Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3139302e35322e3132342e302f32342d3234203d3e20323632313832.roa
File:                     3139302e35322e3132342e302f32342d3234203d3e20323632313832.roa (raw, json)
Hash identifier:          rsDStyFOTWormztkf5I3x2c+dRmUAXIlGmGTfhAc4U0=
Subject key identifier:   7E:88:34:AB:DA:ED:23:16:91:CA:CE:84:66:13:6A:E0:14:CF:8B:5F
Certificate issuer:       /CN=3D608F1A58C367A78F93EDCEF6DA6EACD069209B
Certificate serial:       60A81B3895D66046BA075F8B8660B7292C29582F
Authority key identifier: 3D:60:8F:1A:58:C3:67:A7:8F:93:ED:CE:F6:DA:6E:AC:D0:69:20:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3139302e35322e3132342e302f32342d3234203d3e20323632313832.roa
Signing time:             Thu 04 Jun 2026 19:46:35 +0000
ROA not before:           Thu 04 Jun 2026 19:41:35 +0000
ROA not after:            Thu 03 Jun 2027 19:46:35 +0000
asID:                     262182
IP address blocks:        190.52.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:a8:1b:38:95:d6:60:46:ba:07:5f:8b:86:60:b7:29:2c:29:58:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D608F1A58C367A78F93EDCEF6DA6EACD069209B
        Validity
            Not Before: Jun  4 19:41:35 2026 GMT
            Not After : Jun  3 19:46:35 2027 GMT
        Subject: CN=7E8834ABDAED231691CACE8466136AE014CF8B5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:7b:4c:91:a4:aa:61:c4:ac:61:19:3e:02:ea:
                    b0:fb:e8:bc:be:a3:a4:05:1f:5a:35:09:d7:80:47:
                    a3:11:c4:d2:54:b9:57:97:e8:16:6c:91:c6:55:d6:
                    d8:b3:bd:b4:02:70:a7:4d:06:93:67:3f:3b:db:5d:
                    d6:ee:3f:50:7e:f9:1c:d7:18:9b:9f:72:63:8f:7f:
                    ee:c1:4e:f2:b8:73:6e:b3:5b:20:ea:58:0b:4a:a9:
                    dc:b4:96:6f:23:85:b9:a4:59:dd:fd:62:57:bd:1f:
                    fc:28:3e:fe:99:4d:20:a6:77:8f:b9:73:9c:5d:2a:
                    ad:df:8a:c1:9c:83:c2:d8:d9:37:47:08:42:86:d6:
                    ef:b5:54:a7:db:bf:03:6c:31:26:a0:08:bb:1e:22:
                    b0:6e:03:d1:47:9c:58:47:10:a9:32:30:cd:a0:d2:
                    bb:13:96:7e:22:83:c5:ed:d0:11:f9:58:a4:19:3e:
                    67:46:32:13:d7:5c:9e:01:b9:6f:08:7b:34:c8:42:
                    dc:16:dd:52:55:02:26:2d:95:ae:4f:aa:a6:0b:fe:
                    89:c0:0a:ea:b8:3d:96:80:e7:b7:7d:45:41:f1:d5:
                    4d:70:8e:ce:94:c7:56:a5:07:d4:ce:da:0e:43:da:
                    f3:50:96:34:f1:a3:34:b5:7f:05:22:bb:15:f1:d5:
                    12:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:88:34:AB:DA:ED:23:16:91:CA:CE:84:66:13:6A:E0:14:CF:8B:5F
            X509v3 Authority Key Identifier:
                keyid:3D:60:8F:1A:58:C3:67:A7:8F:93:ED:CE:F6:DA:6E:AC:D0:69:20:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3139302e35322e3132342e302f32342d3234203d3e20323632313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.52.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:53:c9:2a:e0:19:e4:5e:1a:13:ab:2d:77:80:ca:57:c1:a6:
         3b:a6:97:cd:fe:49:ea:70:79:4d:3b:d4:a7:c3:61:f4:a0:dd:
         91:14:89:61:b8:5a:84:54:70:92:fe:42:99:be:4f:b3:db:2d:
         04:17:ea:db:76:81:b9:03:93:04:21:5c:9f:12:49:92:8a:c5:
         d6:99:da:9c:5f:8d:bf:7c:03:4c:f2:61:f0:bc:99:6b:7e:54:
         e6:b5:9b:d0:12:fc:aa:49:d1:03:c7:23:1e:19:34:10:93:23:
         31:ec:f0:46:c7:79:08:04:c0:ca:8d:8f:cb:1f:52:8e:e8:88:
         cb:49:d7:78:80:71:52:51:e5:df:0e:11:a4:4f:94:f8:d0:2d:
         14:7b:5f:4a:d0:c4:32:ea:7d:73:46:cc:29:04:9a:ef:d5:c6:
         8d:16:75:04:33:6f:ac:e8:58:d2:cf:ec:43:f0:b5:32:41:bf:
         9c:da:f0:6e:a4:9e:13:90:12:7e:9b:d1:78:39:f4:82:c3:dc:
         fa:91:2c:69:a9:4d:1a:7b:4f:c1:88:4e:bf:5f:fc:ff:94:8c:
         c5:b3:04:6f:8c:94:90:50:36:ae:86:1b:16:e7:c3:50:b5:e4:
         30:c6:6a:9d:da:0c:57:09:3e:70:39:63:0a:b1:4f:75:99:0a:
         01:aa:65:b6
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUYKgbOJXWYEa6B1+LhmC3KSwpWC8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0Q2MDhGMUE1OEMzNjdBNzhGOTNFRENFRjZEQTZFQUNE
MDY5MjA5QjAeFw0yNjA2MDQxOTQxMzVaFw0yNzA2MDMxOTQ2MzVaMDMxMTAvBgNV
BAMTKDdFODgzNEFCREFFRDIzMTY5MUNBQ0U4NDY2MTM2QUUwMTRDRjhCNUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD8e0yRpKphxKxhGT4C6rD76Ly+
o6QFH1o1CdeAR6MRxNJUuVeX6BZskcZV1tizvbQCcKdNBpNnPzvbXdbuP1B++RzX
GJufcmOPf+7BTvK4c26zWyDqWAtKqdy0lm8jhbmkWd39Yle9H/woPv6ZTSCmd4+5
c5xdKq3fisGcg8LY2TdHCEKG1u+1VKfbvwNsMSagCLseIrBuA9FHnFhHEKkyMM2g
0rsTln4ig8Xt0BH5WKQZPmdGMhPXXJ4BuW8IezTIQtwW3VJVAiYtla5PqqYL/onA
Cuq4PZaA57d9RUHx1U1wjs6Ux1alB9TO2g5D2vNQljTxozS1fwUiuxXx1RIZAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUfog0q9rtIxaRys6EZhNq4BTPi18wHwYDVR0j
BBgwFoAUPWCPGljDZ6ePk+3O9tpurNBpIJswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80RkNCRDk0RDg4QkY5MjlBQTUwRDc3NTA2MkUwQTExNUFG
MDRBMThGQkY0RDlGRjE1MTJCOUNCQTUwOUU0MDQyLzAvM0Q2MDhGMUE1OEMzNjdB
NzhGOTNFRENFRjZEQTZFQUNEMDY5MjA5Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zRDYwOEYxQTU4QzM2N0E3OEY5
M0VEQ0VGNkRBNkVBQ0QwNjkyMDlCLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNEZDQkQ5NEQ4OEJGOTI5QUE1MEQ3NzUwNjJFMEExMTVBRjA0QTE4RkJG
NEQ5RkYxNTEyQjlDQkE1MDlFNDA0Mi8wLzMxMzkzMDJlMzUzMjJlMzEzMjM0MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMyMzEzODMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvjR8
MA0GCSqGSIb3DQEBCwUAA4IBAQC8U8kq4BnkXhoTqy13gMpXwaY7ppfN/knqcHlN
O9Snw2H0oN2RFIlhuFqEVHCS/kKZvk+z2y0EF+rbdoG5A5MEIVyfEkmSisXWmdqc
X42/fANM8mHwvJlrflTmtZvQEvyqSdEDxyMeGTQQkyMx7PBGx3kIBMDKjY/LH1KO
6IjLSdd4gHFSUeXfDhGkT5T40C0Ue19K0MQy6n1zRswpBJrv1caNFnUEM2+s6FjS
z+xD8LUyQb+c2vBupJ4TkBJ+m9F4OfSCw9z6kSxpqU0ae0/BiE6/X/z/lIzFswRv
jJSQUDauhhsW58NQteQwxmqd2gxXCT5wOWMKsU91mQoBqmW2
-----END CERTIFICATE-----
Generated at Sun Jun 14 03:16:04 2026 by rpki-client