Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/3139302e3130352e3232342e302f32302d3230203d3e203532323730.roa
File:                     3139302e3130352e3232342e302f32302d3230203d3e203532323730.roa (raw, json)
Hash identifier:          FhSQT69Y/15A5aJ+2DFrmvu7XiD5fHc5ZykxinsfbWs=
Subject key identifier:   D8:1C:DB:F2:A7:65:11:AC:D2:39:B7:A8:79:6F:AB:BD:CE:6D:1B:76
Certificate issuer:       /CN=67735E199F976E0CB1BA18DA329E6E4A778BD009
Certificate serial:       14F44C6B5BD9C32146D6C664771D8A0E3074F7C8
Authority key identifier: 67:73:5E:19:9F:97:6E:0C:B1:BA:18:DA:32:9E:6E:4A:77:8B:D0:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/3139302e3130352e3232342e302f32302d3230203d3e203532323730.roa
Signing time:             Wed 14 Oct 2026 19:40:22 +0000
ROA not before:           Wed 14 Oct 2026 19:35:22 +0000
ROA not after:            Wed 13 Oct 2027 19:40:22 +0000
asID:                     52270
IP address blocks:        190.105.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 22 Oct 2026 21:49:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:f4:4c:6b:5b:d9:c3:21:46:d6:c6:64:77:1d:8a:0e:30:74:f7:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67735E199F976E0CB1BA18DA329E6E4A778BD009
        Validity
            Not Before: Oct 14 19:35:22 2026 GMT
            Not After : Oct 13 19:40:22 2027 GMT
        Subject: CN=D81CDBF2A76511ACD239B7A8796FABBDCE6D1B76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e5:f7:7e:7a:84:55:f5:f7:4d:f4:c3:c5:9d:
                    b7:44:c5:de:44:53:a1:cc:50:f5:a1:5d:9b:83:c0:
                    1e:48:ea:35:fe:28:42:8c:e0:41:d0:ce:e5:29:09:
                    aa:5a:04:1e:d6:8e:37:8c:80:7b:d0:95:97:f9:68:
                    26:ae:83:5a:1d:2e:9c:4d:d8:27:f1:04:32:60:46:
                    87:54:3b:44:3a:3b:ba:f1:4c:a1:92:48:02:b0:e4:
                    f3:c8:4e:6d:72:d5:cc:78:a2:39:5e:b9:52:68:c8:
                    cf:a2:e0:0c:41:8a:ec:33:9d:ba:88:4a:79:25:d5:
                    52:a4:5f:fd:d4:dd:94:ac:cf:ae:fe:8e:4b:bc:f8:
                    96:c3:b9:a1:ec:91:a9:27:b3:07:b4:a9:fc:50:4d:
                    70:9c:62:5c:4d:48:3d:37:4c:40:3f:43:b2:87:11:
                    84:8f:be:89:7c:9b:f7:30:4b:29:68:54:da:1a:ed:
                    30:37:3b:34:7c:a6:8e:4c:1b:77:30:64:55:a7:d4:
                    64:26:70:9a:54:2a:52:06:d0:27:50:d9:55:56:7c:
                    7d:a3:04:d9:e8:ce:ef:ee:22:9f:7e:28:d0:82:65:
                    c6:c9:ce:48:a3:16:a3:90:a7:36:9a:d7:e9:74:3a:
                    e8:d3:25:08:6e:cb:e6:3f:87:72:bd:22:e2:5c:5a:
                    ef:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:1C:DB:F2:A7:65:11:AC:D2:39:B7:A8:79:6F:AB:BD:CE:6D:1B:76
            X509v3 Authority Key Identifier:
                keyid:67:73:5E:19:9F:97:6E:0C:B1:BA:18:DA:32:9E:6E:4A:77:8B:D0:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/3139302e3130352e3232342e302f32302d3230203d3e203532323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.105.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         24:c4:10:c7:1e:3f:8e:30:2f:0b:89:77:98:c8:9a:be:52:19:
         17:d9:d2:37:b4:73:68:95:cb:43:a1:bb:51:65:ab:80:db:7c:
         04:62:d6:71:c0:b0:a9:66:6a:dd:71:3a:7d:f5:b2:b9:4c:d9:
         c0:28:1f:fa:7c:fe:76:dc:6b:71:c6:7e:c5:36:4a:cf:39:5c:
         85:19:75:ef:a9:35:6f:56:3b:7d:a0:eb:4d:d7:cd:c4:f3:3a:
         e8:57:e4:f0:97:43:7a:b9:9c:9c:a2:3e:2f:8a:c9:5a:b9:34:
         0b:59:89:a5:e6:24:aa:87:ae:ad:a5:ad:6d:8a:df:7b:71:8e:
         51:5a:d6:52:84:de:53:28:e8:9d:ae:6f:08:f0:f3:25:f9:19:
         c3:61:f0:75:dc:11:8b:5d:fe:0c:61:8e:7d:fd:a4:57:14:6b:
         09:53:b3:15:b9:e2:63:e7:7d:b4:79:8d:b0:f0:97:69:ff:03:
         2e:04:e0:2f:d8:ff:54:76:30:2a:b1:65:b5:e0:63:7a:bc:38:
         87:ef:2b:f2:ca:be:1d:80:23:66:a2:4a:7d:67:7f:3a:3e:53:
         b3:be:5a:ea:81:3b:fb:42:1d:31:54:19:f6:3d:c3:49:c8:8a:
         00:63:2e:aa:6f:b8:16:53:77:4e:15:0d:db:49:fd:5b:17:da:
         cc:96:a0:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 11:30:04 2026 by rpki-client