Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/3139302e3131302e3232342e302f32342d3234203d3e203532333939.roa
File:                     3139302e3131302e3232342e302f32342d3234203d3e203532333939.roa (raw, json)
Hash identifier:          zXjYcKd2VVxZ1DRFub9dk44Aj636lLR75wyX0MOYh5k=
Subject key identifier:   3A:83:B0:C2:6A:F4:67:91:84:65:36:B2:95:4D:56:4C:DF:50:DA:15
Certificate issuer:       /CN=C2B7A28859947C52A387BB628764F91AAA1D05B9
Certificate serial:       34784E834210433475062F1B3182AFBE6A7C83ED
Authority key identifier: C2:B7:A2:88:59:94:7C:52:A3:87:BB:62:87:64:F9:1A:AA:1D:05:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/3139302e3131302e3232342e302f32342d3234203d3e203532333939.roa
Signing time:             Thu 16 Apr 2026 13:20:00 +0000
ROA not before:           Thu 16 Apr 2026 13:15:00 +0000
ROA not after:            Thu 15 Apr 2027 13:20:00 +0000
asID:                     52399
IP address blocks:        190.110.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 04:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:78:4e:83:42:10:43:34:75:06:2f:1b:31:82:af:be:6a:7c:83:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2B7A28859947C52A387BB628764F91AAA1D05B9
        Validity
            Not Before: Apr 16 13:15:00 2026 GMT
            Not After : Apr 15 13:20:00 2027 GMT
        Subject: CN=3A83B0C26AF46791846536B2954D564CDF50DA15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e5:84:0f:a0:39:18:8b:c7:9f:0b:be:e2:45:
                    84:ea:64:9e:39:6c:0d:26:06:11:3d:f6:57:57:75:
                    02:6a:99:5c:cf:66:ef:fe:21:9a:d2:2d:74:eb:61:
                    10:7a:8a:27:fe:ec:5c:5a:20:f6:71:3f:6d:3e:aa:
                    a7:92:2e:7a:50:4c:81:94:68:bc:5a:f5:94:99:dd:
                    6c:fe:35:13:f8:d6:cc:07:03:9a:34:8e:35:47:d5:
                    da:54:a6:0f:24:99:74:70:f8:72:9b:34:9c:f7:89:
                    57:09:bf:75:b4:26:62:ef:63:7f:3e:46:ee:d7:d2:
                    ec:33:be:d6:51:f0:60:0c:5e:cc:e4:4c:94:e5:c2:
                    60:d1:c6:6b:0e:9e:0e:56:3e:23:41:56:87:9c:3e:
                    36:69:59:47:b6:77:d3:1e:0d:83:ab:33:fc:f8:dc:
                    cf:b6:81:34:ef:aa:11:02:92:c7:f3:e5:9c:1f:d9:
                    10:be:25:7d:26:80:5e:86:e2:b1:0f:8b:b8:3a:96:
                    70:9a:4d:29:65:b8:84:6a:47:45:10:78:df:d8:82:
                    f3:f5:d0:04:0d:ff:d4:4a:32:80:06:ff:df:1c:f8:
                    44:25:64:e4:65:4c:57:9e:77:ed:d7:2c:32:1a:e0:
                    19:f1:19:a4:a5:a6:69:b7:c2:95:4b:c4:7e:b9:d1:
                    0a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:83:B0:C2:6A:F4:67:91:84:65:36:B2:95:4D:56:4C:DF:50:DA:15
            X509v3 Authority Key Identifier:
                keyid:C2:B7:A2:88:59:94:7C:52:A3:87:BB:62:87:64:F9:1A:AA:1D:05:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/3139302e3131302e3232342e302f32342d3234203d3e203532333939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:60:39:60:b5:cc:7a:01:a1:db:e3:b6:7d:87:79:4b:89:33:
         c7:c2:c9:3c:e5:52:53:36:25:28:e8:f7:64:f7:2a:9a:0c:55:
         ad:5c:20:90:73:9b:f7:1d:47:78:f3:d8:62:d0:79:2e:b1:95:
         52:d6:d7:7d:5b:80:47:51:5b:d6:89:63:da:66:27:99:59:7b:
         31:01:cc:25:b5:4e:73:58:bd:8f:2b:4f:f1:8c:c1:45:f7:80:
         6c:5d:73:d4:ad:88:4e:ee:73:b6:98:18:ef:2a:77:58:ef:eb:
         05:89:1e:2e:54:da:99:af:95:29:00:c6:97:90:67:08:c2:55:
         3a:e1:15:ee:4a:94:4a:af:0d:3d:c1:6a:62:03:50:46:e5:31:
         be:93:0f:69:70:57:84:2b:ad:f2:2b:85:8f:ab:2e:01:1d:00:
         ca:89:6c:da:db:61:03:51:1c:b3:54:60:87:ed:e2:8e:60:63:
         1a:6a:31:d3:50:da:d4:10:07:82:c6:37:7c:37:d0:17:45:01:
         a3:8c:df:48:c4:c9:29:dd:5f:e1:7d:26:d8:12:53:8a:78:71:
         1e:03:a1:64:7a:46:4f:3c:78:58:86:ef:8f:e8:8f:2d:19:71:
         d0:91:7c:3f:9d:e4:d0:4f:83:fc:75:53:47:b4:79:06:f4:c3:
         9c:cb:a4:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:53:03 2026 by rpki-client