Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3231362e302f32312d3234203d3e203138363738.roa
File:                     3139302e39302e3231362e302f32312d3234203d3e203138363738.roa (raw, json)
Hash identifier:          6DTBpFvhGFHae+tuiIG5r16RHJhie2waroQtaWpxp6o=
Subject key identifier:   5E:C8:D9:5E:E5:C0:15:D2:DF:52:FF:F2:09:28:F4:7D:36:FA:9B:46
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       3EA9F048E621078DDCD84B1449A7925D48F36925
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3231362e302f32312d3234203d3e203138363738.roa
Signing time:             Mon 09 Feb 2026 01:29:40 +0000
ROA not before:           Mon 09 Feb 2026 01:24:40 +0000
ROA not after:            Mon 08 Feb 2027 01:29:40 +0000
asID:                     18678
IP address blocks:        190.90.216.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:a9:f0:48:e6:21:07:8d:dc:d8:4b:14:49:a7:92:5d:48:f3:69:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Feb  9 01:24:40 2026 GMT
            Not After : Feb  8 01:29:40 2027 GMT
        Subject: CN=5EC8D95EE5C015D2DF52FFF20928F47D36FA9B46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:f0:cb:c4:19:1c:3d:9b:0d:77:e9:24:59:60:
                    60:b9:a5:90:55:ee:40:7f:98:a8:2e:0e:88:8b:4a:
                    72:4a:f0:fe:d3:6c:9d:5b:a7:dd:13:b7:60:46:a1:
                    8f:c5:e4:b6:17:55:11:84:b5:6d:72:6a:47:f5:19:
                    57:5d:dd:49:bd:45:48:5b:01:bc:19:f6:10:8f:98:
                    50:89:2d:bd:d8:b8:62:b3:21:43:41:a3:c9:5b:c5:
                    4f:ab:ab:58:c5:5a:09:54:d2:59:f8:6e:c8:53:a1:
                    08:e7:83:98:97:dd:4b:38:da:c5:c1:c6:d0:6c:a3:
                    cb:83:b6:34:03:f2:c5:85:c0:59:c7:de:77:18:b9:
                    20:ef:83:41:e6:0a:b2:42:ad:74:d6:40:5e:fa:b3:
                    6b:65:cd:f5:6b:7f:be:4a:ac:55:4d:84:50:0b:6e:
                    2c:5b:1a:ea:6e:18:ae:c0:8b:ff:08:7f:76:1e:ff:
                    fd:00:c1:04:ff:56:4a:1f:f9:fa:ee:0a:7b:07:d2:
                    a2:d3:b1:93:c4:04:7c:ff:a1:2c:69:db:d1:f8:27:
                    27:14:bb:73:3a:30:5b:fa:8d:b1:37:d7:ff:80:1c:
                    53:27:a5:4c:07:9d:a7:cc:0d:aa:9e:46:3a:67:08:
                    22:4d:84:9d:c9:90:eb:99:f6:3e:b3:88:d1:de:e7:
                    4b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:C8:D9:5E:E5:C0:15:D2:DF:52:FF:F2:09:28:F4:7D:36:FA:9B:46
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3231362e302f32312d3234203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         28:5e:d1:23:f1:7b:19:81:d2:9e:51:8e:70:43:c6:c4:a5:35:
         b0:e8:d8:18:24:01:b4:0e:40:e6:30:72:f4:58:4a:86:9c:2a:
         61:d5:20:d2:a0:bc:02:56:71:5a:35:0d:38:db:e2:7e:a1:5a:
         e3:ea:3e:c0:9c:2e:16:9f:d8:1f:02:5a:56:c3:17:3e:86:6f:
         b8:fb:5a:7d:a9:ab:cf:ff:68:c6:1c:82:bd:1f:61:ac:36:68:
         63:ae:de:4a:95:bc:76:be:e9:01:53:2e:d3:9d:38:c3:d2:65:
         b9:9e:de:d2:1f:83:ae:47:ac:13:6a:ca:c3:55:0d:4f:11:9c:
         80:d9:8e:03:59:cf:90:31:9a:b1:b6:fb:c2:f3:7b:fe:3b:e5:
         4b:8e:ed:5a:fb:48:dc:6b:6e:60:2d:c5:a9:60:32:46:9d:4e:
         8b:ac:8c:8b:9a:c8:f3:ae:c5:57:fc:df:d9:fa:dc:a2:a7:59:
         29:24:07:b0:c9:6a:d2:5f:61:dd:69:be:7e:a4:6d:d1:fa:84:
         df:8a:06:c2:5a:d1:72:74:a5:05:42:21:70:ed:50:8d:e0:b3:
         a7:a3:ff:ec:d7:80:64:07:c7:0f:a3:40:42:63:5d:66:6c:70:
         82:c3:a5:f9:c2:d7:d6:90:c7:66:ff:87:9a:ba:3e:bd:1a:47:
         3c:9d:8e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:33:32 2026 by rpki-client