Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3138322e302f32342d3234203d3e203236363139.roa
File:                     3139302e39302e3138322e302f32342d3234203d3e203236363139.roa (raw, json)
Hash identifier:          SYPBnud3oMm1xwA9aRmGVudq+QgMrude2Gc6Uc4kL70=
Subject key identifier:   73:43:2C:14:9C:9A:46:61:E8:73:02:1F:1E:B1:11:9F:C9:AA:19:08
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       36EBF7974E88DEEDA73D84C298CA66CC609386FA
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3138322e302f32342d3234203d3e203236363139.roa
Signing time:             Wed 04 Feb 2026 16:29:06 +0000
ROA not before:           Wed 04 Feb 2026 16:24:06 +0000
ROA not after:            Wed 03 Feb 2027 16:29:06 +0000
asID:                     26619
IP address blocks:        190.90.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:eb:f7:97:4e:88:de:ed:a7:3d:84:c2:98:ca:66:cc:60:93:86:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Feb  4 16:24:06 2026 GMT
            Not After : Feb  3 16:29:06 2027 GMT
        Subject: CN=73432C149C9A4661E873021F1EB1119FC9AA1908
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b4:81:96:80:2b:30:ee:e3:d4:7e:ea:83:5b:
                    ef:b2:47:32:50:38:9d:e5:ec:a4:25:29:cf:d5:ea:
                    a9:b9:df:01:22:2e:b3:42:9c:61:a7:4e:d6:a2:2c:
                    8a:6d:63:25:09:1c:54:37:89:c7:8c:5a:3f:e9:b0:
                    03:af:a9:a7:b8:64:c5:df:3b:f4:6a:e6:f4:80:10:
                    7f:a3:2b:a1:32:24:14:7f:52:47:a7:84:9d:3b:8e:
                    7b:d0:93:be:16:73:8e:5e:3f:f7:6b:7e:2b:0c:e9:
                    69:23:5a:7e:0e:87:66:78:f8:4f:dc:e3:6c:41:a6:
                    7f:47:4e:b8:ec:7f:ef:85:f6:97:71:1a:a8:9a:d2:
                    76:97:d6:53:be:eb:d8:77:f3:54:42:be:77:66:c6:
                    07:89:56:a6:f3:ce:fe:46:96:c4:80:70:3e:20:a6:
                    b8:82:5c:27:f1:3a:22:94:3c:e4:29:98:5b:dc:22:
                    7a:46:fd:3d:0b:a3:44:6b:51:d6:2a:12:9a:76:fa:
                    28:7e:6e:23:ec:af:44:75:83:33:f5:fd:da:7b:02:
                    ff:2f:94:77:e0:f8:46:31:0d:68:fb:b8:39:89:f8:
                    73:f8:61:17:de:fe:f4:22:99:de:01:ff:be:79:57:
                    96:d7:c8:97:88:7e:50:5f:a2:91:65:e6:df:23:08:
                    12:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:43:2C:14:9C:9A:46:61:E8:73:02:1F:1E:B1:11:9F:C9:AA:19:08
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3138322e302f32342d3234203d3e203236363139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:bb:f1:b7:c9:ad:65:7a:82:da:1e:10:93:8b:5c:e9:69:e5:
         87:b3:7b:3e:a6:01:4d:56:b9:9f:e2:89:5a:72:ef:51:b5:d6:
         e6:a7:67:15:34:c1:97:10:d4:c1:f9:23:09:78:55:7e:51:50:
         0e:53:42:d0:15:03:4c:97:a1:7c:b0:2b:fa:2c:d6:0a:93:94:
         af:b1:7b:47:c2:bc:7d:54:21:28:ea:e7:64:00:a6:51:88:e6:
         79:df:af:89:8d:a0:3b:f8:b9:d4:ce:37:ef:cb:47:be:9a:88:
         90:e6:0a:08:07:b8:b0:ae:9f:42:de:36:ef:6f:1c:11:aa:6a:
         20:09:3a:f6:0f:b0:91:58:f8:a7:97:cc:cf:50:3d:fa:11:e8:
         e2:d5:6e:b2:a1:69:e7:d3:d9:53:09:ea:52:8c:36:02:d5:7f:
         00:d3:ef:8e:38:b5:f6:38:4c:1f:e0:f5:0c:ae:12:67:f3:df:
         28:ef:5d:c5:6a:b9:db:05:5c:fc:37:06:d9:56:a8:87:64:4d:
         7b:d9:ba:f0:52:d8:ed:18:84:46:c0:18:c4:64:b1:63:50:e3:
         b4:1e:ce:11:00:3d:ff:a6:e6:68:98:4a:4e:9b:1f:0e:f6:bc:
         28:bd:e1:61:35:c2:3c:ff:eb:b9:f7:08:f0:cc:2f:8a:92:9d:
         6a:67:ec:7d
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUNuv3l06I3u2nPYTCmMpmzGCThvowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0JERTg4QzY1MzIwRDNFQkQ4RUQyRjU2OEQ4OTZGMzkz
NUU4N0NDNTAeFw0yNjAyMDQxNjI0MDZaFw0yNzAyMDMxNjI5MDZaMDMxMTAvBgNV
BAMTKDczNDMyQzE0OUM5QTQ2NjFFODczMDIxRjFFQjExMTlGQzlBQTE5MDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2tIGWgCsw7uPUfuqDW++yRzJQ
OJ3l7KQlKc/V6qm53wEiLrNCnGGnTtaiLIptYyUJHFQ3iceMWj/psAOvqae4ZMXf
O/Rq5vSAEH+jK6EyJBR/UkenhJ07jnvQk74Wc45eP/drfisM6WkjWn4Oh2Z4+E/c
42xBpn9HTrjsf++F9pdxGqia0naX1lO+69h381RCvndmxgeJVqbzzv5GlsSAcD4g
priCXCfxOiKUPOQpmFvcInpG/T0Lo0RrUdYqEpp2+ih+biPsr0R1gzP1/dp7Av8v
lHfg+EYxDWj7uDmJ+HP4YRfe/vQimd4B/755V5bXyJeIflBfopFl5t8jCBKLAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUc0MsFJyaRmHocwIfHrERn8mqGQgwHwYDVR0j
BBgwFoAUy96IxlMg0+vY7S9WjYlvOTXofMUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xRkFFODRDOUQyRUE1QjlFNjgyNjM1NDNCQkQ0OThDM0Yx
Q0VGMUY4N0YzODM0MzQ2N0Y1NTE1RDYwMkI3NTI5LzAvQ0JERTg4QzY1MzIwRDNF
QkQ4RUQyRjU2OEQ4OTZGMzkzNUU4N0NDNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQkRFODhDNjUzMjBEM0VCRDhF
RDJGNTY4RDg5NkYzOTM1RTg3Q0M1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUZBRTg0QzlEMkVBNUI5RTY4MjYzNTQzQkJENDk4QzNGMUNFRjFGODdG
MzgzNDM0NjdGNTUxNUQ2MDJCNzUyOS8wLzMxMzkzMDJlMzkzMDJlMzEzODMyMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM2MzEzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAL5atjAN
BgkqhkiG9w0BAQsFAAOCAQEAVLvxt8mtZXqC2h4Qk4tc6Wnlh7N7PqYBTVa5n+KJ
WnLvUbXW5qdnFTTBlxDUwfkjCXhVflFQDlNC0BUDTJehfLAr+izWCpOUr7F7R8K8
fVQhKOrnZACmUYjmed+viY2gO/i51M4378tHvpqIkOYKCAe4sK6fQt42728cEapq
IAk69g+wkVj4p5fMz1A9+hHo4tVusqFp59PZUwnqUow2AtV/ANPvjji19jhMH+D1
DK4SZ/PfKO9dxWq52wVc/DcG2Vaoh2RNe9m68FLY7RiERsAYxGSxY1DjtB7OEQA9
/6bmaJhKTpsfDva8KL3hYTXCPP/rufcI8MwvipKdamfsfQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 19:33:35 2026 by rpki-client