Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/3139302e3131332e3232342e302f32342d3234203d3e20323632323136.roa
File:                     3139302e3131332e3232342e302f32342d3234203d3e20323632323136.roa (raw, json)
Hash identifier:          aKUlYjr37Gq3L2WEnyZRIVJqNFHJYPsvIfF43OWh+bY=
Subject key identifier:   EE:74:21:FB:9D:2E:A6:58:CE:43:38:64:13:4F:08:11:05:D6:1C:0A
Certificate issuer:       /CN=7D1F174BFBB17B7822E82D3AA14E86D385483089
Certificate serial:       7CA579B2A7A1D13EC10D282095B3EFA24D480E9B
Authority key identifier: 7D:1F:17:4B:FB:B1:7B:78:22:E8:2D:3A:A1:4E:86:D3:85:48:30:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/3139302e3131332e3232342e302f32342d3234203d3e20323632323136.roa
Signing time:             Fri 10 Oct 2025 14:50:01 +0000
ROA not before:           Fri 10 Oct 2025 14:45:01 +0000
ROA not after:            Fri 09 Oct 2026 14:50:01 +0000
asID:                     262216
IP address blocks:        190.113.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:a5:79:b2:a7:a1:d1:3e:c1:0d:28:20:95:b3:ef:a2:4d:48:0e:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D1F174BFBB17B7822E82D3AA14E86D385483089
        Validity
            Not Before: Oct 10 14:45:01 2025 GMT
            Not After : Oct  9 14:50:01 2026 GMT
        Subject: CN=EE7421FB9D2EA658CE433864134F081105D61C0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:cd:2b:e8:c6:e0:e7:1f:71:93:c5:4d:88:58:
                    df:14:39:b3:d6:d5:aa:50:65:64:69:4a:4b:0c:1f:
                    dc:4f:1a:ab:d8:0e:f6:81:cc:83:e2:02:fd:db:47:
                    27:c6:9d:f2:93:24:46:2a:86:95:d3:c0:52:f1:3c:
                    f0:de:19:d1:23:9d:16:b0:4d:64:55:65:b3:63:45:
                    78:1e:54:ad:c6:e1:f9:b7:83:cd:81:c0:9e:ae:28:
                    7e:85:94:1a:82:b9:88:57:17:38:2a:dd:5d:22:cf:
                    9d:0e:7e:66:dd:79:e0:b8:0a:0e:b2:17:81:92:ec:
                    ea:f7:30:35:5a:2a:08:cc:2c:34:69:05:c6:7c:61:
                    21:8e:44:91:8f:05:13:18:79:89:74:cb:87:f0:7b:
                    d3:ce:f5:be:3e:70:72:90:de:86:d4:bc:52:e7:e4:
                    9f:58:20:22:ff:6c:d6:11:01:ba:c1:34:4a:fe:13:
                    81:43:d7:10:73:c7:56:58:b2:cf:2a:56:99:86:3b:
                    d4:97:23:a1:3a:92:8e:36:4f:76:68:3f:64:df:4f:
                    02:0f:86:68:85:a6:34:21:39:af:66:79:fe:11:bc:
                    33:ee:0d:b7:56:6f:59:10:e7:67:dd:22:a8:e4:8a:
                    84:f2:05:11:4d:d8:35:10:55:d3:4c:bb:cb:69:b0:
                    a3:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:74:21:FB:9D:2E:A6:58:CE:43:38:64:13:4F:08:11:05:D6:1C:0A
            X509v3 Authority Key Identifier:
                keyid:7D:1F:17:4B:FB:B1:7B:78:22:E8:2D:3A:A1:4E:86:D3:85:48:30:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/3139302e3131332e3232342e302f32342d3234203d3e20323632323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.113.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:54:58:c0:3b:b3:3a:ff:bf:3c:bf:3f:7c:3c:56:e4:e7:ec:
         cd:f6:17:fc:f9:53:67:30:50:1a:f1:18:ba:bc:b3:f7:13:87:
         b4:0d:8f:0f:9f:76:e0:2c:b9:04:5a:dd:84:2f:16:19:33:ee:
         2f:fd:98:fa:56:b7:87:a4:b0:08:24:b8:cc:5e:55:97:6a:19:
         50:77:ce:1a:91:fa:3e:1b:d8:fe:2a:75:bd:cc:e2:ed:1b:ed:
         e4:0a:60:d6:d9:56:74:a6:fb:c1:76:c8:ad:0b:3a:5f:dc:e7:
         5f:b5:da:30:72:36:8f:2a:15:13:0f:0f:0e:01:dd:d2:ed:27:
         c0:e6:02:92:1c:57:92:fd:36:53:57:0d:72:a6:4f:bb:1e:19:
         03:c9:9f:b7:78:89:ca:e0:b8:7b:7f:6b:b2:31:c7:67:77:d0:
         23:70:3c:96:9a:58:1d:fa:77:e1:38:0e:d4:44:94:78:93:19:
         7e:af:0c:80:43:32:5d:ec:50:51:e0:6b:ce:04:d4:f6:6f:83:
         0f:55:2d:89:9e:ed:5b:4f:85:6b:a6:35:a1:07:e2:8e:a6:75:
         4a:fd:ab:2b:56:48:8b:cd:ac:32:7d:69:3c:33:4a:83:76:16:
         28:7a:c8:ca:83:9b:6a:61:77:6a:c0:d1:a7:ae:be:b3:ca:31:
         a7:c7:53:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:11:16 2025 by rpki-client