Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3232342e302f31392d3234203d3e203138363738.roa
File:                     3139302e39302e3232342e302f31392d3234203d3e203138363738.roa (raw, json)
Hash identifier:          iJ5BSIK72FFFbVbyW/kjiGEvEndqYskPT56yNQuQcR0=
Subject key identifier:   D8:BF:E5:23:09:B8:45:DE:AC:71:0B:8C:55:6E:3C:FE:57:A4:BB:B5
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       55E820EC07FF7C488E288060A5848A77F1928BE1
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3232342e302f31392d3234203d3e203138363738.roa
Signing time:             Mon 09 Feb 2026 02:29:41 +0000
ROA not before:           Mon 09 Feb 2026 02:24:41 +0000
ROA not after:            Mon 08 Feb 2027 02:29:41 +0000
asID:                     18678
IP address blocks:        190.90.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:e8:20:ec:07:ff:7c:48:8e:28:80:60:a5:84:8a:77:f1:92:8b:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Feb  9 02:24:41 2026 GMT
            Not After : Feb  8 02:29:41 2027 GMT
        Subject: CN=D8BFE52309B845DEAC710B8C556E3CFE57A4BBB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3d:cf:e6:b3:26:97:e1:c1:4d:32:58:a2:c9:
                    24:9e:e4:a7:0b:05:30:fc:a5:80:a7:00:b6:28:b1:
                    c1:0d:cd:d7:2a:62:17:2d:b4:67:2f:0b:be:68:3c:
                    53:d5:de:34:8c:2c:dd:bf:52:63:bd:5d:5f:e2:64:
                    c9:86:51:6b:8c:1c:5b:d1:50:45:06:6a:ee:7c:93:
                    1f:a7:5c:06:ca:9d:9f:2f:9e:77:36:ba:98:44:4a:
                    1d:0c:7d:0e:d8:c7:7d:49:75:d5:c1:83:e5:83:65:
                    a2:a3:ba:c6:da:2e:92:8a:07:17:e0:cb:af:d2:e7:
                    91:69:28:da:19:39:39:03:06:c6:01:ac:df:be:80:
                    49:58:c2:6a:45:7b:00:d1:76:e9:98:54:2b:2a:03:
                    d5:e9:58:13:ed:01:05:33:3c:9e:8d:3e:9e:80:c7:
                    d9:17:a4:5d:21:73:9e:c6:a7:a4:80:19:64:1c:3b:
                    37:6b:3f:6d:c2:37:80:38:67:5e:7f:7d:30:cd:0b:
                    d2:ea:87:aa:43:ba:25:60:a3:4c:72:73:a7:5d:4b:
                    4d:54:e8:75:44:43:a1:c6:4c:89:88:9c:58:35:49:
                    86:37:0f:a6:fb:f4:03:3d:39:0f:4a:18:2e:4d:86:
                    33:ec:bc:7d:b4:f5:21:66:09:ef:42:78:d5:52:59:
                    1e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:BF:E5:23:09:B8:45:DE:AC:71:0B:8C:55:6E:3C:FE:57:A4:BB:B5
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3232342e302f31392d3234203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         63:e8:cd:66:93:d1:4f:ee:96:73:24:28:73:49:1f:a9:0b:9b:
         1e:ee:85:c7:2e:ab:d9:6a:ff:95:5c:c3:49:9c:bb:b7:3b:0b:
         14:69:a7:71:a2:85:21:5f:5b:ba:44:c9:49:70:09:16:90:d1:
         9c:b0:d8:69:b7:c8:06:e4:fe:84:16:41:92:7a:22:67:32:d0:
         cf:bd:0d:3d:37:b2:b9:13:5d:cb:bd:f4:ef:0a:40:9e:d5:95:
         8d:d8:df:cc:f2:6d:b3:2b:e1:bc:bd:2b:b6:6b:b0:87:9b:af:
         9c:13:57:99:4b:d4:21:94:11:20:4a:25:df:89:e7:b7:9d:2e:
         87:ce:88:08:b1:4c:e3:c1:94:16:50:00:c3:7d:96:e3:6b:04:
         61:25:89:57:e5:e7:7a:62:29:cf:0e:38:17:dc:e8:2e:bf:82:
         98:45:19:70:84:8e:4a:cc:2b:03:b1:05:4b:c8:3c:60:3a:78:
         9e:3e:c5:40:8c:e7:e2:5e:a0:3a:92:d7:96:09:86:b7:db:6c:
         fc:56:02:58:b0:f2:d8:15:3a:ad:22:5f:c7:f4:9f:42:5a:19:
         bc:26:ec:90:65:25:8d:0a:42:74:8e:8c:f0:5f:dc:ce:aa:26:
         b3:96:91:9a:e7:4b:16:bf:80:53:60:4b:63:55:97:e9:bc:b8:
         6d:4d:dd:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:32:09 2026 by rpki-client