Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3139302e31342e3232342e302f31392d3234203d3e203237393531.roa
File:                     3139302e31342e3232342e302f31392d3234203d3e203237393531.roa (raw, json)
Hash identifier:          7NPDbzmjHdRdZw8pl0hOgeH8itStvMQ+lfAQ1238Pfc=
Subject key identifier:   9E:F7:21:F6:FF:92:3B:46:04:52:96:20:0F:70:E8:BC:02:D9:B2:C2
Certificate issuer:       /CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
Certificate serial:       64DCDCFFF273BBA763D5032BCC5BD6E7375F324C
Authority key identifier: B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3139302e31342e3232342e302f31392d3234203d3e203237393531.roa
Signing time:             Tue 06 Jan 2026 20:48:44 +0000
ROA not before:           Tue 06 Jan 2026 20:43:44 +0000
ROA not after:            Tue 05 Jan 2027 20:48:44 +0000
asID:                     27951
IP address blocks:        190.14.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:dc:dc:ff:f2:73:bb:a7:63:d5:03:2b:cc:5b:d6:e7:37:5f:32:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
        Validity
            Not Before: Jan  6 20:43:44 2026 GMT
            Not After : Jan  5 20:48:44 2027 GMT
        Subject: CN=9EF721F6FF923B46045296200F70E8BC02D9B2C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:be:34:f2:04:0c:a2:ed:24:9c:1e:9b:87:1d:
                    aa:3d:e2:a0:65:7e:b4:1f:58:ed:e3:b8:6e:36:28:
                    0d:c9:ec:65:e8:46:f3:2d:f7:1f:5a:e2:93:ce:b8:
                    25:45:e3:3f:79:2e:a0:c2:60:1d:b9:6b:25:71:85:
                    15:c8:72:f9:ff:cb:52:64:cb:9f:c9:9d:a9:4c:71:
                    3e:79:e4:28:0f:7d:44:66:84:16:bd:bd:a3:71:79:
                    57:b5:54:ba:0c:b7:ba:17:d1:a8:96:81:39:0d:6f:
                    ec:74:09:4e:77:a0:cc:47:87:4b:01:1b:98:2c:bc:
                    4a:42:f1:b8:e5:4c:75:d2:4a:fc:f2:8e:e1:aa:46:
                    4e:ac:b4:fa:12:24:36:30:60:13:10:98:59:0d:6b:
                    ce:4f:b5:43:47:3e:23:e4:b4:c9:28:18:33:f4:63:
                    b1:6e:7c:10:4e:57:9d:b4:7b:f8:03:86:f5:1f:18:
                    05:09:06:cf:d7:c0:e1:0b:92:dc:b4:d4:b2:1e:dc:
                    cc:98:69:ab:f0:10:ed:60:a0:f8:df:d0:bb:93:54:
                    89:83:44:e8:40:97:e5:04:b8:51:59:2b:69:c2:5c:
                    8b:ca:c8:d1:53:70:89:0a:03:65:48:b1:1e:24:13:
                    7b:e7:f8:95:7e:52:b8:b9:7c:2c:b0:fc:5c:e7:23:
                    d2:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:F7:21:F6:FF:92:3B:46:04:52:96:20:0F:70:E8:BC:02:D9:B2:C2
            X509v3 Authority Key Identifier:
                keyid:B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3139302e31342e3232342e302f31392d3234203d3e203237393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.14.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         6a:e0:fc:3a:ef:cd:9a:2e:21:63:d3:cc:3e:74:8e:2e:c9:15:
         6c:20:dc:58:90:7c:56:74:8d:2c:d8:21:92:6c:0d:de:dd:b6:
         27:6f:56:0f:da:4f:3b:6c:80:75:19:12:51:a5:a9:3d:9d:54:
         d6:eb:60:38:57:18:c4:65:60:9f:f8:ea:99:e6:fa:14:61:19:
         c3:ce:54:ca:75:8c:49:96:b8:11:68:b4:81:a6:c1:2e:57:a4:
         53:b6:e5:70:1d:33:10:14:f3:f5:5d:93:4b:2a:af:a1:eb:6f:
         a8:06:b1:6d:83:2c:3f:81:24:b5:10:01:88:e4:4f:52:fc:ab:
         fa:26:01:7b:23:e3:39:ae:3f:b6:94:40:32:08:64:9c:80:12:
         15:4d:cd:2d:fc:bd:20:93:e6:6d:15:4e:60:88:59:f5:43:89:
         ab:e1:6c:80:2f:b9:7e:22:01:ed:1e:61:55:7e:2b:27:48:66:
         1d:db:eb:f2:20:00:0b:6e:2f:6c:f7:68:1e:7c:14:ac:28:e4:
         67:d4:ca:9c:57:98:ba:0c:e0:cb:b5:81:37:45:ba:b4:2e:6d:
         fd:b7:ac:fa:d1:6f:11:72:cb:96:f5:0c:07:13:df:41:ce:d6:
         f3:0d:d1:91:13:ed:1a:68:66:ba:f8:e2:96:61:bb:2f:a2:24:
         1d:d9:70:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:17:21 2026 by rpki-client