Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/C451155C9EC948FC3CAEDCA4204A8E18CFC0E06A78FACFB081EEB0554C647B96/0/3139302e392e36382e302f32332d3234203d3e20323732393832.roa
File:                     3139302e392e36382e302f32332d3234203d3e20323732393832.roa (raw, json)
Hash identifier:          aGct9RgHQqkwc5Qj2IKr5tGe9y3MdxKjNETNCp9lsv4=
Subject key identifier:   0C:94:AB:D4:23:4D:A0:8F:39:36:50:76:3D:85:27:D4:B3:F6:1A:C5
Certificate issuer:       /CN=E99B22CCF68622142CA1F92E8A488B9DC2B16E33
Certificate serial:       7BAA4BD83623FBFCF930845C0CAF086AEBF1C97B
Authority key identifier: E9:9B:22:CC:F6:86:22:14:2C:A1:F9:2E:8A:48:8B:9D:C2:B1:6E:33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E99B22CCF68622142CA1F92E8A488B9DC2B16E33.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C451155C9EC948FC3CAEDCA4204A8E18CFC0E06A78FACFB081EEB0554C647B96/0/3139302e392e36382e302f32332d3234203d3e20323732393832.roa
Signing time:             Thu 24 Sep 2026 11:36:33 +0000
ROA not before:           Thu 24 Sep 2026 11:31:33 +0000
ROA not after:            Thu 23 Sep 2027 11:36:33 +0000
asID:                     272982
IP address blocks:        190.9.68.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C451155C9EC948FC3CAEDCA4204A8E18CFC0E06A78FACFB081EEB0554C647B96/0/E99B22CCF68622142CA1F92E8A488B9DC2B16E33.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C451155C9EC948FC3CAEDCA4204A8E18CFC0E06A78FACFB081EEB0554C647B96/0/E99B22CCF68622142CA1F92E8A488B9DC2B16E33.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E99B22CCF68622142CA1F92E8A488B9DC2B16E33.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Oct 2026 09:17:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:aa:4b:d8:36:23:fb:fc:f9:30:84:5c:0c:af:08:6a:eb:f1:c9:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E99B22CCF68622142CA1F92E8A488B9DC2B16E33
        Validity
            Not Before: Sep 24 11:31:33 2026 GMT
            Not After : Sep 23 11:36:33 2027 GMT
        Subject: CN=0C94ABD4234DA08F393650763D8527D4B3F61AC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:20:7b:5d:c8:3f:ea:aa:30:9f:18:17:e1:1c:
                    fd:9a:99:35:de:6f:43:7f:a0:92:05:97:0e:62:78:
                    b6:bf:4f:9a:73:b2:ab:0e:ae:79:fb:bd:55:11:12:
                    2f:54:cf:ea:b2:83:fe:36:db:9c:5d:9b:a7:40:2b:
                    65:c9:99:13:fe:81:a3:04:4f:b1:2b:e7:6e:42:61:
                    86:77:9d:74:22:04:ae:1a:f7:7c:91:fa:79:56:82:
                    15:4b:c2:a5:02:24:35:ea:fd:bb:4d:15:2e:c0:40:
                    85:7d:cc:66:d7:f5:7c:1f:51:eb:de:59:75:d7:20:
                    a1:c9:31:60:3a:5e:ee:c5:3e:78:d4:b8:30:1e:de:
                    56:d0:17:c9:10:4c:0b:77:50:3a:22:6a:42:00:c2:
                    ad:01:bf:60:12:03:fe:91:f0:fa:49:63:14:02:4d:
                    31:7d:07:92:39:b9:94:61:5b:21:78:c8:f0:16:9d:
                    16:c1:c7:f9:68:f0:4b:51:2a:72:b9:ac:ee:ef:31:
                    f7:3f:e1:17:a0:87:2a:63:bf:4d:c1:05:e8:1f:85:
                    00:52:d3:33:29:86:84:81:03:d6:40:7c:ee:ea:c6:
                    64:08:90:f7:28:5a:62:3e:8b:e7:4d:a5:d0:17:c7:
                    14:2a:2b:bc:18:c3:68:c4:19:86:3d:a4:bf:9a:9b:
                    6e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:94:AB:D4:23:4D:A0:8F:39:36:50:76:3D:85:27:D4:B3:F6:1A:C5
            X509v3 Authority Key Identifier:
                keyid:E9:9B:22:CC:F6:86:22:14:2C:A1:F9:2E:8A:48:8B:9D:C2:B1:6E:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C451155C9EC948FC3CAEDCA4204A8E18CFC0E06A78FACFB081EEB0554C647B96/0/E99B22CCF68622142CA1F92E8A488B9DC2B16E33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E99B22CCF68622142CA1F92E8A488B9DC2B16E33.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C451155C9EC948FC3CAEDCA4204A8E18CFC0E06A78FACFB081EEB0554C647B96/0/3139302e392e36382e302f32332d3234203d3e20323732393832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.9.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         28:a7:5b:3c:70:ca:82:27:27:59:19:48:f9:e6:b3:af:44:75:
         c2:7c:c4:84:bd:f6:d3:22:cf:a7:00:01:0c:de:0b:30:07:dc:
         cd:e4:61:36:81:fa:cd:28:5f:6b:cb:96:36:71:45:29:21:ed:
         ab:a6:fd:6f:6d:e7:79:b7:6a:5d:30:32:d5:62:e3:48:5c:c7:
         49:64:4a:fc:ca:ae:a0:27:71:22:c0:97:1d:2e:31:64:3d:35:
         89:e0:d4:72:cb:4c:fa:e5:e0:9e:e8:f5:c8:ff:b0:04:dd:22:
         dd:20:6c:45:f3:6a:9b:8e:d5:7c:91:9a:89:d1:4d:b3:da:b9:
         51:f2:29:ec:7f:e7:ed:98:18:84:c9:03:13:d9:6d:e1:87:bc:
         79:fb:9a:f7:be:4b:19:c3:d5:20:6f:12:4f:bf:53:89:9c:55:
         57:2f:79:38:27:08:bf:e6:75:9e:ca:e8:3d:91:58:28:2c:3c:
         eb:87:19:81:06:c3:95:bd:cc:1d:71:f0:65:52:a9:8a:37:b9:
         ab:b9:7a:41:44:38:87:d0:a7:1c:9a:57:ed:6f:4f:1e:c1:cf:
         d1:06:97:1b:69:e3:1f:cc:61:c0:88:94:39:b0:f3:04:cd:00:
         d5:dd:d3:a4:fa:fa:00:50:5b:44:ee:6e:1a:fc:5c:99:e5:aa:
         68:a3:33:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 23:23:02 2026 by rpki-client