Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3136382e302f32312d3234203d3e203138363738.roa
File:                     3139302e39302e3136382e302f32312d3234203d3e203138363738.roa (raw, json)
Hash identifier:          YKcXyYpM1PTDIQDCVyOoNcoqFPdd1934swwmu4Zlxm0=
Subject key identifier:   28:41:A1:73:78:D3:6A:2B:84:DD:76:9D:7E:CF:5D:E4:AF:6C:E8:8A
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       0664C1558BBE027294B16272B314283CB165ABF1
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3136382e302f32312d3234203d3e203138363738.roa
Signing time:             Wed 04 Feb 2026 15:29:06 +0000
ROA not before:           Wed 04 Feb 2026 15:24:06 +0000
ROA not after:            Wed 03 Feb 2027 15:29:06 +0000
asID:                     18678
IP address blocks:        190.90.168.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:64:c1:55:8b:be:02:72:94:b1:62:72:b3:14:28:3c:b1:65:ab:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Feb  4 15:24:06 2026 GMT
            Not After : Feb  3 15:29:06 2027 GMT
        Subject: CN=2841A17378D36A2B84DD769D7ECF5DE4AF6CE88A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0d:58:42:63:be:55:f9:4d:7e:96:10:6d:2c:
                    d7:27:68:8f:34:38:7b:f1:07:cb:a6:36:99:6c:17:
                    0b:9b:db:e0:9e:37:14:a2:83:bc:f2:34:f9:5c:76:
                    19:42:97:39:98:0b:af:6b:f1:73:c7:a5:74:5f:81:
                    1d:fe:f8:d7:98:1c:d7:37:e8:47:1a:4d:4c:9a:1a:
                    ec:52:37:28:29:04:88:a9:2d:fb:49:20:62:7d:fe:
                    16:c9:c2:b8:34:c4:ef:06:03:ad:a0:22:43:2e:c2:
                    58:ce:01:bd:c1:57:bb:b8:4e:af:d2:75:aa:35:f9:
                    ae:81:f2:85:2c:b8:f1:da:c0:86:65:9d:aa:3e:b3:
                    da:07:aa:e2:c7:22:bd:9a:c1:1c:26:67:7a:d0:23:
                    4c:ca:b1:a6:73:26:45:f4:95:14:48:c2:3a:f7:b1:
                    3d:d6:ce:ef:75:24:12:74:32:26:26:36:66:60:19:
                    14:fa:74:d1:a8:73:ac:7c:0d:66:1c:51:26:79:c0:
                    d6:7c:47:93:6a:48:dc:92:f3:a1:cc:ab:ad:02:3f:
                    7d:1c:6c:44:3a:70:00:b0:22:ce:55:de:f2:b9:38:
                    bc:c6:25:a7:e4:00:3b:79:87:c0:b7:92:3e:f2:55:
                    51:34:3f:c7:43:29:92:b2:d0:c2:b7:52:a6:66:c2:
                    3f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:41:A1:73:78:D3:6A:2B:84:DD:76:9D:7E:CF:5D:E4:AF:6C:E8:8A
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3136382e302f32312d3234203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.168.0/21

    Signature Algorithm: sha256WithRSAEncryption
         70:c7:16:90:2e:2f:da:10:e0:a1:b7:3a:a6:b0:94:28:0e:8a:
         00:3f:d9:5b:7e:ce:7b:8c:06:07:37:9a:b5:53:ad:8a:ba:c7:
         fc:9a:a6:c3:51:0d:c7:a1:69:c3:f5:18:e4:f8:63:c9:da:8d:
         f3:d1:7a:2f:49:02:7a:2c:78:96:0a:ef:1c:9e:ad:d5:af:67:
         89:e2:45:b2:79:ff:d5:1e:2f:bc:7e:89:e2:30:7f:c2:7c:3e:
         b4:d4:6a:dc:99:fe:21:21:83:10:88:25:47:5b:2c:17:37:dc:
         28:a2:54:ce:fc:8b:37:a9:b1:52:64:db:cc:ff:94:4e:eb:e8:
         f7:87:58:1c:24:b7:58:6d:d1:1b:e4:35:59:a8:6b:b3:c7:31:
         d0:c6:91:a3:ed:b4:e5:00:38:d2:6e:98:8f:24:21:9d:4d:1f:
         99:f2:09:b2:48:b3:d9:6c:ca:fe:58:44:50:0e:f6:e9:3d:0a:
         c2:4e:49:e4:d6:80:1f:49:94:f5:de:ae:fb:2b:57:11:f4:aa:
         52:7f:2b:20:b1:0e:94:bd:2d:db:86:31:44:b8:2d:49:c6:a6:
         eb:62:4c:e3:15:c7:28:9f:5f:45:d1:b4:65:20:c1:9c:61:94:
         6e:f7:a5:46:10:c4:b3:76:47:68:ea:dc:29:ba:04:8c:08:db:
         9c:38:97:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:33:29 2026 by rpki-client