Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/220391039701C79346B76FB10EAB6F4717EA71ED125CCFE9B95744CF0340C919/0/3139302e38332e37382e302f32332d3234203d3e20323639393534.roa
File:                     3139302e38332e37382e302f32332d3234203d3e20323639393534.roa (raw, json)
Hash identifier:          7HqPWRyVImaH18iHl0dErBTeQqXnwFYovzsSpxeBrI0=
Subject key identifier:   EF:0F:5D:B0:2A:D8:C4:9D:56:EB:0D:1D:8A:14:66:C6:BF:A2:AD:1B
Certificate issuer:       /CN=A597442BE252949C19F9D69F7BF6A9CDDB54134B
Certificate serial:       6F324FE27CBB2745FD4D2634AC42C5B626E5F550
Authority key identifier: A5:97:44:2B:E2:52:94:9C:19:F9:D6:9F:7B:F6:A9:CD:DB:54:13:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A597442BE252949C19F9D69F7BF6A9CDDB54134B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/220391039701C79346B76FB10EAB6F4717EA71ED125CCFE9B95744CF0340C919/0/3139302e38332e37382e302f32332d3234203d3e20323639393534.roa
Signing time:             Sun 08 Feb 2026 02:29:32 +0000
ROA not before:           Sun 08 Feb 2026 02:24:32 +0000
ROA not after:            Sun 07 Feb 2027 02:29:32 +0000
asID:                     269954
IP address blocks:        190.83.78.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/220391039701C79346B76FB10EAB6F4717EA71ED125CCFE9B95744CF0340C919/0/A597442BE252949C19F9D69F7BF6A9CDDB54134B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/220391039701C79346B76FB10EAB6F4717EA71ED125CCFE9B95744CF0340C919/0/A597442BE252949C19F9D69F7BF6A9CDDB54134B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A597442BE252949C19F9D69F7BF6A9CDDB54134B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Mar 2026 23:20:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:32:4f:e2:7c:bb:27:45:fd:4d:26:34:ac:42:c5:b6:26:e5:f5:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A597442BE252949C19F9D69F7BF6A9CDDB54134B
        Validity
            Not Before: Feb  8 02:24:32 2026 GMT
            Not After : Feb  7 02:29:32 2027 GMT
        Subject: CN=EF0F5DB02AD8C49D56EB0D1D8A1466C6BFA2AD1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1a:dc:e6:f0:48:92:4c:b9:53:ee:9a:dd:13:
                    2e:35:9f:d7:83:b8:f4:f4:6c:09:f2:b6:ed:a4:2b:
                    cc:40:52:8d:c6:ae:cf:62:a6:78:62:1b:b2:14:cb:
                    dd:7d:1c:13:16:59:d8:85:0f:28:f2:af:67:45:a2:
                    ec:a5:b8:9b:68:57:bb:ce:a7:ce:c3:b3:b2:5e:0a:
                    2a:3b:0c:41:2a:8a:e0:64:31:c6:40:ac:bd:ab:63:
                    2d:9a:c5:f1:78:95:ed:97:a4:57:93:1b:c4:34:1a:
                    a0:7e:22:04:20:d6:5f:77:ba:e5:71:bc:1b:14:1e:
                    d6:dd:c6:5e:80:58:3b:04:2a:e2:0b:03:d3:31:f7:
                    ed:bd:b5:78:9b:e7:68:a8:78:03:9a:3f:d8:27:ca:
                    43:0a:7f:06:c9:3f:8f:3b:c1:00:23:0a:30:ba:9f:
                    24:12:9d:81:1a:38:3f:13:0a:34:8d:48:34:58:a6:
                    34:ff:c8:cd:4a:a0:3e:ed:71:35:e1:a5:87:0a:4d:
                    ca:96:02:db:1c:13:80:c5:12:ca:07:28:ca:e3:4d:
                    ff:31:b9:28:ba:71:0d:ac:f6:23:80:b0:51:06:9b:
                    9e:93:cf:a7:8a:a5:47:1d:97:59:3a:88:a4:a3:4d:
                    42:ed:25:61:91:8d:5a:8d:62:da:21:61:75:d0:83:
                    ab:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:0F:5D:B0:2A:D8:C4:9D:56:EB:0D:1D:8A:14:66:C6:BF:A2:AD:1B
            X509v3 Authority Key Identifier:
                keyid:A5:97:44:2B:E2:52:94:9C:19:F9:D6:9F:7B:F6:A9:CD:DB:54:13:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/220391039701C79346B76FB10EAB6F4717EA71ED125CCFE9B95744CF0340C919/0/A597442BE252949C19F9D69F7BF6A9CDDB54134B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A597442BE252949C19F9D69F7BF6A9CDDB54134B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/220391039701C79346B76FB10EAB6F4717EA71ED125CCFE9B95744CF0340C919/0/3139302e38332e37382e302f32332d3234203d3e20323639393534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         84:26:25:e7:9e:fb:aa:b4:f8:a1:9e:ad:a7:ad:4a:4a:76:c6:
         1c:68:c0:45:f1:f2:bb:2b:ed:c3:3d:8b:ae:10:a5:98:72:2c:
         3c:df:11:14:5d:cb:fa:87:ee:ac:1d:f6:38:bc:1e:e0:be:c9:
         5a:cd:79:99:c0:03:b6:31:71:9f:be:95:31:35:31:99:92:3a:
         64:98:60:c7:6c:f2:ba:f2:c6:8c:d1:4d:a6:8e:04:74:1d:f9:
         21:98:72:9c:5d:9b:eb:5d:62:49:6f:fa:56:5e:56:2b:77:a7:
         37:e1:6b:3d:7a:a0:2d:c8:7e:80:5c:67:a7:8e:c4:10:44:1d:
         ac:07:e5:64:0d:e8:a1:c6:fc:66:0c:14:7c:87:53:eb:e7:34:
         f4:66:96:a5:22:df:f2:99:3d:2f:5e:79:57:84:a4:4d:cf:a8:
         2e:fb:b0:f5:30:c2:25:c5:c5:4b:77:61:8d:76:56:0c:0f:80:
         2e:4a:0e:73:7f:b6:f6:d1:73:db:4f:91:4f:a1:5a:8c:bb:a9:
         3f:5c:a7:21:35:77:df:a1:be:23:16:6e:55:52:4a:42:30:1b:
         18:76:5a:c5:1a:a2:5f:be:15:28:a8:97:77:7e:55:71:5d:35:
         ac:9d:91:74:df:e2:c3:a4:d6:8d:3c:07:bd:07:f3:8b:1c:08:
         4e:27:78:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:13:46 2026 by rpki-client