Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3139302e3133312e3232322e302f32342d3234203d3e20323632313931.roa
File:                     3139302e3133312e3232322e302f32342d3234203d3e20323632313931.roa (raw, json)
Hash identifier:          5MLyckC3S6I9OuM1q0gtY+0TpVSngY6q4fXo0gzvRms=
Subject key identifier:   16:CA:76:AF:72:00:5A:79:EC:D9:76:2B:C9:C6:FB:AA:6C:93:F6:C4
Certificate issuer:       /CN=F8384152DEE38D62B98700A59634A5B9FAF406B3
Certificate serial:       2D4446596A9A6028C5F909737A88DDBC44F6221B
Authority key identifier: F8:38:41:52:DE:E3:8D:62:B9:87:00:A5:96:34:A5:B9:FA:F4:06:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3139302e3133312e3232322e302f32342d3234203d3e20323632313931.roa
Signing time:             Fri 30 Jan 2026 06:41:17 +0000
ROA not before:           Fri 30 Jan 2026 06:36:17 +0000
ROA not after:            Fri 29 Jan 2027 06:41:17 +0000
asID:                     262191
IP address blocks:        190.131.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:44:46:59:6a:9a:60:28:c5:f9:09:73:7a:88:dd:bc:44:f6:22:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8384152DEE38D62B98700A59634A5B9FAF406B3
        Validity
            Not Before: Jan 30 06:36:17 2026 GMT
            Not After : Jan 29 06:41:17 2027 GMT
        Subject: CN=16CA76AF72005A79ECD9762BC9C6FBAA6C93F6C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:a4:42:f1:89:16:83:32:8f:5b:76:94:7d:0a:
                    2d:55:6e:30:e3:46:a2:89:4f:f4:32:74:a2:01:c1:
                    3c:d3:d7:3a:25:6d:e9:44:a8:ef:d4:85:27:a0:16:
                    5f:5f:71:41:32:19:4d:3f:da:6c:55:aa:21:3e:09:
                    68:98:76:d2:54:e1:bb:a0:eb:dc:fd:c4:06:6b:66:
                    be:81:4c:4d:b5:cd:62:46:8b:d7:76:10:e7:9f:62:
                    88:09:91:03:d3:34:81:bf:5a:e3:fe:df:fc:6b:f8:
                    39:3c:67:66:61:08:a2:07:c2:92:fb:02:17:a7:5d:
                    4f:99:f2:1b:86:c2:b9:43:55:7d:d7:b6:9e:68:51:
                    7f:10:bd:69:61:a7:0e:64:d1:5e:63:ed:b1:4c:67:
                    0c:67:02:5e:a0:1b:31:2d:c5:c0:05:2f:3d:74:ec:
                    e5:58:26:bc:fa:9d:12:5e:1e:ce:30:ae:e1:a9:f9:
                    3e:dd:20:9a:d4:5c:57:c1:6e:02:0b:42:c7:18:20:
                    1d:3e:73:ab:d2:bf:92:a3:32:5d:d4:a9:68:02:ab:
                    5d:1f:3d:99:45:02:08:87:12:1e:dc:8a:ce:b9:04:
                    8c:d8:d5:09:3d:d5:fd:0a:d1:82:c7:a2:df:b6:e7:
                    25:17:88:6f:34:a7:47:d9:e4:57:36:17:b9:cd:8a:
                    6b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:CA:76:AF:72:00:5A:79:EC:D9:76:2B:C9:C6:FB:AA:6C:93:F6:C4
            X509v3 Authority Key Identifier:
                keyid:F8:38:41:52:DE:E3:8D:62:B9:87:00:A5:96:34:A5:B9:FA:F4:06:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3139302e3133312e3232322e302f32342d3234203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.131.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:be:76:80:d1:51:60:52:aa:8b:55:67:62:7e:7d:e0:00:92:
         b2:14:e2:40:d7:ed:3c:8b:4c:ec:27:6c:ce:a7:09:10:b8:ba:
         66:ff:77:11:5e:c9:82:cb:e9:f0:fc:d4:1d:2e:99:04:3f:e1:
         2f:8e:7a:7e:c5:e7:23:32:0c:dc:ca:dc:8f:21:d8:fb:cf:f5:
         22:44:8f:59:b0:66:61:90:7b:b9:fa:a6:9e:bd:8f:b2:44:95:
         b3:aa:cc:37:91:c3:46:76:ec:02:fd:62:fa:46:3d:8e:6f:ab:
         b7:93:dc:57:55:2f:6c:4e:bd:ce:5e:40:c4:83:bf:73:02:28:
         ff:01:4a:60:52:cc:32:ef:11:45:d7:65:7c:0f:f3:bf:9f:1b:
         34:3c:54:66:b6:76:e8:c8:7c:22:a0:bf:ab:18:35:b6:f2:14:
         e0:d4:cd:1b:15:38:66:76:56:b3:6a:bb:71:95:26:e4:c6:5b:
         b2:a8:bd:6d:7a:32:aa:64:67:e3:b4:1d:6e:fb:e9:fa:2d:fe:
         4d:3d:65:5c:cf:23:d3:68:f9:51:76:6c:34:42:7a:ec:0e:20:
         84:e8:17:48:a6:22:05:f6:49:fa:19:fc:d4:d0:14:19:69:b3:
         0f:62:8b:8c:12:e4:86:87:19:34:7f:d5:1a:92:30:a0:21:8d:
         a3:13:31:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:37:10 2026 by rpki-client