Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/3139302e39312e33322e302f32302d3234203d3e203237363531.roa
File:                     3139302e39312e33322e302f32302d3234203d3e203237363531.roa (raw, json)
Hash identifier:          duGbyCI8g4/3dVeUUe/YCdhqPh/+QcvRjw1gcJWf1xc=
Subject key identifier:   D2:82:57:BD:65:6C:9F:EA:36:AD:4C:FE:40:7F:5A:2B:64:AB:95:3B
Certificate issuer:       /CN=6655CE56746240FF392030404FA2DF5D579EA84E
Certificate serial:       02B2106B923A5B4F69D876E37F88580D1A142E5D
Authority key identifier: 66:55:CE:56:74:62:40:FF:39:20:30:40:4F:A2:DF:5D:57:9E:A8:4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6655CE56746240FF392030404FA2DF5D579EA84E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/3139302e39312e33322e302f32302d3234203d3e203237363531.roa
Signing time:             Fri 27 Feb 2026 20:32:14 +0000
ROA not before:           Fri 27 Feb 2026 20:27:14 +0000
ROA not after:            Fri 26 Feb 2027 20:32:14 +0000
asID:                     27651
IP address blocks:        190.91.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/6655CE56746240FF392030404FA2DF5D579EA84E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/6655CE56746240FF392030404FA2DF5D579EA84E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6655CE56746240FF392030404FA2DF5D579EA84E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Mar 2026 14:57:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:b2:10:6b:92:3a:5b:4f:69:d8:76:e3:7f:88:58:0d:1a:14:2e:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6655CE56746240FF392030404FA2DF5D579EA84E
        Validity
            Not Before: Feb 27 20:27:14 2026 GMT
            Not After : Feb 26 20:32:14 2027 GMT
        Subject: CN=D28257BD656C9FEA36AD4CFE407F5A2B64AB953B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fc:52:82:6f:b9:a9:39:04:71:13:1a:66:e5:
                    8f:e9:ef:64:12:73:52:12:09:66:6e:ba:d4:55:24:
                    be:dd:b3:b5:ef:0a:0d:d4:98:52:da:58:ed:28:74:
                    32:86:d1:46:26:64:1c:bc:42:8e:ab:43:39:f6:98:
                    84:45:f2:ad:36:b6:07:9b:46:b6:bf:d8:0b:a4:ff:
                    9b:76:19:af:e6:7b:4d:a3:a9:15:e2:31:87:12:48:
                    3a:8f:36:b3:c5:4f:11:f5:09:12:a6:64:a3:57:92:
                    10:01:cf:14:df:96:5f:af:80:10:4c:23:69:e6:d8:
                    39:62:c0:4e:12:fb:20:b1:4e:a8:46:ae:f9:5c:07:
                    f9:4e:56:85:57:f3:cd:fa:5c:85:19:8e:94:8b:59:
                    c5:32:54:12:b8:65:11:a3:4c:a8:14:8a:00:bc:a3:
                    ab:17:03:93:16:45:31:69:de:e5:43:7c:83:ef:3f:
                    f8:92:df:fc:6a:2b:1c:f8:41:c7:da:07:3b:8d:ab:
                    6b:09:d3:7a:d6:ab:77:b5:98:fb:51:af:e5:f9:e7:
                    dd:51:3f:22:e2:37:60:cc:8f:cd:51:6f:fe:21:72:
                    21:37:8b:ba:10:a3:90:ab:aa:5a:a9:a4:b5:86:99:
                    4d:19:7f:66:f3:db:fc:80:b4:0a:fd:1d:7e:2d:ca:
                    26:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:82:57:BD:65:6C:9F:EA:36:AD:4C:FE:40:7F:5A:2B:64:AB:95:3B
            X509v3 Authority Key Identifier:
                keyid:66:55:CE:56:74:62:40:FF:39:20:30:40:4F:A2:DF:5D:57:9E:A8:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/6655CE56746240FF392030404FA2DF5D579EA84E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6655CE56746240FF392030404FA2DF5D579EA84E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/3139302e39312e33322e302f32302d3234203d3e203237363531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.91.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1d:e6:fe:82:82:d2:c8:e8:a1:70:1b:20:63:d3:c1:21:c7:5b:
         9a:be:0e:f6:c4:3c:0b:82:5a:d0:11:d8:d4:6f:a2:3d:c2:0d:
         a5:0b:72:c6:26:36:c5:d2:57:92:f5:88:21:38:59:2f:3d:72:
         bb:40:ce:0a:8d:c2:b4:a9:f3:ee:bd:78:16:1b:16:ad:26:1e:
         d0:5f:a0:e3:5f:b7:c9:ab:c4:bd:6d:97:be:e2:5b:87:05:85:
         ec:16:0b:ba:1c:2b:06:e4:7b:8c:0c:8f:cd:9d:f0:09:17:c9:
         3a:3e:c4:7e:5b:66:5e:3a:5e:45:84:51:6d:26:db:32:2e:b4:
         c6:96:ab:eb:76:a7:77:f1:64:fc:3e:28:80:09:8f:0b:10:9b:
         6b:24:70:fb:59:09:88:c4:cc:6d:34:ce:90:76:37:fc:9c:a6:
         e6:29:c7:7f:b8:d8:15:93:54:00:c2:ee:6a:13:ca:eb:95:2e:
         ed:9c:b8:5c:55:c2:b1:31:cf:43:83:41:e4:fa:10:d7:b3:1e:
         18:14:79:27:a6:4c:c2:1e:cc:90:d2:b4:a4:b4:50:a9:d2:e2:
         96:d6:25:43:a9:de:c8:50:54:f4:27:2e:f3:50:64:68:a6:4f:
         77:2b:a3:43:0c:51:5a:7d:ba:e0:5f:6f:c9:df:94:92:16:61:
         15:13:3d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:37:09 2026 by rpki-client