Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3231332e302f32342d3234203d3e20323632353839.roa
File:                     3139302e39302e3231332e302f32342d3234203d3e20323632353839.roa (raw, json)
Hash identifier:          pTp4xDVcYCMLJQW3PnH/TrPLXxfh9p+s6MGBLIWgjic=
Subject key identifier:   09:6F:2A:D3:C1:72:D4:74:41:D2:86:60:8D:7B:47:CC:D6:C9:32:AB
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       71007268CFAAF2FB07AF41623B6F8F7B30942838
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3231332e302f32342d3234203d3e20323632353839.roa
Signing time:             Mon 09 Feb 2026 04:29:43 +0000
ROA not before:           Mon 09 Feb 2026 04:24:43 +0000
ROA not after:            Mon 08 Feb 2027 04:29:43 +0000
asID:                     262589
IP address blocks:        190.90.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:00:72:68:cf:aa:f2:fb:07:af:41:62:3b:6f:8f:7b:30:94:28:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Feb  9 04:24:43 2026 GMT
            Not After : Feb  8 04:29:43 2027 GMT
        Subject: CN=096F2AD3C172D47441D286608D7B47CCD6C932AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:93:c6:0f:12:c4:02:72:ce:56:42:ee:da:f6:
                    db:6b:cf:1f:11:4b:ad:10:7a:e6:eb:ac:dc:9e:9e:
                    71:08:c9:61:6a:85:b6:69:eb:2a:d7:16:73:e7:c1:
                    67:f8:a0:34:f9:ea:bc:12:33:63:90:6b:38:a2:d2:
                    b7:4e:d2:58:25:18:be:32:a7:5a:0a:36:2f:e1:61:
                    2f:61:ee:73:00:be:42:71:9c:26:74:74:e1:17:fc:
                    55:dc:f1:e5:5c:54:ba:4b:0e:cc:42:98:c3:08:0e:
                    67:4d:43:44:f6:cb:91:5b:0b:58:66:12:a6:35:8f:
                    9e:58:c2:dc:cb:e5:02:e7:4d:5c:71:57:c3:1a:cd:
                    24:2a:26:fb:45:5a:62:41:72:48:90:21:3f:48:d8:
                    0e:8b:4f:f8:65:21:52:ad:31:74:7b:1b:8e:63:d4:
                    8f:59:69:88:00:1b:bc:f6:aa:f6:ff:6a:a7:bc:f4:
                    19:49:bb:27:c8:27:1f:16:59:a4:39:15:13:12:a5:
                    6d:35:e1:d2:0e:87:7b:75:67:34:7a:b9:bd:29:54:
                    75:59:66:ad:1c:23:ed:fd:8b:a3:5a:b4:13:08:5d:
                    e6:2e:4a:35:5c:18:21:73:24:17:7c:c3:43:93:e4:
                    6c:dc:25:8e:6d:e3:95:c2:1e:fa:2c:bf:25:60:67:
                    11:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:6F:2A:D3:C1:72:D4:74:41:D2:86:60:8D:7B:47:CC:D6:C9:32:AB
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3231332e302f32342d3234203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:bb:65:c3:9f:e1:c7:dd:be:fa:6a:b9:b2:ba:f3:37:3c:b1:
         a3:10:8c:a0:b2:13:11:15:cc:d1:38:29:2f:ad:1f:d7:9f:47:
         42:c6:a3:60:a9:d8:c3:90:87:be:b1:e7:60:07:76:d9:e1:29:
         95:51:8e:62:a6:f8:e7:26:bf:da:8d:d2:bc:f6:03:32:c5:c8:
         c5:47:f2:9c:99:9e:b1:aa:df:f5:77:4d:9a:30:f0:13:af:c5:
         dc:e9:37:a6:ca:cf:87:27:98:60:0a:32:89:1c:95:31:9f:82:
         0e:11:de:a5:93:48:ed:e4:00:87:96:69:a7:06:01:f0:ce:27:
         cb:cd:b7:88:e7:04:ea:bc:f8:e2:cd:64:3d:fd:6e:6b:ff:0c:
         82:3d:c0:f3:3a:d9:e5:a8:58:03:35:1f:16:29:29:c5:a1:99:
         0b:59:e5:da:5e:2a:c8:29:c6:a1:39:a6:bc:33:66:10:fc:14:
         c5:ee:d0:0a:93:a8:78:93:a0:f8:0e:2b:ca:23:77:38:97:e9:
         b5:d4:55:fb:4b:50:d0:2c:3d:ab:f4:58:74:9d:35:f5:06:36:
         3e:ed:18:2f:48:35:f1:70:04:55:a0:98:15:26:6f:7c:79:b8:
         8a:14:8c:34:ff:38:39:39:43:8a:38:99:03:4a:98:fa:09:29:
         07:08:40:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:33:25 2026 by rpki-client