Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/174E0592B6FE13D34009C97E6AB4F6E129B52B23FC0D4590E21563D8D2FD5AE4/0/3139302e38392e3137352e302f32342d3234203d3e20323732303339.roa
File:                     3139302e38392e3137352e302f32342d3234203d3e20323732303339.roa (raw, json)
Hash identifier:          ALeasoFyVxuWcVXuUFbWxXcn31gBZ+DWd7nSn74wJjY=
Subject key identifier:   01:FF:F1:EB:31:C6:9A:5C:F7:46:D4:A9:5B:C5:7F:E1:F4:0B:63:9E
Certificate issuer:       /CN=10375D175F51B222AA826C424C2717803A68C991
Certificate serial:       7CDF120CAD4EEF19496E9B4C032FBD79126320D5
Authority key identifier: 10:37:5D:17:5F:51:B2:22:AA:82:6C:42:4C:27:17:80:3A:68:C9:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/10375D175F51B222AA826C424C2717803A68C991.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/174E0592B6FE13D34009C97E6AB4F6E129B52B23FC0D4590E21563D8D2FD5AE4/0/3139302e38392e3137352e302f32342d3234203d3e20323732303339.roa
Signing time:             Tue 06 Jan 2026 20:53:42 +0000
ROA not before:           Tue 06 Jan 2026 20:48:42 +0000
ROA not after:            Tue 05 Jan 2027 20:53:42 +0000
asID:                     272039
IP address blocks:        190.89.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/174E0592B6FE13D34009C97E6AB4F6E129B52B23FC0D4590E21563D8D2FD5AE4/0/10375D175F51B222AA826C424C2717803A68C991.crl
                          rsync://repository.lacnic.net/rpki/lacnic/174E0592B6FE13D34009C97E6AB4F6E129B52B23FC0D4590E21563D8D2FD5AE4/0/10375D175F51B222AA826C424C2717803A68C991.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/10375D175F51B222AA826C424C2717803A68C991.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Mar 2026 20:41:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:df:12:0c:ad:4e:ef:19:49:6e:9b:4c:03:2f:bd:79:12:63:20:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10375D175F51B222AA826C424C2717803A68C991
        Validity
            Not Before: Jan  6 20:48:42 2026 GMT
            Not After : Jan  5 20:53:42 2027 GMT
        Subject: CN=01FFF1EB31C69A5CF746D4A95BC57FE1F40B639E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:95:ce:5a:63:cf:08:93:d0:72:19:33:b8:fb:
                    d4:d8:39:d6:df:fc:04:29:81:7a:d1:74:22:a2:c0:
                    a1:84:7d:10:ea:77:e9:31:8c:10:fb:f2:c7:72:02:
                    d5:ca:89:01:2a:1b:13:f3:53:9f:29:41:64:12:e3:
                    46:df:19:36:d2:a0:00:75:00:ca:52:c3:31:30:9d:
                    31:10:1d:9f:df:6b:ba:15:0b:53:2b:36:fd:fc:64:
                    2c:5e:5f:a3:8c:21:1b:dd:2a:f8:06:a2:53:38:a3:
                    c3:7c:12:e8:49:d5:80:66:12:bf:1a:47:e3:b0:e4:
                    fc:88:10:b9:59:8b:06:57:98:f9:73:f3:05:d1:6a:
                    17:d7:71:89:f7:8a:ea:18:dc:f1:65:c7:61:a5:e2:
                    f4:5d:35:48:3c:b2:76:11:cb:bb:ce:bf:18:6d:a7:
                    1e:26:9b:30:90:1f:46:7f:64:0b:f7:d1:fa:24:9e:
                    80:87:25:aa:8f:cf:a1:fc:18:eb:c2:59:bb:63:a6:
                    53:36:d8:fb:4f:02:bd:88:56:53:51:d1:9b:81:e4:
                    27:47:f0:cc:e3:ee:03:03:f0:2b:6b:1a:6b:97:0c:
                    2a:08:19:d5:f3:33:c6:9a:9c:8d:d3:4a:97:60:19:
                    dc:f0:07:3d:c7:41:3f:9b:a7:77:67:e3:ee:47:f5:
                    fe:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:FF:F1:EB:31:C6:9A:5C:F7:46:D4:A9:5B:C5:7F:E1:F4:0B:63:9E
            X509v3 Authority Key Identifier:
                keyid:10:37:5D:17:5F:51:B2:22:AA:82:6C:42:4C:27:17:80:3A:68:C9:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/174E0592B6FE13D34009C97E6AB4F6E129B52B23FC0D4590E21563D8D2FD5AE4/0/10375D175F51B222AA826C424C2717803A68C991.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/10375D175F51B222AA826C424C2717803A68C991.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/174E0592B6FE13D34009C97E6AB4F6E129B52B23FC0D4590E21563D8D2FD5AE4/0/3139302e38392e3137352e302f32342d3234203d3e20323732303339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:f2:e0:b3:12:c2:54:14:21:fd:e2:e6:b2:f6:86:a0:e5:b0:
         e0:27:be:85:c3:e3:dd:88:dd:31:18:0e:89:c8:3d:17:35:d7:
         af:66:8d:cb:29:8d:1c:0c:50:68:67:a2:f1:1c:aa:90:6e:48:
         7d:8a:05:fb:77:9d:9b:37:ed:89:06:c5:56:82:50:e5:a2:43:
         8c:80:ef:c0:7b:9c:3d:5d:91:3b:4c:84:f1:a2:62:68:cb:77:
         ba:d6:27:ad:fa:6d:2c:4a:e8:75:e3:0b:2e:79:a8:8e:78:17:
         27:3c:ac:04:bc:0f:94:13:6c:1f:c7:10:cf:06:a9:aa:82:20:
         ff:0a:c9:2e:87:5f:43:ce:2c:54:d5:85:59:e8:ab:69:cd:1a:
         45:45:07:a5:94:9c:47:9b:91:0f:62:66:06:0d:73:7c:81:99:
         33:0d:87:04:29:72:74:85:75:c9:95:6c:37:1e:09:fc:bb:aa:
         c9:a8:d4:a1:3c:67:1a:8a:8d:59:26:1d:e5:b2:3d:94:42:34:
         5f:aa:60:8b:ff:f3:0f:9d:33:a9:10:de:9f:43:0f:95:9d:38:
         29:24:47:90:92:ee:86:4d:9f:a5:bf:af:95:f5:b8:13:72:ae:
         e8:a9:f4:54:62:2e:86:81:48:09:8c:d3:a7:c7:46:af:b6:e7:
         e3:36:6d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:29:59 2026 by rpki-client