Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e32382e302f32342d3234203d3e20323733313839.roa
File:                     3139302e35372e32382e302f32342d3234203d3e20323733313839.roa (raw, json)
Hash identifier:          6AACzS07HSkiiUVzmsBkrw6eYnb+EfpgyVvUobneGvM=
Subject key identifier:   B7:CD:AF:E2:54:18:3F:FF:4B:F2:19:5F:33:47:BE:37:D6:81:9A:77
Certificate issuer:       /CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
Certificate serial:       76C071288C703D4B3357AF3D49E2E4E532611B5A
Authority key identifier: DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e32382e302f32342d3234203d3e20323733313839.roa
Signing time:             Wed 29 Apr 2026 15:40:14 +0000
ROA not before:           Wed 29 Apr 2026 15:35:14 +0000
ROA not after:            Wed 28 Apr 2027 15:40:14 +0000
asID:                     273189
IP address blocks:        190.57.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:c0:71:28:8c:70:3d:4b:33:57:af:3d:49:e2:e4:e5:32:61:1b:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
        Validity
            Not Before: Apr 29 15:35:14 2026 GMT
            Not After : Apr 28 15:40:14 2027 GMT
        Subject: CN=B7CDAFE254183FFF4BF2195F3347BE37D6819A77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:85:53:7c:19:d0:f7:58:da:57:af:25:f5:c5:
                    bd:0d:78:bf:11:cf:74:8f:73:60:81:61:fd:08:37:
                    44:30:0b:4e:18:ab:b4:f2:ed:5b:94:66:83:02:c3:
                    e2:4d:15:33:a5:be:3d:46:67:09:98:05:0a:36:b7:
                    03:d2:54:d7:a6:3b:53:51:8c:da:9a:0d:9e:bc:38:
                    71:e4:52:ce:e8:23:ff:23:79:31:ef:4d:f1:8a:f3:
                    c2:73:2e:63:a6:b3:50:d1:cb:3a:b3:a6:5f:a5:68:
                    52:cc:bc:26:1a:62:05:13:ea:24:5b:e9:1a:d2:a9:
                    ef:8b:27:ef:72:59:64:2b:8e:cb:24:69:25:15:94:
                    4d:08:77:5f:0f:af:66:0e:42:eb:a9:2b:35:cc:ed:
                    3f:dd:1a:6a:b6:b6:2d:2c:71:d4:36:e7:3c:a0:93:
                    91:8b:0b:dd:37:f4:b4:b8:aa:4d:8f:e1:15:c1:10:
                    a3:e8:ae:7d:c1:59:ea:64:a0:56:4b:5d:c8:ba:a5:
                    84:35:84:1c:9d:da:70:8d:3a:ca:58:70:96:b2:62:
                    88:6e:02:53:f2:66:8b:df:40:b8:e9:e8:bc:54:c2:
                    23:92:75:1f:69:3d:b2:b5:f5:59:40:00:ae:7a:c2:
                    8c:cf:98:b5:10:7c:f6:16:d1:19:e1:1a:70:57:e4:
                    d5:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:CD:AF:E2:54:18:3F:FF:4B:F2:19:5F:33:47:BE:37:D6:81:9A:77
            X509v3 Authority Key Identifier:
                keyid:DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e32382e302f32342d3234203d3e20323733313839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.57.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:29:5d:8e:f0:c5:97:b2:f7:ba:cf:54:33:cf:50:a8:ad:69:
         07:e9:ac:11:4e:e6:bf:83:6c:0b:61:0f:27:77:fc:ba:ef:ec:
         78:67:59:89:e5:28:5b:03:44:fd:98:33:74:09:e0:76:ae:71:
         f8:60:2a:5b:44:e1:b4:cf:1c:bf:90:21:a3:66:29:b3:fe:fc:
         7a:75:ab:76:7a:55:2c:4f:84:57:b7:4e:0e:6a:84:90:48:86:
         ba:68:20:75:9c:12:e3:8b:e0:98:6e:86:0d:7a:88:46:b5:5a:
         fe:89:7e:e5:44:47:d1:52:b0:94:cb:77:b7:25:24:75:0a:2c:
         92:d1:08:1c:54:5b:1b:4a:0e:18:7f:b0:86:5e:ba:b8:68:14:
         0a:43:d7:1f:0c:2d:c4:b9:44:fc:ac:03:30:fa:71:01:50:af:
         ba:c8:b8:3c:7c:c5:b7:95:f9:49:a9:c2:63:06:8e:e7:a1:c5:
         de:a1:02:3c:8e:ae:0c:3f:41:d6:81:a8:fa:46:79:ed:31:4d:
         06:51:f3:54:28:b9:87:cc:a6:72:dd:7f:58:9e:f6:84:2a:b4:
         d2:82:58:90:57:18:2a:58:fe:26:5d:0f:7e:a1:07:a3:b1:9c:
         52:65:33:5a:5d:13:d2:fe:71:5c:7a:3e:a8:b4:6c:5f:f6:26:
         70:8a:ee:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:35:58 2026 by rpki-client