Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3139302e3133312e3232302e302f32332d3234203d3e20323632313931.roa
File:                     3139302e3133312e3232302e302f32332d3234203d3e20323632313931.roa (raw, json)
Hash identifier:          nDx4ANCvO4A3YyWhdyu+OHJ6B7zA47iCf3zyokgT1sA=
Subject key identifier:   88:62:38:BA:FE:53:8E:59:12:75:49:85:7A:24:A1:3E:58:4C:45:1F
Certificate issuer:       /CN=F8384152DEE38D62B98700A59634A5B9FAF406B3
Certificate serial:       2119597EF73B76080DE2A1E892FD73B3A38A5870
Authority key identifier: F8:38:41:52:DE:E3:8D:62:B9:87:00:A5:96:34:A5:B9:FA:F4:06:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3139302e3133312e3232302e302f32332d3234203d3e20323632313931.roa
Signing time:             Fri 30 Jan 2026 06:41:02 +0000
ROA not before:           Fri 30 Jan 2026 06:36:02 +0000
ROA not after:            Fri 29 Jan 2027 06:41:02 +0000
asID:                     262191
IP address blocks:        190.131.220.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:19:59:7e:f7:3b:76:08:0d:e2:a1:e8:92:fd:73:b3:a3:8a:58:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8384152DEE38D62B98700A59634A5B9FAF406B3
        Validity
            Not Before: Jan 30 06:36:02 2026 GMT
            Not After : Jan 29 06:41:02 2027 GMT
        Subject: CN=886238BAFE538E59127549857A24A13E584C451F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:66:82:71:8e:75:2a:ab:74:49:34:44:3d:15:
                    7a:6a:3e:b3:0b:ef:f5:eb:c0:4c:5d:a0:3b:ad:1f:
                    60:dc:de:20:30:e9:e9:5e:b0:e6:cd:1d:d3:35:61:
                    db:0c:2e:89:ef:f8:46:96:4f:59:9b:3d:60:fe:5c:
                    a0:d6:a5:f0:be:65:1e:cd:50:66:ac:09:9b:43:ef:
                    48:7e:4e:79:c7:09:dc:00:ad:db:08:a6:33:35:53:
                    83:1e:ce:bb:d5:92:84:28:d9:fb:06:3c:34:a0:a3:
                    58:25:15:a3:cf:fd:76:45:11:f5:46:d4:7c:0f:2c:
                    b8:de:14:5c:80:61:a5:1f:70:ca:ee:e2:89:97:41:
                    83:7d:46:81:d8:73:c4:e2:2b:9a:86:48:d9:ba:f3:
                    40:1d:fc:e1:d7:97:90:79:6d:95:e8:30:6e:d8:dc:
                    60:c7:14:d5:4c:6e:fa:9b:a6:95:6a:4b:37:82:b5:
                    f3:b5:87:6e:4c:90:74:9d:a7:74:a1:7a:8b:63:ec:
                    99:70:16:a8:0a:2a:da:b3:6f:38:9b:06:74:27:69:
                    8f:20:06:10:b8:95:97:2a:53:8b:62:03:83:99:66:
                    91:72:dd:a2:89:13:36:75:eb:0c:c4:d7:a0:dd:ce:
                    cc:2c:eb:26:4a:71:62:b5:c8:8e:b0:bc:7e:f9:25:
                    3e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:62:38:BA:FE:53:8E:59:12:75:49:85:7A:24:A1:3E:58:4C:45:1F
            X509v3 Authority Key Identifier:
                keyid:F8:38:41:52:DE:E3:8D:62:B9:87:00:A5:96:34:A5:B9:FA:F4:06:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3139302e3133312e3232302e302f32332d3234203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.131.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5d:62:f5:9f:8e:cd:4e:27:8e:3b:ec:4c:a8:d2:9f:d5:a1:fc:
         58:19:e8:9c:24:60:d0:5e:36:30:0c:c5:15:cf:47:db:3b:89:
         c7:1c:13:dc:51:6b:8d:59:98:28:a7:19:32:e5:fc:89:68:ff:
         85:b5:74:e4:8f:8b:5c:a6:67:86:2a:e1:fc:a8:05:e8:b3:5c:
         17:9a:da:ba:ae:53:1c:1f:d0:26:f6:d1:c6:41:88:f2:c9:e5:
         26:46:0b:4f:83:e5:00:8a:0b:be:4a:23:b0:17:af:fb:4e:18:
         2e:44:39:08:61:1d:60:dc:5d:3a:25:0e:6a:ef:f0:f8:dd:1d:
         81:1f:fc:99:da:71:eb:23:14:a1:91:22:2f:4f:52:37:10:ec:
         fd:c8:8b:bc:a9:af:89:3c:82:f8:b4:50:ca:eb:bd:95:d1:26:
         8f:87:56:c6:df:64:f8:cf:5c:7a:22:10:4a:9b:dd:29:4b:ac:
         51:6d:c5:45:62:68:57:5d:11:ad:d8:51:80:89:87:1d:83:58:
         6e:c2:7f:73:3a:88:af:57:8c:e6:a5:f1:59:9e:1a:5f:4a:58:
         40:e8:aa:3e:51:d7:91:c3:10:df:5f:ac:e6:b2:f5:d7:b9:8f:
         3f:5a:da:8e:36:f4:de:29:19:3b:33:e6:aa:4d:e2:68:d1:b7:
         aa:67:c2:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:41:10 2026 by rpki-client