Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/8899E7FA6BC08BE40F2B5F59D0A9C8ABE185D0DC13B8307E0971E96439A2E6AA/0/3139302e3138342e3234302e302f32302d3234203d3e20323632313936.roa
File:                     3139302e3138342e3234302e302f32302d3234203d3e20323632313936.roa (raw, json)
Hash identifier:          /vf4MMUPKLaGlLOT8t7a0ufdDL9C7fWMlWu4UiRrtuc=
Subject key identifier:   1E:E9:E3:D8:59:86:03:49:C9:79:B0:19:DA:92:66:41:0F:64:97:E6
Certificate issuer:       /CN=236265F485589146D372FF70F0BD7364753EFBD3
Certificate serial:       3445A8DBD5AE624F591DF821EB90DDEF3A992E88
Authority key identifier: 23:62:65:F4:85:58:91:46:D3:72:FF:70:F0:BD:73:64:75:3E:FB:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/236265F485589146D372FF70F0BD7364753EFBD3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8899E7FA6BC08BE40F2B5F59D0A9C8ABE185D0DC13B8307E0971E96439A2E6AA/0/3139302e3138342e3234302e302f32302d3234203d3e20323632313936.roa
Signing time:             Wed 07 Oct 2026 20:39:07 +0000
ROA not before:           Wed 07 Oct 2026 20:34:07 +0000
ROA not after:            Wed 06 Oct 2027 20:39:07 +0000
asID:                     262196
IP address blocks:        190.184.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8899E7FA6BC08BE40F2B5F59D0A9C8ABE185D0DC13B8307E0971E96439A2E6AA/0/236265F485589146D372FF70F0BD7364753EFBD3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8899E7FA6BC08BE40F2B5F59D0A9C8ABE185D0DC13B8307E0971E96439A2E6AA/0/236265F485589146D372FF70F0BD7364753EFBD3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/236265F485589146D372FF70F0BD7364753EFBD3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 15:58:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:45:a8:db:d5:ae:62:4f:59:1d:f8:21:eb:90:dd:ef:3a:99:2e:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=236265F485589146D372FF70F0BD7364753EFBD3
        Validity
            Not Before: Oct  7 20:34:07 2026 GMT
            Not After : Oct  6 20:39:07 2027 GMT
        Subject: CN=1EE9E3D859860349C979B019DA9266410F6497E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f4:c8:87:3b:21:56:e5:fa:89:0c:44:42:ab:
                    1b:27:18:c5:93:82:68:31:3a:c7:5a:31:4b:59:9b:
                    cd:60:2c:ec:6b:f2:db:cd:fd:d3:b6:a7:4b:48:48:
                    d4:c4:86:70:f4:8b:f9:d7:6f:07:60:31:bd:c1:64:
                    cf:e2:e2:cf:76:1a:aa:3b:5f:7c:16:44:7a:9e:9a:
                    03:8a:8b:80:99:49:16:a5:21:cb:24:0f:15:79:85:
                    39:13:76:c6:47:1f:40:9c:0d:b8:3b:cb:82:fc:2e:
                    17:56:7b:2c:25:46:73:c9:4f:4d:ad:89:08:ba:09:
                    92:7f:49:8b:f2:17:e1:c7:51:5b:31:44:0a:29:bc:
                    a0:fe:49:9d:89:49:e2:6a:a0:26:6e:bf:ee:04:44:
                    58:2e:c1:2e:d0:36:39:97:9e:dc:2b:f3:f4:04:f7:
                    9b:9c:c0:ac:83:24:59:ba:a7:c9:36:d8:1f:99:52:
                    84:c3:6d:e9:ec:23:fb:e2:a9:9f:df:6e:fe:6f:a6:
                    b8:3b:e2:13:c1:80:4b:e3:9c:1c:b4:ea:68:ba:ed:
                    ea:df:a5:6b:6b:86:38:41:42:a6:e7:e8:08:4a:93:
                    f9:23:6f:0e:e1:22:d3:5a:a6:c6:b2:79:f9:72:20:
                    48:8a:84:9a:91:4f:44:e7:e1:5a:d9:81:41:cd:f5:
                    7b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:E9:E3:D8:59:86:03:49:C9:79:B0:19:DA:92:66:41:0F:64:97:E6
            X509v3 Authority Key Identifier:
                keyid:23:62:65:F4:85:58:91:46:D3:72:FF:70:F0:BD:73:64:75:3E:FB:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8899E7FA6BC08BE40F2B5F59D0A9C8ABE185D0DC13B8307E0971E96439A2E6AA/0/236265F485589146D372FF70F0BD7364753EFBD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/236265F485589146D372FF70F0BD7364753EFBD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8899E7FA6BC08BE40F2B5F59D0A9C8ABE185D0DC13B8307E0971E96439A2E6AA/0/3139302e3138342e3234302e302f32302d3234203d3e20323632313936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.184.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         60:b1:d3:87:4f:12:54:a5:d2:e3:7f:8d:c8:8f:29:ec:92:79:
         c7:55:ae:06:d4:c7:b2:67:f8:d3:88:b1:1c:57:26:c4:9f:0a:
         76:57:26:f4:b1:bf:b7:99:52:2b:7e:df:48:15:25:9a:d7:17:
         e8:c4:da:ca:f2:bc:88:51:b6:f2:bb:94:1b:49:bb:a6:4c:08:
         91:2b:29:1f:89:cd:50:bd:d7:a1:80:51:54:77:e6:20:17:2a:
         ed:54:42:89:7b:d4:b3:59:ab:b6:57:9d:9d:5c:9c:5e:ed:fa:
         07:7b:8d:e6:84:6f:37:38:b6:e2:29:ce:5f:c6:c1:68:42:14:
         74:fe:d0:ce:a8:bb:d1:94:27:15:c5:f8:82:21:46:b1:7e:4b:
         9a:37:e8:ee:4c:68:82:48:0a:31:ba:0c:67:ac:93:16:04:39:
         66:02:25:c9:6e:17:37:11:a5:a6:df:bb:13:06:e2:c5:bb:d1:
         fa:e4:22:0b:62:fc:b8:a8:dd:b8:31:d6:ba:ea:72:76:dd:ea:
         d5:15:19:8d:2f:e1:7f:16:69:80:75:39:b7:89:ea:8a:4d:11:
         fb:06:85:e7:5d:fd:07:c7:dd:e8:2d:af:d9:71:ad:1d:3e:2b:
         83:27:e7:07:ca:62:95:19:84:75:7d:66:b4:23:69:7b:9a:61:
         36:ee:da:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 19:39:26 2026 by rpki-client