Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/3139302e3130322e3132302e302f32322d3234203d3e20323639383232.roa
File:                     3139302e3130322e3132302e302f32322d3234203d3e20323639383232.roa (raw, json)
Hash identifier:          Hadkb1HG+Qhyiv9iGYGS/DsVjUv0PH/SGA37OphJi4k=
Subject key identifier:   6B:34:50:69:07:48:91:92:D2:7E:EA:A3:D5:03:06:C2:57:43:03:06
Certificate issuer:       /CN=0F225EF900A741ED0067293A5D9297AE3DA8CE60
Certificate serial:       406E5C0737FDF9CB84D6059FD39D93689B90A18F
Authority key identifier: 0F:22:5E:F9:00:A7:41:ED:00:67:29:3A:5D:92:97:AE:3D:A8:CE:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/3139302e3130322e3132302e302f32322d3234203d3e20323639383232.roa
Signing time:             Wed 25 Mar 2026 11:30:00 +0000
ROA not before:           Wed 25 Mar 2026 11:25:00 +0000
ROA not after:            Wed 24 Mar 2027 11:30:00 +0000
asID:                     269822
IP address blocks:        190.102.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 18:33:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:6e:5c:07:37:fd:f9:cb:84:d6:05:9f:d3:9d:93:68:9b:90:a1:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F225EF900A741ED0067293A5D9297AE3DA8CE60
        Validity
            Not Before: Mar 25 11:25:00 2026 GMT
            Not After : Mar 24 11:30:00 2027 GMT
        Subject: CN=6B34506907489192D27EEAA3D50306C257430306
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:78:f1:c0:ab:f0:46:34:62:9a:cb:89:6c:0d:
                    16:4c:8a:a3:34:f2:db:64:e5:97:4f:a1:a1:45:60:
                    9f:75:27:1d:18:b5:9d:c5:7a:ec:b1:5d:51:b9:e6:
                    2b:03:9d:f2:2f:00:59:32:c6:e3:50:bc:4d:d4:bf:
                    5a:c3:d3:35:64:00:5c:4e:6c:84:a2:04:f1:ba:9e:
                    3c:81:1a:28:61:bc:12:9a:06:c2:32:88:bf:f6:01:
                    8b:a0:e3:1a:fb:5d:1c:f0:57:3e:33:25:19:1b:b8:
                    68:08:7a:a7:fa:7e:fd:f6:8e:ba:57:c7:a3:c1:c1:
                    d0:55:21:1c:be:6a:97:52:0e:c9:c5:42:60:f8:b0:
                    16:cf:3c:df:6e:c3:9b:76:1f:34:13:9e:06:b8:db:
                    46:14:7d:94:a2:a8:e2:64:4f:42:a9:b5:c7:ac:2b:
                    3e:3a:61:f4:7d:76:4c:35:94:24:6c:07:f2:a8:8b:
                    ab:ca:c5:86:7c:cc:05:40:30:4d:ac:ab:91:35:09:
                    45:14:58:68:03:3e:b9:8b:ec:42:a8:aa:a8:50:25:
                    5a:97:96:84:92:0f:02:35:66:35:61:8e:46:9a:83:
                    32:ac:73:14:ab:42:0b:25:a8:cb:e5:94:eb:51:9d:
                    3b:54:70:dd:34:c1:e5:3c:bd:3d:e0:70:9a:49:7a:
                    76:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:34:50:69:07:48:91:92:D2:7E:EA:A3:D5:03:06:C2:57:43:03:06
            X509v3 Authority Key Identifier:
                keyid:0F:22:5E:F9:00:A7:41:ED:00:67:29:3A:5D:92:97:AE:3D:A8:CE:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/3139302e3130322e3132302e302f32322d3234203d3e20323639383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.102.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:fc:a4:58:69:75:ff:e6:47:74:c9:1e:01:69:f6:96:25:f1:
         d8:c6:44:8b:65:36:a5:ad:9b:3d:de:4c:cd:75:e3:75:aa:f1:
         5c:46:c0:1a:c3:c6:31:85:06:90:bb:d4:cb:06:04:d0:04:aa:
         a7:f5:f2:57:22:4e:0d:9f:46:3f:ee:56:a8:1e:18:de:2e:b8:
         88:89:c4:42:20:09:0a:16:17:1d:25:45:03:2b:09:14:9c:b7:
         20:3f:28:8b:91:ef:fc:d4:e9:9d:84:8d:f9:22:66:9e:e3:b9:
         31:80:75:91:ca:6a:ff:81:d8:b0:d5:eb:7e:c3:04:ef:72:eb:
         18:9e:08:43:ca:96:e5:96:93:19:fd:6b:f4:cc:12:fe:8d:71:
         0a:8f:fd:e5:b7:56:83:54:c5:28:31:11:36:3e:a9:3d:c7:cb:
         39:89:8c:8f:8e:aa:7a:d4:9b:ea:0e:2a:94:f7:c5:14:6a:97:
         c2:60:73:79:bd:33:5c:1d:fd:05:b5:39:46:7f:d2:20:3f:d3:
         38:be:f5:97:f9:62:cb:97:3c:c4:45:ea:1c:d8:31:2a:91:91:
         69:78:26:53:e6:7d:ea:77:cd:e3:95:f3:08:31:34:1b:64:35:
         74:65:d9:3f:d6:f4:60:c6:ec:3f:32:c7:86:fb:92:b2:4d:3b:
         7d:4f:78:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:20:56 2026 by rpki-client