Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3132382e302f32302d3234203d3e203138363738.roa
File:                     3139302e39302e3132382e302f32302d3234203d3e203138363738.roa (raw, json)
Hash identifier:          6XSyAcnb8xH8tRK48KH9rz8U7pXoxMW/gnsduyteSUY=
Subject key identifier:   87:A2:DC:A3:11:C2:A7:29:0B:B0:47:53:7E:9A:66:30:8C:BB:49:51
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       48D19319FA224AB346933756056EA3E15FDA9ECB
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3132382e302f32302d3234203d3e203138363738.roa
Signing time:             Wed 04 Feb 2026 14:29:03 +0000
ROA not before:           Wed 04 Feb 2026 14:24:03 +0000
ROA not after:            Wed 03 Feb 2027 14:29:03 +0000
asID:                     18678
IP address blocks:        190.90.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:d1:93:19:fa:22:4a:b3:46:93:37:56:05:6e:a3:e1:5f:da:9e:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Feb  4 14:24:03 2026 GMT
            Not After : Feb  3 14:29:03 2027 GMT
        Subject: CN=87A2DCA311C2A7290BB047537E9A66308CBB4951
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c8:47:8d:3f:4d:c7:8e:2b:42:d2:1f:ea:86:
                    c3:2f:f5:ba:cb:bb:77:19:89:04:9f:aa:f0:9e:9d:
                    53:b6:67:b6:97:ca:f2:3c:8e:3e:48:96:b2:e7:f9:
                    42:0b:2c:ff:f4:55:b6:23:a6:29:21:f8:80:51:b0:
                    91:42:d0:b2:56:c2:20:43:cc:19:37:28:bc:21:c2:
                    6b:81:f6:d2:69:5a:2c:3c:3e:f5:72:cf:86:46:24:
                    89:63:ba:dd:68:65:2d:52:3d:31:0a:b5:96:d8:14:
                    63:44:17:40:52:3b:80:ac:b2:3c:82:4b:b4:d7:8e:
                    bc:23:10:73:2c:89:30:be:fe:a3:c6:a4:0d:76:dd:
                    7f:9d:66:20:0f:ee:a8:ed:36:57:97:e8:c5:09:67:
                    76:fd:b1:93:81:aa:2d:65:75:96:23:88:5a:dc:a8:
                    48:2c:af:48:17:9b:e4:b4:84:68:74:ea:1b:24:17:
                    d1:46:0e:b6:ec:30:1a:c8:fd:95:53:fd:47:cc:f9:
                    ff:8c:9c:8f:62:86:d2:18:0d:12:42:a1:20:fd:64:
                    cd:1a:bc:27:e5:29:46:56:c0:09:8b:71:3b:05:20:
                    32:89:12:dc:cf:f7:c4:6d:ae:61:08:0f:c5:d1:79:
                    f6:3e:3d:e5:3e:94:fe:fc:ae:3a:d4:d1:b4:93:e5:
                    2c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:A2:DC:A3:11:C2:A7:29:0B:B0:47:53:7E:9A:66:30:8C:BB:49:51
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3132382e302f32302d3234203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         46:6f:41:60:15:63:b7:26:af:59:9e:6b:63:6e:c7:c7:bc:0d:
         2a:ad:74:03:73:ba:f9:35:1c:cd:26:bc:c9:7b:a3:3b:f7:4c:
         ca:ce:55:67:61:07:60:a8:43:e8:4e:20:d5:54:ba:54:1c:d1:
         ee:3b:74:62:b9:d9:ba:17:8e:0a:06:f1:bc:ec:9f:3f:d6:ae:
         bc:ed:a5:62:aa:1c:62:ae:a0:21:62:dc:6b:27:e4:cf:ef:43:
         5c:ec:ee:06:2a:2c:a4:4d:5a:4a:67:1f:33:62:1c:fe:60:04:
         7c:b6:26:40:63:f6:b6:bf:e5:ab:8d:c1:ee:38:97:77:af:52:
         25:0a:6c:c7:be:e1:cd:e8:96:d6:d3:9b:c3:fe:97:7f:3d:de:
         c9:1b:4b:5f:41:bb:8a:28:4c:83:ba:df:95:b1:83:89:22:e7:
         c7:6a:f1:4e:1d:b0:34:2c:b0:a3:bd:49:d6:ca:f4:29:b3:f1:
         20:1a:93:48:1d:43:d9:02:07:26:b9:7c:29:c7:4a:cc:65:f9:
         d1:84:39:5e:95:91:05:05:24:b0:bb:ed:eb:50:07:53:78:b3:
         7c:20:d4:05:80:c2:1d:ae:00:09:ec:23:38:28:be:f1:08:78:
         9f:55:97:6c:2d:42:01:2a:7f:86:51:6e:41:20:31:00:46:6c:
         2d:19:bb:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:17:24 2026 by rpki-client