Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/87E5152B40CF394122FAABC707601C426819C7183D5E425B4E92E928388E952A/0/3136302e31392e3230302e302f32322d3234203d3e203532343339.roa
File:                     3136302e31392e3230302e302f32322d3234203d3e203532343339.roa (raw, json)
Hash identifier:          3ojPFGY3aIxlVyRRVzkqPmQESD/spA15UDQl2CVvShM=
Subject key identifier:   4E:1A:53:A5:9D:0F:D9:E1:AA:EE:45:4D:E5:A1:31:6F:5C:46:BA:91
Certificate issuer:       /CN=DC24274E5C8E92342E101D071FFDFA45EB73464D
Certificate serial:       2EBED853B9641048DB7C4EE11F31736E6E6A1C1E
Authority key identifier: DC:24:27:4E:5C:8E:92:34:2E:10:1D:07:1F:FD:FA:45:EB:73:46:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC24274E5C8E92342E101D071FFDFA45EB73464D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/87E5152B40CF394122FAABC707601C426819C7183D5E425B4E92E928388E952A/0/3136302e31392e3230302e302f32322d3234203d3e203532343339.roa
Signing time:             Thu 09 Apr 2026 01:38:08 +0000
ROA not before:           Thu 09 Apr 2026 01:33:08 +0000
ROA not after:            Thu 08 Apr 2027 01:38:08 +0000
asID:                     52439
IP address blocks:        160.19.200.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/87E5152B40CF394122FAABC707601C426819C7183D5E425B4E92E928388E952A/0/DC24274E5C8E92342E101D071FFDFA45EB73464D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/87E5152B40CF394122FAABC707601C426819C7183D5E425B4E92E928388E952A/0/DC24274E5C8E92342E101D071FFDFA45EB73464D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC24274E5C8E92342E101D071FFDFA45EB73464D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 04:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:be:d8:53:b9:64:10:48:db:7c:4e:e1:1f:31:73:6e:6e:6a:1c:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC24274E5C8E92342E101D071FFDFA45EB73464D
        Validity
            Not Before: Apr  9 01:33:08 2026 GMT
            Not After : Apr  8 01:38:08 2027 GMT
        Subject: CN=4E1A53A59D0FD9E1AAEE454DE5A1316F5C46BA91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5a:f5:48:a0:f5:92:90:7b:e8:37:a1:a3:bc:
                    94:35:a8:9d:a9:d5:d7:04:d7:07:11:46:48:82:a4:
                    6e:23:f0:c2:a9:18:9e:04:e8:9e:ce:f0:8b:cf:25:
                    ec:5b:f6:dc:b0:71:cc:a0:bf:db:a3:ac:90:ff:1c:
                    4f:92:61:6c:34:62:2d:a7:bc:3f:06:00:c6:aa:fd:
                    e5:c3:30:3a:dd:1d:8c:08:e0:76:8d:0a:ba:8b:76:
                    cc:31:74:98:fa:6f:ee:3a:c2:8f:9a:45:a2:8b:09:
                    2a:33:5a:16:33:b9:a1:d4:bf:0e:0b:a7:31:b1:6a:
                    dd:22:fe:32:de:70:41:34:6c:6a:b1:1b:45:05:fa:
                    b1:bf:79:22:cf:14:00:94:e7:4d:34:a5:e5:39:1f:
                    88:09:94:06:1d:0c:2d:44:4a:e0:20:15:03:c9:8a:
                    11:cc:73:2a:5a:b6:70:c4:3c:bd:1e:62:a2:ac:51:
                    c9:fd:08:bf:27:ba:72:ac:be:87:35:0a:72:e4:a3:
                    27:28:f2:62:48:7a:a8:90:9b:ac:38:60:e2:1e:78:
                    64:6c:ef:95:b8:3a:c6:09:cb:c2:3e:e2:d7:78:54:
                    f3:c4:5b:ac:91:e8:a2:db:3c:45:36:06:7b:6d:ed:
                    50:7f:82:27:fd:81:b9:3d:5d:e8:17:40:9c:0a:8a:
                    21:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:1A:53:A5:9D:0F:D9:E1:AA:EE:45:4D:E5:A1:31:6F:5C:46:BA:91
            X509v3 Authority Key Identifier:
                keyid:DC:24:27:4E:5C:8E:92:34:2E:10:1D:07:1F:FD:FA:45:EB:73:46:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/87E5152B40CF394122FAABC707601C426819C7183D5E425B4E92E928388E952A/0/DC24274E5C8E92342E101D071FFDFA45EB73464D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC24274E5C8E92342E101D071FFDFA45EB73464D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/87E5152B40CF394122FAABC707601C426819C7183D5E425B4E92E928388E952A/0/3136302e31392e3230302e302f32322d3234203d3e203532343339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.19.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         07:93:ba:fe:b7:12:8f:67:7c:f9:6d:3e:b5:82:03:75:f5:77:
         70:f1:f3:ea:44:56:de:fb:9d:97:aa:30:5f:ac:42:a0:de:13:
         24:37:ac:74:9c:21:81:c2:7a:f8:c5:4a:f4:a4:c0:35:61:fd:
         54:cc:1e:56:30:9a:7a:15:25:87:3a:b1:b9:3b:3b:13:62:97:
         a8:8e:81:48:1c:ea:82:1d:74:35:20:74:18:d3:62:18:67:4c:
         03:f8:c6:ac:db:f7:58:22:fe:63:01:7c:13:f4:93:2a:e9:68:
         20:cc:bf:d6:c8:1f:6e:71:d6:81:bf:40:03:48:d7:9b:5b:cf:
         4e:82:17:60:0d:b8:25:6d:5f:c7:00:ec:a5:06:0a:64:a5:2d:
         37:64:2a:b8:b2:f9:5f:96:b5:f0:fa:e9:dc:f1:57:4c:c4:98:
         c0:49:0d:a6:25:f7:51:96:2e:cf:0b:8e:a4:32:82:1c:b6:24:
         e1:64:fe:8b:fe:4d:7e:d1:00:50:1d:28:74:73:83:fd:29:f1:
         f9:dd:a3:ea:7c:36:b7:e2:c4:86:1d:28:d7:61:dc:0f:fe:89:
         fd:80:18:fd:56:a2:3b:27:ba:5c:f2:58:89:56:10:73:5c:e4:
         ec:31:96:68:5b:d0:78:bb:90:02:68:0b:6d:45:de:32:c5:43:
         11:38:8c:88
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIULr7YU7lkEEjbfE7hHzFzbm5qHB4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREMyNDI3NEU1QzhFOTIzNDJFMTAxRDA3MUZGREZBNDVF
QjczNDY0RDAeFw0yNjA0MDkwMTMzMDhaFw0yNzA0MDgwMTM4MDhaMDMxMTAvBgNV
BAMTKDRFMUE1M0E1OUQwRkQ5RTFBQUVFNDU0REU1QTEzMTZGNUM0NkJBOTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsWvVIoPWSkHvoN6GjvJQ1qJ2p
1dcE1wcRRkiCpG4j8MKpGJ4E6J7O8IvPJexb9tywccygv9ujrJD/HE+SYWw0Yi2n
vD8GAMaq/eXDMDrdHYwI4HaNCrqLdswxdJj6b+46wo+aRaKLCSozWhYzuaHUvw4L
pzGxat0i/jLecEE0bGqxG0UF+rG/eSLPFACU5000peU5H4gJlAYdDC1ESuAgFQPJ
ihHMcypatnDEPL0eYqKsUcn9CL8nunKsvoc1CnLkoyco8mJIeqiQm6w4YOIeeGRs
75W4OsYJy8I+4td4VPPEW6yR6KLbPEU2Bntt7VB/gif9gbk9XegXQJwKiiGfAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUThpTpZ0P2eGq7kVN5aExb1xGupEwHwYDVR0j
BBgwFoAU3CQnTlyOkjQuEB0HH/36RetzRk0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84N0U1MTUyQjQwQ0YzOTQxMjJGQUFCQzcwNzYwMUM0MjY4
MTlDNzE4M0Q1RTQyNUI0RTkyRTkyODM4OEU5NTJBLzAvREMyNDI3NEU1QzhFOTIz
NDJFMTAxRDA3MUZGREZBNDVFQjczNDY0RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EQzI0Mjc0RTVDOEU5MjM0MkUx
MDFEMDcxRkZERkE0NUVCNzM0NjRELmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODdFNTE1MkI0MENGMzk0MTIyRkFBQkM3MDc2MDFDNDI2ODE5QzcxODNE
NUU0MjVCNEU5MkU5MjgzODhFOTUyQS8wLzMxMzYzMDJlMzEzOTJlMzIzMDMwMmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzUzMjM0MzMzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAqATyDAN
BgkqhkiG9w0BAQsFAAOCAQEAB5O6/rcSj2d8+W0+tYIDdfV3cPHz6kRW3vudl6ow
X6xCoN4TJDesdJwhgcJ6+MVK9KTANWH9VMweVjCaehUlhzqxuTs7E2KXqI6BSBzq
gh10NSB0GNNiGGdMA/jGrNv3WCL+YwF8E/STKuloIMy/1sgfbnHWgb9AA0jXm1vP
ToIXYA24JW1fxwDspQYKZKUtN2QquLL5X5a18Prp3PFXTMSYwEkNpiX3UZYuzwuO
pDKCHLYk4WT+i/5NftEAUB0odHOD/Snx+d2j6nw2t+LEhh0o12HcD/6J/YAY/Vai
Oye6XPJYiVYQc1zk7DGWaFvQeLuQAmgLbUXeMsVDETiMiA==
-----END CERTIFICATE-----
Generated at Sat Apr 18 01:16:47 2026 by rpki-client