Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5E8ABF09873BD996FA3EB465C08EC62FB6C099B4D5F61BF4554B0225AABEFC45/0/3139302e3131322e302e302f31392d3332203d3e203238313131.roa
File:                     3139302e3131322e302e302f31392d3332203d3e203238313131.roa (raw, json)
Hash identifier:          5WaSKBjigham8/hYfil3+ChF4PqAi8xKWwfymlWJLN4=
Subject key identifier:   07:A8:C4:68:44:64:93:73:FD:0F:B7:9B:41:15:A0:D8:D0:F5:0A:30
Certificate issuer:       /CN=3C73FA09D22F6B6DF4BB8512AA9F7196FA1BF118
Certificate serial:       2FD2B0D702BCC1A4E533BA8CFF0FBE07B94C94DD
Authority key identifier: 3C:73:FA:09:D2:2F:6B:6D:F4:BB:85:12:AA:9F:71:96:FA:1B:F1:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C73FA09D22F6B6DF4BB8512AA9F7196FA1BF118.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5E8ABF09873BD996FA3EB465C08EC62FB6C099B4D5F61BF4554B0225AABEFC45/0/3139302e3131322e302e302f31392d3332203d3e203238313131.roa
Signing time:             Fri 17 Apr 2026 12:45:00 +0000
ROA not before:           Fri 17 Apr 2026 12:40:00 +0000
ROA not after:            Fri 16 Apr 2027 12:45:00 +0000
asID:                     28111
IP address blocks:        190.112.0.0/19 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5E8ABF09873BD996FA3EB465C08EC62FB6C099B4D5F61BF4554B0225AABEFC45/0/3C73FA09D22F6B6DF4BB8512AA9F7196FA1BF118.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5E8ABF09873BD996FA3EB465C08EC62FB6C099B4D5F61BF4554B0225AABEFC45/0/3C73FA09D22F6B6DF4BB8512AA9F7196FA1BF118.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C73FA09D22F6B6DF4BB8512AA9F7196FA1BF118.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 04:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:d2:b0:d7:02:bc:c1:a4:e5:33:ba:8c:ff:0f:be:07:b9:4c:94:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C73FA09D22F6B6DF4BB8512AA9F7196FA1BF118
        Validity
            Not Before: Apr 17 12:40:00 2026 GMT
            Not After : Apr 16 12:45:00 2027 GMT
        Subject: CN=07A8C46844649373FD0FB79B4115A0D8D0F50A30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f6:0e:d6:90:6d:59:90:b5:62:28:70:73:93:
                    58:d5:a5:9e:63:f1:82:9f:02:3f:ea:09:bd:22:cd:
                    64:62:f7:f8:e4:62:dd:7b:1b:34:04:d7:c7:6e:8e:
                    ae:6e:cd:24:af:e8:b9:38:c8:b5:df:70:c9:07:bd:
                    1c:a2:17:bd:94:c4:d7:ea:fb:80:31:2b:2f:4a:15:
                    cc:ef:b0:96:9d:17:a4:55:4f:ac:06:7a:32:15:60:
                    1d:15:43:3c:00:f3:46:35:58:fd:be:b0:39:a9:07:
                    d0:ab:a3:d9:0b:6e:27:c7:38:3c:19:ea:ac:75:de:
                    65:f8:58:82:f5:38:34:d0:85:be:97:b5:c2:d6:82:
                    e2:87:b6:f7:ac:35:e4:4b:9e:05:f6:75:41:ba:89:
                    10:dc:56:19:bb:fa:3d:9e:a7:be:fa:9b:eb:a2:7e:
                    4f:e7:8a:56:86:66:8d:e0:4d:1b:c3:93:ac:e7:a6:
                    96:18:60:fa:3e:56:0c:8d:d9:fd:04:7f:fc:4f:36:
                    1a:1e:a4:a1:64:26:0e:6a:18:96:05:da:57:a9:d3:
                    7b:c1:3c:7f:05:8a:19:17:64:c3:71:22:0a:06:e4:
                    e9:57:9c:7a:58:5d:18:30:7a:ed:cc:50:68:c3:8f:
                    ca:ea:7a:fe:02:21:b9:e2:d7:4c:50:7b:5d:57:9b:
                    af:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:A8:C4:68:44:64:93:73:FD:0F:B7:9B:41:15:A0:D8:D0:F5:0A:30
            X509v3 Authority Key Identifier:
                keyid:3C:73:FA:09:D2:2F:6B:6D:F4:BB:85:12:AA:9F:71:96:FA:1B:F1:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5E8ABF09873BD996FA3EB465C08EC62FB6C099B4D5F61BF4554B0225AABEFC45/0/3C73FA09D22F6B6DF4BB8512AA9F7196FA1BF118.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C73FA09D22F6B6DF4BB8512AA9F7196FA1BF118.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5E8ABF09873BD996FA3EB465C08EC62FB6C099B4D5F61BF4554B0225AABEFC45/0/3139302e3131322e302e302f31392d3332203d3e203238313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a4:eb:c9:f9:08:e4:7a:9f:21:56:2b:5f:17:39:bf:34:87:17:
         02:a7:ec:b1:40:e2:95:67:70:2d:46:1c:88:70:e1:d7:3a:f0:
         c8:9a:de:b6:80:56:34:36:aa:73:78:35:f8:a0:27:c6:83:4a:
         ba:2f:d3:ad:ea:af:3a:c9:3e:7a:d6:66:dc:de:36:be:39:92:
         5a:60:3b:7e:07:d2:6d:6c:7d:64:d3:e6:82:02:02:47:6c:1f:
         11:a0:ac:20:6b:0f:14:9a:3f:45:87:7c:03:99:a8:8e:b3:93:
         c0:b1:ad:22:09:af:94:58:8c:64:d9:e3:71:17:83:46:07:6d:
         9c:87:cf:32:ce:f1:8f:03:92:db:98:c7:29:64:65:5b:c1:f6:
         d3:f9:05:51:74:a2:b6:f1:76:4b:d0:5d:98:66:88:90:a8:50:
         00:66:41:51:83:8d:ca:fe:4c:56:09:1f:c2:98:16:1d:84:1f:
         11:39:90:3a:d2:6c:ba:e7:8e:3e:25:1a:a0:1a:16:ef:30:7a:
         1a:5a:ce:d2:9b:f1:c4:ef:b2:88:2c:14:e7:4f:f9:6d:8b:c5:
         13:c1:a5:14:d9:13:95:06:16:d3:c5:b0:b2:56:fd:d7:9a:81:
         3a:17:be:b9:2d:a8:9e:64:19:83:d2:de:19:0e:ad:34:23:4d:
         43:74:f4:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:56:48 2026 by rpki-client