Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3139322e302f31382d3234203d3e203138363738.roa
File:                     3139302e39302e3139322e302f31382d3234203d3e203138363738.roa (raw, json)
Hash identifier:          dful2a0pxooLmL0COrH1HAEQDp0QGw/WaN71jwW5DZM=
Subject key identifier:   A1:17:77:99:B8:A7:C3:D0:A3:EB:55:26:0D:BC:23:9E:8F:FF:10:D6
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       2F02434B35057E7065B0A2D0523BFDC32159D013
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3139322e302f31382d3234203d3e203138363738.roa
Signing time:             Mon 09 Feb 2026 02:29:41 +0000
ROA not before:           Mon 09 Feb 2026 02:24:41 +0000
ROA not after:            Mon 08 Feb 2027 02:29:41 +0000
asID:                     18678
IP address blocks:        190.90.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:02:43:4b:35:05:7e:70:65:b0:a2:d0:52:3b:fd:c3:21:59:d0:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Feb  9 02:24:41 2026 GMT
            Not After : Feb  8 02:29:41 2027 GMT
        Subject: CN=A1177799B8A7C3D0A3EB55260DBC239E8FFF10D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:29:93:97:49:39:35:07:a7:51:b9:f4:b0:9b:
                    5e:55:b7:46:68:42:92:94:37:58:40:5d:1a:41:98:
                    78:2b:7c:ee:1b:0e:1a:d5:10:ae:44:a4:65:11:8f:
                    60:de:9d:2d:0c:1a:f1:96:32:2d:18:d2:c0:d8:2f:
                    00:1c:5b:4a:e8:e5:19:27:c4:42:1a:be:58:87:f1:
                    b2:d2:8a:c9:2f:09:eb:0f:e8:45:be:01:31:42:bf:
                    64:c5:18:4e:0d:7a:4b:26:ab:1c:f3:13:b4:c2:c6:
                    74:5b:90:7f:7b:a6:f4:66:f2:6c:42:58:cb:7c:ea:
                    35:0b:22:b3:4c:dc:fe:8d:f7:4b:25:dc:11:32:47:
                    ce:66:c4:93:2a:5c:47:69:5e:33:88:75:8d:60:61:
                    64:a4:5e:a8:b7:36:be:3e:ca:e9:76:e2:c6:87:05:
                    8d:03:fe:62:c1:8a:86:20:7e:b8:e9:b9:dc:74:7a:
                    3e:d6:21:46:78:48:e3:2f:e7:96:99:b0:73:6c:1c:
                    9b:33:5b:de:0b:7c:4f:88:e5:d0:28:05:60:26:fe:
                    69:3c:00:c5:c4:ba:ce:d3:33:90:9b:41:9a:8c:18:
                    d9:db:7c:cb:e4:95:3e:f5:76:f7:f3:e5:7d:fa:f1:
                    a4:87:d7:60:81:23:c0:2f:9b:81:3e:fc:82:98:12:
                    b7:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:17:77:99:B8:A7:C3:D0:A3:EB:55:26:0D:BC:23:9E:8F:FF:10:D6
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3139322e302f31382d3234203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         42:fb:ef:6c:01:fd:e7:38:88:c0:50:77:f2:c6:10:87:ca:9d:
         77:6a:9e:55:c9:db:b9:c3:de:c4:1d:47:23:d9:5a:9b:54:87:
         d2:8a:d9:31:3a:2c:06:70:a8:3f:52:42:f5:78:c9:2f:6d:28:
         fe:bc:21:1c:45:1e:ca:ed:6d:64:67:c6:75:21:b7:2a:94:d8:
         2e:43:a5:95:12:f6:a3:dc:ef:84:53:ff:13:38:82:d0:e3:6b:
         eb:4f:75:5a:59:53:67:bb:04:30:59:f5:85:9c:7c:f6:23:82:
         f6:34:07:4b:fb:d6:1c:5b:e7:56:b8:60:db:f3:ca:50:fb:73:
         52:a7:7e:3b:c6:b9:67:7b:1d:4c:f1:94:a4:bc:08:82:f1:3c:
         15:12:85:96:92:9c:dd:b7:98:1e:8e:8f:68:c1:68:48:99:49:
         23:cc:cd:96:4b:c1:fd:2e:2d:60:67:db:a6:85:1b:56:89:90:
         3a:8a:55:14:71:86:97:a7:18:e5:e5:02:00:2f:2b:df:bb:ae:
         0f:1c:40:f0:a1:a7:f7:f7:e1:88:ae:90:5a:d2:94:10:e0:a2:
         5c:77:2d:ba:7f:35:5a:31:6b:e5:35:bc:4f:f3:a9:db:97:44:
         6e:94:53:13:45:c4:d9:eb:3e:b2:67:64:ed:7f:32:c5:69:ba:
         1c:f5:1e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:33:37 2026 by rpki-client