Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BBFFBF6405F5FE441C4C5CCF0763F033426C3B473A8B887A4F3EA9F065235D4C/0/3139302e39322e3130382e302f32332d3238203d3e203532343235.roa
File:                     3139302e39322e3130382e302f32332d3238203d3e203532343235.roa (raw, json)
Hash identifier:          rkuE4AXPrM3NiGvzPUJ2+4IG+Tvpej68hdXhCUfiSOU=
Subject key identifier:   09:28:21:39:62:54:F9:32:2E:D3:32:DB:8F:85:A6:39:B3:B7:61:12
Certificate issuer:       /CN=D663037914FA22285F5A90948270F4B18D3F2D85
Certificate serial:       718387A5DDDF0FEFCF79DC84860EE4014DBDA5F6
Authority key identifier: D6:63:03:79:14:FA:22:28:5F:5A:90:94:82:70:F4:B1:8D:3F:2D:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D663037914FA22285F5A90948270F4B18D3F2D85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BBFFBF6405F5FE441C4C5CCF0763F033426C3B473A8B887A4F3EA9F065235D4C/0/3139302e39322e3130382e302f32332d3238203d3e203532343235.roa
Signing time:             Mon 06 Apr 2026 12:05:01 +0000
ROA not before:           Mon 06 Apr 2026 12:00:01 +0000
ROA not after:            Mon 05 Apr 2027 12:05:01 +0000
asID:                     52425
IP address blocks:        190.92.108.0/23 maxlen: 28
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BBFFBF6405F5FE441C4C5CCF0763F033426C3B473A8B887A4F3EA9F065235D4C/0/D663037914FA22285F5A90948270F4B18D3F2D85.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BBFFBF6405F5FE441C4C5CCF0763F033426C3B473A8B887A4F3EA9F065235D4C/0/D663037914FA22285F5A90948270F4B18D3F2D85.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D663037914FA22285F5A90948270F4B18D3F2D85.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 04:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:83:87:a5:dd:df:0f:ef:cf:79:dc:84:86:0e:e4:01:4d:bd:a5:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D663037914FA22285F5A90948270F4B18D3F2D85
        Validity
            Not Before: Apr  6 12:00:01 2026 GMT
            Not After : Apr  5 12:05:01 2027 GMT
        Subject: CN=092821396254F9322ED332DB8F85A639B3B76112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7d:3b:0e:1f:10:1d:59:66:22:e3:4f:af:08:
                    20:15:c2:c0:2d:8e:4d:e2:5e:29:7d:f5:29:5a:38:
                    79:b8:e9:a4:17:1f:21:7f:07:32:b0:c6:74:a2:08:
                    30:ac:b9:89:f5:e6:b1:a5:ee:2e:d1:c0:d1:70:19:
                    03:b0:95:4d:73:90:6c:f6:66:0a:c7:98:13:d2:cf:
                    37:9d:30:ea:60:a2:d5:a4:31:9e:53:8b:da:19:6d:
                    4c:33:17:01:10:57:36:fb:80:d8:8b:11:d5:50:03:
                    3c:51:90:28:46:c8:20:11:40:90:c0:ee:6d:55:4a:
                    b5:2f:31:8b:e0:5e:28:24:b4:71:7e:29:9c:1f:78:
                    6f:b3:a3:49:83:4d:31:a9:35:bc:a8:d5:80:0c:27:
                    24:5b:9b:ab:9f:1a:87:b4:29:94:ed:2f:27:52:e1:
                    e0:d1:5c:9f:c7:fa:a5:ce:d9:e1:7d:e7:f2:1c:17:
                    04:4c:ff:9f:b4:19:ef:bb:e5:89:e9:db:5c:b0:f0:
                    74:49:65:27:59:01:a0:c8:95:28:22:26:bc:ec:c0:
                    eb:13:14:3d:5a:3a:05:15:57:0f:f9:12:8f:18:2b:
                    af:f2:eb:86:e5:0c:7d:ce:46:40:60:c3:54:7d:6f:
                    c5:90:80:c6:bb:e6:84:32:ea:f2:ea:15:92:01:24:
                    12:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:28:21:39:62:54:F9:32:2E:D3:32:DB:8F:85:A6:39:B3:B7:61:12
            X509v3 Authority Key Identifier:
                keyid:D6:63:03:79:14:FA:22:28:5F:5A:90:94:82:70:F4:B1:8D:3F:2D:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BBFFBF6405F5FE441C4C5CCF0763F033426C3B473A8B887A4F3EA9F065235D4C/0/D663037914FA22285F5A90948270F4B18D3F2D85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D663037914FA22285F5A90948270F4B18D3F2D85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BBFFBF6405F5FE441C4C5CCF0763F033426C3B473A8B887A4F3EA9F065235D4C/0/3139302e39322e3130382e302f32332d3238203d3e203532343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.92.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9a:26:51:b3:c6:e1:79:58:fc:b3:c2:f2:ee:53:af:86:94:0b:
         64:c4:04:8f:9c:ab:c5:d0:fc:59:24:0d:06:d6:66:77:c8:aa:
         1c:08:a7:61:a8:72:ee:50:7d:b8:67:df:16:0f:34:b4:23:90:
         d8:1f:ef:85:53:1c:27:03:05:0d:ac:bd:18:51:87:ef:8d:46:
         74:e9:bb:17:f4:65:9b:78:f6:d1:3f:b4:ae:86:3a:b0:9e:75:
         42:e2:25:3e:06:5a:22:c4:1f:18:af:aa:b7:f1:4e:c5:e5:25:
         63:aa:3f:0c:48:f8:06:0b:d4:10:85:f9:a6:d3:70:2f:22:09:
         3f:e2:1c:e6:50:2c:a8:be:98:57:35:53:91:38:d1:c6:b5:23:
         50:c8:d1:dc:5e:8f:88:e3:c5:63:c1:82:9f:00:d4:7e:f4:ab:
         24:44:19:d6:9c:48:50:25:5c:4a:de:a6:9c:77:bf:9f:fc:51:
         ad:fc:d9:c0:93:97:72:be:64:fb:98:97:f0:2c:b7:fe:24:ad:
         36:7e:0b:b3:c4:4c:d2:7f:17:3b:6f:d4:f6:65:69:d7:b2:c4:
         90:30:2d:90:7f:31:b5:6a:f3:34:f1:bc:20:be:54:17:94:e9:
         4b:39:dc:76:e9:4c:7d:a5:5f:08:ec:1d:75:26:c0:21:71:53:
         a2:f8:d0:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:27:41 2026 by rpki-client