:5C:31:5C:8F:D1:47:66:5B:87:F8:5E:36:3D
            X509v3 Authority Key Identifier:
                keyid:B6:1A:BF:23:72:77:FE:AF:24:11:7E:BB:E2:8D:9D:57:E4:42:43:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/3139302e39382e3136302e302f31392d3139203d3e203132393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.98.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         cb:e8:cb:74:40:e0:e4:fe:dd:62:a1:cb:53:64:1c:80:1e:3d:
         f0:97:24:68:14:69:dc:ec:48:a4:6f:ea:12:44:99:5c:4b:25:
         cc:27:72:33:a5:ad:e1:ee:74:36:85:82:5e:15:e6:ed:89:d5:
         95:fe:f2:4f:b0:b1:a1:8f:3e:c3:e0:99:02:c7:cc:98:8c:f2:
         9f:3c:0d:8f:a8:06:19:78:9c:31:d6:38:a0:4e:50:b4:7b:76:
         ae:65:f4:58:58:97:28:83:ec:e5:65:ad:a4:da:69:22:56:e5:
         1b:d3:fa:e5:ef:23:fa:d9:49:0f:7a:67:94:33:1f:e5:e6:89:
         13:16:62:4b:44:5f:fc:2b:08:49:77:02:79:70:c6:27:74:fc:
         7c:6c:89:b6:92:83:47:7a:c7:1f:0e:dd:af:23:8a:62:49:03:
         bb:73:de:0a:92:16:4c:86:71:54:81:bc:a8:94:2e:bf:5d:95:
         89:5a:7a:86:26:62:59:90:bf:71:69:1a:7d:7d:ec:29:10:be:
         8b:d3:03:06:dc:ba:ee:6b:38:06:da:a4:6e:dd:f9:96:f5:a0:
         3f:8a:e6:18:7e:c3:c2:13:8e:ab:1a:8c:1c:65:1f:f8:98:8e:
         26:7a:a1:12:d5:49:12:a8:88:4f:c5:ae:fd:91:54:90:22:5c:
         b7:63:c9:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:22:11 2025 by rpki-client