Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/79AB99C105ED1087E2A1BD21EAE402A69718A9BAE4D9F2EF391C083368F38147/0/3139302e31352e322e302f32342d3234203d3e203237393531.roa
File:                     3139302e31352e322e302f32342d3234203d3e203237393531.roa (raw, json)
Hash identifier:          Bap3m4iHlIxz7tkglGITnXSSJt1HuSLRz++96QY0nXA=
Subject key identifier:   E9:13:D5:16:F0:DB:E5:4E:C9:CD:D4:85:CE:B7:1C:63:9F:A3:99:ED
Certificate issuer:       /CN=F8097A80F65CAD011E316F610FD2A7189B6F9D80
Certificate serial:       200BA9F1085F5E3B6C0073E527DA7F6858828D7E
Authority key identifier: F8:09:7A:80:F6:5C:AD:01:1E:31:6F:61:0F:D2:A7:18:9B:6F:9D:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8097A80F65CAD011E316F610FD2A7189B6F9D80.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/79AB99C105ED1087E2A1BD21EAE402A69718A9BAE4D9F2EF391C083368F38147/0/3139302e31352e322e302f32342d3234203d3e203237393531.roa
Signing time:             Tue 14 Apr 2026 22:25:00 +0000
ROA not before:           Tue 14 Apr 2026 22:20:00 +0000
ROA not after:            Tue 13 Apr 2027 22:25:00 +0000
asID:                     27951
IP address blocks:        190.15.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/79AB99C105ED1087E2A1BD21EAE402A69718A9BAE4D9F2EF391C083368F38147/0/F8097A80F65CAD011E316F610FD2A7189B6F9D80.crl
                          rsync://repository.lacnic.net/rpki/lacnic/79AB99C105ED1087E2A1BD21EAE402A69718A9BAE4D9F2EF391C083368F38147/0/F8097A80F65CAD011E316F610FD2A7189B6F9D80.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8097A80F65CAD011E316F610FD2A7189B6F9D80.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Apr 2026 05:58:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:0b:a9:f1:08:5f:5e:3b:6c:00:73:e5:27:da:7f:68:58:82:8d:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8097A80F65CAD011E316F610FD2A7189B6F9D80
        Validity
            Not Before: Apr 14 22:20:00 2026 GMT
            Not After : Apr 13 22:25:00 2027 GMT
        Subject: CN=E913D516F0DBE54EC9CDD485CEB71C639FA399ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f3:9f:8a:48:c7:09:15:12:53:62:d9:72:02:
                    a2:ec:8b:e5:21:f0:d9:10:47:13:b7:79:85:23:4c:
                    9d:84:62:8a:8d:82:51:8e:8b:35:31:b3:f6:f9:48:
                    28:70:d6:0d:af:9c:fe:0b:09:6f:c6:a4:f9:aa:56:
                    15:8d:7e:89:03:18:89:a6:b2:ed:ce:17:e3:e0:86:
                    49:db:7d:22:b4:95:f5:85:e2:13:37:4b:2d:f1:35:
                    63:e8:77:21:e7:b9:9d:cc:69:b9:19:61:d1:e8:db:
                    d9:a2:9a:90:ca:5e:22:a3:ba:4f:c3:3b:1c:de:c1:
                    5d:58:5b:20:bd:8b:10:ae:76:ea:bd:69:28:c7:8c:
                    59:7e:9d:c0:2f:a8:af:e5:7f:33:70:cd:3f:83:13:
                    db:8e:18:11:7d:43:47:bd:1b:28:f3:cb:74:c4:3e:
                    81:ed:27:0b:79:ad:d0:46:0f:7b:ae:69:1d:7b:d1:
                    13:68:2d:ff:d4:22:3f:e2:3e:c0:22:14:2b:e4:be:
                    ef:c8:18:25:00:ba:2b:4c:aa:86:72:30:3a:c2:fd:
                    a5:0d:6a:08:35:96:5d:21:f4:59:3b:40:89:cd:1b:
                    8e:db:aa:50:5c:e8:2c:23:d6:55:8c:17:83:46:34:
                    16:63:9e:4d:67:8f:05:7f:cd:6d:96:9a:77:d3:26:
                    f6:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:13:D5:16:F0:DB:E5:4E:C9:CD:D4:85:CE:B7:1C:63:9F:A3:99:ED
            X509v3 Authority Key Identifier:
                keyid:F8:09:7A:80:F6:5C:AD:01:1E:31:6F:61:0F:D2:A7:18:9B:6F:9D:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/79AB99C105ED1087E2A1BD21EAE402A69718A9BAE4D9F2EF391C083368F38147/0/F8097A80F65CAD011E316F610FD2A7189B6F9D80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8097A80F65CAD011E316F610FD2A7189B6F9D80.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/79AB99C105ED1087E2A1BD21EAE402A69718A9BAE4D9F2EF391C083368F38147/0/3139302e31352e322e302f32342d3234203d3e203237393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.15.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:3a:32:fb:86:72:a8:23:30:73:9a:60:47:00:d3:46:04:7a:
         3c:93:96:85:6d:ea:11:f3:af:ba:52:9d:b1:f5:bb:84:ec:3d:
         39:12:fc:fa:cd:03:1f:9e:34:5d:d5:fa:20:55:94:45:87:19:
         68:57:73:c2:f6:e2:97:e8:e5:93:eb:6f:a7:aa:32:81:e8:ac:
         d6:37:73:6e:a4:30:56:9b:76:f0:7d:1d:71:a9:87:78:ea:c6:
         5d:62:49:dd:97:46:ca:f5:79:fd:c3:1e:05:22:2f:2a:45:bd:
         26:f7:2e:c9:ce:d5:b6:9f:5c:ae:52:2d:27:90:e9:b4:e9:09:
         3d:0b:93:b7:c9:44:f4:05:03:b9:b1:c8:5c:54:61:4d:5c:48:
         63:0c:4a:ac:d5:6f:5d:65:e8:65:aa:c0:ce:a1:1f:d0:b3:db:
         7e:1a:07:c6:2d:02:e6:89:02:1a:62:4a:a8:e9:a8:d4:c5:1a:
         81:36:13:1f:2c:fa:c4:e8:0a:54:fb:1d:17:99:05:3a:ff:4a:
         ef:9a:b1:88:b4:ff:6a:cf:af:17:40:e1:c1:d7:53:45:ad:48:
         10:89:8e:96:1f:ca:d7:30:2e:94:62:c5:6e:55:fd:3b:7c:26:
         c0:f4:b4:a3:c8:3a:78:6e:93:6b:95:78:d6:20:23:c4:e7:99:
         3f:81:92:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:32:50 2026 by rpki-client