Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F9B2DE125F556B6B6CAD084D5C3035ACBC72F289B96AB0F78691572A0BAB4D43/0/3139302e3130322e33362e302f32322d3234203d3e20323730313533.roa
File:                     3139302e3130322e33362e302f32322d3234203d3e20323730313533.roa (raw, json)
Hash identifier:          Tw5vCTnbWrDgD1VaqkD7OcAt+09T2tn2Bv2p5i1Vc04=
Subject key identifier:   56:96:56:06:B0:EA:D4:38:4C:C8:2F:03:96:B6:A5:8B:7B:2A:49:3E
Certificate issuer:       /CN=1ED016B1382217AAC5422CBEACABDFD6FCC3560A
Certificate serial:       57B20B178E77A223AF7532BE897923057CCD9C18
Authority key identifier: 1E:D0:16:B1:38:22:17:AA:C5:42:2C:BE:AC:AB:DF:D6:FC:C3:56:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1ED016B1382217AAC5422CBEACABDFD6FCC3560A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F9B2DE125F556B6B6CAD084D5C3035ACBC72F289B96AB0F78691572A0BAB4D43/0/3139302e3130322e33362e302f32322d3234203d3e20323730313533.roa
Signing time:             Tue 21 Jul 2026 16:15:16 +0000
ROA not before:           Tue 21 Jul 2026 16:10:16 +0000
ROA not after:            Tue 20 Jul 2027 16:15:16 +0000
asID:                     270153
IP address blocks:        190.102.36.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F9B2DE125F556B6B6CAD084D5C3035ACBC72F289B96AB0F78691572A0BAB4D43/0/1ED016B1382217AAC5422CBEACABDFD6FCC3560A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F9B2DE125F556B6B6CAD084D5C3035ACBC72F289B96AB0F78691572A0BAB4D43/0/1ED016B1382217AAC5422CBEACABDFD6FCC3560A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1ED016B1382217AAC5422CBEACABDFD6FCC3560A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:b2:0b:17:8e:77:a2:23:af:75:32:be:89:79:23:05:7c:cd:9c:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ED016B1382217AAC5422CBEACABDFD6FCC3560A
        Validity
            Not Before: Jul 21 16:10:16 2026 GMT
            Not After : Jul 20 16:15:16 2027 GMT
        Subject: CN=56965606B0EAD4384CC82F0396B6A58B7B2A493E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:bc:6e:29:61:f4:b2:a6:ab:2f:8b:8a:b5:db:
                    0a:43:56:62:ed:49:4a:64:47:2e:28:99:6d:1c:59:
                    f3:6f:cd:62:6f:aa:87:23:5e:23:15:3d:9a:fc:12:
                    78:ae:bc:01:bf:cc:e8:ea:fd:94:66:5f:c7:16:1a:
                    9a:86:b3:de:c2:16:e1:c3:6f:99:e4:be:a1:a9:f4:
                    71:da:dc:d8:0a:97:cc:cf:7a:a5:fc:de:62:67:72:
                    4b:31:a0:86:13:db:8b:e9:ef:97:86:a1:5e:45:ba:
                    30:53:88:db:28:0c:c9:ef:47:64:54:61:4c:5f:12:
                    a1:9b:d4:1b:38:7a:5d:01:4e:38:0e:11:16:80:a3:
                    2e:9e:23:f3:1d:3e:4a:39:5b:be:b1:58:3e:33:5a:
                    5b:0a:1e:62:7d:f8:5e:a8:0b:42:a9:31:df:fd:d6:
                    3f:82:1a:12:51:4c:f9:bb:ea:9e:3e:6d:31:e8:8b:
                    fc:e8:5c:79:0d:30:86:25:6f:f2:fa:66:97:5c:66:
                    02:76:41:41:2c:0a:ec:91:a2:7d:05:31:43:8d:24:
                    71:00:39:f8:44:54:e8:8e:bf:f9:61:9d:44:84:8b:
                    da:9a:b8:f1:f6:d0:25:0e:ae:9a:dc:de:ef:14:ec:
                    6e:0a:bd:dd:a2:14:e0:f9:42:d9:88:38:e9:bc:ca:
                    b1:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:96:56:06:B0:EA:D4:38:4C:C8:2F:03:96:B6:A5:8B:7B:2A:49:3E
            X509v3 Authority Key Identifier:
                keyid:1E:D0:16:B1:38:22:17:AA:C5:42:2C:BE:AC:AB:DF:D6:FC:C3:56:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F9B2DE125F556B6B6CAD084D5C3035ACBC72F289B96AB0F78691572A0BAB4D43/0/1ED016B1382217AAC5422CBEACABDFD6FCC3560A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1ED016B1382217AAC5422CBEACABDFD6FCC3560A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F9B2DE125F556B6B6CAD084D5C3035ACBC72F289B96AB0F78691572A0BAB4D43/0/3139302e3130322e33362e302f32322d3234203d3e20323730313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.102.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:f2:71:1c:33:43:83:b2:ee:24:1a:7a:5c:cd:50:48:a9:e4:
         a1:4d:04:45:0e:13:d7:fa:21:fd:a9:8a:e9:22:77:67:c9:70:
         eb:20:37:f1:e8:9e:64:e2:2b:7e:29:67:75:68:b7:c0:a6:b5:
         dc:a6:ab:2f:07:73:d4:11:4f:d5:09:b7:a4:ec:4c:54:36:85:
         e1:b0:32:76:16:59:b4:15:6c:4a:b8:1f:d5:c5:8d:70:d2:2a:
         ad:ec:0a:88:c8:24:d2:da:2a:f7:b4:89:d6:da:70:8d:f2:a3:
         cb:ca:84:81:3c:78:00:e8:5b:53:c1:9f:95:f2:35:80:26:da:
         9b:f1:9c:24:df:f8:fb:8b:a1:2f:ba:93:f3:d9:cf:1c:af:7e:
         5f:ee:ca:1b:52:47:ad:9d:bd:41:29:ef:d8:2f:a8:44:8c:f2:
         d8:ca:56:c4:f0:34:31:fc:ff:1e:3b:b4:57:83:e5:46:9a:4c:
         c6:fd:48:1a:6c:c9:f7:8b:88:d0:f5:70:55:64:3a:12:31:75:
         88:47:62:6c:51:53:f0:54:22:73:0b:5a:6e:a1:77:ba:6a:5d:
         cf:b1:d8:b7:48:a3:3d:b0:bb:ee:d5:ad:87:fc:dc:2d:52:67:
         30:36:f0:4c:f0:7c:46:f9:03:d3:7b:40:43:8a:99:01:12:0e:
         b0:69:3d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:46:27 2026 by rpki-client