Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/3139302e3130322e3132312e302f32342d3234203d3e20323639383232.roa
File:                     3139302e3130322e3132312e302f32342d3234203d3e20323639383232.roa (raw, json)
Hash identifier:          BzBv30CQYdNAPJ+RqmySPcCIB8AV+o5g3WIStdYtlgw=
Subject key identifier:   81:FC:71:F9:44:62:F6:43:25:AD:54:EC:80:D1:D4:04:E2:C6:72:8A
Certificate issuer:       /CN=0F225EF900A741ED0067293A5D9297AE3DA8CE60
Certificate serial:       4FA5954DD58DBF97F97646E95F98D8A7C2A564B1
Authority key identifier: 0F:22:5E:F9:00:A7:41:ED:00:67:29:3A:5D:92:97:AE:3D:A8:CE:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/3139302e3130322e3132312e302f32342d3234203d3e20323639383232.roa
Signing time:             Sat 29 Aug 2026 03:00:11 +0000
ROA not before:           Sat 29 Aug 2026 02:55:11 +0000
ROA not after:            Sat 28 Aug 2027 03:00:11 +0000
asID:                     269822
IP address blocks:        190.102.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Oct 2026 19:31:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:a5:95:4d:d5:8d:bf:97:f9:76:46:e9:5f:98:d8:a7:c2:a5:64:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F225EF900A741ED0067293A5D9297AE3DA8CE60
        Validity
            Not Before: Aug 29 02:55:11 2026 GMT
            Not After : Aug 28 03:00:11 2027 GMT
        Subject: CN=81FC71F94462F64325AD54EC80D1D404E2C6728A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:7d:28:0a:cf:9d:0c:1d:8e:10:39:dd:b7:0e:
                    41:27:c9:19:c3:2d:40:34:71:b6:a3:db:cd:a9:6f:
                    98:5f:ca:ab:68:03:1f:87:05:06:70:e9:67:e0:11:
                    9c:bb:0b:db:b6:dc:5b:91:b6:e2:af:e3:b4:1c:24:
                    e6:0d:16:87:4f:2b:40:31:56:42:1a:4d:3c:bf:0c:
                    8a:b9:7f:ad:c8:3d:5f:b6:67:b6:38:7d:6d:ee:55:
                    64:8f:25:4e:df:85:ef:e9:46:81:60:79:43:65:7d:
                    40:56:9a:68:0c:6d:5c:25:ce:89:2d:28:c8:1a:d9:
                    2a:34:13:e5:ea:9e:b9:a9:1f:c3:22:1e:7c:97:51:
                    61:8c:c6:5d:ff:19:1a:2f:1c:57:50:31:d6:9c:17:
                    f1:0e:aa:2e:70:43:2d:6c:57:93:7c:84:7f:5e:fc:
                    e1:db:15:e2:7f:43:3c:64:ef:7e:39:12:96:3a:2c:
                    b1:70:38:96:2a:61:26:80:36:c9:ad:85:6b:a9:3a:
                    73:31:73:84:9a:69:23:dd:f3:cc:25:fb:2f:29:ed:
                    00:5d:c9:0a:fa:bb:e2:b5:97:93:b4:86:3e:1c:3a:
                    9f:91:22:c7:9a:15:3b:91:13:62:d3:ef:5e:3e:f6:
                    28:ae:0d:5d:de:19:dc:31:af:63:b3:af:a1:74:63:
                    0e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:FC:71:F9:44:62:F6:43:25:AD:54:EC:80:D1:D4:04:E2:C6:72:8A
            X509v3 Authority Key Identifier:
                keyid:0F:22:5E:F9:00:A7:41:ED:00:67:29:3A:5D:92:97:AE:3D:A8:CE:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/3139302e3130322e3132312e302f32342d3234203d3e20323639383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.102.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:c6:4c:00:07:94:28:f3:60:1d:07:13:81:c8:1b:75:84:95:
         c0:d6:07:ec:e7:6f:7d:37:2f:10:63:df:7f:b1:b6:74:3b:c4:
         fa:9c:c6:03:af:fa:aa:d3:10:13:80:89:e6:6b:02:c5:ba:8a:
         9b:2d:31:aa:59:77:0f:0f:e3:17:dd:d6:2c:29:96:2a:56:d9:
         38:00:da:61:25:47:da:3c:b7:8a:ed:eb:75:6b:2f:fd:14:ca:
         6b:f5:c9:91:96:17:8f:d9:74:ff:bf:4e:65:79:ec:4c:25:8f:
         f4:cb:3c:56:2a:d1:66:00:76:f3:a2:ee:2f:9a:27:b8:03:78:
         09:6b:93:99:35:5b:5d:84:66:6f:20:88:bb:67:c6:b0:aa:11:
         f1:97:69:1a:56:3a:00:dc:ae:e4:af:f7:63:21:38:d0:fa:f5:
         0d:22:0c:35:71:90:5a:69:47:69:aa:77:62:8d:f1:7b:7a:ee:
         5a:bc:b4:03:db:55:1e:b0:17:37:64:8b:89:63:6a:3c:7e:04:
         dd:4c:ef:be:10:cc:fa:14:41:35:23:4c:f1:08:d9:2d:ca:39:
         52:e5:a4:a6:85:9a:88:ee:97:50:5b:81:bb:4f:b4:3e:0c:78:
         81:a7:96:83:cc:d4:f7:03:91:8e:5c:1e:26:1a:1d:fe:4a:63:
         7b:44:b3:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 22:16:59 2026 by rpki-client