Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3139302e3231302e3130362e302f32342d3234203d3e20323632323136.roa
File:                     3139302e3231302e3130362e302f32342d3234203d3e20323632323136.roa (raw, json)
Hash identifier:          viBx3696XjgtsNuPrRHlEtueCNFtHPPQh1HV7P96/WU=
Subject key identifier:   4C:05:41:4B:E5:6D:22:FC:3C:B1:F1:C5:FA:A6:F3:2D:1C:25:C7:81
Certificate issuer:       /CN=171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7
Certificate serial:       71EA3E4919A5720C1BA702089747C99DB13A9D88
Authority key identifier: 17:1F:14:D5:AE:EC:89:F4:AE:41:04:C0:F6:09:DE:27:7D:1D:3C:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3139302e3231302e3130362e302f32342d3234203d3e20323632323136.roa
Signing time:             Fri 10 Oct 2025 14:49:57 +0000
ROA not before:           Fri 10 Oct 2025 14:44:57 +0000
ROA not after:            Fri 09 Oct 2026 14:49:57 +0000
asID:                     262216
IP address blocks:        190.210.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 23 Oct 2025 13:18:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:ea:3e:49:19:a5:72:0c:1b:a7:02:08:97:47:c9:9d:b1:3a:9d:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7
        Validity
            Not Before: Oct 10 14:44:57 2025 GMT
            Not After : Oct  9 14:49:57 2026 GMT
        Subject: CN=4C05414BE56D22FC3CB1F1C5FAA6F32D1C25C781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b8:63:3c:01:7a:04:00:04:47:6d:4f:ec:07:
                    8a:c4:06:74:bf:fd:82:5e:68:1b:12:0e:04:47:b1:
                    05:2a:0a:1a:fe:67:c7:f0:35:2c:60:99:1a:a0:2e:
                    1d:5b:16:6a:69:b1:46:65:95:c8:3f:10:a2:5b:f4:
                    5c:69:56:39:26:6a:f9:62:92:bc:3a:09:9c:fa:15:
                    ce:ea:8a:30:9a:e8:79:9f:2f:57:0c:48:12:b4:4b:
                    e7:77:3b:2e:19:fb:cf:c2:03:ee:4d:80:5c:94:36:
                    9f:36:b8:8e:a2:9d:4f:0c:3d:13:48:29:fa:53:1b:
                    da:4f:0b:d0:fd:90:44:4c:bb:72:52:c3:9c:9f:b3:
                    93:9e:6f:6f:be:61:7e:a1:b7:5b:90:72:a9:29:fe:
                    1b:a0:c6:10:03:81:c6:3e:c5:87:84:4c:59:49:04:
                    fc:7f:a6:8d:7d:f8:88:7e:ac:41:8f:e6:c7:ba:bd:
                    ff:b2:f8:df:47:16:30:21:1a:0d:fc:f7:1a:de:c0:
                    5e:9e:6a:ad:5e:fd:69:f2:ba:62:19:60:ff:5f:e4:
                    ed:6f:5f:11:90:e3:67:11:df:38:60:27:79:ec:8e:
                    14:fd:b7:6e:8c:37:e0:23:c0:3a:14:90:25:47:64:
                    ef:c6:c3:52:26:37:75:9c:0e:1e:19:a0:38:84:74:
                    c8:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:05:41:4B:E5:6D:22:FC:3C:B1:F1:C5:FA:A6:F3:2D:1C:25:C7:81
            X509v3 Authority Key Identifier:
                keyid:17:1F:14:D5:AE:EC:89:F4:AE:41:04:C0:F6:09:DE:27:7D:1D:3C:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3139302e3231302e3130362e302f32342d3234203d3e20323632323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.210.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:7f:67:49:87:f8:87:a2:81:f9:6e:51:bd:94:76:22:77:dd:
         cf:51:5d:a7:a7:46:1c:b4:42:ee:a1:80:e9:aa:29:e7:69:f3:
         48:d8:09:9d:0e:2a:a2:a7:7d:49:02:18:c5:fb:ad:3e:55:9d:
         c8:60:f8:ba:07:c5:2f:d8:fe:05:c7:5d:46:d9:37:c8:1d:c9:
         3c:d7:cc:2e:3d:71:b5:34:ac:85:61:b1:6e:39:87:b4:cc:52:
         43:60:05:35:bb:26:d8:91:b3:5a:41:06:61:f3:6e:4c:56:75:
         8b:14:f9:a8:51:f1:fd:24:27:a7:15:3d:6f:b6:ac:d8:57:e6:
         fe:dd:f1:75:37:95:40:7f:81:79:6e:7c:29:7e:3f:3e:05:54:
         38:66:00:43:a0:e3:03:0f:79:53:c7:93:e6:cb:67:6d:f8:77:
         b9:46:59:c2:da:2f:1a:d1:e2:89:e9:a6:35:2b:77:a1:78:77:
         15:8d:76:0a:b9:86:a5:55:73:d6:f7:3d:f8:cb:90:8b:40:1d:
         f5:3a:fe:15:06:57:39:8f:88:af:83:26:90:f6:cd:01:46:9c:
         ed:00:b5:b3:6c:01:b1:e4:5c:9e:cf:56:09:eb:ea:d7:21:11:
         21:35:cd:dc:fa:df:a7:e7:22:ff:db:91:af:b5:8e:d3:9f:8f:
         0b:8a:b1:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:53:20 2025 by rpki-client