Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/3139302e3130352e3230312e302f32342d3234203d3e203532323730.roa
File:                     3139302e3130352e3230312e302f32342d3234203d3e203532323730.roa (raw, json)
Hash identifier:          ZnR2C1mQyEHvC7U/gP4qDTprNfYG26XKP/nar77WmmY=
Subject key identifier:   E8:D4:B6:88:01:F3:0E:09:B8:44:A8:EA:11:FB:56:DA:26:7E:10:0A
Certificate issuer:       /CN=67735E199F976E0CB1BA18DA329E6E4A778BD009
Certificate serial:       77E561FC837DEB8C5DA31E398CDD17F20A61E447
Authority key identifier: 67:73:5E:19:9F:97:6E:0C:B1:BA:18:DA:32:9E:6E:4A:77:8B:D0:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/3139302e3130352e3230312e302f32342d3234203d3e203532323730.roa
Signing time:             Wed 14 Oct 2026 20:40:31 +0000
ROA not before:           Wed 14 Oct 2026 20:35:31 +0000
ROA not after:            Wed 13 Oct 2027 20:40:31 +0000
asID:                     52270
IP address blocks:        190.105.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 15:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:e5:61:fc:83:7d:eb:8c:5d:a3:1e:39:8c:dd:17:f2:0a:61:e4:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67735E199F976E0CB1BA18DA329E6E4A778BD009
        Validity
            Not Before: Oct 14 20:35:31 2026 GMT
            Not After : Oct 13 20:40:31 2027 GMT
        Subject: CN=E8D4B68801F30E09B844A8EA11FB56DA267E100A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:1d:3a:9f:4b:cf:d4:a3:36:bb:31:cb:62:46:
                    f0:e8:06:1a:0b:48:36:85:25:57:25:70:21:41:97:
                    bc:7a:db:f9:1c:e5:63:1a:3f:33:96:c4:1b:7a:2d:
                    b2:82:aa:82:7d:9d:f7:bc:fd:55:ab:a9:bd:64:9e:
                    5e:e2:ef:ae:8c:bc:b7:d4:b7:ad:6c:74:e0:f5:eb:
                    32:f1:49:dd:d4:99:a6:6f:51:51:92:ed:84:c3:a9:
                    b6:57:dc:40:ee:54:74:06:49:2b:34:d5:2c:a0:cb:
                    ea:35:02:43:86:9d:81:d9:53:5c:8b:4e:4f:2c:f5:
                    72:aa:27:2e:5b:4d:42:98:c3:32:dc:42:30:90:c2:
                    33:64:cb:33:35:2b:4b:08:40:f0:68:4a:cc:05:3c:
                    03:51:e0:7b:18:ab:4e:da:2f:70:43:0f:d2:7b:7e:
                    03:f5:a6:b8:77:18:e2:51:f7:7c:c0:c4:90:5a:cb:
                    8c:95:d5:23:31:49:29:d5:7c:fe:92:66:38:06:2a:
                    f9:ec:62:12:8e:65:31:ea:6c:ca:b5:d1:bd:bc:47:
                    0e:13:6b:fa:90:ad:8b:35:8d:08:ae:ff:24:c9:da:
                    08:b4:95:9a:ca:6f:38:ee:d0:89:1b:c6:46:25:50:
                    db:d6:a0:32:ef:ce:2f:f7:db:88:75:57:75:0c:c5:
                    8f:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:D4:B6:88:01:F3:0E:09:B8:44:A8:EA:11:FB:56:DA:26:7E:10:0A
            X509v3 Authority Key Identifier:
                keyid:67:73:5E:19:9F:97:6E:0C:B1:BA:18:DA:32:9E:6E:4A:77:8B:D0:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/3139302e3130352e3230312e302f32342d3234203d3e203532323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.105.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:55:49:8d:6d:2a:48:ac:64:10:ba:52:a1:61:81:28:2a:95:
         c0:14:a0:04:72:a6:62:be:0b:83:48:95:0e:eb:fa:9a:4c:0a:
         33:55:9c:51:7f:0f:71:22:82:7f:3c:0e:2a:19:a6:6c:3b:02:
         58:93:2a:ec:d2:9f:a2:2d:b7:a1:43:a9:13:37:9a:18:ee:26:
         36:18:47:ab:bd:59:ce:ae:42:b9:00:c4:cd:8e:dd:7e:b8:de:
         b4:88:22:47:79:91:05:61:c9:1a:39:4a:7a:e4:f1:7d:85:d8:
         07:5b:65:e2:6e:96:d7:38:cb:77:88:c2:87:1a:b0:a9:f3:a5:
         70:3c:a6:51:7d:f7:25:28:5c:6b:e2:8e:58:87:cd:03:1d:ed:
         69:74:83:ce:27:f8:d0:13:b0:b0:cf:47:7d:c7:8a:b7:12:93:
         4b:9b:cc:1e:2b:e2:ba:9d:cb:7f:5b:04:5b:01:4c:d5:f6:12:
         01:9a:67:46:87:8c:ee:28:24:d0:51:d9:b0:24:75:dd:cb:ed:
         2f:6d:44:21:88:48:73:04:18:5c:08:a7:3f:c9:c6:16:9f:12:
         a7:f3:40:7e:2f:04:4e:10:42:20:c2:4a:15:8d:a9:6b:30:da:
         ab:21:b5:4a:c6:e4:f6:55:16:59:ae:35:52:1d:b0:69:11:59:
         70:5f:42:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 08:29:18 2026 by rpki-client