Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E74586C5CF7D8384EB451796F4BDBB838E26209A1C87865F396EAEF86FA1BE9D/0/3139302e3138342e3232302e302f32332d3234203d3e203532333037.roa
File:                     3139302e3138342e3232302e302f32332d3234203d3e203532333037.roa (raw, json)
Hash identifier:          HzP6qcupSF6FCXS0MBHSRzQabXmabrmFRHFCnHjo4c4=
Subject key identifier:   53:7C:EB:29:1F:FE:0E:8A:04:AC:3A:6A:1C:C1:FD:C9:9B:27:F2:E1
Certificate issuer:       /CN=4C1381453502913CB38DA6219251958EE6E0F09E
Certificate serial:       1790A86C56B0BED01EA2BBD9DC114CBD100F66
Authority key identifier: 4C:13:81:45:35:02:91:3C:B3:8D:A6:21:92:51:95:8E:E6:E0:F0:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C1381453502913CB38DA6219251958EE6E0F09E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E74586C5CF7D8384EB451796F4BDBB838E26209A1C87865F396EAEF86FA1BE9D/0/3139302e3138342e3232302e302f32332d3234203d3e203532333037.roa
Signing time:             Mon 20 Jul 2026 17:55:00 +0000
ROA not before:           Mon 20 Jul 2026 17:50:00 +0000
ROA not after:            Mon 19 Jul 2027 17:55:00 +0000
asID:                     52307
IP address blocks:        190.184.220.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E74586C5CF7D8384EB451796F4BDBB838E26209A1C87865F396EAEF86FA1BE9D/0/4C1381453502913CB38DA6219251958EE6E0F09E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E74586C5CF7D8384EB451796F4BDBB838E26209A1C87865F396EAEF86FA1BE9D/0/4C1381453502913CB38DA6219251958EE6E0F09E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C1381453502913CB38DA6219251958EE6E0F09E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:90:a8:6c:56:b0:be:d0:1e:a2:bb:d9:dc:11:4c:bd:10:0f:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C1381453502913CB38DA6219251958EE6E0F09E
        Validity
            Not Before: Jul 20 17:50:00 2026 GMT
            Not After : Jul 19 17:55:00 2027 GMT
        Subject: CN=537CEB291FFE0E8A04AC3A6A1CC1FDC99B27F2E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:98:f8:8f:8d:cb:44:44:a0:83:f5:2b:e3:23:
                    67:78:e7:a7:ba:94:69:52:55:fc:6c:d1:20:9f:0a:
                    76:97:43:c6:10:38:a2:06:4a:f8:79:ce:26:e3:40:
                    3f:1e:03:3b:82:ae:f0:41:f3:e1:19:b4:25:e6:0d:
                    d7:6f:9f:95:d3:d2:9a:27:3f:5a:f8:89:7b:12:85:
                    d2:0c:5c:f4:4b:5d:a4:5d:60:ed:14:77:21:83:b1:
                    3e:d2:63:ee:ad:76:1c:eb:ee:86:b4:72:8c:9d:12:
                    58:ed:77:1e:ee:f3:5d:26:f7:af:fd:8c:f6:12:93:
                    0d:2e:8a:da:60:f6:19:29:5f:34:c5:a1:dd:17:86:
                    f0:84:85:f1:0b:3a:70:77:15:e2:d4:8e:96:73:e6:
                    a4:e9:e6:b5:f4:cf:a4:43:4e:13:58:c9:3b:dc:67:
                    19:33:42:21:e2:b9:d3:ef:14:3a:31:15:d1:bc:3f:
                    1c:c8:cf:dc:07:61:e4:56:e5:02:cf:9a:b2:b9:87:
                    ed:27:09:56:7d:1a:76:eb:41:a5:31:2f:29:c6:e7:
                    bf:20:b1:b6:55:d7:b1:31:f1:71:69:2c:36:48:6a:
                    ff:14:38:29:02:fd:c1:5e:1c:14:6b:07:3b:3a:ae:
                    a2:24:5c:ff:f5:32:35:6e:ea:b6:2d:c8:0c:42:23:
                    79:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:7C:EB:29:1F:FE:0E:8A:04:AC:3A:6A:1C:C1:FD:C9:9B:27:F2:E1
            X509v3 Authority Key Identifier:
                keyid:4C:13:81:45:35:02:91:3C:B3:8D:A6:21:92:51:95:8E:E6:E0:F0:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E74586C5CF7D8384EB451796F4BDBB838E26209A1C87865F396EAEF86FA1BE9D/0/4C1381453502913CB38DA6219251958EE6E0F09E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C1381453502913CB38DA6219251958EE6E0F09E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E74586C5CF7D8384EB451796F4BDBB838E26209A1C87865F396EAEF86FA1BE9D/0/3139302e3138342e3232302e302f32332d3234203d3e203532333037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.184.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ab:0e:46:9d:04:62:6c:77:da:8d:17:06:93:7f:48:f6:11:b9:
         47:91:20:52:d0:31:d0:ef:67:47:9c:c5:81:e9:18:09:d1:c8:
         cd:d6:f2:5d:50:83:5e:fe:a7:17:32:d0:4a:c0:b0:38:95:3e:
         4b:1d:14:a5:02:fa:e0:87:4f:b9:28:d7:3b:b9:d0:ff:dc:3a:
         67:07:2b:4c:0f:da:96:db:2c:ef:a8:91:78:09:70:66:0c:b7:
         d6:ae:d3:a0:36:35:50:8e:cb:a9:79:7f:03:58:c5:13:b4:ac:
         10:16:a8:30:77:bf:24:19:31:ff:dd:06:79:69:b7:b7:8c:18:
         39:64:d4:2c:e6:bd:ce:11:5e:8a:a0:11:f6:82:9c:28:76:03:
         54:dc:17:58:57:8c:45:dc:9c:79:2a:a0:48:d6:2e:5e:1d:16:
         1c:6f:72:20:33:83:85:f4:17:ec:03:32:b0:a3:41:09:6c:17:
         2f:01:d0:b6:10:37:10:db:13:01:7d:2a:87:79:dc:6f:3b:cd:
         f0:78:4e:ba:34:fb:ae:ae:36:cf:06:17:85:b8:0e:3b:71:ba:
         b0:04:b8:c0:17:c9:8b:71:78:bc:e3:a2:65:4b:1f:4a:91:47:
         de:f3:34:76:5b:2f:87:2a:54:07:c8:5c:05:b2:58:af:97:75:
         af:86:a6:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:44:36 2026 by rpki-client