Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/DA7260F97C1254931E3391B95C470294FC1CE6B8E2053989578D8AD14C5E9EA3/0/3139302e302e3232322e302f32332d3234203d3e203134373534.roa
File:                     3139302e302e3232322e302f32332d3234203d3e203134373534.roa (raw, json)
Hash identifier:          Il12XHBBMRZtWUYDgWZX1dSCTf15t01+TkGuJRQ1aGI=
Subject key identifier:   FE:E7:F8:85:1E:F8:83:50:26:0D:38:19:4B:9E:0F:46:D2:68:60:B7
Certificate issuer:       /CN=601B2F772CAC42A8C327EBBE4F629054B007F98A
Certificate serial:       4881A46BEDC63E0F4142CA7A6B5F02F9027E3FF0
Authority key identifier: 60:1B:2F:77:2C:AC:42:A8:C3:27:EB:BE:4F:62:90:54:B0:07:F9:8A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/601B2F772CAC42A8C327EBBE4F629054B007F98A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DA7260F97C1254931E3391B95C470294FC1CE6B8E2053989578D8AD14C5E9EA3/0/3139302e302e3232322e302f32332d3234203d3e203134373534.roa
Signing time:             Tue 06 Oct 2026 08:10:00 +0000
ROA not before:           Tue 06 Oct 2026 08:05:00 +0000
ROA not after:            Tue 05 Oct 2027 08:10:00 +0000
asID:                     14754
IP address blocks:        190.0.222.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DA7260F97C1254931E3391B95C470294FC1CE6B8E2053989578D8AD14C5E9EA3/0/601B2F772CAC42A8C327EBBE4F629054B007F98A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DA7260F97C1254931E3391B95C470294FC1CE6B8E2053989578D8AD14C5E9EA3/0/601B2F772CAC42A8C327EBBE4F629054B007F98A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/601B2F772CAC42A8C327EBBE4F629054B007F98A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 10:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:81:a4:6b:ed:c6:3e:0f:41:42:ca:7a:6b:5f:02:f9:02:7e:3f:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601B2F772CAC42A8C327EBBE4F629054B007F98A
        Validity
            Not Before: Oct  6 08:05:00 2026 GMT
            Not After : Oct  5 08:10:00 2027 GMT
        Subject: CN=FEE7F8851EF88350260D38194B9E0F46D26860B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:87:af:30:09:c5:33:a3:91:89:e9:ee:99:f8:
                    89:5a:78:6f:68:b9:72:3a:ef:c6:c5:df:cf:54:f7:
                    f6:e7:b0:e9:b9:c2:6c:57:66:37:d9:2f:60:c0:82:
                    72:eb:d9:a5:12:90:c9:de:9b:70:60:8e:5e:02:e9:
                    68:88:07:5b:7a:6b:52:c2:e3:5d:84:89:cb:3f:42:
                    37:7b:01:e8:c2:46:4b:95:c7:8c:e7:48:7c:bb:83:
                    73:29:83:17:a9:6f:16:0d:5b:17:87:ae:86:7a:32:
                    37:c4:dd:09:16:14:98:95:ab:40:7e:3a:dd:47:d1:
                    9c:dc:3b:7b:0c:a8:e4:cd:28:0c:b6:d4:6e:fb:af:
                    3b:d6:eb:f8:a7:19:79:6f:fe:24:7d:47:c8:fc:ab:
                    00:ba:de:94:cf:03:40:83:3c:24:cd:f2:2c:8d:f4:
                    ae:23:d7:57:f8:94:2b:e8:59:01:18:bc:26:7a:d1:
                    f9:84:26:4c:0a:3c:c0:ed:dd:96:09:da:ff:74:26:
                    13:64:e2:8c:da:6a:c1:b4:58:f4:26:97:ad:4a:38:
                    55:23:1f:38:40:42:61:f2:39:a2:b6:0d:4d:1e:ae:
                    8d:85:d9:ef:0b:4e:e1:00:34:19:38:b0:8b:60:01:
                    63:6c:4d:b1:a9:06:0c:58:a9:55:f1:91:98:5e:eb:
                    2b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:E7:F8:85:1E:F8:83:50:26:0D:38:19:4B:9E:0F:46:D2:68:60:B7
            X509v3 Authority Key Identifier:
                keyid:60:1B:2F:77:2C:AC:42:A8:C3:27:EB:BE:4F:62:90:54:B0:07:F9:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DA7260F97C1254931E3391B95C470294FC1CE6B8E2053989578D8AD14C5E9EA3/0/601B2F772CAC42A8C327EBBE4F629054B007F98A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/601B2F772CAC42A8C327EBBE4F629054B007F98A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DA7260F97C1254931E3391B95C470294FC1CE6B8E2053989578D8AD14C5E9EA3/0/3139302e302e3232322e302f32332d3234203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.0.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         77:b8:f4:ef:4c:1b:3d:6f:73:59:16:27:01:74:eb:d2:66:d5:
         8b:36:b5:4a:cd:78:b7:40:2e:d5:ef:55:a1:b0:6d:56:55:ff:
         f3:cd:69:7c:a6:d3:c0:0d:ae:27:0c:04:1b:b5:82:de:76:95:
         1e:b4:17:d2:7c:c5:c3:c9:33:92:05:86:a8:87:28:d1:e3:78:
         4c:ae:ce:d4:9e:9c:24:4a:21:0b:e2:f1:50:fd:a8:4c:97:3e:
         38:c0:22:7d:e9:d5:f1:20:fa:b7:84:4d:45:55:e9:1e:cf:c6:
         84:62:7f:a0:00:01:90:c9:75:cd:1e:63:8f:80:eb:8f:3e:7e:
         13:df:cf:ab:85:9a:eb:1d:1c:4a:13:e1:2c:49:18:d7:bf:4b:
         24:04:51:67:89:66:45:e1:44:52:b3:de:6a:fe:93:21:22:54:
         6d:75:95:fd:f3:5a:e5:af:19:e2:3f:e5:44:14:bb:6d:3d:db:
         a0:3f:a4:03:a3:fc:b6:60:39:e1:18:2c:8a:05:7b:fc:2f:10:
         d5:92:d6:b4:e9:92:7e:ba:1e:6b:af:79:79:7c:8c:01:ce:fb:
         77:23:93:6a:03:d2:1b:82:db:ef:b6:12:93:11:6a:41:85:fd:
         50:25:72:c9:2e:c5:f3:f0:c0:f0:39:a4:58:9f:cc:5b:e1:2a:
         04:1a:30:ec
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUSIGka+3GPg9BQsp6a18C+QJ+P/AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjAxQjJGNzcyQ0FDNDJBOEMzMjdFQkJFNEY2MjkwNTRC
MDA3Rjk4QTAeFw0yNjEwMDYwODA1MDBaFw0yNzEwMDUwODEwMDBaMDMxMTAvBgNV
BAMTKEZFRTdGODg1MUVGODgzNTAyNjBEMzgxOTRCOUUwRjQ2RDI2ODYwQjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFh68wCcUzo5GJ6e6Z+IlaeG9o
uXI678bF389U9/bnsOm5wmxXZjfZL2DAgnLr2aUSkMnem3Bgjl4C6WiIB1t6a1LC
412Eics/Qjd7AejCRkuVx4znSHy7g3MpgxepbxYNWxeHroZ6MjfE3QkWFJiVq0B+
Ot1H0ZzcO3sMqOTNKAy21G77rzvW6/inGXlv/iR9R8j8qwC63pTPA0CDPCTN8iyN
9K4j11f4lCvoWQEYvCZ60fmEJkwKPMDt3ZYJ2v90JhNk4ozaasG0WPQml61KOFUj
HzhAQmHyOaK2DU0ero2F2e8LTuEANBk4sItgAWNsTbGpBgxYqVXxkZhe6yu/AgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQU/uf4hR74g1AmDTgZS54PRtJoYLcwHwYDVR0j
BBgwFoAUYBsvdyysQqjDJ+u+T2KQVLAH+YowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EQTcyNjBGOTdDMTI1NDkzMUUzMzkxQjk1QzQ3MDI5NEZD
MUNFNkI4RTIwNTM5ODk1NzhEOEFEMTRDNUU5RUEzLzAvNjAxQjJGNzcyQ0FDNDJB
OEMzMjdFQkJFNEY2MjkwNTRCMDA3Rjk4QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82MDFCMkY3NzJDQUM0MkE4QzMy
N0VCQkU0RjYyOTA1NEIwMDdGOThBLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREE3MjYwRjk3QzEyNTQ5MzFFMzM5MUI5NUM0NzAyOTRGQzFDRTZCOEUy
MDUzOTg5NTc4RDhBRDE0QzVFOUVBMy8wLzMxMzkzMDJlMzAyZTMyMzIzMjJlMzAy
ZjMyMzMyZDMyMzQyMDNkM2UyMDMxMzQzNzM1MzQucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAG+AN4wDQYJ
KoZIhvcNAQELBQADggEBAHe49O9MGz1vc1kWJwF069Jm1Ys2tUrNeLdALtXvVaGw
bVZV//PNaXym08ANricMBBu1gt52lR60F9J8xcPJM5IFhqiHKNHjeEyuztSenCRK
IQvi8VD9qEyXPjjAIn3p1fEg+reETUVV6R7PxoRif6AAAZDJdc0eY4+A648+fhPf
z6uFmusdHEoT4SxJGNe/SyQEUWeJZkXhRFKz3mr+kyEiVG11lf3zWuWvGeI/5UQU
u20926A/pAOj/LZgOeEYLIoFe/wvENWS1rTpkn66HmuveXl8jAHO+3cjk2oD0huC
2++2EpMRakGF/VAlcskuxfPwwPA5pFifzFvhKgQaMOw=
-----END CERTIFICATE-----
Generated at Tue Oct 13 05:09:29 2026 by rpki-client