Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51720634CD7ECF83983D328C94314C3F01C0804FD39ADA5CCBF37C47359FED95/0/3139302e3130372e3230382e302f32322d3234203d3e20323632323433.roa
File:                     3139302e3130372e3230382e302f32322d3234203d3e20323632323433.roa (raw, json)
Hash identifier:          NSBE1hkSmWQeP82b0KsQ8adGo0WyayRFcgA+xnOldcM=
Subject key identifier:   62:14:FD:7F:7A:FF:D1:2C:03:6B:FA:8A:B7:DA:6C:CE:AE:E9:0F:C1
Certificate issuer:       /CN=0ED6B673F8639E1BFA76C3D0C7C86D575AE0F0CE
Certificate serial:       4BE58F2381DBC2B0082C07001C62518474C3A098
Authority key identifier: 0E:D6:B6:73:F8:63:9E:1B:FA:76:C3:D0:C7:C8:6D:57:5A:E0:F0:CE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0ED6B673F8639E1BFA76C3D0C7C86D575AE0F0CE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51720634CD7ECF83983D328C94314C3F01C0804FD39ADA5CCBF37C47359FED95/0/3139302e3130372e3230382e302f32322d3234203d3e20323632323433.roa
Signing time:             Fri 10 Apr 2026 13:55:01 +0000
ROA not before:           Fri 10 Apr 2026 13:50:01 +0000
ROA not after:            Fri 09 Apr 2027 13:55:01 +0000
asID:                     262243
IP address blocks:        190.107.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51720634CD7ECF83983D328C94314C3F01C0804FD39ADA5CCBF37C47359FED95/0/0ED6B673F8639E1BFA76C3D0C7C86D575AE0F0CE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51720634CD7ECF83983D328C94314C3F01C0804FD39ADA5CCBF37C47359FED95/0/0ED6B673F8639E1BFA76C3D0C7C86D575AE0F0CE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0ED6B673F8639E1BFA76C3D0C7C86D575AE0F0CE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 04:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:e5:8f:23:81:db:c2:b0:08:2c:07:00:1c:62:51:84:74:c3:a0:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ED6B673F8639E1BFA76C3D0C7C86D575AE0F0CE
        Validity
            Not Before: Apr 10 13:50:01 2026 GMT
            Not After : Apr  9 13:55:01 2027 GMT
        Subject: CN=6214FD7F7AFFD12C036BFA8AB7DA6CCEAEE90FC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:99:22:2a:3c:a2:0d:c4:04:33:4d:f9:dd:fb:
                    11:c1:f9:18:a0:08:d5:c2:7b:c1:61:3e:0a:c2:33:
                    59:39:ab:29:aa:92:ec:5c:ed:d8:82:bf:fe:80:13:
                    c1:f8:70:cd:72:07:17:19:95:d8:3f:1b:22:d2:c4:
                    88:42:18:80:b6:f4:f9:38:98:55:33:64:d2:65:c3:
                    f8:4f:25:0b:f7:17:7e:dd:49:de:5a:6e:78:cd:97:
                    91:62:2a:4a:c8:f2:37:0d:75:27:53:ab:46:b8:73:
                    58:12:87:88:08:c7:93:40:39:10:8a:e3:a7:ef:10:
                    e0:30:27:b7:b9:9c:36:7b:ad:a7:c4:03:0d:1f:bc:
                    5c:89:55:cf:1d:0f:6c:d2:b8:e8:06:88:79:85:e9:
                    6f:de:64:1e:1b:65:9f:ec:42:c6:df:5e:72:76:07:
                    14:bd:b9:22:4f:1d:17:95:b7:5a:a8:d9:7e:87:cd:
                    1d:79:a2:2c:0b:88:b2:8d:a2:18:85:79:73:b5:75:
                    70:e3:12:09:be:d8:96:f0:b9:25:bc:30:c8:8c:50:
                    b1:71:74:56:7b:65:6f:1c:fd:c4:aa:c8:8c:73:2c:
                    55:e9:98:b1:dd:8f:2d:d8:f3:81:bd:86:c2:d2:95:
                    fa:fb:cb:ff:12:81:2e:62:ce:44:dd:fd:10:24:9e:
                    9f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:14:FD:7F:7A:FF:D1:2C:03:6B:FA:8A:B7:DA:6C:CE:AE:E9:0F:C1
            X509v3 Authority Key Identifier:
                keyid:0E:D6:B6:73:F8:63:9E:1B:FA:76:C3:D0:C7:C8:6D:57:5A:E0:F0:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51720634CD7ECF83983D328C94314C3F01C0804FD39ADA5CCBF37C47359FED95/0/0ED6B673F8639E1BFA76C3D0C7C86D575AE0F0CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0ED6B673F8639E1BFA76C3D0C7C86D575AE0F0CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51720634CD7ECF83983D328C94314C3F01C0804FD39ADA5CCBF37C47359FED95/0/3139302e3130372e3230382e302f32322d3234203d3e20323632323433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bc:d6:70:9b:fe:c4:21:2b:b5:22:f9:3a:4d:d4:b9:0d:a4:45:
         10:29:9e:6c:c1:1c:34:26:17:6e:0e:4e:e1:a6:2e:42:fe:f8:
         d4:08:77:2c:78:c6:6b:2f:e8:6b:48:be:41:a4:bd:5d:4b:99:
         7a:dc:7b:32:2a:fc:ea:ca:78:34:ea:66:09:db:89:9e:33:91:
         74:42:b7:8e:cb:46:eb:86:72:64:c0:a5:0d:be:77:da:da:b3:
         06:cc:87:bc:b0:ab:21:66:5f:40:c3:a4:8f:30:25:ec:7b:7b:
         ca:75:9d:c1:12:11:81:59:9a:ac:71:1c:2d:80:63:58:72:f7:
         dd:17:4f:8c:d6:43:df:d7:42:6b:c6:55:71:8e:4e:c5:50:0f:
         8a:c9:f0:8b:66:3a:da:2e:a6:1f:18:c7:62:31:c9:79:d6:a2:
         93:d1:87:2d:ae:da:6c:c1:30:3d:78:6f:f4:d3:03:5f:4c:25:
         fd:74:20:3c:af:0a:89:8b:ac:b9:10:cc:55:d8:d8:b9:6a:b1:
         e8:f4:91:24:c0:29:ef:b1:1b:1d:09:45:08:37:c2:32:b9:66:
         34:04:ec:e1:71:a1:38:83:b9:18:31:ad:6e:84:8c:f4:ac:92:
         cb:fc:90:96:de:83:41:75:6b:f7:e9:80:fa:b2:0c:8a:6e:61:
         64:ff:66:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:13:12 2026 by rpki-client