Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/3139302e3131332e3232372e302f32342d3234203d3e20323632323136.roa
File:                     3139302e3131332e3232372e302f32342d3234203d3e20323632323136.roa (raw, json)
Hash identifier:          clT/hjTXQNDvTREbxFZ2ely7lpvIkK8vJ+Psd+Erwms=
Subject key identifier:   AC:A9:62:7C:DA:4E:98:4C:5E:DA:51:A3:82:5D:5C:2B:51:91:FA:DA
Certificate issuer:       /CN=7D1F174BFBB17B7822E82D3AA14E86D385483089
Certificate serial:       280A03FD2C8E8C9B4868B4870699ED4BEBDA7F55
Authority key identifier: 7D:1F:17:4B:FB:B1:7B:78:22:E8:2D:3A:A1:4E:86:D3:85:48:30:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/3139302e3131332e3232372e302f32342d3234203d3e20323632323136.roa
Signing time:             Fri 10 Oct 2025 14:49:58 +0000
ROA not before:           Fri 10 Oct 2025 14:44:58 +0000
ROA not after:            Fri 09 Oct 2026 14:49:58 +0000
asID:                     262216
IP address blocks:        190.113.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 06:48:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:0a:03:fd:2c:8e:8c:9b:48:68:b4:87:06:99:ed:4b:eb:da:7f:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D1F174BFBB17B7822E82D3AA14E86D385483089
        Validity
            Not Before: Oct 10 14:44:58 2025 GMT
            Not After : Oct  9 14:49:58 2026 GMT
        Subject: CN=ACA9627CDA4E984C5EDA51A3825D5C2B5191FADA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:89:e3:b2:a3:c5:61:b6:cd:38:af:62:3f:01:
                    34:8b:78:9b:c6:25:f6:20:87:37:74:99:df:19:23:
                    52:ea:98:aa:09:81:6e:9e:be:74:49:02:de:c3:ec:
                    ef:02:54:ba:b6:7d:c4:c5:a4:5e:1c:5a:d2:01:84:
                    aa:0e:e2:fd:e8:09:7c:ac:70:e7:87:d9:bd:b7:23:
                    c2:21:9e:ee:fe:7b:0b:29:fe:f2:f0:7a:c3:18:8a:
                    27:17:88:3f:6c:76:7f:94:19:56:2c:be:cd:ba:ff:
                    36:6d:0d:c3:d7:a1:50:b2:81:00:e8:00:d1:bf:8e:
                    be:6b:09:3c:0f:7a:65:d7:d9:75:b8:82:14:80:08:
                    66:e1:3c:6b:c6:21:70:91:f6:e1:3f:f4:15:79:06:
                    98:1f:57:39:09:7a:ed:70:ae:23:3a:cd:ba:7d:65:
                    b8:80:ac:6e:92:16:d6:c8:9b:db:63:47:23:5c:ef:
                    8b:4f:f7:95:ce:c9:ce:0c:6f:af:8b:2f:10:3d:77:
                    b3:88:8a:10:d4:fb:86:ae:8f:76:c2:8d:ea:6b:75:
                    cd:a7:eb:3c:df:50:d7:27:84:de:e4:af:e4:2a:0a:
                    ab:0f:6e:f0:29:5d:48:1e:93:89:77:18:65:63:cb:
                    ff:68:99:11:db:8b:e6:d1:f6:37:b7:f4:9a:5c:f5:
                    88:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:A9:62:7C:DA:4E:98:4C:5E:DA:51:A3:82:5D:5C:2B:51:91:FA:DA
            X509v3 Authority Key Identifier:
                keyid:7D:1F:17:4B:FB:B1:7B:78:22:E8:2D:3A:A1:4E:86:D3:85:48:30:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/3139302e3131332e3232372e302f32342d3234203d3e20323632323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.113.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:4b:1b:bb:5b:71:8b:3f:03:71:be:d2:24:4b:40:4a:68:03:
         34:e6:26:45:74:de:1e:ff:20:56:47:27:a4:7d:33:4d:b4:1b:
         5f:d3:83:48:d6:e6:1b:7f:94:54:b9:15:98:16:e9:e8:0b:a9:
         0b:09:da:33:05:f6:52:a3:f7:0a:f6:9e:3f:87:69:24:6f:a5:
         e9:ae:61:ef:f5:b7:11:ac:53:23:8a:57:f6:74:e6:bb:3d:19:
         87:ea:ee:97:a2:d1:5b:63:da:cd:90:e2:4d:39:c2:51:7f:e9:
         4e:49:22:32:81:89:01:69:d5:35:ae:9a:dd:f2:ed:49:8a:4a:
         9f:b6:74:30:c4:a2:4e:a8:e5:e9:0e:06:58:60:8a:45:8a:01:
         c7:af:44:42:40:30:c3:9d:30:b2:a7:4a:55:c8:04:7f:8a:be:
         89:e2:57:41:05:04:02:fa:84:7c:90:d9:7a:5a:64:6d:ee:f0:
         50:ec:e5:7f:96:78:50:67:67:d9:f1:cd:83:a2:4f:30:a4:78:
         2d:76:0f:af:ba:2d:71:df:a2:4d:9d:1b:79:96:cd:c2:8e:1e:
         08:cd:ea:96:c2:83:09:a1:39:fb:11:46:91:7b:9b:59:f4:e0:
         39:53:38:ec:58:2c:a2:0c:53:77:02:39:87:71:9e:10:0e:d2:
         64:11:9e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:39:50 2025 by rpki-client