Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/3139302e3130352e3233362e302f32342d3234203d3e203532323730.roa
File:                     3139302e3130352e3233362e302f32342d3234203d3e203532323730.roa (raw, json)
Hash identifier:          hMKXlBmbgGvnKZARXAJiJC4sVFqy9kxdZH1V/EkCfac=
Subject key identifier:   9B:1E:17:A2:30:DC:CF:E0:8D:1D:D0:32:11:F8:3B:6E:EC:27:E6:85
Certificate issuer:       /CN=67735E199F976E0CB1BA18DA329E6E4A778BD009
Certificate serial:       3EEF5CF0529331EE856EA1CA8C3C453B77FA796E
Authority key identifier: 67:73:5E:19:9F:97:6E:0C:B1:BA:18:DA:32:9E:6E:4A:77:8B:D0:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/3139302e3130352e3233362e302f32342d3234203d3e203532323730.roa
Signing time:             Wed 14 Oct 2026 20:40:25 +0000
ROA not before:           Wed 14 Oct 2026 20:35:25 +0000
ROA not after:            Wed 13 Oct 2027 20:40:25 +0000
asID:                     52270
IP address blocks:        190.105.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Nov 2026 23:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:ef:5c:f0:52:93:31:ee:85:6e:a1:ca:8c:3c:45:3b:77:fa:79:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67735E199F976E0CB1BA18DA329E6E4A778BD009
        Validity
            Not Before: Oct 14 20:35:25 2026 GMT
            Not After : Oct 13 20:40:25 2027 GMT
        Subject: CN=9B1E17A230DCCFE08D1DD03211F83B6EEC27E685
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f0:a2:88:3c:4a:46:cc:9d:62:6e:e9:e1:47:
                    ae:f0:5e:99:78:3c:63:16:a7:7e:35:a8:94:d2:27:
                    8a:5b:65:5c:94:1b:fb:d5:c7:5e:99:98:26:81:ca:
                    33:85:5d:66:16:a1:22:d6:e7:f3:67:ee:67:cf:73:
                    41:86:d0:cf:e0:bc:24:43:60:29:cd:68:62:1d:41:
                    5d:c1:a4:15:be:c1:3a:af:e6:54:8d:a7:fc:90:94:
                    ce:32:32:01:a2:84:33:65:17:57:d9:52:20:4e:b5:
                    0b:ab:93:9b:1f:c3:19:aa:93:96:e5:60:3a:a7:75:
                    95:45:94:e4:73:82:53:c2:97:f8:d1:a9:3e:88:e3:
                    8f:7b:7e:f5:eb:9c:40:5f:d8:56:75:d5:f5:24:b7:
                    7f:9a:af:ed:cf:74:f7:bc:16:e5:0f:83:4b:93:54:
                    f6:a6:f6:c6:79:e8:06:a4:47:27:f1:68:62:e7:15:
                    30:ee:d0:74:9e:ad:1c:3a:87:5f:c9:67:64:51:ee:
                    5b:11:25:9e:7e:11:89:0a:cb:4f:74:47:7f:34:9d:
                    6d:66:e5:f9:31:2c:08:04:32:d8:dc:03:d9:c7:c3:
                    4c:a3:b6:cd:05:e2:c7:b7:ca:27:a0:d7:d4:76:bd:
                    e5:80:4d:19:16:19:55:1b:36:4e:2c:87:1b:cd:d3:
                    bc:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:1E:17:A2:30:DC:CF:E0:8D:1D:D0:32:11:F8:3B:6E:EC:27:E6:85
            X509v3 Authority Key Identifier:
                keyid:67:73:5E:19:9F:97:6E:0C:B1:BA:18:DA:32:9E:6E:4A:77:8B:D0:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/3139302e3130352e3233362e302f32342d3234203d3e203532323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.105.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:41:4b:ff:92:2f:a2:b7:e8:bc:7c:fe:a3:b1:e0:07:0b:dc:
         68:4c:08:a5:08:12:be:69:46:cc:f7:81:7d:fa:bd:2c:97:0c:
         2a:12:49:1b:57:cb:93:44:8e:54:2c:d9:ae:20:c1:6d:3f:14:
         a8:a6:e7:7d:db:a2:13:40:e3:99:68:c0:30:a9:80:c1:69:4c:
         88:82:ad:e3:ee:ba:d2:df:73:07:17:81:fe:b2:11:6f:7f:19:
         f9:fe:aa:da:63:7f:58:1b:18:b5:55:92:a1:ef:76:03:6a:44:
         87:d8:83:90:4c:d9:19:01:dc:72:fe:e1:44:56:47:a2:fe:4f:
         93:a2:7f:60:71:29:06:f1:90:09:1f:61:e4:a7:b4:a3:8a:38:
         38:ed:5c:6f:2c:5f:d6:c5:6e:0f:12:20:4e:11:f9:4c:45:38:
         bc:e8:15:57:4d:b9:02:9a:47:fc:1b:f9:5d:aa:52:73:26:5c:
         7e:c0:5f:8b:89:72:7f:dd:29:0f:52:e7:54:44:93:e6:06:2f:
         6f:78:52:79:4a:94:73:02:f9:d5:64:05:ea:46:a5:c5:d2:c9:
         e0:15:b2:e8:21:89:ad:2d:fe:67:3d:e1:c4:c5:2d:99:49:77:
         0b:32:ee:94:6b:28:17:59:d1:92:63:d7:89:9f:1f:47:05:0a:
         b6:c9:b5:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 22:21:14 2026 by rpki-client