Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/40D8D4094F75BD5906A686CCC3F9D606251C695E3353C569059D12601809ED2D/0/AS19905.roa
File:                     AS19905.roa (raw, json)
Hash identifier:          Fz+lC7Gyd/ivYX0YvydtvHfrWMeSyFvA7CPPN4El/xw=
Subject key identifier:   E0:03:FA:98:05:0F:E2:7B:08:7F:69:EC:39:68:02:CE:AD:42:44:9B
Certificate issuer:       /CN=6ECA7CB8912ADEFBC99484E053EBE852A3A0E8C2
Certificate serial:       3088CD70264C1ED90F44FC3D14EE2E3FEB070294
Authority key identifier: 6E:CA:7C:B8:91:2A:DE:FB:C9:94:84:E0:53:EB:E8:52:A3:A0:E8:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6ECA7CB8912ADEFBC99484E053EBE852A3A0E8C2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/40D8D4094F75BD5906A686CCC3F9D606251C695E3353C569059D12601809ED2D/0/AS19905.roa
Signing time:             Tue 06 Jan 2026 20:54:00 +0000
ROA not before:           Tue 06 Jan 2026 20:49:00 +0000
ROA not after:            Tue 05 Jan 2027 20:54:00 +0000
asID:                     19905
IP address blocks:        190.143.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/40D8D4094F75BD5906A686CCC3F9D606251C695E3353C569059D12601809ED2D/0/6ECA7CB8912ADEFBC99484E053EBE852A3A0E8C2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/40D8D4094F75BD5906A686CCC3F9D606251C695E3353C569059D12601809ED2D/0/6ECA7CB8912ADEFBC99484E053EBE852A3A0E8C2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6ECA7CB8912ADEFBC99484E053EBE852A3A0E8C2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Mar 2026 08:22:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:88:cd:70:26:4c:1e:d9:0f:44:fc:3d:14:ee:2e:3f:eb:07:02:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ECA7CB8912ADEFBC99484E053EBE852A3A0E8C2
        Validity
            Not Before: Jan  6 20:49:00 2026 GMT
            Not After : Jan  5 20:54:00 2027 GMT
        Subject: CN=E003FA98050FE27B087F69EC396802CEAD42449B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9b:5f:27:30:ee:36:5b:a1:e4:d2:8f:dd:f5:
                    60:2f:91:ad:0d:e1:9c:10:bf:a6:a2:44:c0:99:b5:
                    d3:f5:c3:5f:25:41:ed:b6:87:dc:8f:20:de:4e:64:
                    09:4d:9d:6e:fe:9a:6d:7a:d5:97:70:0e:57:49:de:
                    d6:0e:98:84:64:7e:a0:02:ba:d7:d2:a1:62:d2:e0:
                    df:10:eb:f4:53:d7:9f:9e:a3:39:87:4a:f2:f8:17:
                    43:2e:08:08:05:2b:38:1b:a5:59:87:3e:d1:20:4d:
                    3c:ae:86:ce:58:10:40:ea:8b:b3:cd:c7:87:3e:d3:
                    9f:de:e7:5a:1f:c8:b3:dc:d7:80:a4:b7:cc:38:c3:
                    04:04:b8:1a:ee:06:a6:2c:fc:4b:3f:76:77:f6:46:
                    02:94:db:69:aa:68:41:bd:d9:9d:a7:8d:fe:3f:00:
                    69:64:7b:bf:61:ec:d8:ac:f6:92:07:75:33:64:76:
                    ee:a3:63:c9:6d:c4:1c:94:9e:c7:d4:14:83:9f:73:
                    90:31:d2:22:73:13:f6:61:0e:5d:0b:58:52:05:10:
                    4c:2c:d6:d3:33:ab:d0:28:c4:86:63:dc:0b:54:53:
                    95:95:79:09:a4:9f:08:1e:6e:7f:7c:47:25:a7:96:
                    6d:64:58:44:13:0b:d0:f5:b3:9d:54:71:0a:0e:cd:
                    d5:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:03:FA:98:05:0F:E2:7B:08:7F:69:EC:39:68:02:CE:AD:42:44:9B
            X509v3 Authority Key Identifier:
                keyid:6E:CA:7C:B8:91:2A:DE:FB:C9:94:84:E0:53:EB:E8:52:A3:A0:E8:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/40D8D4094F75BD5906A686CCC3F9D606251C695E3353C569059D12601809ED2D/0/6ECA7CB8912ADEFBC99484E053EBE852A3A0E8C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6ECA7CB8912ADEFBC99484E053EBE852A3A0E8C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/40D8D4094F75BD5906A686CCC3F9D606251C695E3353C569059D12601809ED2D/0/AS19905.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.143.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:21:48:8e:ad:e0:54:0b:63:24:1e:e4:49:34:3f:12:e2:6f:
         77:43:5f:0f:91:8e:69:6f:4c:b6:42:d0:25:6c:b8:bc:aa:8a:
         12:53:f6:6f:b8:70:b6:9a:34:2a:7b:d7:d3:8f:16:33:de:73:
         a8:dc:0a:62:67:b1:83:bd:76:68:27:06:25:25:5b:3c:28:a2:
         40:a7:87:71:2e:20:36:78:fb:de:0e:ab:53:82:df:f3:dc:cc:
         d0:38:92:61:00:5e:23:50:5d:e6:37:fc:25:c2:f2:94:95:86:
         55:a7:21:67:da:a5:91:4c:a7:4b:fd:18:05:aa:9b:14:61:5f:
         9d:73:1b:c0:25:65:9d:fe:ec:6c:6e:a2:3f:b1:fc:1d:ad:9a:
         97:3d:b8:9b:86:1d:a0:ea:35:75:e3:3b:47:03:46:8a:6a:b1:
         9b:22:08:b6:9d:10:cd:82:04:92:ba:63:f0:18:35:07:d5:f6:
         1c:8b:fe:9d:fc:05:b3:b5:a1:8c:2f:c2:a0:6e:5f:01:6e:44:
         0e:96:2d:53:e7:95:9c:4a:5f:49:4a:fd:75:33:8f:dc:91:37:
         9b:a1:6e:b6:21:91:5e:3a:2b:e0:7f:f0:49:ec:b9:b5:1a:b9:
         67:bc:05:80:17:ec:89:0f:06:01:04:50:26:4f:29:44:44:ee:
         c8:15:6e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:41:10 2026 by rpki-client