Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/3139302e3131332e3232382e302f32342d3234203d3e20323632323136.roa
File:                     3139302e3131332e3232382e302f32342d3234203d3e20323632323136.roa (raw, json)
Hash identifier:          HIBJrraoBTQ1a5VaVk9at4AjGpzpWiOtY7OQNcdmHrQ=
Subject key identifier:   20:5A:BA:EC:72:9D:DD:D4:19:8B:F4:A0:D4:53:AD:E3:CC:A2:20:86
Certificate issuer:       /CN=7D1F174BFBB17B7822E82D3AA14E86D385483089
Certificate serial:       27092D7EF25C1A399836203B268B0B8547EDF80C
Authority key identifier: 7D:1F:17:4B:FB:B1:7B:78:22:E8:2D:3A:A1:4E:86:D3:85:48:30:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/3139302e3131332e3232382e302f32342d3234203d3e20323632323136.roa
Signing time:             Fri 10 Oct 2025 14:49:59 +0000
ROA not before:           Fri 10 Oct 2025 14:44:59 +0000
ROA not after:            Fri 09 Oct 2026 14:49:59 +0000
asID:                     262216
IP address blocks:        190.113.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:09:2d:7e:f2:5c:1a:39:98:36:20:3b:26:8b:0b:85:47:ed:f8:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D1F174BFBB17B7822E82D3AA14E86D385483089
        Validity
            Not Before: Oct 10 14:44:59 2025 GMT
            Not After : Oct  9 14:49:59 2026 GMT
        Subject: CN=205ABAEC729DDDD4198BF4A0D453ADE3CCA22086
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:49:b5:65:fb:ac:47:ba:70:e2:3a:6c:f7:cd:
                    a8:fa:ff:37:59:8f:f8:64:e9:85:48:3e:b4:26:16:
                    47:e0:0e:ac:da:e5:a5:8d:28:a9:17:cc:56:ae:6d:
                    96:fe:89:96:84:ef:59:31:68:da:e5:11:d8:06:6b:
                    71:2d:5d:b0:3a:65:84:d3:ed:15:2a:0a:c0:e7:89:
                    96:62:a6:b5:e3:db:88:1c:90:96:c7:a0:32:b9:c8:
                    66:a0:df:8c:c2:4c:e1:d3:fc:e3:4e:de:4a:52:f0:
                    d8:29:54:06:83:04:35:25:a7:e2:d3:38:fa:34:5a:
                    e1:6f:bb:29:c6:b8:5c:f9:11:e4:cc:2b:94:7d:4f:
                    52:73:51:e3:ea:1f:07:9a:29:bf:ab:91:0f:85:f0:
                    34:71:4a:2c:bc:ac:18:61:21:4a:30:f0:3b:67:19:
                    1a:fd:ad:25:80:29:ff:2f:63:31:0f:c0:ea:e0:7e:
                    51:22:05:0a:50:38:fc:81:05:41:e0:94:d0:88:cd:
                    47:fe:7c:14:12:e3:2b:b5:93:6f:e8:b7:29:9b:13:
                    dd:a0:52:73:35:ea:6f:ea:5c:7a:d6:97:49:55:50:
                    e6:c9:01:73:4b:fd:dd:8c:95:5c:ea:ae:5f:f3:23:
                    1d:fb:88:92:6e:8a:f7:a8:83:7a:7a:dc:e7:6c:24:
                    86:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:5A:BA:EC:72:9D:DD:D4:19:8B:F4:A0:D4:53:AD:E3:CC:A2:20:86
            X509v3 Authority Key Identifier:
                keyid:7D:1F:17:4B:FB:B1:7B:78:22:E8:2D:3A:A1:4E:86:D3:85:48:30:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/3139302e3131332e3232382e302f32342d3234203d3e20323632323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.113.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:55:e2:e3:73:ff:42:99:4f:99:45:e1:49:2e:9f:5c:8e:31:
         61:c5:da:9f:dc:5e:29:7f:f0:76:6d:df:7f:33:96:f6:45:51:
         4b:22:20:27:22:10:33:ab:fd:ce:7e:27:f7:c9:82:e5:aa:80:
         67:a4:52:14:cf:8d:95:01:c6:0e:38:57:b9:79:a4:0a:c4:2d:
         58:fb:31:bc:4c:5e:7b:9d:87:41:19:8b:3a:0c:a6:83:07:e7:
         db:7b:1b:c9:bd:77:f3:e5:bb:76:10:ca:40:b3:79:fe:39:fe:
         47:34:ac:45:45:9f:74:53:cb:60:9e:74:3a:39:7f:d6:e8:28:
         dd:60:6a:f1:7d:b3:ff:2f:da:2e:bd:91:5a:cc:b7:f7:02:4e:
         96:f7:f0:8b:6f:4f:7b:99:6c:26:b6:b9:49:80:c0:6a:eb:1d:
         55:8c:e1:22:29:71:a6:12:f8:3c:31:c3:b9:56:23:05:6d:0f:
         99:08:62:05:10:cb:11:c4:14:95:b4:de:fc:94:83:72:68:5b:
         67:aa:3a:e3:8b:70:cf:49:d5:da:d8:3b:b6:54:8d:db:c9:bc:
         e2:3b:03:74:f6:f7:a9:6e:d2:7d:f4:1e:d4:3a:fa:4b:5d:1e:
         fe:be:fc:0a:dc:b6:26:49:9d:8c:30:79:b2:66:e6:c2:95:eb:
         8b:a6:9e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:43:36 2025 by rpki-client