Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/3139302e31352e3132382e302f32302d3234203d3e203230303830.roa
File:                     3139302e31352e3132382e302f32302d3234203d3e203230303830.roa (raw, json)
Hash identifier:          ERooTyx8jCx7gCou+jHR58BhocCVZzOhBAUEKSpwFNY=
Subject key identifier:   0A:10:E4:B1:25:D6:E5:73:5F:D5:86:AB:C1:63:80:28:BE:F7:F5:D7
Certificate issuer:       /CN=12608F449BBF3F86819F95307654EF5D740A9084
Certificate serial:       6AA1C451FEF94CA68A55932F55A49C51527598CC
Authority key identifier: 12:60:8F:44:9B:BF:3F:86:81:9F:95:30:76:54:EF:5D:74:0A:90:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12608F449BBF3F86819F95307654EF5D740A9084.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/3139302e31352e3132382e302f32302d3234203d3e203230303830.roa
Signing time:             Thu 07 May 2026 13:25:01 +0000
ROA not before:           Thu 07 May 2026 13:20:01 +0000
ROA not after:            Thu 06 May 2027 13:25:01 +0000
asID:                     20080
IP address blocks:        190.15.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/12608F449BBF3F86819F95307654EF5D740A9084.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/12608F449BBF3F86819F95307654EF5D740A9084.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12608F449BBF3F86819F95307654EF5D740A9084.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 16 May 2026 13:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:a1:c4:51:fe:f9:4c:a6:8a:55:93:2f:55:a4:9c:51:52:75:98:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12608F449BBF3F86819F95307654EF5D740A9084
        Validity
            Not Before: May  7 13:20:01 2026 GMT
            Not After : May  6 13:25:01 2027 GMT
        Subject: CN=0A10E4B125D6E5735FD586ABC1638028BEF7F5D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d7:28:62:ac:d4:08:d4:2f:c6:da:ee:d4:50:
                    cd:d7:11:f1:36:7b:75:b6:53:91:0a:83:d8:26:84:
                    ff:3b:84:1b:f3:40:74:d4:e3:92:f0:58:81:a4:e7:
                    27:89:f4:a4:5f:74:66:c1:16:4a:cb:af:b0:a1:ae:
                    6a:67:8e:8e:16:51:ae:01:10:91:b7:c1:2b:90:8d:
                    cb:1f:b7:2a:6d:72:3c:ab:48:ad:de:0e:06:50:9e:
                    d8:34:81:07:b0:ee:73:15:8d:4d:c7:0d:ae:67:a4:
                    57:66:50:0c:6f:53:c0:73:c6:9a:6f:0f:06:6a:44:
                    f2:5c:cf:36:1c:e5:41:81:d2:d2:92:f1:93:59:6f:
                    80:06:be:be:bb:5d:5b:1a:73:df:a2:7d:6d:a1:eb:
                    85:61:4c:10:a0:de:c0:e3:1b:8b:5d:11:1e:14:45:
                    07:12:23:75:c5:ad:cc:f1:6c:27:a4:1f:e3:95:83:
                    15:f4:98:5d:fd:0e:5e:2c:c8:af:fc:0c:31:c0:ef:
                    22:c1:84:b9:af:4c:85:df:94:b2:90:1e:ac:c6:1b:
                    3d:89:02:85:d8:e2:2a:3a:62:7b:51:12:1d:c1:a0:
                    06:54:8c:19:0b:9f:e3:56:43:bc:80:7e:61:c6:b8:
                    c0:2a:5c:a9:c4:0e:b3:5f:ed:27:3f:b3:de:ed:15:
                    dc:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:10:E4:B1:25:D6:E5:73:5F:D5:86:AB:C1:63:80:28:BE:F7:F5:D7
            X509v3 Authority Key Identifier:
                keyid:12:60:8F:44:9B:BF:3F:86:81:9F:95:30:76:54:EF:5D:74:0A:90:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/12608F449BBF3F86819F95307654EF5D740A9084.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12608F449BBF3F86819F95307654EF5D740A9084.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/3139302e31352e3132382e302f32302d3234203d3e203230303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.15.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         c4:fb:a5:9c:e7:35:24:94:80:de:ef:e3:a7:bd:f3:b4:91:28:
         c4:a1:5e:9f:4f:e2:38:1e:96:20:d5:e9:0e:5f:e8:bd:40:fc:
         f5:d6:d8:45:8f:47:c5:c1:f8:28:5a:95:e5:ff:df:8f:25:2c:
         c1:2b:4e:e0:de:09:2a:a7:72:08:b1:2b:3b:e4:c8:55:bf:25:
         4b:58:15:e5:a4:73:6d:26:41:c8:c7:a6:b6:4c:2c:d2:16:e7:
         f0:96:02:7c:74:0f:38:40:15:53:7c:eb:85:eb:4b:4e:f9:75:
         1f:f9:6d:cc:19:31:39:0e:98:2f:e0:53:e5:5a:7d:1c:19:df:
         c2:33:dd:66:1a:bb:ad:c3:37:97:41:a7:15:41:2b:4f:87:c6:
         bd:c1:a0:12:a4:8b:19:c4:e8:4e:97:24:75:a4:bc:f1:69:91:
         db:e8:aa:9a:fb:ec:7a:d4:29:c8:c9:bf:4f:44:87:dc:a0:87:
         49:5f:14:52:23:02:0f:42:26:a1:56:b6:61:c4:9b:af:9d:f9:
         f8:4b:cb:f2:8e:a6:e7:50:a7:73:9a:b6:9d:66:da:66:cf:13:
         de:98:e8:ee:df:d6:72:30:86:e4:00:48:ac:a4:19:f9:37:df:
         3d:b5:70:9a:fd:12:9b:71:b1:4c:f1:67:a4:13:ba:e5:0b:33:
         cd:76:b9:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:11:43 2026 by rpki-client