Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/3139302e3130322e3132362e302f32342d3234203d3e20323632353839.roa
File:                     3139302e3130322e3132362e302f32342d3234203d3e20323632353839.roa (raw, json)
Hash identifier:          /OeGldhQ7WRLrjJETotSMfqgmAkQhbsR52tscgQGVvU=
Subject key identifier:   5A:A8:73:7B:02:EE:C2:58:DF:A9:BD:AC:F0:16:6D:6A:E1:9E:7A:62
Certificate issuer:       /CN=0F225EF900A741ED0067293A5D9297AE3DA8CE60
Certificate serial:       5A1E7775F0B811F3405EB67F6617D3DE757BA9DC
Authority key identifier: 0F:22:5E:F9:00:A7:41:ED:00:67:29:3A:5D:92:97:AE:3D:A8:CE:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/3139302e3130322e3132362e302f32342d3234203d3e20323632353839.roa
Signing time:             Sat 29 Aug 2026 03:00:03 +0000
ROA not before:           Sat 29 Aug 2026 02:55:03 +0000
ROA not after:            Sat 28 Aug 2027 03:00:03 +0000
asID:                     262589
IP address blocks:        190.102.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 09:25:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:1e:77:75:f0:b8:11:f3:40:5e:b6:7f:66:17:d3:de:75:7b:a9:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F225EF900A741ED0067293A5D9297AE3DA8CE60
        Validity
            Not Before: Aug 29 02:55:03 2026 GMT
            Not After : Aug 28 03:00:03 2027 GMT
        Subject: CN=5AA8737B02EEC258DFA9BDACF0166D6AE19E7A62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8b:36:3d:60:85:e7:fc:e8:7e:cb:3b:5f:b5:
                    16:d2:c5:12:3e:5b:ab:b2:0d:dd:ed:e2:17:c9:c4:
                    e5:a5:ca:b9:a8:8b:32:a0:99:94:fd:d4:ea:e5:02:
                    43:66:2c:9c:9b:97:26:56:40:6c:35:3c:01:ae:62:
                    61:59:8e:a9:ba:32:1b:c7:24:54:4f:ab:1e:7b:96:
                    e9:a8:80:fc:f7:58:9f:a6:ca:94:1e:04:8c:5e:5a:
                    e0:b3:18:0b:43:fa:2f:d6:c4:6a:7f:a2:e8:0e:0f:
                    18:b6:4e:c3:58:c6:09:51:96:b1:a5:3f:08:44:a1:
                    bc:cd:c8:d3:be:84:c3:01:f3:9e:47:15:65:0a:6b:
                    b3:06:8c:02:09:fe:5c:23:e2:b4:0a:1c:b1:24:cc:
                    e3:d1:c8:cf:c6:47:24:74:59:bd:fe:70:d2:8c:06:
                    d9:fb:af:76:5d:a8:58:5c:8a:09:0f:15:fc:a9:80:
                    9b:d0:fd:66:87:96:fe:0c:9a:ed:11:17:19:74:f3:
                    8e:17:a8:cd:51:a1:ea:63:a9:91:2d:30:2f:1c:03:
                    57:9d:b9:b0:cc:dc:83:db:17:44:35:1b:fc:61:79:
                    3a:20:41:0f:ec:ef:a8:71:80:04:fe:23:78:a8:9c:
                    81:6c:b6:4e:65:ef:7a:96:e3:3d:ce:de:6a:c4:aa:
                    26:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:A8:73:7B:02:EE:C2:58:DF:A9:BD:AC:F0:16:6D:6A:E1:9E:7A:62
            X509v3 Authority Key Identifier:
                keyid:0F:22:5E:F9:00:A7:41:ED:00:67:29:3A:5D:92:97:AE:3D:A8:CE:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/3139302e3130322e3132362e302f32342d3234203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.102.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:81:f9:d1:dd:16:d1:91:5a:61:85:1a:eb:e9:38:8b:aa:c5:
         66:40:42:11:b7:b5:cb:18:46:6d:9b:c3:26:9f:5b:89:f6:50:
         bb:c2:18:00:7a:27:6d:e0:f4:72:ac:ea:68:4d:7a:8f:a7:6b:
         af:46:9a:ef:6f:28:a8:61:4e:71:0d:88:20:45:8d:ce:bf:f2:
         89:6a:8f:d8:0d:cc:c7:c8:29:71:7f:54:18:db:79:79:12:01:
         69:7a:2a:23:19:93:0c:87:42:cf:cf:f3:ae:5d:7d:d2:5f:cc:
         67:78:fe:a4:1c:05:4b:e9:85:b4:9d:8e:aa:ea:30:00:1a:3a:
         13:3c:d0:cb:6b:a2:fc:26:17:11:8f:06:08:75:33:1f:6b:38:
         64:94:0d:53:1c:ab:81:c2:b5:eb:7d:0c:9a:4f:b0:17:98:52:
         8a:88:75:13:d0:27:5d:e2:9e:87:86:cf:03:d5:e8:c1:9c:06:
         ad:5a:11:63:58:2c:24:39:aa:c3:3b:f1:8f:bd:39:d5:08:01:
         95:4a:38:af:d1:ee:34:ee:02:0e:1f:f4:aa:89:a5:cc:00:d6:
         27:6e:ec:b9:5a:bd:4f:7d:ad:a2:e3:cc:c5:c5:0a:5b:22:93:
         87:58:4c:14:3d:f4:90:08:07:d5:be:60:6b:ba:ec:a3:74:8a:
         92:70:7c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 23:53:58 2026 by rpki-client