Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E74586C5CF7D8384EB451796F4BDBB838E26209A1C87865F396EAEF86FA1BE9D/0/3139302e3138342e3232302e302f32322d3232203d3e203532333037.roa
File:                     3139302e3138342e3232302e302f32322d3232203d3e203532333037.roa (raw, json)
Hash identifier:          QQ/PnjhR3m6Lr/mKPhnl6mkPaE7V+JKLjcIV6RgwAr4=
Subject key identifier:   A5:4E:76:20:52:E5:38:53:EB:B5:46:FD:3F:41:6D:7D:F6:76:D9:65
Certificate issuer:       /CN=4C1381453502913CB38DA6219251958EE6E0F09E
Certificate serial:       553675D34A2421A7541DD7CDC46BC7B54A77C1E2
Authority key identifier: 4C:13:81:45:35:02:91:3C:B3:8D:A6:21:92:51:95:8E:E6:E0:F0:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C1381453502913CB38DA6219251958EE6E0F09E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E74586C5CF7D8384EB451796F4BDBB838E26209A1C87865F396EAEF86FA1BE9D/0/3139302e3138342e3232302e302f32322d3232203d3e203532333037.roa
Signing time:             Mon 20 Jul 2026 16:15:03 +0000
ROA not before:           Mon 20 Jul 2026 16:10:03 +0000
ROA not after:            Mon 19 Jul 2027 16:15:03 +0000
asID:                     52307
IP address blocks:        190.184.220.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E74586C5CF7D8384EB451796F4BDBB838E26209A1C87865F396EAEF86FA1BE9D/0/4C1381453502913CB38DA6219251958EE6E0F09E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E74586C5CF7D8384EB451796F4BDBB838E26209A1C87865F396EAEF86FA1BE9D/0/4C1381453502913CB38DA6219251958EE6E0F09E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C1381453502913CB38DA6219251958EE6E0F09E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:36:75:d3:4a:24:21:a7:54:1d:d7:cd:c4:6b:c7:b5:4a:77:c1:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C1381453502913CB38DA6219251958EE6E0F09E
        Validity
            Not Before: Jul 20 16:10:03 2026 GMT
            Not After : Jul 19 16:15:03 2027 GMT
        Subject: CN=A54E762052E53853EBB546FD3F416D7DF676D965
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7a:c8:50:ac:b5:73:6f:03:7e:8c:67:50:24:
                    ed:55:7c:92:21:b6:b5:d1:e5:38:bb:f9:3e:59:47:
                    07:45:6a:1b:ef:a4:5a:01:d6:fa:2e:e4:58:3d:24:
                    f6:8d:23:37:88:48:0f:7c:1b:28:3d:ec:b4:ec:51:
                    fd:c4:8e:45:05:61:3a:8a:40:25:7b:e1:eb:5a:f6:
                    44:cb:cf:b0:b6:ca:38:2d:00:eb:92:e3:7f:fd:f3:
                    ba:be:d6:51:16:8f:da:cc:a8:e3:29:61:b2:5b:f4:
                    5c:c8:06:e3:8b:d5:aa:3c:f3:8a:dd:b8:2c:9f:d5:
                    ea:07:29:32:7b:75:4d:73:8b:31:06:1a:6f:e3:84:
                    87:b4:1b:ac:27:f9:bd:6a:4f:06:0a:bd:b1:11:66:
                    fb:c4:37:d2:c9:f2:ae:3f:ca:de:25:78:99:b8:89:
                    99:1f:e0:c4:19:93:90:24:06:c5:ab:44:2f:a7:99:
                    d7:6f:80:f4:fa:60:11:4b:d6:d2:e2:27:e4:0d:14:
                    c8:36:62:b4:82:97:ff:b0:0d:77:1e:e7:cc:9e:e8:
                    c6:26:d6:ef:d5:2a:e7:d5:f5:9a:6b:1a:90:6c:1e:
                    14:f2:93:a2:d1:91:be:24:59:36:a6:7a:8e:d5:a3:
                    f8:67:11:c6:92:f7:89:88:0f:9d:d9:9b:42:56:45:
                    11:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:4E:76:20:52:E5:38:53:EB:B5:46:FD:3F:41:6D:7D:F6:76:D9:65
            X509v3 Authority Key Identifier:
                keyid:4C:13:81:45:35:02:91:3C:B3:8D:A6:21:92:51:95:8E:E6:E0:F0:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E74586C5CF7D8384EB451796F4BDBB838E26209A1C87865F396EAEF86FA1BE9D/0/4C1381453502913CB38DA6219251958EE6E0F09E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C1381453502913CB38DA6219251958EE6E0F09E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E74586C5CF7D8384EB451796F4BDBB838E26209A1C87865F396EAEF86FA1BE9D/0/3139302e3138342e3232302e302f32322d3232203d3e203532333037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.184.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:8b:28:80:49:e8:a7:14:56:b5:5f:e5:6f:71:44:0d:fd:c7:
         2a:7c:cc:ec:7c:7e:f4:51:5d:0a:cd:74:15:18:9f:5b:4f:cb:
         5c:85:1a:b2:24:bc:b2:e2:c4:30:52:15:d4:75:6f:e5:fe:b6:
         88:d4:92:cb:01:ee:24:28:44:34:c7:de:68:e8:c5:18:9e:c9:
         20:1f:46:8e:10:99:96:5a:74:a9:c0:0e:1b:0f:fc:59:b7:aa:
         ae:e6:45:03:70:76:d5:6d:3f:90:84:a0:af:7f:b1:bb:ea:f3:
         4a:99:8a:e0:79:36:6a:84:81:74:41:73:a7:88:48:9d:2a:98:
         21:9b:fa:d2:cd:a9:73:11:c1:91:07:e7:67:4b:0f:44:04:63:
         56:78:01:94:8a:19:b0:c9:9a:ce:7c:ed:ef:67:89:1d:a8:72:
         00:77:f8:2f:26:a1:e1:55:99:b9:2a:df:6a:66:6f:10:1f:40:
         a0:cf:04:d1:00:79:e5:71:dc:3f:ec:dd:03:cd:72:af:e9:dc:
         2b:2e:6b:e7:53:76:76:a4:3f:02:f5:93:02:19:f4:69:ef:18:
         a1:bb:47:5b:d9:4d:8b:5f:8a:f3:3e:2f:36:8f:fd:45:1a:08:
         07:50:b5:84:08:ca:24:ed:28:bf:00:59:0d:ba:28:18:3f:be:
         22:85:50:1d
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUVTZ100okIadUHdfNxGvHtUp3weIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEMxMzgxNDUzNTAyOTEzQ0IzOERBNjIxOTI1MTk1OEVF
NkUwRjA5RTAeFw0yNjA3MjAxNjEwMDNaFw0yNzA3MTkxNjE1MDNaMDMxMTAvBgNV
BAMTKEE1NEU3NjIwNTJFNTM4NTNFQkI1NDZGRDNGNDE2RDdERjY3NkQ5NjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCeshQrLVzbwN+jGdQJO1VfJIh
trXR5Ti7+T5ZRwdFahvvpFoB1vou5Fg9JPaNIzeISA98Gyg97LTsUf3EjkUFYTqK
QCV74eta9kTLz7C2yjgtAOuS43/987q+1lEWj9rMqOMpYbJb9FzIBuOL1ao884rd
uCyf1eoHKTJ7dU1zizEGGm/jhIe0G6wn+b1qTwYKvbERZvvEN9LJ8q4/yt4leJm4
iZkf4MQZk5AkBsWrRC+nmddvgPT6YBFL1tLiJ+QNFMg2YrSCl/+wDXce58ye6MYm
1u/VKufV9ZprGpBsHhTyk6LRkb4kWTameo7Vo/hnEcaS94mID53Zm0JWRRGHAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUpU52IFLlOFPrtUb9P0FtffZ22WUwHwYDVR0j
BBgwFoAUTBOBRTUCkTyzjaYhklGVjubg8J4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FNzQ1ODZDNUNGN0Q4Mzg0RUI0NTE3OTZGNEJEQkI4MzhF
MjYyMDlBMUM4Nzg2NUYzOTZFQUVGODZGQTFCRTlELzAvNEMxMzgxNDUzNTAyOTEz
Q0IzOERBNjIxOTI1MTk1OEVFNkUwRjA5RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80QzEzODE0NTM1MDI5MTNDQjM4
REE2MjE5MjUxOTU4RUU2RTBGMDlFLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTc0NTg2QzVDRjdEODM4NEVCNDUxNzk2RjRCREJCODM4RTI2MjA5QTFD
ODc4NjVGMzk2RUFFRjg2RkExQkU5RC8wLzMxMzkzMDJlMzEzODM0MmUzMjMyMzAy
ZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNTMyMzMzMDM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCvrjc
MA0GCSqGSIb3DQEBCwUAA4IBAQCIiyiASeinFFa1X+VvcUQN/ccqfMzsfH70UV0K
zXQVGJ9bT8tchRqyJLyy4sQwUhXUdW/l/raI1JLLAe4kKEQ0x95o6MUYnskgH0aO
EJmWWnSpwA4bD/xZt6qu5kUDcHbVbT+QhKCvf7G76vNKmYrgeTZqhIF0QXOniEid
Kpghm/rSzalzEcGRB+dnSw9EBGNWeAGUihmwyZrOfO3vZ4kdqHIAd/gvJqHhVZm5
Kt9qZm8QH0CgzwTRAHnlcdw/7N0DzXKv6dwrLmvnU3Z2pD8C9ZMCGfRp7xihu0db
2U2LX4rzPi82j/1FGggHULWECMok7Si/AFkNuigYP74ihVAd
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:42:42 2026 by rpki-client