Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e38382e36342e302f31382d3138203d3e203131303831.roa
File:                     3139302e38382e36342e302f31382d3138203d3e203131303831.roa (raw, json)
Hash identifier:          RqvQyKhHT4hH2xXegELc7JbFxCKUKmNGVm2z5fo5JvY=
Subject key identifier:   E6:8E:45:8D:E8:00:B0:89:3C:30:E7:33:5D:E0:42:68:27:1C:5D:D1
Certificate issuer:       /CN=237D63DAE61C3211909C89DEBD463B26F873E44B
Certificate serial:       586CEFFB75F507C8BC6E4B12C75CCB68B7DFE785
Authority key identifier: 23:7D:63:DA:E6:1C:32:11:90:9C:89:DE:BD:46:3B:26:F8:73:E4:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e38382e36342e302f31382d3138203d3e203131303831.roa
Signing time:             Tue 06 Jan 2026 19:43:19 +0000
ROA not before:           Tue 06 Jan 2026 19:38:19 +0000
ROA not after:            Tue 05 Jan 2027 19:43:19 +0000
asID:                     11081
IP address blocks:        190.88.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Mar 2026 12:02:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:6c:ef:fb:75:f5:07:c8:bc:6e:4b:12:c7:5c:cb:68:b7:df:e7:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=237D63DAE61C3211909C89DEBD463B26F873E44B
        Validity
            Not Before: Jan  6 19:38:19 2026 GMT
            Not After : Jan  5 19:43:19 2027 GMT
        Subject: CN=E68E458DE800B0893C30E7335DE04268271C5DD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a7:53:f8:cb:56:9f:0a:9b:5d:10:eb:85:87:
                    cb:ba:88:fd:fc:61:02:ba:7c:d4:25:ed:18:99:be:
                    84:3b:3d:ec:14:bc:5d:6f:c8:eb:9d:f9:2b:21:3c:
                    3b:5b:14:28:24:a5:c4:81:e7:ef:97:6e:0e:8d:d1:
                    a7:c3:07:8c:2b:0f:61:ae:08:33:83:d5:c4:ec:ec:
                    9f:99:b4:56:27:1e:55:ed:9e:b5:66:4d:ee:d8:c0:
                    63:27:55:1c:20:92:56:1d:98:42:2a:d5:e9:f7:60:
                    ed:8c:78:b0:a1:97:22:dd:e5:ab:a3:e7:ed:aa:3d:
                    66:4f:ba:21:d7:ad:12:09:09:2e:9c:ea:75:16:c8:
                    f6:14:db:56:cf:2c:ac:6e:a4:40:f2:c5:be:09:9c:
                    f5:5e:a3:14:a6:84:b9:99:52:30:23:6f:9d:15:f8:
                    e5:ee:59:8a:69:ee:46:11:75:1c:fc:98:03:3d:49:
                    b5:6b:51:aa:93:0f:15:ea:a0:99:7b:24:e9:15:dd:
                    89:59:a9:fc:6b:de:3a:ed:59:1b:6f:c7:01:a4:95:
                    30:b9:60:53:ae:25:37:61:66:ac:c8:e0:ce:12:c7:
                    20:b7:9a:86:8a:00:b3:db:ca:eb:17:69:39:0a:f5:
                    89:8c:1e:01:77:87:f9:33:09:49:c9:bc:38:d6:f3:
                    e5:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:8E:45:8D:E8:00:B0:89:3C:30:E7:33:5D:E0:42:68:27:1C:5D:D1
            X509v3 Authority Key Identifier:
                keyid:23:7D:63:DA:E6:1C:32:11:90:9C:89:DE:BD:46:3B:26:F8:73:E4:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e38382e36342e302f31382d3138203d3e203131303831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.88.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         29:f8:64:43:a0:7f:e8:9d:68:c3:c2:9e:59:55:a2:0a:11:e8:
         75:9a:e1:f3:cc:55:e9:c6:d6:28:02:13:88:ac:5b:e3:61:b1:
         36:35:df:2b:cc:86:5e:50:1a:f3:b4:ad:67:05:8e:5c:2a:2c:
         55:0e:bc:8a:c2:49:ee:89:ee:08:96:4a:5e:bd:52:bd:93:af:
         2f:e3:1b:d9:8c:dd:07:a2:35:ca:a7:72:95:a3:f9:da:da:be:
         fd:9d:a9:91:78:e3:86:39:8c:4f:91:61:84:7a:a8:f7:83:db:
         27:8c:53:8e:a4:b0:07:e3:93:11:24:36:68:29:96:59:2d:bf:
         3a:9d:1f:a7:45:43:23:5a:83:78:6c:e5:67:56:ec:fe:51:d7:
         31:eb:3d:f2:38:60:62:7d:86:06:6e:01:13:9d:b2:ec:00:61:
         f0:8b:01:c9:92:e4:b3:d1:83:e8:b9:ac:1f:e8:47:88:68:4e:
         f8:31:c7:7c:6c:a7:b3:9d:73:ce:8c:bf:d8:98:7b:54:ea:2e:
         16:21:55:3b:0d:a3:86:8b:75:1c:9a:bf:9f:f1:05:c2:05:d4:
         1c:0e:ef:68:a1:db:05:9a:18:1a:9d:29:8b:aa:80:17:b9:0b:
         66:93:4e:23:58:da:92:8d:4d:b8:e3:df:03:87:9c:40:ee:22:
         af:b6:83:cc
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUWGzv+3X1B8i8bksSx1zLaLff54UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjM3RDYzREFFNjFDMzIxMTkwOUM4OURFQkQ0NjNCMjZG
ODczRTQ0QjAeFw0yNjAxMDYxOTM4MTlaFw0yNzAxMDUxOTQzMTlaMDMxMTAvBgNV
BAMTKEU2OEU0NThERTgwMEIwODkzQzMwRTczMzVERTA0MjY4MjcxQzVERDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVp1P4y1afCptdEOuFh8u6iP38
YQK6fNQl7RiZvoQ7PewUvF1vyOud+SshPDtbFCgkpcSB5++Xbg6N0afDB4wrD2Gu
CDOD1cTs7J+ZtFYnHlXtnrVmTe7YwGMnVRwgklYdmEIq1en3YO2MeLChlyLd5auj
5+2qPWZPuiHXrRIJCS6c6nUWyPYU21bPLKxupEDyxb4JnPVeoxSmhLmZUjAjb50V
+OXuWYpp7kYRdRz8mAM9SbVrUaqTDxXqoJl7JOkV3YlZqfxr3jrtWRtvxwGklTC5
YFOuJTdhZqzI4M4SxyC3moaKALPbyusXaTkK9YmMHgF3h/kzCUnJvDjW8+WHAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQU5o5FjegAsIk8MOczXeBCaCccXdEwHwYDVR0j
BBgwFoAUI31j2uYcMhGQnInevUY7Jvhz5EswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMUZDRUNDM0Q1NzBEM0RGRTc4QTJFRUMxQ0FGNkYwN0U4
QUQxRkQzQTM1OUNENkZBODczNUMxQTg4MEEwNUU5LzAvMjM3RDYzREFFNjFDMzIx
MTkwOUM4OURFQkQ0NjNCMjZGODczRTQ0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMzdENjNEQUU2MUMzMjExOTA5
Qzg5REVCRDQ2M0IyNkY4NzNFNDRCLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTFGQ0VDQzNENTcwRDNERkU3OEEyRUVDMUNBRjZGMDdFOEFEMUZEM0Ez
NTlDRDZGQTg3MzVDMUE4ODBBMDVFOS8wLzMxMzkzMDJlMzgzODJlMzYzNDJlMzAy
ZjMxMzgyZDMxMzgyMDNkM2UyMDMxMzEzMDM4MzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAa+WEAwDQYJ
KoZIhvcNAQELBQADggEBACn4ZEOgf+idaMPCnllVogoR6HWa4fPMVenG1igCE4is
W+NhsTY13yvMhl5QGvO0rWcFjlwqLFUOvIrCSe6J7giWSl69Ur2Try/jG9mM3Qei
NcqncpWj+dravv2dqZF444Y5jE+RYYR6qPeD2yeMU46ksAfjkxEkNmgpllktvzqd
H6dFQyNag3hs5WdW7P5R1zHrPfI4YGJ9hgZuAROdsuwAYfCLAcmS5LPRg+i5rB/o
R4hoTvgxx3xsp7Odc86Mv9iYe1TqLhYhVTsNo4aLdRyav5/xBcIF1BwO72ih2wWa
GBqdKYuqgBe5C2aTTiNY2pKNTbjj3wOHnEDuIq+2g8w=
-----END CERTIFICATE-----
Generated at Tue Mar 3 03:48:52 2026 by rpki-client