Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F9B2DE125F556B6B6CAD084D5C3035ACBC72F289B96AB0F78691572A0BAB4D43/0/3139302e3130322e33362e302f32322d3234203d3e20323730313533.roa
File:                     3139302e3130322e33362e302f32322d3234203d3e20323730313533.roa (raw, json)
Hash identifier:          yiTV+iHrwVu705lko9E2vFJOvP8R86mXT/1O5J4lsjg=
Subject key identifier:   7D:23:63:4A:6D:03:1F:A2:74:02:0D:49:BE:2B:0A:76:69:80:94:A7
Certificate issuer:       /CN=1ED016B1382217AAC5422CBEACABDFD6FCC3560A
Certificate serial:       40967BBDD3FF26823FFA778055A94EC8E05E074E
Authority key identifier: 1E:D0:16:B1:38:22:17:AA:C5:42:2C:BE:AC:AB:DF:D6:FC:C3:56:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1ED016B1382217AAC5422CBEACABDFD6FCC3560A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F9B2DE125F556B6B6CAD084D5C3035ACBC72F289B96AB0F78691572A0BAB4D43/0/3139302e3130322e33362e302f32322d3234203d3e20323730313533.roa
Signing time:             Tue 19 Aug 2025 15:40:16 +0000
ROA not before:           Tue 19 Aug 2025 15:35:16 +0000
ROA not after:            Tue 18 Aug 2026 15:40:16 +0000
asID:                     270153
IP address blocks:        190.102.36.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F9B2DE125F556B6B6CAD084D5C3035ACBC72F289B96AB0F78691572A0BAB4D43/0/1ED016B1382217AAC5422CBEACABDFD6FCC3560A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F9B2DE125F556B6B6CAD084D5C3035ACBC72F289B96AB0F78691572A0BAB4D43/0/1ED016B1382217AAC5422CBEACABDFD6FCC3560A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1ED016B1382217AAC5422CBEACABDFD6FCC3560A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:96:7b:bd:d3:ff:26:82:3f:fa:77:80:55:a9:4e:c8:e0:5e:07:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ED016B1382217AAC5422CBEACABDFD6FCC3560A
        Validity
            Not Before: Aug 19 15:35:16 2025 GMT
            Not After : Aug 18 15:40:16 2026 GMT
        Subject: CN=7D23634A6D031FA274020D49BE2B0A76698094A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:8a:f1:00:44:28:89:92:9e:1c:1f:f4:ea:05:
                    a6:3e:d8:22:38:8c:51:24:5c:67:12:88:ca:8e:c8:
                    b5:bc:54:05:6a:33:ca:0c:3f:1f:91:1b:d4:7d:5d:
                    16:36:82:7e:8a:df:20:87:e3:5c:04:41:9a:10:7b:
                    e3:63:cd:ae:6e:2a:7b:70:ee:2a:73:57:68:c7:a0:
                    25:19:f7:ff:5f:13:05:bd:4e:93:70:41:de:a2:ba:
                    6f:a3:23:14:b7:e4:95:f0:6b:12:eb:39:d9:f8:0b:
                    7e:3e:a6:63:e1:73:d7:0b:cd:8d:eb:f9:d8:d8:79:
                    8b:d6:ec:b3:2d:f1:b3:0f:f3:03:ad:96:a3:dd:8d:
                    1f:25:62:86:44:92:73:52:9f:7b:0e:ce:ec:88:31:
                    a0:b6:47:41:35:09:6a:a6:7a:88:c0:2d:e0:60:23:
                    b9:6b:9b:f2:59:f2:95:b0:29:74:3d:e5:31:97:9e:
                    22:67:f6:fe:5b:2c:cc:fa:8c:8a:4a:15:c1:cf:d7:
                    fc:8e:27:88:23:cc:ba:1c:71:f8:b9:55:5d:90:71:
                    69:8e:c1:7f:24:27:8e:aa:a9:ee:1f:cc:04:28:93:
                    b8:67:4c:3c:5d:a3:97:0f:55:b0:4a:b0:e7:55:7e:
                    26:59:49:46:9e:ba:82:06:d2:c3:ae:76:48:12:04:
                    b6:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:23:63:4A:6D:03:1F:A2:74:02:0D:49:BE:2B:0A:76:69:80:94:A7
            X509v3 Authority Key Identifier:
                keyid:1E:D0:16:B1:38:22:17:AA:C5:42:2C:BE:AC:AB:DF:D6:FC:C3:56:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F9B2DE125F556B6B6CAD084D5C3035ACBC72F289B96AB0F78691572A0BAB4D43/0/1ED016B1382217AAC5422CBEACABDFD6FCC3560A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1ED016B1382217AAC5422CBEACABDFD6FCC3560A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F9B2DE125F556B6B6CAD084D5C3035ACBC72F289B96AB0F78691572A0BAB4D43/0/3139302e3130322e33362e302f32322d3234203d3e20323730313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.102.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         97:77:2d:ca:6c:cd:9d:b3:2d:8b:99:03:c4:a8:b5:e1:db:42:
         32:3a:0e:62:96:80:85:db:00:2a:eb:48:2b:0c:00:f8:c9:9e:
         36:a7:5d:29:0a:b6:c0:28:de:9a:2f:f3:45:23:68:34:94:ad:
         14:04:fe:ce:fb:d3:05:52:f5:2b:a4:d3:99:0c:9e:a2:ec:5d:
         de:4d:42:12:9e:b1:06:27:4c:4d:8a:51:4d:ee:c2:32:f9:19:
         33:82:dc:b7:18:26:15:ce:07:03:77:fa:83:0c:b9:88:54:2c:
         98:f1:2e:54:00:fa:cd:b3:f0:e7:ec:73:de:f4:01:45:99:3c:
         f8:8a:80:35:9e:ba:82:c3:68:25:20:14:fb:ed:85:32:6b:c9:
         90:83:4d:e7:74:b9:63:d8:b9:a1:fe:e2:a9:76:69:2d:e7:a9:
         5a:22:4c:49:46:06:df:07:5e:8c:15:90:f5:ee:8c:30:c0:b3:
         1d:10:cf:ca:72:81:f5:04:a8:56:49:83:61:a5:c9:1a:d8:8c:
         8c:3c:86:b7:43:7e:a2:44:3e:81:f5:78:d2:e9:7a:ec:c3:83:
         69:c2:44:62:d2:86:8b:86:8e:e5:c7:71:f6:e9:76:2d:6e:78:
         9a:19:d1:30:c6:8e:e7:b5:e1:d0:4d:39:90:ab:3a:77:83:04:
         1e:2b:b7:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:17:34 2025 by rpki-client