Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/3139302e3130322e3132302e302f32322d3234203d3e20323733323034.roa
File:                     3139302e3130322e3132302e302f32322d3234203d3e20323733323034.roa (raw, json)
Hash identifier:          +hVEDY8ktaIbMl4n8cQxc8CFNzIyofq+o3+6Ao+Zs3o=
Subject key identifier:   A3:4A:41:93:B9:77:6E:16:F4:A9:D7:A7:2E:EC:E9:52:F6:EF:45:18
Certificate issuer:       /CN=0F225EF900A741ED0067293A5D9297AE3DA8CE60
Certificate serial:       549D85BA504805B46FD9E512BD357B6440B0B2EE
Authority key identifier: 0F:22:5E:F9:00:A7:41:ED:00:67:29:3A:5D:92:97:AE:3D:A8:CE:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/3139302e3130322e3132302e302f32322d3234203d3e20323733323034.roa
Signing time:             Tue 05 May 2026 20:45:00 +0000
ROA not before:           Tue 05 May 2026 20:40:00 +0000
ROA not after:            Tue 04 May 2027 20:45:00 +0000
asID:                     273204
IP address blocks:        190.102.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 16 May 2026 19:47:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:9d:85:ba:50:48:05:b4:6f:d9:e5:12:bd:35:7b:64:40:b0:b2:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F225EF900A741ED0067293A5D9297AE3DA8CE60
        Validity
            Not Before: May  5 20:40:00 2026 GMT
            Not After : May  4 20:45:00 2027 GMT
        Subject: CN=A34A4193B9776E16F4A9D7A72EECE952F6EF4518
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:14:8e:7c:44:3b:d7:6a:c5:c5:54:cf:b0:f6:
                    97:0e:9e:3e:a8:b7:aa:bd:34:42:80:53:e7:ce:31:
                    6c:66:d5:c9:29:8e:7f:8a:c1:a2:69:0e:99:ea:dd:
                    61:22:f1:ea:aa:e6:3a:cc:40:06:e5:33:b2:37:2c:
                    24:06:44:43:c2:f7:fe:0b:07:eb:63:95:db:e4:a9:
                    26:7b:18:26:be:77:94:46:bc:35:37:ee:a4:d3:88:
                    97:68:1e:09:06:1a:83:23:a8:3e:f1:10:f8:a5:b8:
                    04:b4:cf:62:df:ee:85:c2:02:ba:fe:6b:18:6f:58:
                    8c:52:1d:bc:41:91:b9:24:54:43:b4:60:b7:2e:0f:
                    b9:dd:6e:5f:a0:3c:8c:25:6c:36:39:63:25:80:17:
                    7c:fc:7a:5c:64:9c:9b:7e:ba:f5:f1:52:e5:aa:ee:
                    9c:75:af:bc:25:50:46:c3:7e:39:48:0b:77:fb:d1:
                    d3:f5:95:5d:ac:e0:b0:8d:07:ed:ac:f9:43:e4:0c:
                    e3:43:cf:30:e9:9f:ee:54:66:55:41:55:28:7e:fd:
                    2e:72:cd:a6:40:f5:84:a0:3a:7d:05:1b:d5:9a:38:
                    50:ac:6d:9c:57:37:7d:50:63:86:16:60:6e:e4:35:
                    39:18:35:c3:1e:53:cb:ce:74:36:8e:3e:be:dc:2a:
                    4c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:4A:41:93:B9:77:6E:16:F4:A9:D7:A7:2E:EC:E9:52:F6:EF:45:18
            X509v3 Authority Key Identifier:
                keyid:0F:22:5E:F9:00:A7:41:ED:00:67:29:3A:5D:92:97:AE:3D:A8:CE:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/3139302e3130322e3132302e302f32322d3234203d3e20323733323034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.102.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:dc:cb:41:33:6a:f0:fd:e1:82:ee:81:9b:fd:6c:51:62:17:
         0a:6b:78:cb:95:60:48:cc:2b:ed:b1:5d:8c:b8:7b:c7:f6:84:
         fe:e1:c5:36:7d:97:bf:ad:fe:39:23:56:5d:11:ff:74:c7:3a:
         85:90:39:6c:4a:a8:e3:71:37:f1:01:fa:98:39:c9:f8:09:f5:
         ca:38:ac:8d:c5:ca:94:99:b3:bd:2c:96:38:54:f4:3e:06:89:
         49:0a:82:96:a3:86:49:0d:07:dc:f7:7e:05:5c:4e:e6:73:a0:
         7e:61:ee:95:12:1a:c7:0b:c5:5f:7c:a7:30:b6:39:8b:9d:0d:
         a3:ae:ea:dd:1b:3f:27:cc:0a:91:38:14:9e:e3:2a:82:e3:f9:
         82:34:73:a7:f5:0c:45:4e:01:01:93:ae:88:bf:4c:9a:55:74:
         a5:47:76:00:24:77:c1:22:8c:9b:c0:54:cb:aa:ef:56:89:3f:
         ba:ce:dc:da:0a:ca:6f:35:74:dc:e8:89:9d:d9:e3:30:df:04:
         49:df:02:55:cc:c9:78:0a:0b:96:2a:6e:ff:b4:b4:c2:28:7a:
         cd:26:f5:ca:39:dd:67:0b:a9:03:c1:d1:9e:dc:92:19:dc:cd:
         68:c4:f0:b4:be:08:c9:9f:46:3b:17:93:c4:47:f7:06:1d:4d:
         87:83:5f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:37:04 2026 by rpki-client