Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3139302e3231302e3131332e302f32372d3237203d3e203336303430.roa
File:                     3139302e3231302e3131332e302f32372d3237203d3e203336303430.roa (raw, json)
Hash identifier:          7tdV8XZJGCS5LTFXgnIm0wJi1o0AofBZdds2jRHti/4=
Subject key identifier:   6E:9F:9E:82:A4:7D:92:BD:ED:ED:A3:A0:A0:5C:9C:84:05:43:4D:44
Certificate issuer:       /CN=171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7
Certificate serial:       2165850AE5C91F47F6CC896BB11AAB073E1A1DB1
Authority key identifier: 17:1F:14:D5:AE:EC:89:F4:AE:41:04:C0:F6:09:DE:27:7D:1D:3C:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3139302e3231302e3131332e302f32372d3237203d3e203336303430.roa
Signing time:             Wed 23 Sep 2026 18:10:00 +0000
ROA not before:           Wed 23 Sep 2026 18:05:00 +0000
ROA not after:            Wed 22 Sep 2027 18:10:00 +0000
asID:                     36040
IP address blocks:        190.210.113.0/27 maxlen: 27
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 09:14:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:65:85:0a:e5:c9:1f:47:f6:cc:89:6b:b1:1a:ab:07:3e:1a:1d:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7
        Validity
            Not Before: Sep 23 18:05:00 2026 GMT
            Not After : Sep 22 18:10:00 2027 GMT
        Subject: CN=6E9F9E82A47D92BDEDEDA3A0A05C9C8405434D44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:76:bc:cc:d0:12:e4:d2:0e:ea:0d:de:b6:4e:
                    f7:e0:f6:6b:55:b8:c8:5b:69:d8:4a:bf:b0:41:1e:
                    cf:eb:79:59:44:8b:09:f6:2f:8f:8b:da:d4:ff:a4:
                    e6:7f:33:c7:23:e5:29:a4:1d:41:57:ab:45:4c:b7:
                    69:d9:6f:ea:fc:38:62:40:92:86:09:6e:af:68:d8:
                    18:d0:d9:9c:e2:c3:a5:a9:48:0f:3f:79:28:3b:80:
                    ba:04:69:c4:7b:11:76:8b:73:91:32:e1:f6:9c:de:
                    fa:a8:05:f6:32:f1:28:ef:fe:6f:04:89:ac:95:b8:
                    d5:6c:f8:05:dd:59:d2:71:b3:d0:18:00:ad:50:48:
                    61:39:e4:26:28:66:90:90:85:3b:e6:88:e5:61:24:
                    29:92:3c:6a:a2:b6:70:8e:7e:f1:57:73:fc:5a:bc:
                    28:37:bd:7b:a5:25:cb:f7:08:55:c9:10:18:8d:86:
                    b1:21:90:45:e1:55:b7:dc:f1:8e:d6:7d:d4:b8:16:
                    b2:20:4b:15:d3:d3:37:7f:24:00:64:8a:16:42:cb:
                    c4:4f:5f:99:4c:de:94:88:28:5b:c2:a8:a9:5a:33:
                    55:d5:5d:d8:66:ab:71:21:96:c8:57:81:b5:37:b4:
                    a6:c9:5e:a8:95:31:a7:e2:47:b7:1c:58:86:fb:04:
                    d5:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:9F:9E:82:A4:7D:92:BD:ED:ED:A3:A0:A0:5C:9C:84:05:43:4D:44
            X509v3 Authority Key Identifier:
                keyid:17:1F:14:D5:AE:EC:89:F4:AE:41:04:C0:F6:09:DE:27:7D:1D:3C:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3139302e3231302e3131332e302f32372d3237203d3e203336303430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.210.113.0/27

    Signature Algorithm: sha256WithRSAEncryption
         83:23:ef:14:2c:d8:81:8b:56:fa:8e:5c:3b:13:df:3a:dc:71:
         2a:b3:f3:19:dc:e0:b0:c0:2c:49:32:f9:bf:3d:20:e4:e2:97:
         ef:c8:e3:f3:e3:72:c4:aa:a7:35:08:6f:db:37:48:7b:be:de:
         61:58:aa:d3:75:15:91:7e:df:45:2e:64:93:4d:ba:4f:e6:1d:
         84:07:93:a7:bd:72:a8:0d:f8:a1:a5:30:94:74:a6:42:26:9d:
         dc:a6:87:95:48:26:28:1f:6f:40:9c:fd:88:47:41:f3:fd:22:
         86:af:dd:f8:04:c4:c2:dc:db:84:4f:f9:9b:45:fc:4e:5d:d6:
         59:af:75:5b:76:62:c3:18:ef:9f:33:d2:a9:2f:52:f8:73:7b:
         44:e4:da:fc:a6:0a:4b:9e:3d:bc:83:bd:78:57:0d:50:3c:93:
         5b:6c:87:50:83:9f:16:7c:27:85:27:f6:72:0c:6d:10:45:ca:
         d4:38:96:4b:bc:d1:56:75:e2:fc:91:69:05:ca:d3:9c:89:bf:
         64:1d:e0:cf:d9:8c:b5:4c:c6:62:9b:24:1f:46:63:b4:8e:3f:
         1b:82:5e:bf:fd:f3:7f:4d:d6:56:b5:d7:95:20:b1:f3:3f:73:
         76:b9:89:f3:46:65:64:6e:a3:75:d0:dc:08:60:86:3b:69:bc:
         dc:4a:43:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 05:22:26 2026 by rpki-client