Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3130382e3139382e302f32342d3234203d3e203532323533.roa
File:                     3139302e3130382e3139382e302f32342d3234203d3e203532323533.roa (raw, json)
Hash identifier:          veDsuhwkS/rEaTdVmiND8mCO4RFya2dkvau/goghRiI=
Subject key identifier:   2C:81:9F:D8:70:90:19:DA:69:61:3B:A5:5D:25:C9:C7:12:AB:BE:26
Certificate issuer:       /CN=430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14
Certificate serial:       3B19BDB870ADF11FC8CE7EE1D0DD326A77C19493
Authority key identifier: 43:0B:8C:C1:EC:30:DC:6E:F3:BF:59:36:9D:AA:6F:85:C0:22:BC:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3130382e3139382e302f32342d3234203d3e203532323533.roa
Signing time:             Tue 06 Jan 2026 19:23:33 +0000
ROA not before:           Tue 06 Jan 2026 19:18:33 +0000
ROA not after:            Tue 05 Jan 2027 19:23:33 +0000
asID:                     52253
IP address blocks:        190.108.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.crl
                          rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Mar 2026 19:28:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:19:bd:b8:70:ad:f1:1f:c8:ce:7e:e1:d0:dd:32:6a:77:c1:94:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14
        Validity
            Not Before: Jan  6 19:18:33 2026 GMT
            Not After : Jan  5 19:23:33 2027 GMT
        Subject: CN=2C819FD8709019DA69613BA55D25C9C712ABBE26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b9:dd:2a:18:5d:74:93:3f:2b:89:61:01:db:
                    2a:43:b6:05:d4:42:88:22:2b:68:c3:d7:86:39:c8:
                    ce:2f:96:40:7b:7d:cd:23:57:2e:15:10:39:81:28:
                    d9:6f:e6:3e:4b:02:17:ee:fd:71:6b:d9:20:95:74:
                    3d:71:04:02:90:3e:88:32:fc:b4:a5:22:da:c8:a7:
                    a4:ca:5a:d4:74:b3:12:a8:b0:b5:7a:ae:e6:9f:1b:
                    5f:c2:f4:c3:e5:ad:c0:36:3a:79:54:84:91:72:bf:
                    24:3e:f6:99:99:83:34:28:52:a4:23:5e:af:f9:f5:
                    62:97:2b:a0:fb:fe:4f:99:4e:d0:a0:24:89:ee:69:
                    6b:e3:3f:2a:c2:4e:ef:42:78:4b:f4:bf:56:ce:1d:
                    86:20:1e:73:bc:2e:79:df:b3:59:af:91:44:18:ee:
                    5b:be:8f:f2:58:bb:21:6a:23:a2:7f:ba:b8:32:0c:
                    80:9f:25:ea:cf:83:35:0a:30:4a:e8:79:a1:11:ff:
                    b2:55:26:50:0e:2a:72:3b:d2:71:fe:83:f6:74:d9:
                    05:b9:b7:e1:7b:36:85:75:90:05:ad:6e:4f:ab:6f:
                    8b:f4:1b:76:ad:15:b9:b6:c5:ea:13:b6:76:e9:19:
                    70:c4:9c:42:aa:b2:7f:f2:b1:03:06:7f:33:c5:9b:
                    3c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:81:9F:D8:70:90:19:DA:69:61:3B:A5:5D:25:C9:C7:12:AB:BE:26
            X509v3 Authority Key Identifier:
                keyid:43:0B:8C:C1:EC:30:DC:6E:F3:BF:59:36:9D:AA:6F:85:C0:22:BC:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3130382e3139382e302f32342d3234203d3e203532323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.108.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:06:14:90:6f:39:87:ae:9f:85:bf:4b:f8:b6:d9:5b:0f:5e:
         00:fc:bc:02:26:0d:4d:4c:8f:cb:29:99:2d:6e:92:5e:68:dc:
         ca:5c:cb:32:c7:46:fa:72:0f:2f:e6:42:e3:55:91:b1:ed:47:
         ee:b3:11:63:cb:d5:1b:6f:60:45:62:a8:fc:ec:80:b1:10:0f:
         1e:33:90:54:b1:67:ff:c5:d5:72:dc:06:a0:9c:cb:8b:b6:31:
         2c:f9:71:5e:8a:f2:66:0d:8e:d2:bc:b5:a0:e4:44:8f:3d:10:
         d9:c4:f5:6b:92:5f:e0:24:6f:e2:05:c8:79:8b:4e:0f:cf:d2:
         f0:61:a8:c7:da:a2:dd:26:c6:fb:5a:db:9b:e4:76:f4:37:59:
         3b:91:88:42:10:df:37:76:23:f6:94:10:6f:68:a3:95:e7:f5:
         16:2a:2a:99:90:e2:0c:b0:11:0b:34:24:3d:59:f4:57:59:ad:
         9a:15:bb:f5:ab:9d:49:1b:4e:07:a7:b4:f6:e7:91:d8:90:23:
         1f:a8:d7:af:8b:e3:4b:5e:fa:2e:6b:c0:74:e6:00:b6:b2:a4:
         2f:2b:41:33:fa:29:f3:4d:4b:f8:8f:cc:cc:f1:2e:02:bb:d1:
         2a:89:b5:c9:2a:08:ae:3b:a1:6f:99:82:5d:6c:c7:cb:63:4c:
         bb:83:af:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:20:47 2026 by rpki-client