Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A6CD0CCCB653DB5BC51D479B18736C53DC65CEC0DF039622A227EA1648EDCF80/0/3139302e3131342e3139322e302f31392d3234203d3e203237383833.roa
File:                     3139302e3131342e3139322e302f31392d3234203d3e203237383833.roa (raw, json)
Hash identifier:          A2O7BjGj31tNx3jFt4sm1tfjbQ5RHWS5ejCIDB+pudY=
Subject key identifier:   3A:37:B0:A5:F3:9F:64:A3:B1:BD:10:74:1D:47:92:A0:50:A9:71:11
Certificate issuer:       /CN=D90D4EBE37D6BB163A0862C08C60BF8163DA0194
Certificate serial:       089111C23C2C100C923AD78EF622FF4D464FE6C7
Authority key identifier: D9:0D:4E:BE:37:D6:BB:16:3A:08:62:C0:8C:60:BF:81:63:DA:01:94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D90D4EBE37D6BB163A0862C08C60BF8163DA0194.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A6CD0CCCB653DB5BC51D479B18736C53DC65CEC0DF039622A227EA1648EDCF80/0/3139302e3131342e3139322e302f31392d3234203d3e203237383833.roa
Signing time:             Tue 14 Apr 2026 15:38:50 +0000
ROA not before:           Tue 14 Apr 2026 15:33:50 +0000
ROA not after:            Tue 13 Apr 2027 15:38:50 +0000
asID:                     27883
IP address blocks:        190.114.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A6CD0CCCB653DB5BC51D479B18736C53DC65CEC0DF039622A227EA1648EDCF80/0/D90D4EBE37D6BB163A0862C08C60BF8163DA0194.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A6CD0CCCB653DB5BC51D479B18736C53DC65CEC0DF039622A227EA1648EDCF80/0/D90D4EBE37D6BB163A0862C08C60BF8163DA0194.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D90D4EBE37D6BB163A0862C08C60BF8163DA0194.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 04:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:91:11:c2:3c:2c:10:0c:92:3a:d7:8e:f6:22:ff:4d:46:4f:e6:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D90D4EBE37D6BB163A0862C08C60BF8163DA0194
        Validity
            Not Before: Apr 14 15:33:50 2026 GMT
            Not After : Apr 13 15:38:50 2027 GMT
        Subject: CN=3A37B0A5F39F64A3B1BD10741D4792A050A97111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:78:bb:9e:f5:d7:f0:47:fc:9e:19:2f:6b:59:
                    29:23:e4:83:1e:80:1d:4d:36:00:fc:f1:9b:49:ed:
                    a7:85:10:3f:31:fb:c2:5e:56:8e:9b:a8:17:c8:e3:
                    aa:40:12:2c:51:b9:6f:76:8c:70:d3:8f:64:74:f0:
                    3e:8a:aa:ea:55:ee:90:0a:e9:9a:39:78:0a:a7:75:
                    d0:0e:8f:30:5d:ac:83:4f:0f:d0:38:33:62:d8:08:
                    87:97:7b:30:39:d9:d2:02:af:da:81:a4:2b:ae:89:
                    95:73:ed:c7:37:24:38:05:0d:59:36:3c:5a:10:ed:
                    e1:af:c0:24:b7:32:c7:93:b9:95:1b:37:f5:ae:56:
                    ac:2e:81:87:d9:5f:0c:9b:bd:d3:86:c2:cd:6a:7a:
                    a3:62:bc:b8:0f:ef:aa:6c:05:26:93:1a:37:84:c7:
                    f9:54:1e:42:9b:cd:4b:88:51:c9:73:6c:30:90:03:
                    60:a0:6d:1a:5d:64:20:a1:7c:3b:b2:e0:b3:ea:06:
                    9d:c4:a6:3f:52:75:a9:27:35:50:e2:d3:5c:be:5e:
                    56:62:a4:a9:42:bb:c3:86:61:88:31:43:37:74:01:
                    74:a7:62:54:d1:95:0c:fd:0d:f8:d9:87:42:f3:c8:
                    db:02:7a:ff:92:53:c3:fa:05:5d:82:14:fd:ce:27:
                    f9:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:37:B0:A5:F3:9F:64:A3:B1:BD:10:74:1D:47:92:A0:50:A9:71:11
            X509v3 Authority Key Identifier:
                keyid:D9:0D:4E:BE:37:D6:BB:16:3A:08:62:C0:8C:60:BF:81:63:DA:01:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A6CD0CCCB653DB5BC51D479B18736C53DC65CEC0DF039622A227EA1648EDCF80/0/D90D4EBE37D6BB163A0862C08C60BF8163DA0194.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D90D4EBE37D6BB163A0862C08C60BF8163DA0194.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A6CD0CCCB653DB5BC51D479B18736C53DC65CEC0DF039622A227EA1648EDCF80/0/3139302e3131342e3139322e302f31392d3234203d3e203237383833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.114.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         05:25:a6:d2:fe:1a:ed:e6:6b:b7:d1:b5:0a:da:cb:8e:43:6b:
         63:a8:05:6a:cf:db:23:80:a4:fb:a0:1a:3d:3b:e1:85:41:01:
         b9:cf:a5:04:30:af:31:f8:9a:17:c3:c4:bf:69:1c:ab:04:32:
         31:67:32:da:cf:0f:0c:33:aa:f4:c8:ea:77:ad:b9:67:e2:94:
         df:e9:b2:c0:24:c8:c3:dc:e0:af:fe:c6:c7:1d:47:83:eb:95:
         c9:0d:fc:75:ec:13:2f:1d:4c:29:b1:06:a1:fd:85:20:95:18:
         89:62:32:3f:86:88:df:0d:67:b1:0e:de:b6:96:a0:6f:cf:43:
         f6:cd:31:53:9a:07:17:11:e4:60:1d:e7:e5:17:97:de:ae:36:
         d7:42:ef:41:c2:cc:76:66:d9:01:43:bf:6b:e0:52:fa:84:1d:
         01:f9:78:f6:4e:c5:26:41:6f:e0:17:60:5b:1f:70:73:4c:8f:
         53:11:47:cf:c2:db:57:de:71:29:75:06:bf:96:bc:32:fa:62:
         4e:48:37:cd:b1:65:9b:bd:75:0a:1e:33:13:c0:56:dd:ec:fa:
         aa:1d:2a:a2:ef:af:30:9c:ae:41:4e:ac:47:1d:ee:19:d5:4c:
         cf:7d:3e:79:13:2f:86:8a:8f:b4:69:87:47:58:c6:b3:f7:9e:
         83:63:91:5a
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUCJERwjwsEAySOteO9iL/TUZP5scwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDkwRDRFQkUzN0Q2QkIxNjNBMDg2MkMwOEM2MEJGODE2
M0RBMDE5NDAeFw0yNjA0MTQxNTMzNTBaFw0yNzA0MTMxNTM4NTBaMDMxMTAvBgNV
BAMTKDNBMzdCMEE1RjM5RjY0QTNCMUJEMTA3NDFENDc5MkEwNTBBOTcxMTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCseLue9dfwR/yeGS9rWSkj5IMe
gB1NNgD88ZtJ7aeFED8x+8JeVo6bqBfI46pAEixRuW92jHDTj2R08D6KqupV7pAK
6Zo5eAqnddAOjzBdrINPD9A4M2LYCIeXezA52dICr9qBpCuuiZVz7cc3JDgFDVk2
PFoQ7eGvwCS3MseTuZUbN/WuVqwugYfZXwybvdOGws1qeqNivLgP76psBSaTGjeE
x/lUHkKbzUuIUclzbDCQA2CgbRpdZCChfDuy4LPqBp3Epj9SdaknNVDi01y+XlZi
pKlCu8OGYYgxQzd0AXSnYlTRlQz9DfjZh0LzyNsCev+SU8P6BV2CFP3OJ/nJAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUOjewpfOfZKOxvRB0HUeSoFCpcREwHwYDVR0j
BBgwFoAU2Q1OvjfWuxY6CGLAjGC/gWPaAZQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BNkNEMENDQ0I2NTNEQjVCQzUxRDQ3OUIxODczNkM1M0RD
NjVDRUMwREYwMzk2MjJBMjI3RUExNjQ4RURDRjgwLzAvRDkwRDRFQkUzN0Q2QkIx
NjNBMDg2MkMwOEM2MEJGODE2M0RBMDE5NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EOTBENEVCRTM3RDZCQjE2M0Ew
ODYyQzA4QzYwQkY4MTYzREEwMTk0LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTZDRDBDQ0NCNjUzREI1QkM1MUQ0NzlCMTg3MzZDNTNEQzY1Q0VDMERG
MDM5NjIyQTIyN0VBMTY0OEVEQ0Y4MC8wLzMxMzkzMDJlMzEzMTM0MmUzMTM5MzIy
ZTMwMmYzMTM5MmQzMjM0MjAzZDNlMjAzMjM3MzgzODMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFvnLA
MA0GCSqGSIb3DQEBCwUAA4IBAQAFJabS/hrt5mu30bUK2suOQ2tjqAVqz9sjgKT7
oBo9O+GFQQG5z6UEMK8x+JoXw8S/aRyrBDIxZzLazw8MM6r0yOp3rbln4pTf6bLA
JMjD3OCv/sbHHUeD65XJDfx17BMvHUwpsQah/YUglRiJYjI/hojfDWexDt62lqBv
z0P2zTFTmgcXEeRgHeflF5ferjbXQu9Bwsx2ZtkBQ79r4FL6hB0B+Xj2TsUmQW/g
F2BbH3BzTI9TEUfPwttX3nEpdQa/lrwy+mJOSDfNsWWbvXUKHjMTwFbd7PqqHSqi
768wnK5BTqxHHe4Z1UzPfT55Ey+Gio+0aYdHWMaz956DY5Fa
-----END CERTIFICATE-----
Generated at Sat Apr 18 09:30:46 2026 by rpki-client