Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3139302e36312e32322e302f32332d3234203d3e20323735303334.roa
File:                     3139302e36312e32322e302f32332d3234203d3e20323735303334.roa (raw, json)
Hash identifier:          0DAHB8G0hCVz1gMQbztRGtR5TNy9cfwKsE2nWrRjx1k=
Subject key identifier:   A7:A7:31:6D:6D:2D:9D:29:1F:66:0E:CF:EA:5A:89:AC:25:07:04:93
Certificate issuer:       /CN=92FBC72BC92E884A25F6521C6E009627B0E74602
Certificate serial:       4A5F5B208AC79CD9E5C299F002BD712CE8234F5B
Authority key identifier: 92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3139302e36312e32322e302f32332d3234203d3e20323735303334.roa
Signing time:             Wed 14 Oct 2026 03:40:00 +0000
ROA not before:           Wed 14 Oct 2026 03:35:00 +0000
ROA not after:            Wed 13 Oct 2027 03:40:00 +0000
asID:                     275034
IP address blocks:        190.61.22.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 18:47:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:5f:5b:20:8a:c7:9c:d9:e5:c2:99:f0:02:bd:71:2c:e8:23:4f:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBC72BC92E884A25F6521C6E009627B0E74602
        Validity
            Not Before: Oct 14 03:35:00 2026 GMT
            Not After : Oct 13 03:40:00 2027 GMT
        Subject: CN=A7A7316D6D2D9D291F660ECFEA5A89AC25070493
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:51:18:73:fa:18:34:f7:b8:bb:fa:02:e2:f5:
                    2e:86:06:ee:23:13:34:25:46:b0:31:7a:2b:ef:9c:
                    a1:4a:ae:cf:38:d3:c1:b3:d0:9a:50:e9:d0:ec:6d:
                    e6:db:b6:9e:02:f1:6d:75:fc:2b:59:20:32:4b:7c:
                    cd:9f:78:98:8a:fa:c0:39:ce:a2:8c:ed:5e:32:94:
                    59:8d:f6:6f:e0:b4:a7:10:a8:ec:45:d7:8b:7d:62:
                    82:2f:50:34:b1:1e:60:2b:f2:25:eb:d3:af:d2:42:
                    fe:56:23:7b:5b:c4:9c:38:00:53:d2:91:a3:76:72:
                    f0:d1:b7:2d:de:00:1c:b9:d8:c4:be:4d:fb:a3:5f:
                    01:f2:0e:90:2d:22:11:08:58:c5:99:3c:f9:33:3a:
                    c5:38:ed:85:80:1e:f6:39:16:65:48:4c:a0:e2:63:
                    c8:0a:1d:7c:29:4d:6b:76:b3:e4:95:ef:d5:6d:fa:
                    24:b3:12:43:29:38:02:49:67:45:12:94:59:c4:8b:
                    43:f7:df:35:61:43:9f:27:91:c4:21:27:57:92:a9:
                    e8:7a:f5:f7:40:88:ce:28:40:67:24:23:43:5b:e9:
                    a8:83:f6:86:53:9b:03:cf:90:2c:61:52:29:43:39:
                    63:2e:57:c9:7d:b8:6f:d8:a0:e8:4e:1a:28:16:ac:
                    55:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:A7:31:6D:6D:2D:9D:29:1F:66:0E:CF:EA:5A:89:AC:25:07:04:93
            X509v3 Authority Key Identifier:
                keyid:92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3139302e36312e32322e302f32332d3234203d3e20323735303334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.61.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:a6:fc:11:f5:85:53:04:c7:78:65:cf:1f:b0:f2:6b:6d:c0:
         53:da:c3:06:43:ae:32:d4:ba:1b:67:dc:30:23:75:3a:26:6b:
         40:79:7f:55:2d:35:bd:35:68:ec:df:90:1a:3f:a5:1a:63:a4:
         b5:51:7b:98:95:fc:12:eb:84:f0:4c:64:fc:c6:2b:20:a9:18:
         24:cc:07:bc:9b:3a:e4:87:8a:5b:29:57:1b:a9:db:c3:5a:e3:
         9c:63:cd:33:c5:de:ee:79:43:3a:92:b8:50:4b:95:ce:72:3c:
         74:3f:ff:08:96:76:b2:0b:73:7b:b3:47:05:a7:d2:b9:66:b6:
         a4:79:b5:b7:2f:3a:37:86:ca:7a:b7:cc:9b:a5:52:65:a5:1c:
         15:ae:45:19:72:85:4c:9e:8e:39:5c:68:8d:b4:aa:a9:60:79:
         b6:16:df:7e:71:a5:5f:f9:f9:97:c5:05:39:18:9f:19:25:8b:
         b2:59:01:ee:6d:87:e0:7d:45:d1:7f:9c:40:ac:6d:10:a0:72:
         03:00:34:e6:e4:a9:83:a7:61:8a:95:26:9c:ae:eb:dd:35:79:
         61:16:79:29:a6:8c:bd:38:58:ec:7e:f0:09:ca:77:69:0a:8e:
         c8:12:7b:ff:a8:1b:6e:d8:04:1e:d0:7d:b2:f6:03:d6:30:3d:
         b0:7e:83:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 21:29:02 2026 by rpki-client