Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/3139302e39382e3137382e302f32342d3234203d3e20323735363335.roa
File:                     3139302e39382e3137382e302f32342d3234203d3e20323735363335.roa (raw, json)
Hash identifier:          FQnl/wQIbFc9+5wRqJTwA3lxhHzKkh2g71p9RdL9Ues=
Subject key identifier:   0D:CC:4B:C7:8D:60:0C:2D:46:5E:9C:34:53:C4:07:2D:6C:5A:09:CC
Certificate issuer:       /CN=B61ABF237277FEAF24117EBBE28D9D57E442433A
Certificate serial:       2559820E7542B018F3C6A91F2572AB5C88B56C24
Authority key identifier: B6:1A:BF:23:72:77:FE:AF:24:11:7E:BB:E2:8D:9D:57:E4:42:43:3A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/3139302e39382e3137382e302f32342d3234203d3e20323735363335.roa
Signing time:             Fri 27 Mar 2026 10:30:00 +0000
ROA not before:           Fri 27 Mar 2026 10:25:00 +0000
ROA not after:            Fri 26 Mar 2027 10:30:00 +0000
asID:                     275635
IP address blocks:        190.98.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Apr 2026 07:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:59:82:0e:75:42:b0:18:f3:c6:a9:1f:25:72:ab:5c:88:b5:6c:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B61ABF237277FEAF24117EBBE28D9D57E442433A
        Validity
            Not Before: Mar 27 10:25:00 2026 GMT
            Not After : Mar 26 10:30:00 2027 GMT
        Subject: CN=0DCC4BC78D600C2D465E9C3453C4072D6C5A09CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:dd:cb:8b:9c:73:16:27:99:78:03:d2:65:eb:
                    e9:f6:22:89:b8:0d:12:28:f9:e2:17:cf:0b:d7:37:
                    ef:6a:35:50:39:f7:68:d3:05:0a:1e:ae:2d:91:8e:
                    95:15:d8:09:40:26:dd:1d:ce:3e:53:38:1f:54:0f:
                    86:e4:08:e8:25:e1:b1:14:2f:25:5a:83:28:0d:89:
                    b0:10:f6:d7:62:da:6c:e4:ba:31:51:de:6a:24:aa:
                    fc:a5:f1:00:d9:6b:d7:fd:0d:1c:a7:98:2f:12:20:
                    ef:fb:11:fe:e6:bb:05:e4:6e:c8:71:15:dc:cf:78:
                    7e:22:b0:0f:39:aa:42:7d:6e:2a:37:de:9c:1e:52:
                    8a:f8:8d:87:c9:9e:90:a8:a4:89:5e:11:12:9e:ba:
                    28:9b:ba:b2:3e:96:f1:54:5c:6a:cf:48:5a:be:57:
                    ee:68:86:3a:bc:11:a9:c7:23:19:5d:11:07:39:e3:
                    fa:ec:87:74:da:cf:a7:b6:30:e6:23:64:c9:2c:da:
                    00:fc:0e:9d:94:4d:3c:f8:44:67:bc:b7:09:63:aa:
                    ac:a6:a3:46:0f:b0:f9:27:08:5f:83:24:44:9b:5e:
                    02:87:4d:bb:3a:6e:e8:55:96:73:30:2e:a4:ec:a2:
                    a0:be:13:4a:fb:85:9a:17:3c:e3:1f:52:2f:27:e2:
                    37:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:CC:4B:C7:8D:60:0C:2D:46:5E:9C:34:53:C4:07:2D:6C:5A:09:CC
            X509v3 Authority Key Identifier:
                keyid:B6:1A:BF:23:72:77:FE:AF:24:11:7E:BB:E2:8D:9D:57:E4:42:43:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/3139302e39382e3137382e302f32342d3234203d3e20323735363335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.98.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:10:5d:76:0a:6c:20:7f:9d:8b:7f:c8:a5:52:03:1b:92:e4:
         09:07:d7:bd:0e:59:8d:70:9f:d2:fc:3b:56:da:6d:d3:e3:56:
         99:72:b5:1e:80:4e:31:fd:db:cd:b8:70:a0:0b:c0:99:da:ac:
         d6:bf:2b:5b:be:9f:73:7e:16:c7:6e:a6:ec:3b:c1:a5:9b:a1:
         b9:39:ab:3f:ca:36:fa:c5:27:93:15:0a:c2:f5:4f:2b:5a:93:
         d2:1b:72:31:c0:0a:e0:8b:99:b8:e3:5f:f1:97:ed:41:0f:b0:
         b5:2e:42:45:5c:30:03:8a:20:a4:11:95:b7:64:d0:86:97:f8:
         22:b8:5f:cc:3b:b1:05:f3:e8:7b:c2:64:73:53:5a:1e:42:44:
         9c:31:db:ce:80:d3:5c:e3:29:85:b2:d4:c4:29:66:af:dd:8e:
         53:59:18:45:f7:a5:4b:59:38:4a:22:a9:78:d0:9e:f9:52:78:
         c6:f9:8b:64:48:e2:f7:92:65:81:67:9e:0c:83:8c:24:76:00:
         18:80:26:8e:47:03:88:2f:28:dd:a2:9d:98:9f:62:bb:a0:0f:
         c0:a7:c5:30:4a:79:35:2f:08:49:9c:31:6f:67:77:2e:77:79:
         a3:8e:c3:ad:82:4c:72:24:50:0f:79:28:dd:5d:e8:f0:75:01:
         1d:43:9b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:26:40 2026 by rpki-client