Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/4D09661F6A550B3E21627E54957D8CD8E8C7C5FEDD92226C1FB01961E2593F10/0/3139302e382e3137362e302f32322d3234203d3e203336343534.roa
File:                     3139302e382e3137362e302f32322d3234203d3e203336343534.roa (raw, json)
Hash identifier:          hWRrmySmHviKS7knLkTUzikjRE8ltCIevkPxi3IQWFk=
Subject key identifier:   4D:6E:91:9B:4B:54:43:97:F7:32:08:1D:1A:B2:81:A8:04:71:3E:D9
Certificate issuer:       /CN=CFF4EB94A3CA4240E99D515F818C70090A5BEF59
Certificate serial:       504B432BB962DCD5F7C95FE89B640E9AF9D713E5
Authority key identifier: CF:F4:EB:94:A3:CA:42:40:E9:9D:51:5F:81:8C:70:09:0A:5B:EF:59
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4D09661F6A550B3E21627E54957D8CD8E8C7C5FEDD92226C1FB01961E2593F10/0/3139302e382e3137362e302f32322d3234203d3e203336343534.roa
Signing time:             Tue 06 Oct 2026 17:38:53 +0000
ROA not before:           Tue 06 Oct 2026 17:33:53 +0000
ROA not after:            Tue 05 Oct 2027 17:38:53 +0000
asID:                     36454
IP address blocks:        190.8.176.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4D09661F6A550B3E21627E54957D8CD8E8C7C5FEDD92226C1FB01961E2593F10/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4D09661F6A550B3E21627E54957D8CD8E8C7C5FEDD92226C1FB01961E2593F10/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Oct 2026 13:03:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:4b:43:2b:b9:62:dc:d5:f7:c9:5f:e8:9b:64:0e:9a:f9:d7:13:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CFF4EB94A3CA4240E99D515F818C70090A5BEF59
        Validity
            Not Before: Oct  6 17:33:53 2026 GMT
            Not After : Oct  5 17:38:53 2027 GMT
        Subject: CN=4D6E919B4B544397F732081D1AB281A804713ED9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:66:c0:0f:01:74:1d:94:da:eb:05:40:45:7f:
                    7f:93:8c:dd:e1:09:8e:f0:d8:8e:2c:99:df:3a:6d:
                    15:c4:39:61:01:7a:41:49:ab:39:ee:0c:80:fc:57:
                    75:db:cd:ca:5e:55:c6:91:77:bd:17:40:3c:49:95:
                    c7:7a:f5:42:89:61:4e:80:9f:18:d3:ab:4b:02:2c:
                    4e:9e:a1:66:fb:50:cc:7a:ec:0b:98:3d:3f:ec:7d:
                    20:27:c8:b8:c2:6b:14:ae:70:86:7d:61:f3:a6:c4:
                    d3:85:91:a8:a3:d2:ba:b4:78:f0:8a:4f:af:50:cf:
                    20:9a:92:51:5c:99:a5:54:ec:6a:41:a4:e8:2d:58:
                    7e:29:23:4b:fa:ff:6e:a1:1d:8f:c1:09:c3:82:6d:
                    ee:5a:36:99:d7:6d:d6:c5:bd:f6:17:ed:4a:9c:b3:
                    80:d4:2a:22:88:12:74:f9:a3:51:5c:25:74:33:99:
                    28:c4:00:b6:cd:13:c6:aa:6a:49:f4:76:6a:b2:53:
                    80:54:d1:94:57:26:28:56:43:a8:a3:83:31:a3:43:
                    d5:2c:f6:84:05:10:88:02:7b:95:69:79:71:c1:48:
                    f4:66:5a:ba:d6:34:a4:d8:29:b9:fc:de:a9:9a:db:
                    7a:06:1f:53:2d:14:25:3e:27:30:b1:c9:be:c3:40:
                    41:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:6E:91:9B:4B:54:43:97:F7:32:08:1D:1A:B2:81:A8:04:71:3E:D9
            X509v3 Authority Key Identifier:
                keyid:CF:F4:EB:94:A3:CA:42:40:E9:9D:51:5F:81:8C:70:09:0A:5B:EF:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4D09661F6A550B3E21627E54957D8CD8E8C7C5FEDD92226C1FB01961E2593F10/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4D09661F6A550B3E21627E54957D8CD8E8C7C5FEDD92226C1FB01961E2593F10/0/3139302e382e3137362e302f32322d3234203d3e203336343534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.8.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:b7:8a:2c:a4:61:67:4e:be:0c:5e:35:48:86:56:06:0d:b5:
         da:30:15:24:77:c3:a0:19:cb:e9:2b:b7:03:15:7a:03:9d:e8:
         75:d2:dc:e4:d6:af:37:6b:5c:e1:15:7d:e6:76:bf:5b:3d:04:
         57:9c:e0:62:8e:25:14:57:7d:68:51:0c:8d:52:8e:89:fb:54:
         0f:d5:c7:00:f8:7c:0f:38:02:e3:b6:21:7e:ee:b7:9e:a6:5e:
         cb:cd:30:02:8c:a9:c7:f9:b3:42:18:5f:ff:97:e1:fc:01:26:
         69:c8:30:ce:58:14:73:a0:1b:0c:70:73:cd:00:5e:db:b8:53:
         a4:0c:fe:c1:05:23:b9:93:db:fe:08:0f:c2:c9:c7:d2:bb:f8:
         d7:85:3d:65:39:c7:1c:5c:42:6c:c3:81:8a:d0:64:e5:f6:e3:
         bc:17:c4:54:fe:3b:05:94:ac:00:b7:93:a4:0c:37:31:f0:5f:
         f8:74:a6:76:85:14:71:0e:00:db:df:3c:d6:30:7d:64:b2:bc:
         86:32:7a:df:0a:83:ed:fe:61:c9:da:80:a8:4d:f8:36:f1:a9:
         0f:85:28:0f:35:85:e8:d8:5e:4e:41:99:0d:55:a7:05:7c:86:
         62:22:f7:7d:6b:75:48:2f:a1:56:32:f1:a3:84:94:87:23:70:
         d7:3e:7a:03
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUUEtDK7li3NX3yV/om2QOmvnXE+UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0ZGNEVCOTRBM0NBNDI0MEU5OUQ1MTVGODE4QzcwMDkw
QTVCRUY1OTAeFw0yNjEwMDYxNzMzNTNaFw0yNzEwMDUxNzM4NTNaMDMxMTAvBgNV
BAMTKDRENkU5MTlCNEI1NDQzOTdGNzMyMDgxRDFBQjI4MUE4MDQ3MTNFRDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrZsAPAXQdlNrrBUBFf3+TjN3h
CY7w2I4smd86bRXEOWEBekFJqznuDID8V3XbzcpeVcaRd70XQDxJlcd69UKJYU6A
nxjTq0sCLE6eoWb7UMx67AuYPT/sfSAnyLjCaxSucIZ9YfOmxNOFkaij0rq0ePCK
T69QzyCaklFcmaVU7GpBpOgtWH4pI0v6/26hHY/BCcOCbe5aNpnXbdbFvfYX7Uqc
s4DUKiKIEnT5o1FcJXQzmSjEALbNE8aqakn0dmqyU4BU0ZRXJihWQ6ijgzGjQ9Us
9oQFEIgCe5VpeXHBSPRmWrrWNKTYKbn83qma23oGH1MtFCU+JzCxyb7DQEG9AgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUTW6Rm0tUQ5f3MggdGrKBqARxPtkwHwYDVR0j
BBgwFoAUz/TrlKPKQkDpnVFfgYxwCQpb71kwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80RDA5NjYxRjZBNTUwQjNFMjE2MjdFNTQ5NTdEOENEOEU4
QzdDNUZFREQ5MjIyNkMxRkIwMTk2MUUyNTkzRjEwLzAvQ0ZGNEVCOTRBM0NBNDI0
MEU5OUQ1MTVGODE4QzcwMDkwQTVCRUY1OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DRkY0RUI5NEEzQ0E0MjQwRTk5
RDUxNUY4MThDNzAwOTBBNUJFRjU5LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNEQwOTY2MUY2QTU1MEIzRTIxNjI3RTU0OTU3RDhDRDhFOEM3QzVGRURE
OTIyMjZDMUZCMDE5NjFFMjU5M0YxMC8wLzMxMzkzMDJlMzgyZTMxMzczNjJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMzMzYzNDM1MzQucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK+CLAwDQYJ
KoZIhvcNAQELBQADggEBAHy3iiykYWdOvgxeNUiGVgYNtdowFSR3w6AZy+krtwMV
egOd6HXS3OTWrzdrXOEVfeZ2v1s9BFec4GKOJRRXfWhRDI1Sjon7VA/VxwD4fA84
AuO2IX7ut56mXsvNMAKMqcf5s0IYX/+X4fwBJmnIMM5YFHOgGwxwc80AXtu4U6QM
/sEFI7mT2/4ID8LJx9K7+NeFPWU5xxxcQmzDgYrQZOX247wXxFT+OwWUrAC3k6QM
NzHwX/h0pnaFFHEOANvfPNYwfWSyvIYyet8Kg+3+YcnagKhN+DbxqQ+FKA81hejY
Xk5BmQ1VpwV8hmIi931rdUgvoVYy8aOElIcjcNc+egM=
-----END CERTIFICATE-----
Generated at Thu Oct 15 03:26:28 2026 by rpki-client