Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/3139302e3131332e3232392e302f32342d3234203d3e20323632323136.roa
File:                     3139302e3131332e3232392e302f32342d3234203d3e20323632323136.roa (raw, json)
Hash identifier:          uFp6Sr/ZT01iF3tGuBLuK987aay/bV/bxJeIEzbs5mQ=
Subject key identifier:   37:B7:C3:B0:CF:03:DE:5B:46:46:F9:FE:7B:86:95:CD:09:D3:3A:B2
Certificate issuer:       /CN=7D1F174BFBB17B7822E82D3AA14E86D385483089
Certificate serial:       44DF4282D1011ED6CC23A34A4AECB8284641632D
Authority key identifier: 7D:1F:17:4B:FB:B1:7B:78:22:E8:2D:3A:A1:4E:86:D3:85:48:30:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/3139302e3131332e3232392e302f32342d3234203d3e20323632323136.roa
Signing time:             Fri 11 Sep 2026 15:35:32 +0000
ROA not before:           Fri 11 Sep 2026 15:30:32 +0000
ROA not after:            Fri 10 Sep 2027 15:35:32 +0000
asID:                     262216
IP address blocks:        190.113.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 Oct 2026 05:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:df:42:82:d1:01:1e:d6:cc:23:a3:4a:4a:ec:b8:28:46:41:63:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D1F174BFBB17B7822E82D3AA14E86D385483089
        Validity
            Not Before: Sep 11 15:30:32 2026 GMT
            Not After : Sep 10 15:35:32 2027 GMT
        Subject: CN=37B7C3B0CF03DE5B4646F9FE7B8695CD09D33AB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:96:67:b6:75:8c:84:66:7c:7c:fd:8b:91:1d:
                    b1:80:2c:49:1c:c6:a9:76:fe:d3:b9:94:dd:e3:08:
                    c2:1c:04:df:9a:40:19:a2:9e:0b:93:19:b0:36:95:
                    f0:4d:fc:31:8e:e5:df:a8:b2:27:98:ce:6d:74:05:
                    3a:91:df:85:a8:81:0d:2c:1d:a1:4c:3f:b6:d4:37:
                    1f:00:30:9a:77:ac:f3:36:54:fd:cc:e1:53:43:cd:
                    82:05:4a:ce:99:1b:6d:1b:3b:e6:12:24:41:00:d4:
                    c9:bf:f7:b7:31:73:58:90:16:6f:1e:46:8e:38:73:
                    b1:e6:dd:03:d2:1c:56:d4:44:82:00:aa:54:ca:65:
                    8f:ea:50:dc:5f:35:fe:bc:ac:70:8b:bd:da:c6:fb:
                    3b:ef:e2:36:68:96:9f:6b:8c:46:7c:2a:fb:fb:0b:
                    a0:5b:9d:7d:85:64:0f:10:4b:94:3e:4d:3d:a4:0f:
                    70:df:34:7a:e3:75:78:d6:6d:e1:b0:07:13:11:5b:
                    ac:25:27:43:70:c9:15:94:10:fd:b3:bb:b2:5a:ce:
                    66:3f:44:52:b1:c0:cc:8c:c8:6b:bc:45:cb:5f:2b:
                    d1:87:ed:d6:a6:28:dd:21:23:f9:59:07:f0:23:35:
                    7a:c2:d6:e8:fe:99:85:99:bb:8e:36:ed:aa:30:27:
                    4a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:B7:C3:B0:CF:03:DE:5B:46:46:F9:FE:7B:86:95:CD:09:D3:3A:B2
            X509v3 Authority Key Identifier:
                keyid:7D:1F:17:4B:FB:B1:7B:78:22:E8:2D:3A:A1:4E:86:D3:85:48:30:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/3139302e3131332e3232392e302f32342d3234203d3e20323632323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.113.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:08:ce:20:c2:23:d9:23:28:66:9d:8f:47:89:83:6f:f1:53:
         d5:2b:d5:14:30:03:2f:48:ad:8b:58:1f:9f:66:00:50:25:19:
         ff:35:d5:3c:dc:fb:e0:8a:00:6c:35:9c:dc:2c:5c:44:90:72:
         a1:38:d3:ff:2d:6f:65:ba:7b:69:7b:93:b4:5b:3f:93:1c:53:
         39:5b:51:f3:ee:a6:b9:aa:13:83:5f:b9:83:87:7c:d0:d1:8b:
         f0:40:7d:72:de:f6:c1:61:f0:c3:c7:3f:97:ae:22:27:1c:69:
         ee:66:cc:c5:6a:ab:c9:81:61:41:55:9a:1b:63:c8:44:5e:c4:
         9a:86:6b:89:89:71:57:20:78:fc:e0:5d:70:e4:83:e7:41:66:
         a4:c3:94:5a:36:a7:b3:e3:f3:b4:b6:dc:c2:a5:f3:03:1b:09:
         e0:e4:64:1f:63:e5:2a:c3:10:0d:96:6e:08:53:5b:3c:5a:f5:
         e5:34:12:37:cd:4e:1c:73:ba:7c:74:96:b4:c2:2c:a7:7b:35:
         e6:2c:82:a0:75:d2:98:6c:15:15:6a:d9:d4:2a:0b:84:eb:4a:
         eb:dd:fc:a7:bf:de:23:f1:6e:bc:5b:d8:04:6c:b2:aa:45:e6:
         a8:d0:c6:25:ba:18:7a:e9:73:80:75:22:ec:88:72:5b:f6:19:
         76:20:af:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 01:36:42 2026 by rpki-client