Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/3139302e3131332e3232382e302f32342d3234203d3e20323632323136.roa
File:                     3139302e3131332e3232382e302f32342d3234203d3e20323632323136.roa (raw, json)
Hash identifier:          X5ezh29i6kEkixucKG2ZEu/lCyjFgPPFPwWG8bSpRIE=
Subject key identifier:   1E:78:87:E0:DD:ED:D6:FC:41:90:C8:E3:BC:C2:7B:47:32:4C:D9:DC
Certificate issuer:       /CN=7D1F174BFBB17B7822E82D3AA14E86D385483089
Certificate serial:       3C2B5995142E08BF00E80B568DA04ED7E636E352
Authority key identifier: 7D:1F:17:4B:FB:B1:7B:78:22:E8:2D:3A:A1:4E:86:D3:85:48:30:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/3139302e3131332e3232382e302f32342d3234203d3e20323632323136.roa
Signing time:             Fri 11 Sep 2026 15:35:32 +0000
ROA not before:           Fri 11 Sep 2026 15:30:32 +0000
ROA not after:            Fri 10 Sep 2027 15:35:32 +0000
asID:                     262216
IP address blocks:        190.113.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 18:47:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:2b:59:95:14:2e:08:bf:00:e8:0b:56:8d:a0:4e:d7:e6:36:e3:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D1F174BFBB17B7822E82D3AA14E86D385483089
        Validity
            Not Before: Sep 11 15:30:32 2026 GMT
            Not After : Sep 10 15:35:32 2027 GMT
        Subject: CN=1E7887E0DDEDD6FC4190C8E3BCC27B47324CD9DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:2d:58:88:ad:06:a9:60:ca:c9:6d:23:bd:cf:
                    1c:35:8f:14:bd:1f:c3:2f:16:c1:14:44:b8:fa:4c:
                    1f:b3:ee:86:02:db:c2:64:c4:18:7a:5c:bb:37:1b:
                    99:a3:2e:5c:56:f8:25:de:d3:2d:7b:5e:4d:41:51:
                    11:8c:68:74:cf:79:25:25:20:c7:d9:51:71:b1:98:
                    4e:32:85:ef:0f:7b:8a:7a:2d:7f:94:c2:02:fb:09:
                    d4:5b:7d:09:ff:b5:ff:76:af:b5:03:34:1f:3d:14:
                    22:74:1b:81:57:f9:4c:bc:42:e3:a6:4b:ff:d3:db:
                    81:0f:55:0b:06:5a:da:c3:dc:55:da:09:91:42:44:
                    17:d0:62:d5:53:42:0a:11:4c:f8:63:54:82:15:1f:
                    58:c3:ec:2f:16:99:93:a7:20:db:bc:43:6d:f7:0c:
                    33:d8:ee:2f:17:64:d2:0f:8a:d5:cf:5b:76:4f:45:
                    c1:a5:3e:32:07:ba:a6:6e:48:96:3d:04:17:a9:4d:
                    bf:57:f0:18:90:57:5a:93:9c:5b:4c:eb:85:2c:1e:
                    1e:68:0d:a1:ee:a2:a5:e2:ee:3c:4a:73:75:dc:2f:
                    da:f2:17:f9:a8:c3:9a:7f:f2:e6:cd:fa:cd:c0:45:
                    ba:8d:ab:ee:39:11:0d:36:3c:8f:3e:4a:95:2e:40:
                    14:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:78:87:E0:DD:ED:D6:FC:41:90:C8:E3:BC:C2:7B:47:32:4C:D9:DC
            X509v3 Authority Key Identifier:
                keyid:7D:1F:17:4B:FB:B1:7B:78:22:E8:2D:3A:A1:4E:86:D3:85:48:30:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/3139302e3131332e3232382e302f32342d3234203d3e20323632323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.113.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:c5:27:25:df:a3:08:76:69:33:7c:31:af:92:1e:3f:d2:20:
         44:32:0b:7e:c0:90:99:cf:70:bd:6c:0d:bf:f9:ef:12:3b:5a:
         66:33:a6:af:bb:5c:d3:d6:61:0d:57:c9:b8:ea:e7:b0:ab:4c:
         a1:88:80:0c:85:d1:d6:72:50:2c:33:f6:df:87:db:38:5c:36:
         39:21:3a:51:c9:86:e7:df:bb:98:36:bb:ca:e6:01:d9:fa:59:
         10:48:bf:3f:de:01:fc:cc:d3:75:de:3e:2a:d7:e9:33:fb:70:
         4c:91:c7:d9:70:b1:b8:6a:78:66:db:41:1d:25:b1:5d:99:ed:
         2a:84:ee:d3:d1:e3:f1:82:04:27:6f:4c:d7:f5:da:7d:75:90:
         81:6b:76:7e:4e:84:13:d7:30:83:4c:f1:9a:06:1b:fd:8a:99:
         9b:05:fb:e9:29:ad:e1:87:87:da:9e:e9:d6:c2:95:b6:5d:41:
         8a:05:b0:e3:28:db:21:b4:9e:56:23:82:69:11:6f:9e:08:e6:
         5a:61:a5:18:fc:1a:64:c3:b9:3c:53:12:1f:3c:a4:34:a0:dd:
         58:4b:17:c6:d0:77:9b:8c:7d:09:ad:8c:5c:73:2b:cc:59:64:
         50:41:ae:69:3f:09:53:0f:32:1e:a0:8f:90:eb:18:db:22:44:
         ea:6b:5c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 18:34:56 2026 by rpki-client