Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e38382e3133382e302f32342d3234203d3e203532323333.roa
File:                     3139302e38382e3133382e302f32342d3234203d3e203532323333.roa (raw, json)
Hash identifier:          3nEHNMNCeh/fLhg7Gscxqy2pKYizgAxtQes4VSy0fwM=
Subject key identifier:   7A:C6:15:CF:FF:F0:B9:E3:AD:B9:4C:41:4A:AB:A2:5D:DC:37:43:EA
Certificate issuer:       /CN=237D63DAE61C3211909C89DEBD463B26F873E44B
Certificate serial:       12C3181603711A75B38B72F19284653B09BABD0C
Authority key identifier: 23:7D:63:DA:E6:1C:32:11:90:9C:89:DE:BD:46:3B:26:F8:73:E4:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e38382e3133382e302f32342d3234203d3e203532323333.roa
Signing time:             Thu 19 Feb 2026 19:31:23 +0000
ROA not before:           Thu 19 Feb 2026 19:26:23 +0000
ROA not after:            Thu 18 Feb 2027 19:31:23 +0000
asID:                     52233
IP address blocks:        190.88.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Mar 2026 12:02:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:c3:18:16:03:71:1a:75:b3:8b:72:f1:92:84:65:3b:09:ba:bd:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=237D63DAE61C3211909C89DEBD463B26F873E44B
        Validity
            Not Before: Feb 19 19:26:23 2026 GMT
            Not After : Feb 18 19:31:23 2027 GMT
        Subject: CN=7AC615CFFFF0B9E3ADB94C414AABA25DDC3743EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:07:e6:76:20:62:8f:c7:cf:03:4b:31:d4:ed:
                    a7:20:40:48:5c:02:4b:b8:79:18:2a:74:7a:c4:8c:
                    ac:cd:57:e4:8c:66:b6:23:49:67:0d:c7:7d:2b:6b:
                    ea:10:09:d4:06:7b:c7:e5:35:ff:bd:9d:27:ed:39:
                    71:24:3d:40:e7:b8:18:ca:40:09:2c:6f:56:08:6b:
                    b9:fc:86:0f:8e:aa:a6:f5:fc:75:6a:7c:e1:36:d1:
                    76:4a:06:c7:0e:1d:2b:9f:b8:33:db:b7:99:0a:7f:
                    0d:6d:d5:5e:41:75:a0:39:ec:d6:33:53:2f:93:5c:
                    4e:19:ec:fe:7e:51:44:5d:94:fd:e1:05:1a:33:8e:
                    d3:0d:e7:e6:6c:c4:6f:d8:4c:38:53:e8:e0:66:1f:
                    da:77:34:44:c3:02:9e:a0:fa:0f:28:c4:76:5e:e0:
                    ec:55:ea:db:1b:c5:43:7c:09:8b:e3:a7:3e:63:8e:
                    17:bb:f5:19:55:a8:ae:bf:30:bf:22:81:38:a0:53:
                    19:5e:f3:bb:f8:c9:52:08:fd:19:af:3f:eb:38:27:
                    45:b0:49:e6:9c:2f:0f:2f:75:59:20:5d:8c:25:bc:
                    70:32:8c:06:a6:e9:70:57:2d:87:8b:15:22:90:55:
                    e2:bd:19:9d:41:dc:65:a8:8a:95:5f:77:ca:7a:29:
                    fa:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:C6:15:CF:FF:F0:B9:E3:AD:B9:4C:41:4A:AB:A2:5D:DC:37:43:EA
            X509v3 Authority Key Identifier:
                keyid:23:7D:63:DA:E6:1C:32:11:90:9C:89:DE:BD:46:3B:26:F8:73:E4:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e38382e3133382e302f32342d3234203d3e203532323333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.88.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:4f:74:24:2d:24:9e:96:bf:db:7c:1a:18:5e:6b:d6:86:44:
         ac:76:8a:35:06:30:1b:11:47:80:20:8a:7a:ed:0e:45:23:04:
         9d:15:86:6f:fe:8d:e5:1f:24:6e:26:6d:14:ec:b2:ea:59:ca:
         7b:d8:aa:45:38:17:d8:bd:9a:7b:95:06:7b:da:b9:6f:09:c5:
         b2:f6:98:d5:99:dd:61:0c:c4:41:86:07:f1:b3:4f:c9:0b:b6:
         d1:27:e0:ec:66:4b:8c:d8:87:b3:8e:6a:3a:13:4a:f1:a7:f3:
         13:b5:47:15:96:ba:80:b8:8e:77:0a:77:df:bf:72:2a:a3:7e:
         dd:49:1f:d0:40:02:56:4b:51:1a:2b:f2:73:58:24:15:b8:5c:
         88:e1:60:75:6d:ad:a7:9d:02:8a:7e:81:eb:4f:9f:43:e0:e0:
         bd:ac:22:3b:aa:1d:97:a5:86:a6:72:81:fe:89:59:73:6e:dc:
         39:cf:25:3e:11:e1:f4:89:80:32:d4:11:89:34:cd:a9:58:a0:
         70:0f:df:4c:27:f3:3d:8b:54:47:88:11:b7:47:0d:43:ba:65:
         a8:b9:af:b6:44:2b:0e:74:0a:8e:29:2e:21:69:b4:0c:45:31:
         2d:f7:3c:c1:ac:a6:e8:a7:34:06:27:4f:b1:e6:b4:19:5f:56:
         e0:2f:69:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 03:49:39 2026 by rpki-client