Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/3139302e39312e3139362e302f32322d3234203d3e203237363531.roa
File:                     3139302e39312e3139362e302f32322d3234203d3e203237363531.roa (raw, json)
Hash identifier:          V7jkNNDz9AmP9vdRItijdtU4p80iGhaDKSeC4L0oyx0=
Subject key identifier:   64:74:A1:A0:6F:BB:F2:EE:AD:CF:CA:19:FD:06:3A:AF:89:4C:9F:0B
Certificate issuer:       /CN=6655CE56746240FF392030404FA2DF5D579EA84E
Certificate serial:       3812D34D317D3EC343FBDF618875B7DD5A2EB249
Authority key identifier: 66:55:CE:56:74:62:40:FF:39:20:30:40:4F:A2:DF:5D:57:9E:A8:4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6655CE56746240FF392030404FA2DF5D579EA84E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/3139302e39312e3139362e302f32322d3234203d3e203237363531.roa
Signing time:             Fri 27 Feb 2026 20:32:14 +0000
ROA not before:           Fri 27 Feb 2026 20:27:14 +0000
ROA not after:            Fri 26 Feb 2027 20:32:14 +0000
asID:                     27651
IP address blocks:        190.91.196.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/6655CE56746240FF392030404FA2DF5D579EA84E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/6655CE56746240FF392030404FA2DF5D579EA84E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6655CE56746240FF392030404FA2DF5D579EA84E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Mar 2026 14:57:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:12:d3:4d:31:7d:3e:c3:43:fb:df:61:88:75:b7:dd:5a:2e:b2:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6655CE56746240FF392030404FA2DF5D579EA84E
        Validity
            Not Before: Feb 27 20:27:14 2026 GMT
            Not After : Feb 26 20:32:14 2027 GMT
        Subject: CN=6474A1A06FBBF2EEADCFCA19FD063AAF894C9F0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:56:2f:cf:58:c2:20:78:c2:b4:fd:43:c4:96:
                    f9:c9:07:af:7e:d2:f0:e1:32:3a:93:56:21:80:e1:
                    4f:85:a4:8c:20:ab:a7:2b:19:e5:71:5f:60:2f:58:
                    16:fb:d1:16:eb:37:a5:04:de:e7:64:37:22:3c:23:
                    f5:e5:df:c5:9e:16:5f:04:95:88:4e:09:c1:27:1e:
                    84:b3:24:d5:a2:f4:4f:7e:37:bc:bd:b7:03:f5:e3:
                    9c:dc:09:17:fa:95:ac:26:8f:0b:4b:7f:c8:6e:2b:
                    92:fb:2c:a8:a0:14:05:ba:77:66:08:8e:1d:1b:56:
                    c7:46:ac:6c:cd:5b:57:ce:ec:34:2b:f1:d8:d9:ab:
                    cf:41:58:5a:a4:db:89:2f:70:3b:cb:da:bd:9c:b4:
                    0d:c6:9c:7b:6e:ef:ab:83:19:0e:8c:ef:9f:43:65:
                    62:03:31:e4:02:80:be:19:bf:b1:ad:c8:00:7a:aa:
                    77:00:ca:02:7c:4a:be:bf:52:eb:19:4f:73:31:43:
                    62:10:8b:c1:db:37:ba:d4:1c:d7:9e:6d:ed:05:65:
                    65:06:b8:85:88:e9:c9:08:19:cc:d5:d0:ba:7d:fb:
                    0d:1f:16:76:ea:50:02:ec:0f:df:e2:8c:80:4b:3e:
                    aa:42:91:93:f3:b0:1a:27:46:30:4a:00:a0:77:49:
                    c3:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:74:A1:A0:6F:BB:F2:EE:AD:CF:CA:19:FD:06:3A:AF:89:4C:9F:0B
            X509v3 Authority Key Identifier:
                keyid:66:55:CE:56:74:62:40:FF:39:20:30:40:4F:A2:DF:5D:57:9E:A8:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/6655CE56746240FF392030404FA2DF5D579EA84E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6655CE56746240FF392030404FA2DF5D579EA84E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/3139302e39312e3139362e302f32322d3234203d3e203237363531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.91.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a4:21:3d:5c:cd:4f:e7:66:73:62:05:b0:17:4c:10:52:c3:dc:
         c4:c6:9d:1f:23:b7:2e:91:64:23:92:44:7f:f8:c2:01:98:04:
         bf:d1:f7:79:38:a6:f0:e2:6f:43:d6:15:8b:95:4c:f1:0f:8d:
         61:9a:0b:6d:94:2c:1c:15:02:ec:00:97:58:ab:d8:c4:3a:5b:
         b1:7d:df:84:c9:a6:96:9e:aa:40:d0:48:38:d7:83:7e:03:f7:
         b3:9f:31:e4:03:a4:97:c8:fd:d2:05:a2:96:c0:a0:e2:91:4b:
         95:d1:70:92:0e:ec:3a:a9:be:a3:b8:2a:18:b3:57:2c:58:44:
         5b:aa:7e:38:13:0c:fe:f1:4d:ec:3d:e2:66:07:71:4a:bf:e2:
         d0:50:f6:87:26:dd:47:04:2b:38:49:13:15:1a:73:83:45:85:
         f3:aa:16:66:c1:1b:52:e9:f0:c5:f2:91:34:a1:47:a9:40:bd:
         fc:37:a0:42:84:35:11:59:e4:09:c4:47:86:f7:9c:cc:ea:6f:
         f9:4a:6a:8c:8a:4a:45:67:6c:c7:88:51:3f:23:c9:76:e1:b1:
         a9:78:cd:02:f4:27:5e:f1:27:7e:bc:28:5a:46:3a:4b:59:8e:
         40:59:cb:55:ad:34:2b:08:1a:3d:5c:12:bd:53:e0:51:54:b8:
         79:05:d7:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:58:20 2026 by rpki-client