Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3139302e3130382e39302e302f32342d3234203d3e203138363738.roa
File:                     3139302e3130382e39302e302f32342d3234203d3e203138363738.roa (raw, json)
Hash identifier:          Zk256qz1YxYlriavKYfK7eslfOviE8Sw1ABJZWR2TRg=
Subject key identifier:   56:79:D5:53:BB:BE:09:2D:F4:A1:99:2D:22:9B:73:45:78:F9:FD:E6
Certificate issuer:       /CN=8E9E896ADF8041E07AB6735225935260B837E74D
Certificate serial:       56F4200F7EF9432658F8F9BC45818997DBE675C6
Authority key identifier: 8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3139302e3130382e39302e302f32342d3234203d3e203138363738.roa
Signing time:             Wed 03 Jun 2026 17:46:25 +0000
ROA not before:           Wed 03 Jun 2026 17:41:25 +0000
ROA not after:            Wed 02 Jun 2027 17:46:25 +0000
asID:                     18678
IP address blocks:        190.108.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:f4:20:0f:7e:f9:43:26:58:f8:f9:bc:45:81:89:97:db:e6:75:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E9E896ADF8041E07AB6735225935260B837E74D
        Validity
            Not Before: Jun  3 17:41:25 2026 GMT
            Not After : Jun  2 17:46:25 2027 GMT
        Subject: CN=5679D553BBBE092DF4A1992D229B734578F9FDE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:eb:d4:b5:01:90:02:de:f5:de:44:4a:98:fb:
                    f6:4f:e2:a5:98:e1:b4:fc:22:50:05:75:88:0e:bc:
                    8f:a5:ee:a6:f5:80:16:a1:88:01:c1:6d:55:e3:9e:
                    da:d7:2d:f3:44:d3:4d:8b:e7:6d:7f:0c:e8:78:e4:
                    80:de:e6:21:55:ca:96:0e:b2:55:e8:40:92:fe:f3:
                    37:f6:6e:d0:d1:16:ce:8f:8e:ea:86:67:b8:09:c5:
                    a5:9f:75:95:47:00:dd:5c:31:05:c9:2b:5d:d1:dc:
                    af:15:ec:06:32:d2:d5:c8:9b:bc:c3:5f:34:5f:d9:
                    0b:e5:10:d1:14:53:ab:ac:ff:ce:ac:84:0a:69:d2:
                    81:24:19:ad:d7:92:35:87:65:ee:6b:38:b6:4c:01:
                    1f:9b:c2:3a:d9:00:8d:bf:ae:98:0c:64:35:cb:f1:
                    28:37:62:44:90:69:aa:ba:57:9e:56:cb:4e:0c:df:
                    57:be:f2:2f:6e:a3:d9:b1:19:f5:f9:1d:06:72:93:
                    29:6c:ff:b6:16:93:84:61:ad:a1:32:8d:c6:7a:3d:
                    d6:28:2d:67:e3:1d:6f:70:5b:c9:c6:cd:5d:8c:bc:
                    f4:53:54:99:41:75:ba:d6:68:3c:90:cc:ab:71:86:
                    7c:66:ae:93:16:78:79:b7:c7:67:06:6b:0c:c8:a6:
                    51:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:79:D5:53:BB:BE:09:2D:F4:A1:99:2D:22:9B:73:45:78:F9:FD:E6
            X509v3 Authority Key Identifier:
                keyid:8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3139302e3130382e39302e302f32342d3234203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.108.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:55:44:fc:af:58:ce:68:01:20:2c:87:c7:2c:da:6e:1f:b0:
         1c:2a:65:0f:a4:f4:1d:5a:06:7e:fc:f0:95:ec:72:75:83:49:
         07:97:cc:7d:08:86:1b:0a:a6:30:30:f0:23:5f:1e:92:6a:f1:
         fe:d6:fe:5d:96:34:3c:b9:bd:ad:ef:cc:d3:0c:e5:ca:ec:ad:
         32:f5:43:ea:7e:96:50:54:d2:a7:61:29:bf:28:8f:d4:cf:6f:
         5a:97:5a:f5:1e:3e:27:6a:fc:df:67:fe:e7:c7:df:23:5a:18:
         9a:42:5e:81:2f:07:b0:4c:02:35:25:d9:d1:54:d5:87:69:ad:
         98:21:7a:64:0c:4e:bf:f1:a6:a8:ad:34:a4:66:96:1f:81:d5:
         b4:c3:8d:55:aa:81:b5:db:5d:2d:40:d4:c5:05:ff:ba:45:22:
         8c:7c:67:27:a9:9c:c2:f9:bc:97:61:03:8b:0f:e4:9f:48:16:
         2d:ff:2e:12:b2:f7:87:0b:7f:f6:59:f3:28:ce:13:7f:33:63:
         a6:68:ca:7b:e1:12:8c:02:a2:7b:34:cf:0e:ec:75:a3:d7:12:
         2e:45:52:2b:d1:cc:b8:0f:52:47:5a:2a:ac:ca:4c:1c:ca:25:
         50:9a:1f:94:9a:7c:da:01:5f:de:17:70:87:90:03:39:e6:83:
         74:ea:3b:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:14:28 2026 by rpki-client