Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e38382e3133392e302f32342d3234203d3e203532323333.roa
File:                     3139302e38382e3133392e302f32342d3234203d3e203532323333.roa (raw, json)
Hash identifier:          JU1601uWWmAYw7Lztz1a0220EyQGPw0nAsUa0IVseUE=
Subject key identifier:   09:68:D2:58:BF:C8:A1:34:28:71:1E:D1:8E:1D:A5:60:D3:41:DA:6D
Certificate issuer:       /CN=237D63DAE61C3211909C89DEBD463B26F873E44B
Certificate serial:       057489FC835F9794F84F76B1B356A4BEC3C468C4
Authority key identifier: 23:7D:63:DA:E6:1C:32:11:90:9C:89:DE:BD:46:3B:26:F8:73:E4:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e38382e3133392e302f32342d3234203d3e203532323333.roa
Signing time:             Thu 19 Feb 2026 19:31:23 +0000
ROA not before:           Thu 19 Feb 2026 19:26:23 +0000
ROA not after:            Thu 18 Feb 2027 19:31:23 +0000
asID:                     52233
IP address blocks:        190.88.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Mar 2026 12:02:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:74:89:fc:83:5f:97:94:f8:4f:76:b1:b3:56:a4:be:c3:c4:68:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=237D63DAE61C3211909C89DEBD463B26F873E44B
        Validity
            Not Before: Feb 19 19:26:23 2026 GMT
            Not After : Feb 18 19:31:23 2027 GMT
        Subject: CN=0968D258BFC8A13428711ED18E1DA560D341DA6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:cc:e5:1b:c5:cb:42:e6:b2:c6:38:b8:61:7a:
                    25:b2:95:32:ff:2e:19:d4:b4:a7:c7:5b:6f:8e:20:
                    7a:d8:c9:33:83:ad:04:62:26:3c:b3:ef:66:eb:e7:
                    f6:4b:23:cf:9c:b0:37:fa:b5:4d:e4:3b:a1:39:94:
                    79:13:90:5e:34:fb:9c:07:78:b7:8a:71:4b:13:2e:
                    88:d0:ec:84:2e:70:4b:eb:ce:44:e1:13:be:30:fe:
                    fa:0d:24:9d:a9:00:78:2d:ca:2b:81:10:b4:49:6d:
                    a2:1d:8d:3c:dd:ee:a8:f4:d6:79:b4:3c:04:1d:bb:
                    a8:bc:70:f4:68:13:4c:aa:2d:bf:84:ca:4f:f8:6b:
                    25:3c:c0:83:2c:d5:5b:0a:95:38:3e:da:b0:82:4f:
                    55:6a:ba:11:27:14:f2:9e:8b:18:bc:2d:77:f6:f9:
                    2f:3c:45:5b:69:6d:f4:bd:ef:f5:97:84:b3:f2:37:
                    a1:e6:5d:27:0e:6c:c3:c7:73:57:b3:74:e9:5f:37:
                    f0:98:4e:e7:c5:04:b8:aa:d0:be:78:e1:5a:ff:c0:
                    f7:3a:47:c5:05:b4:4b:b4:ff:05:3a:13:73:bd:80:
                    1a:65:23:13:8e:c5:8d:be:3b:11:34:74:cb:47:d2:
                    84:b9:1e:0e:5b:cf:16:dd:08:fe:4e:2e:52:af:49:
                    9a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:68:D2:58:BF:C8:A1:34:28:71:1E:D1:8E:1D:A5:60:D3:41:DA:6D
            X509v3 Authority Key Identifier:
                keyid:23:7D:63:DA:E6:1C:32:11:90:9C:89:DE:BD:46:3B:26:F8:73:E4:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e38382e3133392e302f32342d3234203d3e203532323333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.88.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:86:a9:92:92:69:1e:e3:42:61:30:44:6b:c5:5f:fa:4e:fd:
         1e:36:14:e0:b4:36:a1:8b:d2:74:da:94:41:9d:fa:da:17:59:
         03:fd:8d:d1:43:72:3f:5c:bd:28:73:68:c2:49:6e:c2:98:ad:
         68:4a:32:95:c7:2a:2b:d4:be:17:19:50:5a:14:9e:30:75:bf:
         07:e4:f9:6a:f3:4d:e9:95:c7:49:f6:be:60:5f:75:a1:db:88:
         64:0e:38:87:56:94:1d:03:3d:a4:14:a6:e3:bd:18:aa:81:3c:
         e0:4c:c1:aa:e8:c5:56:9f:49:85:63:b2:3a:ba:34:78:22:45:
         57:dc:8a:9e:ed:9c:aa:1a:cf:f5:46:13:13:88:42:9a:f9:80:
         bd:6f:73:d9:d9:3b:e3:83:0e:ec:93:b5:33:dc:04:c3:ac:1a:
         29:b1:bd:df:2a:50:da:ad:a0:52:e7:48:56:d7:42:27:93:2d:
         43:f1:07:cd:de:75:ae:a9:f5:19:f8:cf:3d:cb:d8:4a:bd:ca:
         65:97:9b:48:1a:b5:ac:48:09:10:3d:22:7a:27:38:ad:48:75:
         bf:ad:9d:cf:4c:40:a6:67:d3:ab:88:f1:31:e8:5a:14:e8:3a:
         07:8f:ac:b5:47:96:34:af:f1:61:f6:7b:8f:fe:ca:a8:18:a7:
         86:f7:f3:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 03:49:38 2026 by rpki-client