Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS19905.roa
File:                     AS19905.roa (raw, json)
Hash identifier:          VAOx9FVKGbrj/2UKyawgfxpNsr6xVa/T2EL9kOKuJaM=
Subject key identifier:   77:56:C7:E3:1C:48:CB:67:AE:2F:4D:7E:30:0B:B8:5F:40:06:D8:D8
Certificate issuer:       /CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
Certificate serial:       2DC3C73AD53B7AB0CC31E857988AF127B87FE419
Authority key identifier: 41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS19905.roa
Signing time:             Wed 01 Apr 2026 13:37:09 +0000
ROA not before:           Wed 01 Apr 2026 13:32:09 +0000
ROA not after:            Wed 31 Mar 2027 13:37:09 +0000
asID:                     19905
IP address blocks:        200.0.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Apr 2026 05:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:c3:c7:3a:d5:3b:7a:b0:cc:31:e8:57:98:8a:f1:27:b8:7f:e4:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
        Validity
            Not Before: Apr  1 13:32:09 2026 GMT
            Not After : Mar 31 13:37:09 2027 GMT
        Subject: CN=7756C7E31C48CB67AE2F4D7E300BB85F4006D8D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:9a:1a:d9:ca:9c:78:7a:25:11:43:c7:0b:ac:
                    9b:fe:f4:a6:bd:ac:a7:68:75:3a:c6:b6:2b:81:a9:
                    9f:49:09:42:9f:5d:57:fc:c2:19:f0:6e:0f:a6:48:
                    24:b1:64:82:37:08:c5:00:8b:e6:65:38:32:fe:1c:
                    05:d4:ec:0f:bc:b0:91:a6:7f:1d:46:36:db:82:73:
                    cb:54:ce:cb:4b:c0:09:2f:f9:d6:e8:03:ea:cf:3a:
                    ab:95:ef:b7:ae:bd:19:bb:76:50:1f:58:c6:9b:07:
                    79:22:e1:33:ac:2a:df:ba:7e:9b:d3:d1:3b:81:59:
                    01:45:07:0f:1e:9f:b0:e2:fa:47:c8:70:99:a7:65:
                    ca:02:c3:f0:b5:71:e3:8a:1a:26:5e:c5:e2:7b:c9:
                    76:4b:65:63:b2:79:e3:1e:f2:ab:1a:08:13:f5:8a:
                    f7:7b:a2:2d:2f:bd:ab:a8:df:f2:41:69:e1:ac:06:
                    a2:7f:44:5d:b7:a0:70:d8:8f:46:62:97:d9:c0:f0:
                    41:31:e1:35:2a:cc:ee:70:c9:c4:db:54:af:8f:a6:
                    ff:51:9d:27:fb:b9:8d:f8:b9:51:94:62:27:be:38:
                    fb:34:b4:23:53:87:69:e2:3e:9c:59:a2:45:73:be:
                    dc:32:d2:4e:0b:92:3f:2d:91:f8:ad:50:cb:60:9b:
                    f4:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:56:C7:E3:1C:48:CB:67:AE:2F:4D:7E:30:0B:B8:5F:40:06:D8:D8
            X509v3 Authority Key Identifier:
                keyid:41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS19905.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:bc:56:07:95:eb:6b:fc:39:9d:fa:ba:30:67:68:39:e5:65:
         08:6b:0e:fb:11:52:b0:c7:8a:7a:18:2b:8b:3e:5a:91:28:80:
         bc:77:f2:de:e1:c4:a4:a2:58:17:e8:f2:25:95:3f:8e:4c:32:
         aa:60:7c:1a:7d:29:82:ae:6c:20:8e:f5:17:30:55:16:92:07:
         f2:19:88:82:5a:6f:11:8a:73:87:81:a9:bc:91:06:bf:e0:a2:
         64:89:4f:6b:36:0d:a2:a7:46:d4:25:2b:bf:41:28:1d:90:09:
         b5:68:b1:94:8a:5f:27:8a:ac:2b:31:38:d6:7d:cd:5d:2f:78:
         f6:62:bb:62:f4:c1:74:21:8b:e1:1d:d9:61:c7:f9:18:f2:69:
         e8:ad:21:68:16:5d:f3:0a:de:62:5d:cd:83:72:42:53:ce:0a:
         ea:ab:cb:f3:af:a9:a4:86:f9:a8:3a:5a:9a:13:74:16:ac:8e:
         b7:4d:29:06:ac:ff:7d:81:64:80:e7:c8:e1:58:0f:cb:60:11:
         d8:21:b6:36:f7:57:d6:1b:39:57:01:d4:89:94:8a:d8:f1:57:
         00:d4:d0:90:95:f5:41:04:c4:60:61:6c:ae:24:21:cd:27:71:
         d5:f7:e0:cd:a5:dd:67:24:21:cb:6e:a5:ec:8e:2f:17:ed:be:
         de:f8:0c:47
-----BEGIN CERTIFICATE-----
MIIFjjCCBHagAwIBAgIULcPHOtU7erDMMehXmIrxJ7h/5BkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDEwODE5QzdDOUI0Qzg1Q0UwQjFEMjI3NDFCRTVFNDBB
MUYwRTdCMTAeFw0yNjA0MDExMzMyMDlaFw0yNzAzMzExMzM3MDlaMDMxMTAvBgNV
BAMTKDc3NTZDN0UzMUM0OENCNjdBRTJGNEQ3RTMwMEJCODVGNDAwNkQ4RDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTmhrZypx4eiURQ8cLrJv+9Ka9
rKdodTrGtiuBqZ9JCUKfXVf8whnwbg+mSCSxZII3CMUAi+ZlODL+HAXU7A+8sJGm
fx1GNtuCc8tUzstLwAkv+dboA+rPOquV77euvRm7dlAfWMabB3ki4TOsKt+6fpvT
0TuBWQFFBw8en7Di+kfIcJmnZcoCw/C1ceOKGiZexeJ7yXZLZWOyeeMe8qsaCBP1
ivd7oi0vvauo3/JBaeGsBqJ/RF23oHDYj0Zil9nA8EEx4TUqzO5wycTbVK+Ppv9R
nSf7uY34uVGUYie+OPs0tCNTh2niPpxZokVzvtwy0k4Lkj8tkfitUMtgm/QtAgMB
AAGjggKYMIIClDAdBgNVHQ4EFgQUd1bH4xxIy2euL01+MAu4X0AG2NgwHwYDVR0j
BBgwFoAUQQgZx8m0yFzgsdInQb5eQKHw57EwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81RDFBNUU2NUFDQjQxNzMzOTg1NUFEQTVBNkM1NDE2REMw
NDFDQ0YwNjQwODAzODQzODk4QkU1NkM0REY2QzMyLzAvNDEwODE5QzdDOUI0Qzg1
Q0UwQjFEMjI3NDFCRTVFNDBBMUYwRTdCMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80MTA4MTlDN0M5QjRDODVDRTBC
MUQyMjc0MUJFNUU0MEExRjBFN0IxLmNlcjCBlwYIKwYBBQUHAQsEgYowgYcwgYQG
CCsGAQUFBzALhnhyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy81RDFBNUU2NUFDQjQxNzMzOTg1NUFEQTVBNkM1NDE2REMwNDFDQ0YwNjQw
ODAzODQzODk4QkU1NkM0REY2QzMyLzAvQVMxOTkwNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMgA/DAN
BgkqhkiG9w0BAQsFAAOCAQEAv7xWB5Xra/w5nfq6MGdoOeVlCGsO+xFSsMeKehgr
iz5akSiAvHfy3uHEpKJYF+jyJZU/jkwyqmB8Gn0pgq5sII71FzBVFpIH8hmIglpv
EYpzh4GpvJEGv+CiZIlPazYNoqdG1CUrv0EoHZAJtWixlIpfJ4qsKzE41n3NXS94
9mK7YvTBdCGL4R3ZYcf5GPJp6K0haBZd8wreYl3Ng3JCU84K6qvL86+ppIb5qDpa
mhN0FqyOt00pBqz/fYFkgOfI4VgPy2AR2CG2NvdX1hs5VwHUiZSK2PFXANTQkJX1
QQTEYGFsriQhzSdx1ffgzaXdZyQhy26l7I4vF+2+3vgMRw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:16:12 2026 by rpki-client