Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/3139302e3130352e3235332e302f32342d3234203d3e203532323738.roa
File:                     3139302e3130352e3235332e302f32342d3234203d3e203532323738.roa (raw, json)
Hash identifier:          I/EFNO9t0aleS+wZ96+jZu4g4cIbgbGyaT7zS5oVJY8=
Subject key identifier:   3B:82:8D:35:DA:57:A8:79:9A:87:3E:CF:57:EF:CE:93:DD:71:31:9E
Certificate issuer:       /CN=E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742
Certificate serial:       74AFFACA1D2F2158825777CED0BC63BC5F227921
Authority key identifier: E2:8F:E6:6E:1D:DF:87:A3:5B:E0:9D:E7:EA:DE:96:A9:EE:6C:07:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/3139302e3130352e3235332e302f32342d3234203d3e203532323738.roa
Signing time:             Tue 10 Feb 2026 09:29:59 +0000
ROA not before:           Tue 10 Feb 2026 09:24:59 +0000
ROA not after:            Tue 09 Feb 2027 09:29:59 +0000
asID:                     52278
IP address blocks:        190.105.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:af:fa:ca:1d:2f:21:58:82:57:77:ce:d0:bc:63:bc:5f:22:79:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742
        Validity
            Not Before: Feb 10 09:24:59 2026 GMT
            Not After : Feb  9 09:29:59 2027 GMT
        Subject: CN=3B828D35DA57A8799A873ECF57EFCE93DD71319E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:dc:82:47:ab:cd:5e:b2:6f:5d:db:cc:27:e2:
                    ed:f0:fc:9a:40:99:17:24:c8:67:29:58:29:5e:86:
                    1a:47:a1:91:e6:1d:c1:8d:e5:41:e6:47:f7:47:d7:
                    2e:95:03:a0:09:0c:83:45:47:cc:3e:a5:5a:b5:96:
                    bc:dd:db:ab:07:ef:16:26:06:83:8b:34:df:ed:a7:
                    9e:cc:48:5e:9e:d8:fd:58:58:2b:d2:7c:91:87:ec:
                    80:6c:b0:cb:1e:27:03:b0:db:15:91:53:f4:ce:92:
                    09:c3:ef:1d:31:d5:38:4b:72:28:2c:d7:66:60:c9:
                    42:0d:57:7e:34:c4:02:db:81:40:8d:a4:ac:c1:c2:
                    1f:26:ff:a4:71:a2:c7:7e:5c:0a:6b:83:23:c5:32:
                    63:f7:c2:dc:95:d6:19:3c:c7:ff:c6:c9:4c:c1:02:
                    fb:4d:49:0b:7e:34:d8:23:e8:98:d1:b8:85:90:0a:
                    d1:7f:d5:d7:d3:24:c9:d6:5a:22:a4:64:62:16:bf:
                    25:72:bf:94:29:5a:b6:00:54:9e:bd:e3:ba:18:5c:
                    f1:57:fb:18:5a:bf:8b:87:18:cf:a2:d7:fc:1a:03:
                    24:ee:cf:42:e9:f2:e6:6f:ca:95:ab:e2:aa:99:4e:
                    e8:24:78:db:3e:c1:89:7a:f7:8e:ed:85:34:66:b7:
                    76:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:82:8D:35:DA:57:A8:79:9A:87:3E:CF:57:EF:CE:93:DD:71:31:9E
            X509v3 Authority Key Identifier:
                keyid:E2:8F:E6:6E:1D:DF:87:A3:5B:E0:9D:E7:EA:DE:96:A9:EE:6C:07:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/3139302e3130352e3235332e302f32342d3234203d3e203532323738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.105.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:3a:b1:db:c7:5c:99:4d:8f:9b:df:a8:dd:c3:57:29:fc:64:
         a7:45:b8:80:0f:a4:ca:45:fc:e7:f5:75:fa:21:14:12:be:62:
         a0:c0:ac:d2:25:8f:2b:ee:e3:1c:de:b1:c0:db:62:79:df:b1:
         95:b3:47:89:25:14:4f:88:d4:a0:7a:18:7b:cf:f4:e3:85:94:
         53:c8:38:4d:19:df:8b:c3:4d:95:d5:25:03:58:c4:bf:1c:42:
         b4:2e:43:99:27:2b:69:38:d2:bc:c2:a1:43:ff:16:e8:06:e7:
         43:d5:97:d7:86:d5:4f:89:f9:79:d5:f1:50:33:f0:97:8a:13:
         91:17:b3:80:21:1a:78:cc:1f:d0:f4:63:08:a5:9f:81:45:35:
         b8:c1:50:0d:fc:b1:c3:d4:51:72:f0:76:b0:1e:db:4e:ec:3a:
         ad:05:5e:e8:06:5b:6e:62:c5:6f:eb:63:75:5a:3e:ad:d7:ef:
         74:78:56:64:30:31:4b:78:59:e0:3d:e7:da:e5:40:79:cf:2f:
         f9:9d:ca:ee:f4:4f:d6:68:53:2c:32:4f:ad:d0:dd:8c:b8:12:
         5a:af:9e:63:34:f1:f9:db:57:ec:37:e9:a0:4d:bc:fc:68:a7:
         33:71:84:b5:90:48:a0:e8:c4:87:68:cc:91:ec:c6:85:41:b6:
         c4:3c:f8:e4
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUdK/6yh0vIViCV3fO0LxjvF8ieSEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTI4RkU2NkUxRERGODdBMzVCRTA5REU3RUFERTk2QTlF
RTZDMDc0MjAeFw0yNjAyMTAwOTI0NTlaFw0yNzAyMDkwOTI5NTlaMDMxMTAvBgNV
BAMTKDNCODI4RDM1REE1N0E4Nzk5QTg3M0VDRjU3RUZDRTkzREQ3MTMxOUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo3IJHq81esm9d28wn4u3w/JpA
mRckyGcpWClehhpHoZHmHcGN5UHmR/dH1y6VA6AJDINFR8w+pVq1lrzd26sH7xYm
BoOLNN/tp57MSF6e2P1YWCvSfJGH7IBssMseJwOw2xWRU/TOkgnD7x0x1ThLcigs
12ZgyUINV340xALbgUCNpKzBwh8m/6Rxosd+XAprgyPFMmP3wtyV1hk8x//GyUzB
AvtNSQt+NNgj6JjRuIWQCtF/1dfTJMnWWiKkZGIWvyVyv5QpWrYAVJ6947oYXPFX
+xhav4uHGM+i1/waAyTuz0Lp8uZvypWr4qqZTugkeNs+wYl6947thTRmt3ZxAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUO4KNNdpXqHmahz7PV+/Ok91xMZ4wHwYDVR0j
BBgwFoAU4o/mbh3fh6Nb4J3n6t6Wqe5sB0IwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zRjNCQzREQTU2QTRDOTM5RjQyMTEwMjNGNDUzODZCRUI1
RkM0MjA2OTRBREJCOTI0NzMzQjg3RTI3OTczNzI2LzAvRTI4RkU2NkUxRERGODdB
MzVCRTA5REU3RUFERTk2QTlFRTZDMDc0Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FMjhGRTY2RTFEREY4N0EzNUJF
MDlERTdFQURFOTZBOUVFNkMwNzQyLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0YzQkM0REE1NkE0QzkzOUY0MjExMDIzRjQ1Mzg2QkVCNUZDNDIwNjk0
QURCQjkyNDczM0I4N0UyNzk3MzcyNi8wLzMxMzkzMDJlMzEzMDM1MmUzMjM1MzMy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMyMzIzNzM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvmn9
MA0GCSqGSIb3DQEBCwUAA4IBAQCmOrHbx1yZTY+b36jdw1cp/GSnRbiAD6TKRfzn
9XX6IRQSvmKgwKzSJY8r7uMc3rHA22J537GVs0eJJRRPiNSgehh7z/TjhZRTyDhN
Gd+Lw02V1SUDWMS/HEK0LkOZJytpONK8wqFD/xboBudD1ZfXhtVPifl51fFQM/CX
ihORF7OAIRp4zB/Q9GMIpZ+BRTW4wVAN/LHD1FFy8HawHttO7DqtBV7oBltuYsVv
62N1Wj6t1+90eFZkMDFLeFngPefa5UB5zy/5ncru9E/WaFMsMk+t0N2MuBJar55j
NPH521fsN+mgTbz8aKczcYS1kEig6MSHaMyR7MaFQbbEPPjk
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:11:55 2026 by rpki-client