Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BBFFBF6405F5FE441C4C5CCF0763F033426C3B473A8B887A4F3EA9F065235D4C/0/3139302e39322e3130342e302f32322d3238203d3e203532343235.roa
File:                     3139302e39322e3130342e302f32322d3238203d3e203532343235.roa (raw, json)
Hash identifier:          OIkG1qCFN/7xBKRa4RxqnlOUhBU3hb9GWMkbM8Y/ugg=
Subject key identifier:   62:71:34:D2:83:48:5C:A2:4C:A2:6B:CB:06:79:D4:F1:03:7D:83:F5
Certificate issuer:       /CN=D663037914FA22285F5A90948270F4B18D3F2D85
Certificate serial:       374D11F41AC09BF7DB69995CB2535C37B1CDBC93
Authority key identifier: D6:63:03:79:14:FA:22:28:5F:5A:90:94:82:70:F4:B1:8D:3F:2D:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D663037914FA22285F5A90948270F4B18D3F2D85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BBFFBF6405F5FE441C4C5CCF0763F033426C3B473A8B887A4F3EA9F065235D4C/0/3139302e39322e3130342e302f32322d3238203d3e203532343235.roa
Signing time:             Mon 06 Apr 2026 12:05:02 +0000
ROA not before:           Mon 06 Apr 2026 12:00:02 +0000
ROA not after:            Mon 05 Apr 2027 12:05:02 +0000
asID:                     52425
IP address blocks:        190.92.104.0/22 maxlen: 28
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BBFFBF6405F5FE441C4C5CCF0763F033426C3B473A8B887A4F3EA9F065235D4C/0/D663037914FA22285F5A90948270F4B18D3F2D85.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BBFFBF6405F5FE441C4C5CCF0763F033426C3B473A8B887A4F3EA9F065235D4C/0/D663037914FA22285F5A90948270F4B18D3F2D85.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D663037914FA22285F5A90948270F4B18D3F2D85.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 04:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:4d:11:f4:1a:c0:9b:f7:db:69:99:5c:b2:53:5c:37:b1:cd:bc:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D663037914FA22285F5A90948270F4B18D3F2D85
        Validity
            Not Before: Apr  6 12:00:02 2026 GMT
            Not After : Apr  5 12:05:02 2027 GMT
        Subject: CN=627134D283485CA24CA26BCB0679D4F1037D83F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3e:a3:eb:c5:21:4a:93:fb:42:4c:57:76:8d:
                    34:e5:c1:c9:b7:e2:e3:43:3f:0e:99:7a:3a:ab:d2:
                    7d:19:cb:d1:73:18:e2:e8:0e:f0:d4:83:c9:ef:a3:
                    38:cf:c6:a6:11:d4:6c:38:0a:4c:cb:79:09:88:01:
                    9e:37:8c:5d:05:b6:5b:0e:06:72:34:2d:ab:2c:33:
                    69:a2:cb:0b:a1:7f:c5:5a:fb:b7:96:0a:9c:0e:e1:
                    da:2b:2e:e8:cd:d7:8b:86:c5:86:0e:84:35:66:42:
                    51:27:22:4a:48:82:ba:38:5a:aa:35:96:a5:77:8d:
                    1f:92:07:d4:e7:17:b4:ec:eb:60:f4:83:44:0d:e2:
                    03:fd:09:f9:0a:15:f9:a3:20:03:da:3d:c5:3a:ed:
                    82:31:7b:e1:ce:96:42:c8:66:2c:a0:1a:ca:1c:a4:
                    8f:d3:2b:ce:be:93:ef:e3:f4:8d:f3:4e:64:6e:76:
                    2d:82:e4:b7:80:0d:0b:4c:ff:9e:6c:b5:d9:53:0a:
                    b3:e9:ad:37:6e:30:47:8a:52:25:f1:1b:12:a0:18:
                    e7:b0:6e:63:60:d2:df:17:87:12:45:32:75:86:61:
                    6e:12:ab:2a:c9:6b:85:92:b0:02:2c:2b:b0:30:fe:
                    52:ad:9f:37:e3:0d:a8:54:5f:6d:d8:2c:56:7c:ac:
                    92:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:71:34:D2:83:48:5C:A2:4C:A2:6B:CB:06:79:D4:F1:03:7D:83:F5
            X509v3 Authority Key Identifier:
                keyid:D6:63:03:79:14:FA:22:28:5F:5A:90:94:82:70:F4:B1:8D:3F:2D:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BBFFBF6405F5FE441C4C5CCF0763F033426C3B473A8B887A4F3EA9F065235D4C/0/D663037914FA22285F5A90948270F4B18D3F2D85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D663037914FA22285F5A90948270F4B18D3F2D85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BBFFBF6405F5FE441C4C5CCF0763F033426C3B473A8B887A4F3EA9F065235D4C/0/3139302e39322e3130342e302f32322d3238203d3e203532343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.92.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         90:30:63:21:ca:1b:8b:24:74:61:4a:59:c8:6f:e8:0a:a5:26:
         9f:7a:98:88:59:8e:fb:21:7f:57:e2:6d:14:9a:24:e7:d3:dd:
         10:77:d3:84:9c:0c:d6:68:df:03:fe:c0:fc:f6:03:8b:13:6d:
         c5:7e:c4:48:8b:63:ec:3b:93:b7:f0:1a:cf:e7:5e:c6:30:7e:
         fb:bb:85:81:d8:df:1c:95:c8:64:a1:44:46:9d:b9:c6:ad:3f:
         e1:b1:cc:10:bc:8a:e5:6c:1e:f0:0d:86:c4:c1:96:0e:95:5e:
         b7:f4:7e:85:8a:e6:70:2f:ba:76:6c:94:05:92:a3:0b:52:e6:
         0f:08:9c:47:11:f4:32:01:93:3c:e3:70:ae:71:74:d8:f6:ba:
         04:6f:98:6f:0b:81:67:f0:8d:b2:5b:fa:3b:76:7b:f8:f6:06:
         a2:ba:f3:46:f1:fe:08:25:72:3e:86:7d:51:1e:6b:31:77:ae:
         a9:01:03:f3:6f:39:2a:c1:35:ba:0d:fe:90:33:1f:8f:3a:e9:
         03:76:f4:9d:1e:92:63:92:53:85:5d:57:4a:8f:ae:76:c4:28:
         2f:92:03:b2:73:18:60:59:97:3b:c2:3c:64:31:7c:fa:59:ab:
         61:ae:b0:3b:4e:0a:dd:1e:e9:39:24:f3:83:3b:2f:eb:a2:f9:
         eb:22:54:70
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUN00R9BrAm/fbaZlcslNcN7HNvJMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDY2MzAzNzkxNEZBMjIyODVGNUE5MDk0ODI3MEY0QjE4
RDNGMkQ4NTAeFw0yNjA0MDYxMjAwMDJaFw0yNzA0MDUxMjA1MDJaMDMxMTAvBgNV
BAMTKDYyNzEzNEQyODM0ODVDQTI0Q0EyNkJDQjA2NzlENEYxMDM3RDgzRjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDPqPrxSFKk/tCTFd2jTTlwcm3
4uNDPw6Zejqr0n0Zy9FzGOLoDvDUg8nvozjPxqYR1Gw4CkzLeQmIAZ43jF0FtlsO
BnI0LassM2miywuhf8Va+7eWCpwO4dorLujN14uGxYYOhDVmQlEnIkpIgro4Wqo1
lqV3jR+SB9TnF7Ts62D0g0QN4gP9CfkKFfmjIAPaPcU67YIxe+HOlkLIZiygGsoc
pI/TK86+k+/j9I3zTmRudi2C5LeADQtM/55stdlTCrPprTduMEeKUiXxGxKgGOew
bmNg0t8XhxJFMnWGYW4SqyrJa4WSsAIsK7Aw/lKtnzfjDahUX23YLFZ8rJLnAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUYnE00oNIXKJMomvLBnnU8QN9g/UwHwYDVR0j
BBgwFoAU1mMDeRT6IihfWpCUgnD0sY0/LYUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CQkZGQkY2NDA1RjVGRTQ0MUM0QzVDQ0YwNzYzRjAzMzQy
NkMzQjQ3M0E4Qjg4N0E0RjNFQTlGMDY1MjM1RDRDLzAvRDY2MzAzNzkxNEZBMjIy
ODVGNUE5MDk0ODI3MEY0QjE4RDNGMkQ4NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ENjYzMDM3OTE0RkEyMjI4NUY1
QTkwOTQ4MjcwRjRCMThEM0YyRDg1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQkJGRkJGNjQwNUY1RkU0NDFDNEM1Q0NGMDc2M0YwMzM0MjZDM0I0NzNB
OEI4ODdBNEYzRUE5RjA2NTIzNUQ0Qy8wLzMxMzkzMDJlMzkzMjJlMzEzMDM0MmUz
MDJmMzIzMjJkMzIzODIwM2QzZTIwMzUzMjM0MzIzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAr5caDAN
BgkqhkiG9w0BAQsFAAOCAQEAkDBjIcobiyR0YUpZyG/oCqUmn3qYiFmO+yF/V+Jt
FJok59PdEHfThJwM1mjfA/7A/PYDixNtxX7ESItj7DuTt/Aaz+dexjB++7uFgdjf
HJXIZKFERp25xq0/4bHMELyK5Wwe8A2GxMGWDpVet/R+hYrmcC+6dmyUBZKjC1Lm
DwicRxH0MgGTPONwrnF02Pa6BG+YbwuBZ/CNslv6O3Z7+PYGorrzRvH+CCVyPoZ9
UR5rMXeuqQED8285KsE1ug3+kDMfjzrpA3b0nR6SY5JThV1XSo+udsQoL5IDsnMY
YFmXO8I8ZDF8+lmrYa6wO04K3R7pOSTzgzsv66L56yJUcA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:27:40 2026 by rpki-client