Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/3139302e3131332e3232372e302f32342d3234203d3e20323632323136.roa
File:                     3139302e3131332e3232372e302f32342d3234203d3e20323632323136.roa (raw, json)
Hash identifier:          kg3CVcKY1nwV0R8eKZ7Kgx5pa29ZcW7lFPHt/rFe5wQ=
Subject key identifier:   61:F5:40:E7:16:C0:48:CF:21:08:5D:AD:32:19:A0:84:21:62:C0:44
Certificate issuer:       /CN=7D1F174BFBB17B7822E82D3AA14E86D385483089
Certificate serial:       7EF7C4700A1E64A86E47D37BA1A9F02215400E96
Authority key identifier: 7D:1F:17:4B:FB:B1:7B:78:22:E8:2D:3A:A1:4E:86:D3:85:48:30:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/3139302e3131332e3232372e302f32342d3234203d3e20323632323136.roa
Signing time:             Fri 11 Sep 2026 15:35:34 +0000
ROA not before:           Fri 11 Sep 2026 15:30:34 +0000
ROA not after:            Fri 10 Sep 2027 15:35:34 +0000
asID:                     262216
IP address blocks:        190.113.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 Oct 2026 05:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:f7:c4:70:0a:1e:64:a8:6e:47:d3:7b:a1:a9:f0:22:15:40:0e:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D1F174BFBB17B7822E82D3AA14E86D385483089
        Validity
            Not Before: Sep 11 15:30:34 2026 GMT
            Not After : Sep 10 15:35:34 2027 GMT
        Subject: CN=61F540E716C048CF21085DAD3219A0842162C044
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6f:10:0b:3b:51:13:ac:4f:c4:36:7b:0b:ab:
                    7d:53:c7:ba:ae:5d:77:b4:b8:59:86:c6:4a:b4:29:
                    14:19:61:b1:9a:d0:f9:b5:8b:8a:43:8a:6e:32:ab:
                    65:43:6b:8c:8a:17:38:dd:c8:28:74:15:9a:fe:c3:
                    32:f3:2d:6e:fe:49:c9:cb:59:14:5a:78:d0:65:95:
                    7b:25:ab:4a:75:d3:1b:27:62:c9:ae:d2:a6:5e:aa:
                    63:50:53:52:cb:2c:18:1e:69:d9:a7:e0:29:d6:11:
                    60:d2:f6:b8:80:64:4b:28:f7:13:9a:4e:b0:67:09:
                    6c:ba:b5:0c:cc:e0:a8:5e:0e:13:e4:57:dd:f6:fc:
                    b3:86:d0:46:09:24:31:22:22:c4:5d:ef:04:f6:22:
                    a9:26:e5:ab:79:11:ff:27:15:7e:50:1e:d2:76:7f:
                    a2:89:3f:79:b9:fa:c7:fb:00:fa:ce:e1:38:09:df:
                    39:55:8e:e5:8f:6c:18:21:dc:64:7f:1e:f2:20:ac:
                    d5:72:bf:46:75:9d:28:96:86:5a:f3:70:0d:f2:fb:
                    71:f5:d2:65:95:e1:b4:06:42:1f:78:88:63:8a:eb:
                    f2:c1:43:93:1c:e0:0b:80:a3:3d:42:d3:b1:8d:df:
                    44:bf:0b:58:9b:db:e5:9e:00:be:b2:d3:f7:3f:2a:
                    4c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:F5:40:E7:16:C0:48:CF:21:08:5D:AD:32:19:A0:84:21:62:C0:44
            X509v3 Authority Key Identifier:
                keyid:7D:1F:17:4B:FB:B1:7B:78:22:E8:2D:3A:A1:4E:86:D3:85:48:30:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/3139302e3131332e3232372e302f32342d3234203d3e20323632323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.113.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:5e:5e:f1:d0:86:6f:98:b6:7f:26:45:58:49:aa:27:68:b9:
         d0:5b:f7:7d:ed:10:9f:22:47:8d:22:db:53:98:6f:38:74:c0:
         8e:4e:6f:ca:83:db:82:fd:1e:ae:31:f2:77:06:99:f5:be:49:
         eb:a6:fd:f2:e3:a6:61:23:84:ec:0e:06:13:38:50:89:cc:47:
         2b:14:1a:cc:05:c9:9f:22:73:2a:ed:69:b7:d8:c5:4a:d4:89:
         fd:ea:20:91:59:eb:b8:0a:9a:5f:6f:5c:ac:46:08:64:62:1e:
         17:db:13:a7:27:a5:21:8c:4c:ee:50:30:32:75:3d:14:7a:78:
         aa:25:b1:54:3f:2a:25:8c:b3:8e:b9:86:f6:25:de:5d:c5:4c:
         39:f1:26:96:a1:8a:e7:e9:40:87:43:d9:91:ff:6d:3e:b0:4a:
         82:7f:c3:ac:19:0a:32:31:71:cc:96:af:d8:cb:60:85:4c:54:
         5b:5d:63:e9:33:fb:0a:05:e5:fe:3b:fb:08:49:cc:33:05:fc:
         6b:63:22:db:3f:54:06:e6:d4:b0:8b:34:54:f4:b5:9f:87:22:
         8b:43:71:c8:ec:9a:ea:85:e8:04:fc:c2:cb:e0:4f:77:2f:0d:
         1e:32:06:c9:92:48:2b:bc:7c:a2:3e:a1:eb:cd:f7:9f:95:75:
         ef:2b:77:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 09:10:59 2026 by rpki-client