Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BBFFBF6405F5FE441C4C5CCF0763F033426C3B473A8B887A4F3EA9F065235D4C/0/3139302e39322e3131312e302f32342d3238203d3e20323633383039.roa
File:                     3139302e39322e3131312e302f32342d3238203d3e20323633383039.roa (raw, json)
Hash identifier:          tyUFj41Ls8SugRZlTjyoZh3C30A1Aov0K4Oph8tvSGg=
Subject key identifier:   AC:66:24:A8:40:FB:0F:FF:BF:97:63:C6:FF:81:A1:7A:9E:06:E1:57
Certificate issuer:       /CN=D663037914FA22285F5A90948270F4B18D3F2D85
Certificate serial:       45D215D3F647DEB50989870885EDEE063C859645
Authority key identifier: D6:63:03:79:14:FA:22:28:5F:5A:90:94:82:70:F4:B1:8D:3F:2D:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D663037914FA22285F5A90948270F4B18D3F2D85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BBFFBF6405F5FE441C4C5CCF0763F033426C3B473A8B887A4F3EA9F065235D4C/0/3139302e39322e3131312e302f32342d3238203d3e20323633383039.roa
Signing time:             Mon 06 Apr 2026 12:05:01 +0000
ROA not before:           Mon 06 Apr 2026 12:00:01 +0000
ROA not after:            Mon 05 Apr 2027 12:05:01 +0000
asID:                     263809
IP address blocks:        190.92.111.0/24 maxlen: 28
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BBFFBF6405F5FE441C4C5CCF0763F033426C3B473A8B887A4F3EA9F065235D4C/0/D663037914FA22285F5A90948270F4B18D3F2D85.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BBFFBF6405F5FE441C4C5CCF0763F033426C3B473A8B887A4F3EA9F065235D4C/0/D663037914FA22285F5A90948270F4B18D3F2D85.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D663037914FA22285F5A90948270F4B18D3F2D85.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 04:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:d2:15:d3:f6:47:de:b5:09:89:87:08:85:ed:ee:06:3c:85:96:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D663037914FA22285F5A90948270F4B18D3F2D85
        Validity
            Not Before: Apr  6 12:00:01 2026 GMT
            Not After : Apr  5 12:05:01 2027 GMT
        Subject: CN=AC6624A840FB0FFFBF9763C6FF81A17A9E06E157
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:5d:6b:90:c1:ea:0c:d6:2f:2e:03:21:de:b3:
                    c7:a4:23:78:c7:65:43:8b:c5:36:99:19:b9:72:49:
                    2f:bc:04:5a:8b:72:a6:f9:50:4d:66:e0:d1:5b:60:
                    47:86:b6:86:29:d5:d4:fe:eb:40:38:ba:88:a2:e7:
                    d7:73:0d:a2:d1:e1:86:e5:28:01:95:5c:9a:ad:ad:
                    e6:14:89:be:0a:39:5c:9f:e5:98:8f:e3:83:f1:7a:
                    c3:d8:06:7d:47:18:99:fb:9e:50:1b:f1:db:50:d6:
                    04:7c:e9:af:4d:09:50:49:ff:bf:93:8a:84:31:2e:
                    27:fc:b1:a7:13:62:a2:33:87:45:65:ec:e1:34:e0:
                    ce:2f:60:0b:77:cd:b4:c0:64:4d:f3:0f:2b:82:83:
                    50:8b:cd:9e:d9:5b:72:0c:ee:b8:d0:bd:43:05:19:
                    73:82:8b:eb:e5:a0:0e:a0:90:54:1e:d5:8f:9d:1e:
                    37:fc:48:87:a6:e8:5f:50:e4:95:96:a7:16:66:25:
                    4c:f8:be:60:71:a0:cc:b6:57:52:a8:ef:66:70:47:
                    55:f7:22:1a:58:ce:eb:eb:29:a8:e7:a5:f6:ba:00:
                    7a:b0:7f:1d:74:d5:89:4d:f8:55:ac:c8:ca:5c:d4:
                    40:ca:ea:e7:04:9a:2d:10:db:4c:19:b9:24:35:cf:
                    59:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:66:24:A8:40:FB:0F:FF:BF:97:63:C6:FF:81:A1:7A:9E:06:E1:57
            X509v3 Authority Key Identifier:
                keyid:D6:63:03:79:14:FA:22:28:5F:5A:90:94:82:70:F4:B1:8D:3F:2D:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BBFFBF6405F5FE441C4C5CCF0763F033426C3B473A8B887A4F3EA9F065235D4C/0/D663037914FA22285F5A90948270F4B18D3F2D85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D663037914FA22285F5A90948270F4B18D3F2D85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BBFFBF6405F5FE441C4C5CCF0763F033426C3B473A8B887A4F3EA9F065235D4C/0/3139302e39322e3131312e302f32342d3238203d3e20323633383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.92.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:5c:f1:8e:08:36:b1:e0:b7:c2:08:34:81:70:b2:74:6e:a7:
         ba:e4:f6:3d:3e:81:c3:ba:ee:90:3a:81:c2:24:83:a8:fa:6c:
         85:e1:ae:61:71:3d:0a:86:13:94:a4:33:a2:71:32:c3:80:93:
         9f:a1:e0:eb:cd:2b:35:b9:12:86:7e:fe:29:c4:1a:b6:90:85:
         13:4d:1e:92:76:c0:c6:46:4b:34:87:00:b5:63:b2:d1:50:2f:
         50:e8:3a:44:41:7d:d3:a5:e4:26:ca:4c:f1:04:74:e9:4d:85:
         ed:3d:03:31:6a:df:d5:b6:c0:83:5a:76:81:e4:9a:83:23:8d:
         e1:e3:07:05:ac:24:24:c5:9a:32:9e:15:39:6b:bb:1a:b0:37:
         26:58:81:95:63:74:cf:f8:71:dc:55:06:96:74:4e:3c:f8:cc:
         9d:25:e8:cd:44:41:68:10:d6:ad:f2:05:2a:88:0f:be:e0:c0:
         5a:e7:e9:cc:0b:4a:2a:76:d7:27:2d:a4:bc:01:8e:31:4b:a9:
         6d:2d:1b:a6:ec:99:34:fc:d9:61:7b:d5:1b:71:28:81:73:0d:
         8e:5a:5c:53:8d:9c:11:4b:7f:64:6b:cd:62:2e:e1:7e:06:66:
         f3:b3:1b:c2:74:79:e5:89:59:f2:10:a0:12:f3:8a:53:1f:48:
         d6:e8:17:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:27:39 2026 by rpki-client