Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3139302e3133312e3231362e302f32322d3234203d3e20323632313931.roa
File:                     3139302e3133312e3231362e302f32322d3234203d3e20323632313931.roa (raw, json)
Hash identifier:          x+2IXkrubbkY1kS2NQK6pnov/oKFFRzDvqDPw6rGVyo=
Subject key identifier:   18:10:85:D6:5C:FE:2A:54:04:77:85:ED:6B:57:6C:B5:BB:A0:EA:B6
Certificate issuer:       /CN=F8384152DEE38D62B98700A59634A5B9FAF406B3
Certificate serial:       3096E06B4FA7410CF8C0EAC65644A535F96588AE
Authority key identifier: F8:38:41:52:DE:E3:8D:62:B9:87:00:A5:96:34:A5:B9:FA:F4:06:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3139302e3133312e3231362e302f32322d3234203d3e20323632313931.roa
Signing time:             Fri 30 Jan 2026 06:41:19 +0000
ROA not before:           Fri 30 Jan 2026 06:36:19 +0000
ROA not after:            Fri 29 Jan 2027 06:41:19 +0000
asID:                     262191
IP address blocks:        190.131.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:96:e0:6b:4f:a7:41:0c:f8:c0:ea:c6:56:44:a5:35:f9:65:88:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8384152DEE38D62B98700A59634A5B9FAF406B3
        Validity
            Not Before: Jan 30 06:36:19 2026 GMT
            Not After : Jan 29 06:41:19 2027 GMT
        Subject: CN=181085D65CFE2A54047785ED6B576CB5BBA0EAB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:74:97:80:d3:54:a8:e2:3c:85:37:98:be:8e:
                    0e:c0:9d:60:59:9d:9e:ae:cc:6c:bf:db:70:12:9a:
                    a5:6d:e7:d2:c2:38:5c:2c:48:61:f3:ff:d7:dc:6e:
                    78:5b:15:4e:0a:23:06:6b:4d:cb:80:2e:0d:b8:95:
                    ae:45:7a:24:d3:fc:c8:83:30:b4:6a:1c:30:c4:9a:
                    14:c4:38:0f:69:4e:20:f1:20:04:e2:e5:bd:8a:34:
                    c9:ef:50:bf:b6:e6:f5:f5:b6:19:2f:81:bb:3e:0a:
                    cf:6d:56:17:da:c5:50:8e:9d:f9:4f:05:10:9a:c7:
                    c2:62:31:15:15:85:8a:59:fa:27:4c:17:12:1b:9b:
                    52:0d:ef:1a:8a:fa:dc:36:f3:df:69:e8:a1:90:ee:
                    2c:06:1f:70:02:17:bd:f4:88:0d:33:9d:1c:12:31:
                    af:ed:06:a4:7a:04:39:2b:d6:c5:15:91:13:e5:65:
                    95:db:f3:8b:ff:95:65:b3:da:b5:8b:21:0e:e5:48:
                    e5:36:67:fa:15:72:54:0b:a2:74:33:9c:4f:be:3e:
                    f1:e6:f0:03:af:04:76:89:4d:76:cb:3e:16:28:51:
                    1a:e1:8d:cc:a9:02:3b:a4:eb:29:5c:80:b3:a3:ab:
                    97:08:c9:89:35:7f:9d:44:34:d5:19:b1:cc:e5:bd:
                    b9:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:10:85:D6:5C:FE:2A:54:04:77:85:ED:6B:57:6C:B5:BB:A0:EA:B6
            X509v3 Authority Key Identifier:
                keyid:F8:38:41:52:DE:E3:8D:62:B9:87:00:A5:96:34:A5:B9:FA:F4:06:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3139302e3133312e3231362e302f32322d3234203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.131.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cf:fe:c0:b3:79:60:dc:74:07:85:d4:58:2c:a5:3a:da:82:37:
         fd:ec:8c:6e:23:45:ff:94:1d:74:a0:6e:10:a4:ab:62:f7:fd:
         ea:00:93:56:6c:98:46:7d:8d:6e:7e:f0:24:f1:9b:69:59:79:
         9b:db:ae:24:5b:7a:0a:47:6a:06:8a:ad:99:05:fc:b4:fd:ca:
         d7:d9:3b:a6:a7:86:ef:89:38:8c:23:1d:21:e8:da:75:e5:ab:
         7a:01:39:fc:be:7a:de:e5:97:7f:05:47:31:d4:d6:9c:b3:54:
         0b:70:5a:1c:13:21:32:6f:1d:e6:ec:68:7c:c1:27:3a:3b:f8:
         b7:f0:33:2c:d6:e9:58:32:4c:35:c0:68:88:52:cb:d0:3b:fe:
         9a:c0:c2:f5:05:db:49:9e:20:31:10:f2:c7:69:69:21:0d:f3:
         c6:18:57:44:8d:9a:59:c7:5e:2f:85:87:9f:74:52:dd:5c:fb:
         cb:8a:f7:a9:f3:3b:05:94:92:6d:46:cb:20:3b:ef:21:86:36:
         47:ea:e8:bc:22:68:db:44:d0:05:8a:e6:94:d1:0d:f1:14:7c:
         b1:dc:70:fd:90:33:d0:d4:7c:54:55:71:05:01:26:77:86:53:
         49:24:c0:81:1e:99:c6:f3:4d:1e:f4:23:1b:1b:6e:e9:53:48:
         08:a1:8f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:37:07 2026 by rpki-client