Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1489C7202206D3D9CB5B29F7359566384EE9483AC7ED34FAE48CD02B62A06FAE/0/3139302e3135312e3133342e302f32342d3234203d3e20323732313037.roa
File:                     3139302e3135312e3133342e302f32342d3234203d3e20323732313037.roa (raw, json)
Hash identifier:          gji1ZvKbc76+XXz2XU9Sb2xywtAx88O/gWlC0Xh7+20=
Subject key identifier:   1C:AA:21:BD:40:2A:5B:E4:84:8D:1F:95:12:59:1C:33:AE:6C:D7:8D
Certificate issuer:       /CN=524C8468BBEEA468708713BB02C909C11A4A4F25
Certificate serial:       35108276F192E692B7A139D021063778108527E5
Authority key identifier: 52:4C:84:68:BB:EE:A4:68:70:87:13:BB:02:C9:09:C1:1A:4A:4F:25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/524C8468BBEEA468708713BB02C909C11A4A4F25.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1489C7202206D3D9CB5B29F7359566384EE9483AC7ED34FAE48CD02B62A06FAE/0/3139302e3135312e3133342e302f32342d3234203d3e20323732313037.roa
Signing time:             Wed 15 Apr 2026 17:38:56 +0000
ROA not before:           Wed 15 Apr 2026 17:33:56 +0000
ROA not after:            Wed 14 Apr 2027 17:38:56 +0000
asID:                     272107
IP address blocks:        190.151.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1489C7202206D3D9CB5B29F7359566384EE9483AC7ED34FAE48CD02B62A06FAE/0/524C8468BBEEA468708713BB02C909C11A4A4F25.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1489C7202206D3D9CB5B29F7359566384EE9483AC7ED34FAE48CD02B62A06FAE/0/524C8468BBEEA468708713BB02C909C11A4A4F25.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/524C8468BBEEA468708713BB02C909C11A4A4F25.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 04:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:10:82:76:f1:92:e6:92:b7:a1:39:d0:21:06:37:78:10:85:27:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=524C8468BBEEA468708713BB02C909C11A4A4F25
        Validity
            Not Before: Apr 15 17:33:56 2026 GMT
            Not After : Apr 14 17:38:56 2027 GMT
        Subject: CN=1CAA21BD402A5BE4848D1F9512591C33AE6CD78D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f0:6a:f2:3d:68:ec:bb:6a:d5:34:63:75:3e:
                    26:fc:5e:21:5e:0c:02:33:a7:d2:dc:48:69:cc:a3:
                    ac:5e:17:85:e2:b7:b9:78:99:26:8d:53:f8:16:d0:
                    a3:41:28:9e:bc:1b:18:c8:4f:af:4f:e7:2e:00:15:
                    8e:c4:88:39:f4:6e:d0:52:e4:8e:72:54:44:fe:a7:
                    c4:f2:7d:2e:3a:07:5b:1e:ab:a0:4e:28:c7:ad:4a:
                    09:64:34:e8:ad:fa:99:2e:12:28:bc:2c:6c:01:13:
                    8b:a5:ef:34:bd:68:25:92:49:52:95:f2:1d:c1:dc:
                    88:c6:43:80:9c:8c:80:e2:97:ae:df:17:85:90:f2:
                    d1:6c:b5:7e:84:2b:b4:12:0c:5c:51:3a:be:88:7d:
                    59:b3:24:c6:74:44:51:6b:1e:ce:d0:22:fb:13:3b:
                    d0:be:4d:ca:45:f1:4d:6b:c8:37:d3:2a:8b:63:f1:
                    b8:83:67:58:1c:16:07:2a:fa:54:43:1f:db:bf:4a:
                    83:d4:0e:cf:01:48:4f:69:1c:cb:1b:aa:6f:f8:56:
                    40:9e:23:25:af:99:10:c4:a0:0e:32:31:ff:95:a7:
                    5d:aa:cd:74:85:3d:f1:69:db:a5:e3:b5:cb:c6:91:
                    90:f8:48:65:ee:42:16:60:9d:a7:47:22:50:ed:70:
                    b8:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:AA:21:BD:40:2A:5B:E4:84:8D:1F:95:12:59:1C:33:AE:6C:D7:8D
            X509v3 Authority Key Identifier:
                keyid:52:4C:84:68:BB:EE:A4:68:70:87:13:BB:02:C9:09:C1:1A:4A:4F:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1489C7202206D3D9CB5B29F7359566384EE9483AC7ED34FAE48CD02B62A06FAE/0/524C8468BBEEA468708713BB02C909C11A4A4F25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/524C8468BBEEA468708713BB02C909C11A4A4F25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1489C7202206D3D9CB5B29F7359566384EE9483AC7ED34FAE48CD02B62A06FAE/0/3139302e3135312e3133342e302f32342d3234203d3e20323732313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.151.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:39:09:7d:08:82:cd:21:ce:cb:66:07:cd:a1:f2:04:51:1e:
         9a:1b:65:34:6f:51:56:f4:ff:c8:4b:a3:c4:6f:63:dd:cd:88:
         ec:4a:25:6a:4b:a3:b6:dc:e2:6d:d7:d5:1c:92:ef:27:f0:ea:
         cb:3e:5c:6a:33:7c:75:39:fb:b5:78:34:74:71:c5:52:a0:ec:
         8b:80:6d:c8:81:7b:3e:9e:12:e8:89:6d:ad:99:3a:83:63:7f:
         28:e5:1f:9c:33:41:8d:37:66:ae:b0:4e:ca:aa:c1:b8:8e:5b:
         e1:bb:83:3e:3b:ad:7e:ae:47:74:fa:5a:30:6a:f1:ed:e4:23:
         94:1c:25:7a:d8:b4:98:85:eb:0b:35:42:18:82:4e:55:a7:eb:
         07:a9:68:68:67:1f:6b:e1:6e:2a:79:9b:1f:ae:41:44:a2:46:
         f5:dd:30:a9:cb:62:07:a7:56:48:f5:79:7f:0b:bf:61:dd:bd:
         33:d7:2e:fc:87:f3:2a:b9:4e:10:a8:d6:74:6b:8b:30:8f:7e:
         2a:13:9d:23:c3:fc:2e:3d:af:89:f8:c3:ef:25:a5:f6:3a:d6:
         91:d6:d1:ae:a1:53:05:9d:d6:83:09:1a:db:0d:2b:d0:27:4a:
         62:fc:4f:d8:3a:ee:e3:5d:4f:b1:79:a9:8a:8b:66:cd:5a:1b:
         e3:1a:ee:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:10:02 2026 by rpki-client