Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E74586C5CF7D8384EB451796F4BDBB838E26209A1C87865F396EAEF86FA1BE9D/0/3139302e3130352e3136302e302f32322d3234203d3e203532333037.roa
File:                     3139302e3130352e3136302e302f32322d3234203d3e203532333037.roa (raw, json)
Hash identifier:          oE6s2YHyw0gV7C0rQiwpaiASeWPIdtMiLAPvoG8QAzA=
Subject key identifier:   59:90:FD:E1:84:6F:AC:72:CA:EE:E1:13:65:80:26:FF:DB:00:4D:75
Certificate issuer:       /CN=4C1381453502913CB38DA6219251958EE6E0F09E
Certificate serial:       2782A83DA0AD4759E87EC3647423A6933E4A8EAE
Authority key identifier: 4C:13:81:45:35:02:91:3C:B3:8D:A6:21:92:51:95:8E:E6:E0:F0:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C1381453502913CB38DA6219251958EE6E0F09E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E74586C5CF7D8384EB451796F4BDBB838E26209A1C87865F396EAEF86FA1BE9D/0/3139302e3130352e3136302e302f32322d3234203d3e203532333037.roa
Signing time:             Mon 20 Jul 2026 17:55:00 +0000
ROA not before:           Mon 20 Jul 2026 17:50:00 +0000
ROA not after:            Mon 19 Jul 2027 17:55:00 +0000
asID:                     52307
IP address blocks:        190.105.160.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E74586C5CF7D8384EB451796F4BDBB838E26209A1C87865F396EAEF86FA1BE9D/0/4C1381453502913CB38DA6219251958EE6E0F09E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E74586C5CF7D8384EB451796F4BDBB838E26209A1C87865F396EAEF86FA1BE9D/0/4C1381453502913CB38DA6219251958EE6E0F09E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C1381453502913CB38DA6219251958EE6E0F09E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:82:a8:3d:a0:ad:47:59:e8:7e:c3:64:74:23:a6:93:3e:4a:8e:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C1381453502913CB38DA6219251958EE6E0F09E
        Validity
            Not Before: Jul 20 17:50:00 2026 GMT
            Not After : Jul 19 17:55:00 2027 GMT
        Subject: CN=5990FDE1846FAC72CAEEE113658026FFDB004D75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:aa:5e:db:50:c7:c4:84:36:55:e1:c4:d5:24:
                    cf:c3:23:48:fe:d5:d9:ad:f0:43:93:c5:1c:a5:4e:
                    2e:b5:2c:6e:c4:85:02:a1:0e:4e:eb:5a:d0:3c:56:
                    0a:f4:c9:53:4c:07:9e:19:5f:c0:67:51:ae:89:2c:
                    dd:e5:98:43:32:9d:f6:f8:e9:1f:04:ee:ec:a2:3f:
                    ca:9e:fc:c5:3c:86:df:c9:e3:26:f7:8a:bf:ba:4a:
                    e8:49:69:23:21:3a:48:52:50:9c:69:9b:58:5a:70:
                    f2:9c:f8:2b:cc:f6:b4:04:6e:f9:47:cb:6c:65:f3:
                    99:cd:ca:76:be:86:e6:e0:cb:41:47:0d:fc:73:ce:
                    5e:80:9f:f7:04:8c:4c:f9:8a:22:83:e0:dc:4a:f8:
                    49:c7:ff:18:4b:a9:34:45:9b:65:fa:9e:e7:1d:63:
                    65:3a:5d:e7:53:58:0c:1d:34:a0:1f:02:c7:4f:ba:
                    a9:67:a2:ff:d9:50:d1:eb:71:c2:4b:c2:4a:3a:5c:
                    a1:07:ec:a4:ee:82:db:96:6b:47:4e:62:ad:15:2c:
                    ac:00:28:05:8d:47:58:6f:49:b3:3d:9b:be:ea:3f:
                    67:cd:5e:e4:eb:70:75:37:90:06:4c:7b:0f:4b:00:
                    3a:97:61:41:51:28:bf:54:64:9a:1c:04:d4:f3:d8:
                    9e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:90:FD:E1:84:6F:AC:72:CA:EE:E1:13:65:80:26:FF:DB:00:4D:75
            X509v3 Authority Key Identifier:
                keyid:4C:13:81:45:35:02:91:3C:B3:8D:A6:21:92:51:95:8E:E6:E0:F0:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E74586C5CF7D8384EB451796F4BDBB838E26209A1C87865F396EAEF86FA1BE9D/0/4C1381453502913CB38DA6219251958EE6E0F09E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C1381453502913CB38DA6219251958EE6E0F09E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E74586C5CF7D8384EB451796F4BDBB838E26209A1C87865F396EAEF86FA1BE9D/0/3139302e3130352e3136302e302f32322d3234203d3e203532333037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.105.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ae:cc:70:b0:ce:29:bf:8b:85:e4:0c:84:88:e2:36:af:cf:90:
         00:c3:41:f8:57:ef:75:fb:99:a1:34:83:ea:14:11:77:d7:63:
         e5:6d:81:dc:1d:7e:d5:1e:27:b1:a8:83:4e:9b:24:aa:99:1d:
         9b:21:7c:69:2a:44:8d:47:e8:81:c4:1a:a3:07:b6:0f:4e:f3:
         4e:1b:a1:51:aa:88:3d:47:65:56:33:f3:58:e9:00:0f:15:de:
         53:bb:4a:b2:c5:30:4d:2f:a2:b6:b4:19:7d:17:a9:96:1f:b7:
         86:55:96:50:7e:f6:91:19:3c:b4:d9:8b:c9:31:68:bc:f3:75:
         f7:48:20:70:ce:7f:c4:cc:bd:ca:27:6d:ad:91:2c:fd:39:52:
         22:f7:17:5e:fa:7c:6c:d9:a9:5b:b6:d7:64:d3:e6:89:5a:09:
         46:a4:62:8f:c7:98:5f:13:99:13:86:f2:a3:46:ca:2c:08:d5:
         d7:7e:54:73:e7:0a:f4:a3:ef:c2:4e:dc:ff:d8:95:f9:73:a4:
         3f:ef:31:b4:1b:6e:29:df:c2:1c:9c:66:18:92:ba:37:c0:6d:
         f7:69:cb:de:2f:c1:9e:a3:e9:25:a9:1d:22:69:69:e7:18:d8:
         e4:60:ed:ad:4b:e0:fa:7b:f1:5f:03:c3:fa:8b:0a:18:dc:00:
         58:33:44:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:44:25 2026 by rpki-client