Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/3139302e3131332e3232342e302f32312d3231203d3e20323632323136.roa
File:                     3139302e3131332e3232342e302f32312d3231203d3e20323632323136.roa (raw, json)
Hash identifier:          b7guB5FEdyhCKPukmg3cVNRJA+4L6t/6WRyFkHLCli4=
Subject key identifier:   24:5C:77:05:62:F4:6F:E7:59:4E:6B:8B:10:28:62:6E:4F:3D:66:D7
Certificate issuer:       /CN=7D1F174BFBB17B7822E82D3AA14E86D385483089
Certificate serial:       699E5352202838F1D12550DD440AA0A853437449
Authority key identifier: 7D:1F:17:4B:FB:B1:7B:78:22:E8:2D:3A:A1:4E:86:D3:85:48:30:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/3139302e3131332e3232342e302f32312d3231203d3e20323632323136.roa
Signing time:             Fri 10 Oct 2025 14:50:01 +0000
ROA not before:           Fri 10 Oct 2025 14:45:01 +0000
ROA not after:            Fri 09 Oct 2026 14:50:01 +0000
asID:                     262216
IP address blocks:        190.113.224.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:9e:53:52:20:28:38:f1:d1:25:50:dd:44:0a:a0:a8:53:43:74:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D1F174BFBB17B7822E82D3AA14E86D385483089
        Validity
            Not Before: Oct 10 14:45:01 2025 GMT
            Not After : Oct  9 14:50:01 2026 GMT
        Subject: CN=245C770562F46FE7594E6B8B1028626E4F3D66D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b2:f6:1f:76:37:b8:98:0d:06:49:2c:1e:fe:
                    8b:95:62:a4:0a:6e:c3:f0:b1:5d:59:c2:e6:1b:3c:
                    83:cc:d2:9c:ec:3c:13:6d:27:d3:7e:4e:82:42:08:
                    57:5d:14:b3:d3:37:78:91:ec:87:d7:7a:82:0d:c8:
                    a0:11:4e:4c:83:bb:a5:d3:a1:eb:18:29:33:e5:51:
                    65:7b:3f:68:7d:dc:dc:bd:bc:58:c4:f4:2a:01:6c:
                    2e:df:7a:0d:28:aa:2d:eb:c1:95:28:5a:9f:9c:b6:
                    37:95:bd:0a:b9:23:19:6f:17:ae:cc:11:63:4f:dd:
                    97:b0:d4:bc:bf:36:dd:5a:d4:78:db:fd:09:a7:c4:
                    0f:0c:9a:4a:11:f6:7f:9b:8a:f3:4d:88:8d:c1:f3:
                    f9:ae:5e:f4:e4:f3:79:a0:3a:ef:36:0f:44:3d:c1:
                    ee:3f:a2:db:dd:f8:f3:bb:13:86:5d:18:98:37:23:
                    5e:73:0b:a3:70:1a:ef:0b:1a:77:6d:81:05:39:02:
                    33:fc:17:5d:fc:5e:7e:1e:1b:07:7b:52:94:fb:38:
                    a3:8b:5c:28:44:52:c0:1f:2b:68:c2:85:cb:87:4b:
                    0c:87:69:b7:c2:28:0c:18:d4:2a:d8:5a:3c:f9:bf:
                    f4:9e:14:4d:a4:51:72:cd:88:a1:68:45:28:95:57:
                    fa:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:5C:77:05:62:F4:6F:E7:59:4E:6B:8B:10:28:62:6E:4F:3D:66:D7
            X509v3 Authority Key Identifier:
                keyid:7D:1F:17:4B:FB:B1:7B:78:22:E8:2D:3A:A1:4E:86:D3:85:48:30:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/3139302e3131332e3232342e302f32312d3231203d3e20323632323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.113.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         75:b2:b4:1b:11:68:80:64:7a:ac:df:f3:5a:65:b8:7b:84:54:
         92:fe:05:87:0d:53:5d:44:36:9c:5a:e2:76:f9:ff:1d:af:86:
         93:64:ab:57:00:96:d3:14:ad:0e:95:1f:a7:b0:0c:d5:51:52:
         46:33:bc:0e:15:e1:c9:02:90:be:4e:6a:01:7d:a2:29:ab:5d:
         d6:1b:3a:b5:cf:63:3a:09:3a:6e:86:c5:cd:8e:d5:8e:90:c5:
         1a:e9:e2:8a:db:a7:6e:d8:80:eb:14:1e:65:b8:d0:7c:70:bf:
         1a:15:cb:9b:8e:42:cd:90:ec:a4:86:8c:e6:b9:13:9d:fc:c6:
         3f:7a:12:d6:76:73:a8:71:56:9c:a7:83:f9:2f:63:36:53:a4:
         b7:9e:bc:83:73:ca:a0:e5:bb:3c:0e:86:e6:a8:f7:c2:97:e1:
         e9:b8:04:1b:14:13:8c:ca:29:63:55:64:29:82:3b:e8:6a:d5:
         dc:fd:43:34:d9:da:af:6b:22:6d:39:0f:e3:b7:c9:4d:53:5a:
         1c:df:d5:b1:a7:9a:7d:49:c0:92:1e:d7:2d:c7:3f:eb:d7:f6:
         8b:f1:c4:13:06:04:a2:fe:1f:23:29:a0:7e:4f:c5:df:02:1d:
         77:42:d1:57:60:5e:10:13:82:82:7e:6e:67:ad:58:db:be:85:
         54:38:b1:78
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUaZ5TUiAoOPHRJVDdRAqgqFNDdEkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0QxRjE3NEJGQkIxN0I3ODIyRTgyRDNBQTE0RTg2RDM4
NTQ4MzA4OTAeFw0yNTEwMTAxNDQ1MDFaFw0yNjEwMDkxNDUwMDFaMDMxMTAvBgNV
BAMTKDI0NUM3NzA1NjJGNDZGRTc1OTRFNkI4QjEwMjg2MjZFNEYzRDY2RDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1svYfdje4mA0GSSwe/ouVYqQK
bsPwsV1ZwuYbPIPM0pzsPBNtJ9N+ToJCCFddFLPTN3iR7IfXeoINyKARTkyDu6XT
oesYKTPlUWV7P2h93Ny9vFjE9CoBbC7feg0oqi3rwZUoWp+ctjeVvQq5IxlvF67M
EWNP3Zew1Ly/Nt1a1Hjb/QmnxA8MmkoR9n+bivNNiI3B8/muXvTk83mgOu82D0Q9
we4/otvd+PO7E4ZdGJg3I15zC6NwGu8LGndtgQU5AjP8F138Xn4eGwd7UpT7OKOL
XChEUsAfK2jChcuHSwyHabfCKAwY1CrYWjz5v/SeFE2kUXLNiKFoRSiVV/pLAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUJFx3BWL0b+dZTmuLEChibk89ZtcwHwYDVR0j
BBgwFoAUfR8XS/uxe3gi6C06oU6G04VIMIkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EQkNFMzNENUE4NEVDM0VCRTU4MDNCNDM5ODc5OTA4NzE4
QjE2MzdGREYwMjBFRjlDODJEQjdCRTIwMjAwN0NDLzAvN0QxRjE3NEJGQkIxN0I3
ODIyRTgyRDNBQTE0RTg2RDM4NTQ4MzA4OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83RDFGMTc0QkZCQjE3Qjc4MjJF
ODJEM0FBMTRFODZEMzg1NDgzMDg5LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREJDRTMzRDVBODRFQzNFQkU1ODAzQjQzOTg3OTkwODcxOEIxNjM3RkRG
MDIwRUY5QzgyREI3QkUyMDIwMDdDQy8wLzMxMzkzMDJlMzEzMTMzMmUzMjMyMzQy
ZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzMjM2MzIzMjMxMzYucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO+
ceAwDQYJKoZIhvcNAQELBQADggEBAHWytBsRaIBkeqzf81pluHuEVJL+BYcNU11E
Npxa4nb5/x2vhpNkq1cAltMUrQ6VH6ewDNVRUkYzvA4V4ckCkL5OagF9oimrXdYb
OrXPYzoJOm6Gxc2O1Y6QxRrp4orbp27YgOsUHmW40HxwvxoVy5uOQs2Q7KSGjOa5
E538xj96EtZ2c6hxVpyng/kvYzZTpLeevINzyqDluzwOhuao98KX4em4BBsUE4zK
KWNVZCmCO+hq1dz9QzTZ2q9rIm05D+O3yU1TWhzf1bGnmn1JwJIe1y3HP+vX9ovx
xBMGBKL+HyMpoH5Pxd8CHXdC0VdgXhATgoJ+bmetWNu+hVQ4sXg=
-----END CERTIFICATE-----
Generated at Mon Oct 20 22:43:25 2025 by rpki-client