Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E74586C5CF7D8384EB451796F4BDBB838E26209A1C87865F396EAEF86FA1BE9D/0/3139302e3138342e3232302e302f32322d3232203d3e2030.roa
File:                     3139302e3138342e3232302e302f32322d3232203d3e2030.roa (raw, json)
Hash identifier:          NCMInaXOmf0oZ9ytzPgW4Ex56mq5rxVj6r7g46xz1bo=
Subject key identifier:   3E:8B:B1:AF:48:5A:07:F1:F7:24:EB:47:70:D7:5A:A0:80:45:32:8A
Certificate issuer:       /CN=4C1381453502913CB38DA6219251958EE6E0F09E
Certificate serial:       07112193356CCB54114AC95260E1FD003EDD5965
Authority key identifier: 4C:13:81:45:35:02:91:3C:B3:8D:A6:21:92:51:95:8E:E6:E0:F0:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C1381453502913CB38DA6219251958EE6E0F09E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E74586C5CF7D8384EB451796F4BDBB838E26209A1C87865F396EAEF86FA1BE9D/0/3139302e3138342e3232302e302f32322d3232203d3e2030.roa
Signing time:             Mon 20 Jul 2026 16:15:02 +0000
ROA not before:           Mon 20 Jul 2026 16:10:02 +0000
ROA not after:            Mon 19 Jul 2027 16:15:02 +0000
asID:                     0
IP address blocks:        190.184.220.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E74586C5CF7D8384EB451796F4BDBB838E26209A1C87865F396EAEF86FA1BE9D/0/4C1381453502913CB38DA6219251958EE6E0F09E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E74586C5CF7D8384EB451796F4BDBB838E26209A1C87865F396EAEF86FA1BE9D/0/4C1381453502913CB38DA6219251958EE6E0F09E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C1381453502913CB38DA6219251958EE6E0F09E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:11:21:93:35:6c:cb:54:11:4a:c9:52:60:e1:fd:00:3e:dd:59:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C1381453502913CB38DA6219251958EE6E0F09E
        Validity
            Not Before: Jul 20 16:10:02 2026 GMT
            Not After : Jul 19 16:15:02 2027 GMT
        Subject: CN=3E8BB1AF485A07F1F724EB4770D75AA08045328A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:88:80:f3:36:38:12:b0:05:4b:6d:93:22:72:
                    99:f8:4d:c0:15:46:3d:2b:87:26:31:ff:28:59:5c:
                    34:5a:4b:42:37:be:46:5e:97:bb:28:74:d3:62:f5:
                    81:71:2b:6b:df:dc:c3:83:1d:fe:a4:52:73:b1:bb:
                    c4:d7:4b:b2:4c:4c:35:f8:f9:9e:c7:4d:fb:87:1e:
                    b4:9d:b6:1c:69:84:d3:14:59:fc:cf:37:71:60:b3:
                    da:c3:55:1b:5c:77:2c:f4:93:1f:da:f1:67:02:ae:
                    17:9d:07:d0:83:75:95:29:a6:b4:ad:6d:c0:71:54:
                    c2:af:53:5f:0a:a7:a4:b9:2c:db:4f:61:2f:0d:ea:
                    73:c4:37:85:6f:5a:5d:bc:f0:04:b9:5e:8c:7b:d7:
                    2b:da:ea:fb:59:fb:32:d2:6c:bc:9e:07:08:c1:30:
                    4f:d0:fc:80:5c:af:41:8e:73:9b:05:4d:03:5e:f3:
                    7c:e5:67:53:12:68:81:98:c0:a7:d4:14:2b:f3:7e:
                    23:3b:07:7f:14:f3:36:c9:78:73:af:2f:0b:11:24:
                    d9:11:2b:b7:f3:28:e2:a6:e7:9f:9d:9e:4c:24:ae:
                    27:37:b6:4d:0b:2d:bf:87:69:c8:f6:2c:32:8f:c8:
                    69:01:92:79:83:da:d1:ca:ab:59:b2:5c:79:d1:29:
                    38:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:8B:B1:AF:48:5A:07:F1:F7:24:EB:47:70:D7:5A:A0:80:45:32:8A
            X509v3 Authority Key Identifier:
                keyid:4C:13:81:45:35:02:91:3C:B3:8D:A6:21:92:51:95:8E:E6:E0:F0:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E74586C5CF7D8384EB451796F4BDBB838E26209A1C87865F396EAEF86FA1BE9D/0/4C1381453502913CB38DA6219251958EE6E0F09E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C1381453502913CB38DA6219251958EE6E0F09E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E74586C5CF7D8384EB451796F4BDBB838E26209A1C87865F396EAEF86FA1BE9D/0/3139302e3138342e3232302e302f32322d3232203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.184.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:f8:f6:90:1d:1f:c3:2d:82:d9:4c:e5:df:a0:2b:39:e9:8d:
         ce:5f:8f:54:c7:cb:ba:83:76:4d:5f:94:1c:bd:a0:97:a1:25:
         db:cf:50:d4:b4:b0:1d:a9:83:1a:9b:58:dc:b5:6c:2f:c4:9f:
         48:29:00:ac:c1:11:b1:8a:3a:93:a9:88:e0:3e:69:f7:fc:87:
         36:d4:c2:40:c3:ae:b4:e2:d2:b7:6e:ee:d6:25:8a:1a:de:2a:
         8a:f6:be:88:49:2e:40:56:f0:3c:71:ea:19:7a:51:0b:db:38:
         4f:b6:25:41:00:5f:62:e4:f0:e4:1c:c3:25:b0:1d:00:b5:5f:
         35:b8:00:38:b3:cf:eb:7d:4e:d8:48:0f:62:f9:95:6e:11:a0:
         1a:f8:11:b7:f5:77:6c:13:d9:e6:40:22:ba:f4:e0:b3:dd:e3:
         0a:6f:28:8e:bf:fd:1c:88:05:52:88:46:a5:2c:dc:45:36:fd:
         e3:ef:91:2d:11:a7:dc:a7:d5:65:34:52:71:ea:a0:68:77:4c:
         24:b4:42:29:5e:1f:c5:b6:04:9a:fa:7b:4d:ea:7d:7c:27:f4:
         6a:f2:58:f7:94:20:d5:7f:1c:29:4d:ce:ec:a6:48:c6:2d:83:
         72:72:12:46:a3:eb:05:b9:a4:55:1f:73:91:fe:17:33:37:50:
         dc:22:03:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:54:18 2026 by rpki-client