Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02F2D60F703B618F42E2F49241A79FAF5D9E60C5E1C06E0C6B125E1644F0544F/0/3139302e3131322e3138362e302f32342d3234203d3e20323733393132.roa
File:                     3139302e3131322e3138362e302f32342d3234203d3e20323733393132.roa (raw, json)
Hash identifier:          Gv4G2J47fdCieCpa5brs8MnMskYGViDSPNfPlH946mg=
Subject key identifier:   0F:32:F5:18:97:00:CA:B6:AB:3B:38:8B:A7:09:20:71:0A:DE:56:23
Certificate issuer:       /CN=92D39AD5A5179131EF8621A62156503CF92DBABD
Certificate serial:       0824C16C6D8F071B047930419C7C5DB70E08674A
Authority key identifier: 92:D3:9A:D5:A5:17:91:31:EF:86:21:A6:21:56:50:3C:F9:2D:BA:BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92D39AD5A5179131EF8621A62156503CF92DBABD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02F2D60F703B618F42E2F49241A79FAF5D9E60C5E1C06E0C6B125E1644F0544F/0/3139302e3131322e3138362e302f32342d3234203d3e20323733393132.roa
Signing time:             Wed 10 Jun 2026 17:20:01 +0000
ROA not before:           Wed 10 Jun 2026 17:15:01 +0000
ROA not after:            Wed 09 Jun 2027 17:20:01 +0000
asID:                     273912
IP address blocks:        190.112.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/02F2D60F703B618F42E2F49241A79FAF5D9E60C5E1C06E0C6B125E1644F0544F/0/92D39AD5A5179131EF8621A62156503CF92DBABD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/02F2D60F703B618F42E2F49241A79FAF5D9E60C5E1C06E0C6B125E1644F0544F/0/92D39AD5A5179131EF8621A62156503CF92DBABD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92D39AD5A5179131EF8621A62156503CF92DBABD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 15:27:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:24:c1:6c:6d:8f:07:1b:04:79:30:41:9c:7c:5d:b7:0e:08:67:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92D39AD5A5179131EF8621A62156503CF92DBABD
        Validity
            Not Before: Jun 10 17:15:01 2026 GMT
            Not After : Jun  9 17:20:01 2027 GMT
        Subject: CN=0F32F5189700CAB6AB3B388BA70920710ADE5623
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:dc:26:3f:31:8b:c1:64:79:18:af:1b:c4:95:
                    12:ff:5f:b4:54:76:a2:f8:14:32:a3:ac:f7:88:43:
                    cf:ba:a1:b8:d5:86:8b:d0:fc:fd:be:bb:ff:75:5d:
                    86:69:6f:f6:64:ba:2c:7f:76:b0:98:b6:d9:01:8b:
                    66:35:75:6a:d2:da:d4:78:49:e8:36:26:0c:6d:68:
                    39:99:c1:a8:49:a0:e0:5f:6c:bb:3f:cf:98:67:cd:
                    29:90:01:ab:eb:39:b3:ac:24:80:69:ca:a6:95:9a:
                    db:2f:0e:2c:bd:c7:8e:96:9e:9c:a2:66:d7:f0:29:
                    b4:c0:ee:5c:7c:1f:2e:f2:fd:f7:a5:e3:95:a8:6f:
                    f0:4d:8d:ce:1c:b4:cf:65:7b:2d:87:51:0a:cb:49:
                    38:28:94:d2:c2:8f:96:ac:96:3c:af:cc:10:62:4c:
                    53:e6:8e:92:bf:9d:6f:e2:a6:30:a9:82:f7:e7:83:
                    5a:86:7c:3a:0d:50:5d:3f:4e:c1:d1:a2:f7:d5:02:
                    69:e0:a1:fc:d0:e8:71:0d:e8:12:53:15:7b:3c:78:
                    cc:60:bb:67:d5:de:ac:d9:6b:9f:b7:f5:7b:bb:64:
                    79:eb:be:c9:be:db:dd:60:31:03:46:33:ad:64:52:
                    a9:7f:45:7e:d5:22:40:18:35:ed:87:a7:48:03:ba:
                    ec:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:32:F5:18:97:00:CA:B6:AB:3B:38:8B:A7:09:20:71:0A:DE:56:23
            X509v3 Authority Key Identifier:
                keyid:92:D3:9A:D5:A5:17:91:31:EF:86:21:A6:21:56:50:3C:F9:2D:BA:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02F2D60F703B618F42E2F49241A79FAF5D9E60C5E1C06E0C6B125E1644F0544F/0/92D39AD5A5179131EF8621A62156503CF92DBABD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92D39AD5A5179131EF8621A62156503CF92DBABD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02F2D60F703B618F42E2F49241A79FAF5D9E60C5E1C06E0C6B125E1644F0544F/0/3139302e3131322e3138362e302f32342d3234203d3e20323733393132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:eb:47:1d:8d:8c:6b:95:18:6b:12:10:3b:cb:65:79:a4:f5:
         26:35:10:fe:3c:13:c5:84:08:6f:10:1c:de:ab:bb:f7:39:14:
         1d:66:b1:59:f6:5c:e9:66:9a:ae:89:a3:b0:9c:65:24:2a:e9:
         12:a2:05:92:0c:e0:f7:ed:74:01:98:6a:18:f9:00:fe:a2:f3:
         1d:e8:e0:d7:49:48:af:fc:71:af:2b:0b:1b:38:e2:5d:a8:64:
         08:ee:42:37:2d:a6:31:20:71:70:23:99:f3:8f:3e:bd:19:45:
         10:50:a6:bd:ec:92:80:89:30:7e:38:67:ac:9d:97:0c:da:72:
         20:d8:25:fc:bf:f7:c0:30:c0:f5:9d:b1:52:8c:c5:55:8e:60:
         a0:74:08:39:52:ba:26:11:3e:f6:46:78:73:8b:75:e6:cb:fd:
         0d:e7:fe:1d:3a:1f:11:05:8a:af:5e:a9:64:08:3d:3b:32:88:
         fc:f2:c2:de:ef:82:31:8d:14:72:b0:4a:0f:83:ba:e0:ab:8a:
         2c:03:3f:53:eb:84:dc:e3:ab:e2:49:54:3a:aa:5b:5f:2a:e3:
         22:73:a8:78:e5:4f:77:04:a0:39:cc:9e:d0:7d:49:89:b0:5c:
         39:c3:8f:91:e4:16:09:e2:f1:60:b3:d9:f3:80:2e:b3:3e:ef:
         46:1d:77:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:22:29 2026 by rpki-client