Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A6ABCAE06994B25D303E0DF561A94D8C0CB5A913013F2A9B77B604A1325D69CC/0/3139302e31352e3235302e302f32342d3234203d3e20323734323531.roa
File:                     3139302e31352e3235302e302f32342d3234203d3e20323734323531.roa (raw, json)
Hash identifier:          VclwH+7r0GEgf1p1qiRNPBXHYBLVZCf1lxwr+Fpu41Q=
Subject key identifier:   A9:D4:E1:E9:B4:BF:52:CE:F4:53:97:F5:AC:76:E5:B5:04:F1:6D:A5
Certificate issuer:       /CN=2B4028A489B5AC3783BE499256A832ADD8A8A582
Certificate serial:       3AED394928064A488A41D620737B8999D8B03E68
Authority key identifier: 2B:40:28:A4:89:B5:AC:37:83:BE:49:92:56:A8:32:AD:D8:A8:A5:82
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4028A489B5AC3783BE499256A832ADD8A8A582.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A6ABCAE06994B25D303E0DF561A94D8C0CB5A913013F2A9B77B604A1325D69CC/0/3139302e31352e3235302e302f32342d3234203d3e20323734323531.roa
Signing time:             Wed 27 May 2026 16:45:00 +0000
ROA not before:           Wed 27 May 2026 16:40:00 +0000
ROA not after:            Wed 26 May 2027 16:45:00 +0000
asID:                     274251
IP address blocks:        190.15.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A6ABCAE06994B25D303E0DF561A94D8C0CB5A913013F2A9B77B604A1325D69CC/0/2B4028A489B5AC3783BE499256A832ADD8A8A582.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A6ABCAE06994B25D303E0DF561A94D8C0CB5A913013F2A9B77B604A1325D69CC/0/2B4028A489B5AC3783BE499256A832ADD8A8A582.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4028A489B5AC3783BE499256A832ADD8A8A582.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:ed:39:49:28:06:4a:48:8a:41:d6:20:73:7b:89:99:d8:b0:3e:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4028A489B5AC3783BE499256A832ADD8A8A582
        Validity
            Not Before: May 27 16:40:00 2026 GMT
            Not After : May 26 16:45:00 2027 GMT
        Subject: CN=A9D4E1E9B4BF52CEF45397F5AC76E5B504F16DA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:17:65:83:db:06:90:34:85:2c:ec:f0:91:a0:
                    51:22:ce:3c:64:51:1b:dd:0f:c5:e5:12:d0:c9:6e:
                    92:c2:9f:d1:01:e6:c8:32:3f:c9:44:23:8b:b5:df:
                    7e:90:89:a3:44:2e:b1:9f:10:39:1a:fb:39:1b:68:
                    3e:26:30:96:39:bc:ba:52:da:c5:0c:41:1b:38:16:
                    7d:a5:ab:43:a5:6b:ce:c4:d0:eb:56:ff:11:a9:28:
                    21:b4:4f:68:6e:59:19:e7:e5:29:53:b1:00:03:54:
                    f1:3f:d6:41:0a:fc:82:03:9c:e8:c4:cd:e0:d7:83:
                    3a:bd:5d:43:42:74:ad:2e:3f:e7:70:b4:98:d1:57:
                    b3:94:0a:1b:bf:76:ef:c2:98:7b:84:e2:c9:23:52:
                    83:4d:99:2a:5b:a5:1b:63:91:9f:76:16:14:f3:f0:
                    b4:b0:05:32:11:80:4d:5b:b4:d3:68:1c:a5:33:5f:
                    62:ef:07:5b:f1:d3:58:86:25:00:53:ce:20:2b:43:
                    aa:f0:28:5a:38:3a:e0:92:5f:77:28:6c:19:17:76:
                    b4:68:36:1a:98:d7:5d:57:c1:3b:e4:7f:ef:2d:55:
                    bd:82:41:96:ba:34:d2:d0:f0:e5:cf:d3:ed:7a:b7:
                    40:a9:f6:f7:ca:24:c8:57:7b:23:a6:fb:fb:ae:0f:
                    af:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:D4:E1:E9:B4:BF:52:CE:F4:53:97:F5:AC:76:E5:B5:04:F1:6D:A5
            X509v3 Authority Key Identifier:
                keyid:2B:40:28:A4:89:B5:AC:37:83:BE:49:92:56:A8:32:AD:D8:A8:A5:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A6ABCAE06994B25D303E0DF561A94D8C0CB5A913013F2A9B77B604A1325D69CC/0/2B4028A489B5AC3783BE499256A832ADD8A8A582.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4028A489B5AC3783BE499256A832ADD8A8A582.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A6ABCAE06994B25D303E0DF561A94D8C0CB5A913013F2A9B77B604A1325D69CC/0/3139302e31352e3235302e302f32342d3234203d3e20323734323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.15.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:d9:dd:1e:e9:2e:4e:67:08:8a:f1:30:d8:c9:c7:54:49:11:
         6b:06:05:fe:db:3b:f2:c3:55:50:40:fb:f6:52:10:dd:f8:03:
         9a:b8:a7:df:cc:20:2d:d0:2e:bf:3e:96:3b:e5:00:98:98:3b:
         9e:1b:81:40:5f:f9:34:14:44:62:ea:52:48:a6:a9:dc:c5:92:
         23:c1:49:cc:41:0d:39:62:70:e5:2a:bb:93:00:27:85:34:a1:
         44:dc:20:e7:26:4d:84:69:e1:3a:41:8f:3b:82:c7:5a:6e:0a:
         06:3e:37:2e:12:b6:3a:c8:e8:13:a2:b3:57:e0:5d:f3:5b:80:
         31:8f:bd:2a:35:81:95:56:40:e6:20:77:a8:dc:a0:52:31:02:
         5e:d0:0e:06:59:29:14:4c:78:c0:26:60:78:04:42:08:cb:da:
         ce:73:9a:4c:3a:a8:86:3e:72:6e:77:4b:2f:20:3d:a6:e1:59:
         6b:a8:35:d8:9a:e3:0a:1c:37:0d:41:52:50:c5:72:cf:7e:7f:
         e9:3b:7f:f2:24:3e:3d:d1:fc:3c:3a:a3:c7:63:ad:6f:fd:03:
         73:cc:b8:09:d2:f8:da:ae:d8:53:94:d9:4d:a3:d9:b2:bb:a1:
         67:19:f6:a8:2e:0a:ea:5f:5c:ac:7a:29:ba:a6:8b:fb:76:1f:
         d7:ef:bc:f1
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUOu05SSgGSkiKQdYgc3uJmdiwPmgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkI0MDI4QTQ4OUI1QUMzNzgzQkU0OTkyNTZBODMyQURE
OEE4QTU4MjAeFw0yNjA1MjcxNjQwMDBaFw0yNzA1MjYxNjQ1MDBaMDMxMTAvBgNV
BAMTKEE5RDRFMUU5QjRCRjUyQ0VGNDUzOTdGNUFDNzZFNUI1MDRGMTZEQTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCF2WD2waQNIUs7PCRoFEizjxk
URvdD8XlEtDJbpLCn9EB5sgyP8lEI4u1336QiaNELrGfEDka+zkbaD4mMJY5vLpS
2sUMQRs4Fn2lq0Ola87E0OtW/xGpKCG0T2huWRnn5SlTsQADVPE/1kEK/IIDnOjE
zeDXgzq9XUNCdK0uP+dwtJjRV7OUChu/du/CmHuE4skjUoNNmSpbpRtjkZ92FhTz
8LSwBTIRgE1btNNoHKUzX2LvB1vx01iGJQBTziArQ6rwKFo4OuCSX3cobBkXdrRo
NhqY111XwTvkf+8tVb2CQZa6NNLQ8OXP0+16t0Cp9vfKJMhXeyOm+/uuD6/bAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUqdTh6bS/Us70U5f1rHbltQTxbaUwHwYDVR0j
BBgwFoAUK0AopIm1rDeDvkmSVqgyrdiopYIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BNkFCQ0FFMDY5OTRCMjVEMzAzRTBERjU2MUE5NEQ4QzBD
QjVBOTEzMDEzRjJBOUI3N0I2MDRBMTMyNUQ2OUNDLzAvMkI0MDI4QTQ4OUI1QUMz
NzgzQkU0OTkyNTZBODMyQUREOEE4QTU4Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQjQwMjhBNDg5QjVBQzM3ODNC
RTQ5OTI1NkE4MzJBREQ4QThBNTgyLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTZBQkNBRTA2OTk0QjI1RDMwM0UwREY1NjFBOTREOEMwQ0I1QTkxMzAx
M0YyQTlCNzdCNjA0QTEzMjVENjlDQy8wLzMxMzkzMDJlMzEzNTJlMzIzNTMwMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzM0MzIzNTMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvg/6
MA0GCSqGSIb3DQEBCwUAA4IBAQAP2d0e6S5OZwiK8TDYycdUSRFrBgX+2zvyw1VQ
QPv2UhDd+AOauKffzCAt0C6/PpY75QCYmDueG4FAX/k0FERi6lJIpqncxZIjwUnM
QQ05YnDlKruTACeFNKFE3CDnJk2EaeE6QY87gsdabgoGPjcuErY6yOgTorNX4F3z
W4Axj70qNYGVVkDmIHeo3KBSMQJe0A4GWSkUTHjAJmB4BEIIy9rOc5pMOqiGPnJu
d0svID2m4VlrqDXYmuMKHDcNQVJQxXLPfn/pO3/yJD490fw8OqPHY61v/QNzzLgJ
0vjarthTlNlNo9myu6FnGfaoLgrqX1yseim6pov7dh/X77zx
-----END CERTIFICATE-----
Generated at Sun Jun 14 04:22:26 2026 by rpki-client