Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3135322e302f32322d3234203d3e203138363738.roa
File:                     3139302e39302e3135322e302f32322d3234203d3e203138363738.roa (raw, json)
Hash identifier:          wgUfTjiHCgjGJZ+GzebcJ3WXe2BWiS+d/vdAB4Ya9pk=
Subject key identifier:   9E:A6:5F:83:23:E9:31:38:19:7B:0A:1D:D3:02:77:DC:A7:FC:FD:FD
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       2083E571112180837D2E7F25DF7CFBB939E61027
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3135322e302f32322d3234203d3e203138363738.roa
Signing time:             Mon 02 Feb 2026 22:28:56 +0000
ROA not before:           Mon 02 Feb 2026 22:23:56 +0000
ROA not after:            Mon 01 Feb 2027 22:28:56 +0000
asID:                     18678
IP address blocks:        190.90.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:83:e5:71:11:21:80:83:7d:2e:7f:25:df:7c:fb:b9:39:e6:10:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Feb  2 22:23:56 2026 GMT
            Not After : Feb  1 22:28:56 2027 GMT
        Subject: CN=9EA65F8323E93138197B0A1DD30277DCA7FCFDFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7f:0d:4b:62:6e:23:89:f0:65:63:4d:2c:74:
                    da:c8:0b:8e:ff:27:0e:ac:d0:c0:e7:b6:29:0e:47:
                    be:fe:1b:79:bb:2f:a3:5e:43:66:92:0d:97:a9:65:
                    1c:83:54:b1:ec:1c:10:64:80:54:9d:a4:2f:fa:c6:
                    2f:a0:3d:5c:f9:21:df:eb:26:98:9c:06:7e:27:8e:
                    20:68:bf:83:c5:33:c2:67:fe:6d:fb:bc:a4:88:38:
                    cf:dd:49:3e:89:57:7a:13:a1:ff:2f:39:9d:ab:3f:
                    d9:b5:85:bc:9b:28:f4:52:29:a1:d7:71:fa:63:d2:
                    7a:33:ae:d7:cc:0d:78:c4:03:02:af:40:86:e5:89:
                    1c:02:1b:35:f6:4b:c6:4b:3e:4b:81:4d:9b:9b:d5:
                    6d:60:db:ff:c7:a4:1e:d8:1e:f6:da:f0:2a:02:4d:
                    a1:c1:51:5c:79:70:7c:60:d0:3d:15:f2:04:34:fc:
                    2a:8d:4e:7b:db:56:7d:ff:df:3f:58:59:05:02:87:
                    ab:a8:c2:63:49:57:63:f0:49:b3:6b:2f:ba:0b:1c:
                    ce:65:1e:71:9c:45:05:35:f0:65:01:21:d9:30:66:
                    a5:b2:f3:02:05:ce:ea:6f:15:30:e4:37:ba:dc:67:
                    e8:1b:c8:7c:ce:0f:39:7d:b9:3d:31:08:d6:a3:24:
                    dd:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:A6:5F:83:23:E9:31:38:19:7B:0A:1D:D3:02:77:DC:A7:FC:FD:FD
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3135322e302f32322d3234203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:18:17:e5:e4:f7:78:5e:79:eb:62:3d:5d:89:49:2b:4c:bb:
         08:2f:e6:1a:2c:e9:2f:45:c0:c6:d1:30:de:75:c8:1e:87:02:
         64:c5:b9:a5:76:3a:32:7a:b3:19:8a:9d:dc:77:d2:44:b6:58:
         75:32:e7:3b:c4:41:12:49:82:97:8d:c9:9d:79:21:49:ed:a9:
         e8:c1:8e:08:19:ea:10:9d:23:72:81:a4:d0:22:ee:40:a9:5f:
         e2:ab:8f:35:1d:ad:8a:40:d8:7a:5f:61:21:c6:1b:f5:51:81:
         82:11:90:93:3f:9a:76:52:e3:1b:a4:2a:df:93:71:b8:54:89:
         5f:47:06:08:e7:fe:f1:76:6c:1b:d0:00:a0:24:1c:02:60:c8:
         e5:28:de:6a:82:26:c1:85:e3:af:86:f9:01:fd:2b:f4:ed:dc:
         4d:ad:38:c3:ea:ce:23:4b:ea:66:1d:21:a4:2b:e4:3c:62:3c:
         69:c1:ae:30:1e:29:f8:5f:84:90:e0:bc:54:7e:b5:6b:7a:24:
         21:38:11:25:8a:d0:19:2d:35:25:e2:1f:f2:43:03:95:59:7c:
         f6:4b:32:87:71:99:df:8e:41:db:23:d3:f3:b8:79:e5:7a:9e:
         98:ac:34:0f:21:3a:ba:0a:85:ba:e1:f5:52:fa:6a:89:a4:db:
         b6:03:c4:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:33:32 2026 by rpki-client