Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3139302e36302e3137352e302f32342d3234203d3e20323632323136.roa
File:                     3139302e36302e3137352e302f32342d3234203d3e20323632323136.roa (raw, json)
Hash identifier:          61m9SUYt9PwnLvBkH6qp4btkn8GmBismie98i5kLuAs=
Subject key identifier:   1C:F7:EF:CC:55:3F:80:13:1C:CD:C7:3D:21:3B:FF:4B:34:8A:D1:5C
Certificate issuer:       /CN=92FBC72BC92E884A25F6521C6E009627B0E74602
Certificate serial:       1BD89FD03DFB1E3DAFB65CE467C33F270E290D68
Authority key identifier: 92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3139302e36302e3137352e302f32342d3234203d3e20323632323136.roa
Signing time:             Fri 10 Oct 2025 14:50:04 +0000
ROA not before:           Fri 10 Oct 2025 14:45:04 +0000
ROA not after:            Fri 09 Oct 2026 14:50:04 +0000
asID:                     262216
IP address blocks:        190.60.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:d8:9f:d0:3d:fb:1e:3d:af:b6:5c:e4:67:c3:3f:27:0e:29:0d:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBC72BC92E884A25F6521C6E009627B0E74602
        Validity
            Not Before: Oct 10 14:45:04 2025 GMT
            Not After : Oct  9 14:50:04 2026 GMT
        Subject: CN=1CF7EFCC553F80131CCDC73D213BFF4B348AD15C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:e2:6b:c3:24:26:c8:3a:9b:62:51:61:f5:d5:
                    b0:47:ae:d3:75:04:98:b7:43:af:07:77:60:16:a2:
                    0a:51:01:39:7b:5e:0e:b7:17:1d:a4:f1:78:5b:48:
                    06:63:e4:ee:88:42:40:03:5a:71:e4:2f:d7:64:9c:
                    dc:c8:8d:07:23:f5:d2:5e:92:b9:67:d8:4c:94:6e:
                    0a:d9:47:44:0c:71:e1:62:19:e4:83:16:07:10:05:
                    df:40:fa:47:9d:ba:29:ad:a8:b0:d1:92:d9:3d:06:
                    44:f9:40:3b:82:ef:90:ed:4e:83:db:4f:cf:44:1f:
                    bc:c5:b5:de:12:eb:dd:cc:51:a6:eb:07:bd:7a:47:
                    02:a7:6c:51:1b:e0:3e:75:93:9d:a0:42:6f:bc:fb:
                    59:73:ce:a8:2e:6a:b7:d7:18:64:94:d0:c7:86:64:
                    b8:bd:97:69:7e:bb:a7:af:be:37:f5:2c:66:56:ca:
                    36:a2:7e:88:a9:aa:4f:51:f8:7d:a0:29:e1:d0:97:
                    96:db:43:0d:92:8f:56:cd:54:8a:d0:73:74:ea:dc:
                    95:63:65:da:0c:d6:df:3d:8e:05:09:9e:f6:54:30:
                    58:45:76:b6:33:64:e5:4c:99:dd:44:58:aa:64:78:
                    82:28:87:ce:eb:79:1a:c4:fd:5d:30:29:10:db:7e:
                    c9:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:F7:EF:CC:55:3F:80:13:1C:CD:C7:3D:21:3B:FF:4B:34:8A:D1:5C
            X509v3 Authority Key Identifier:
                keyid:92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3139302e36302e3137352e302f32342d3234203d3e20323632323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.60.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:eb:9c:a8:e2:86:43:af:bf:b5:67:56:93:2c:7a:57:e6:68:
         b1:02:6a:aa:d1:78:ec:f1:a3:22:9c:45:90:49:63:db:55:7e:
         8a:26:03:47:c0:e5:16:76:c1:69:d5:81:be:4f:be:97:15:f7:
         60:e8:8b:7a:35:b1:90:bb:bc:86:7a:57:f3:25:a8:7e:2b:49:
         52:dd:65:77:9c:f7:c6:27:5c:a4:d3:f7:18:f2:d0:c3:92:59:
         2e:f2:e2:3a:0f:3e:2a:c5:23:be:3b:0c:49:7b:16:48:91:70:
         48:38:4f:6f:ae:1f:9e:d5:cd:8b:e4:18:6c:54:56:48:e7:8d:
         9b:57:9b:f2:f7:c3:67:72:8e:b3:40:36:83:cc:56:89:73:76:
         99:50:7d:ed:e2:22:86:66:1b:6d:2c:b3:0c:01:db:64:ea:f4:
         74:53:cc:e6:0f:5d:a8:db:0b:03:06:fd:0e:d7:40:4b:c7:26:
         ad:df:80:d6:6a:ab:29:a7:27:b5:f5:35:ef:6d:31:38:95:4d:
         98:e8:6f:2b:f6:09:b8:b0:cd:4b:9b:20:d1:8a:dd:c9:d2:c6:
         8e:5f:ec:7a:06:43:65:d3:53:f7:30:25:71:c0:d7:61:bc:c7:
         70:8d:64:aa:03:92:22:9a:b0:01:19:34:2b:6b:fa:3c:47:3e:
         c8:3d:ce:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:30:58 2025 by rpki-client