Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/B2FFDCA30C15CD59970A7E7AFAEC3A91AF4301AC9008B0FFC3B8F9775F56F2FD/0/3139302e31312e34372e302f32342d3234203d3e20323633373336.roa
File:                     3139302e31312e34372e302f32342d3234203d3e20323633373336.roa (raw, json)
Hash identifier:          D2qRa+QccVoQfkJ3R2WKECWUD/0/97OBFziKnkVg5n8=
Subject key identifier:   7B:63:52:80:A6:F2:B7:35:4E:68:73:81:9D:E8:7E:AF:D4:2A:78:4D
Certificate issuer:       /CN=D2F5141990A0252C37D63112FB6ECA5DBC5686B6
Certificate serial:       310DA94D30B9E820E730BC5279F09DD830011BD8
Authority key identifier: D2:F5:14:19:90:A0:25:2C:37:D6:31:12:FB:6E:CA:5D:BC:56:86:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2F5141990A0252C37D63112FB6ECA5DBC5686B6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B2FFDCA30C15CD59970A7E7AFAEC3A91AF4301AC9008B0FFC3B8F9775F56F2FD/0/3139302e31312e34372e302f32342d3234203d3e20323633373336.roa
Signing time:             Mon 12 Oct 2026 12:39:57 +0000
ROA not before:           Mon 12 Oct 2026 12:34:57 +0000
ROA not after:            Mon 11 Oct 2027 12:39:57 +0000
asID:                     263736
IP address blocks:        190.11.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B2FFDCA30C15CD59970A7E7AFAEC3A91AF4301AC9008B0FFC3B8F9775F56F2FD/0/D2F5141990A0252C37D63112FB6ECA5DBC5686B6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B2FFDCA30C15CD59970A7E7AFAEC3A91AF4301AC9008B0FFC3B8F9775F56F2FD/0/D2F5141990A0252C37D63112FB6ECA5DBC5686B6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2F5141990A0252C37D63112FB6ECA5DBC5686B6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 16:18:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:0d:a9:4d:30:b9:e8:20:e7:30:bc:52:79:f0:9d:d8:30:01:1b:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2F5141990A0252C37D63112FB6ECA5DBC5686B6
        Validity
            Not Before: Oct 12 12:34:57 2026 GMT
            Not After : Oct 11 12:39:57 2027 GMT
        Subject: CN=7B635280A6F2B7354E6873819DE87EAFD42A784D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e8:d2:cb:f9:b6:0d:ef:61:97:7f:34:43:52:
                    ae:8f:d9:b2:77:17:c7:70:0f:70:af:14:e2:14:da:
                    67:0b:41:07:9e:ab:64:56:4f:70:24:9f:e9:4c:33:
                    f9:8c:fc:0c:50:9a:f4:d3:18:84:1f:21:cd:a6:23:
                    70:76:0c:a8:5e:e3:8d:cf:4a:26:cc:c2:2e:b9:c2:
                    d0:3d:b7:e7:0b:68:c3:ff:45:e4:60:40:4f:24:07:
                    fa:77:1a:a2:ee:fe:c4:90:c4:26:7b:d3:74:9f:91:
                    b0:d6:41:d1:f4:38:ec:40:05:10:cf:8c:5d:8e:12:
                    ac:af:99:ac:ae:ef:92:fc:99:02:51:3b:c5:11:09:
                    e3:20:d9:a7:28:21:21:b4:bf:eb:d0:e6:bf:f9:24:
                    d3:c0:14:92:78:df:c6:5c:d7:a3:d1:0a:08:56:56:
                    cd:b1:4a:e5:57:67:9c:ff:ae:b7:24:f9:b6:54:0c:
                    18:b7:91:ee:d3:57:5e:11:f4:cf:3f:d8:e9:e4:2e:
                    6d:bf:4a:04:41:60:a2:66:97:6c:eb:ad:45:85:aa:
                    d3:e8:72:d7:b1:a6:68:49:b3:98:9c:7b:b2:34:be:
                    cf:92:f2:94:e9:93:6e:39:56:fd:4e:b7:8e:fd:ed:
                    91:ce:db:aa:95:8f:92:71:97:5c:df:54:55:72:11:
                    03:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:63:52:80:A6:F2:B7:35:4E:68:73:81:9D:E8:7E:AF:D4:2A:78:4D
            X509v3 Authority Key Identifier:
                keyid:D2:F5:14:19:90:A0:25:2C:37:D6:31:12:FB:6E:CA:5D:BC:56:86:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B2FFDCA30C15CD59970A7E7AFAEC3A91AF4301AC9008B0FFC3B8F9775F56F2FD/0/D2F5141990A0252C37D63112FB6ECA5DBC5686B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2F5141990A0252C37D63112FB6ECA5DBC5686B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B2FFDCA30C15CD59970A7E7AFAEC3A91AF4301AC9008B0FFC3B8F9775F56F2FD/0/3139302e31312e34372e302f32342d3234203d3e20323633373336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.11.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:4f:88:66:af:41:a5:e4:74:e3:1e:5a:aa:98:43:0b:39:36:
         07:d0:20:4b:17:3e:10:af:54:1e:dd:17:0b:37:3d:7a:59:cd:
         36:1a:87:a7:49:f1:69:3f:10:31:bd:60:1e:02:ce:85:fc:f9:
         83:0d:8e:22:13:aa:24:0d:22:0c:f5:a7:4e:5d:b3:cf:ba:f2:
         f6:b9:bd:38:bd:12:9e:e5:75:5e:33:a4:b7:8f:13:9b:3f:8f:
         9c:43:11:54:fa:6a:88:f9:07:4f:2c:b2:bf:4b:64:61:3e:52:
         f7:67:f9:8a:66:ce:e1:33:36:8d:f2:9a:b1:5b:8f:d3:87:4e:
         3e:dd:b9:6f:ba:c2:76:b1:f4:87:4d:c0:a2:8f:69:9b:64:65:
         b4:75:1a:df:37:7e:84:0f:38:49:cd:2c:b1:64:12:14:9f:71:
         91:ff:5f:6a:25:82:42:0d:fd:33:9a:13:08:11:a5:fe:38:38:
         a2:af:48:e2:6d:bb:f2:8a:a0:73:8f:16:a8:ae:87:04:40:a4:
         6d:88:87:d9:95:27:3a:2b:8b:32:48:23:a4:a6:96:b7:1f:6a:
         51:44:59:98:f4:71:62:42:8b:b2:14:00:4c:a0:0a:cd:33:83:
         b8:45:75:d9:d4:8a:39:59:3d:7f:f0:be:d2:4f:1f:da:9b:42:
         00:b4:4a:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 08:20:34 2026 by rpki-client