Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/CAD0D6640D544384565625F127F41C9A542CF313BE7B088181DA3D59E282AA08/0/3139302e3131302e3234322e302f32332d3233203d3e20323732393238.roa
File:                     3139302e3131302e3234322e302f32332d3233203d3e20323732393238.roa (raw, json)
Hash identifier:          sq383iohoMenyCG1DvvBZ/xZlnKvVQp3F9Wt623NQMs=
Subject key identifier:   75:4E:C8:91:40:39:DF:19:24:7C:45:A9:42:47:1C:DC:D7:1E:E2:8E
Certificate issuer:       /CN=EB69B49D4076EBC1D441EA77CCE80EA12A89991D
Certificate serial:       3789D8190A8A5821DE3E79EC56C9078D507235B5
Authority key identifier: EB:69:B4:9D:40:76:EB:C1:D4:41:EA:77:CC:E8:0E:A1:2A:89:99:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EB69B49D4076EBC1D441EA77CCE80EA12A89991D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CAD0D6640D544384565625F127F41C9A542CF313BE7B088181DA3D59E282AA08/0/3139302e3131302e3234322e302f32332d3233203d3e20323732393238.roa
Signing time:             Fri 11 Sep 2026 19:15:00 +0000
ROA not before:           Fri 11 Sep 2026 19:10:00 +0000
ROA not after:            Fri 10 Sep 2027 19:15:00 +0000
asID:                     272928
IP address blocks:        190.110.242.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CAD0D6640D544384565625F127F41C9A542CF313BE7B088181DA3D59E282AA08/0/EB69B49D4076EBC1D441EA77CCE80EA12A89991D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CAD0D6640D544384565625F127F41C9A542CF313BE7B088181DA3D59E282AA08/0/EB69B49D4076EBC1D441EA77CCE80EA12A89991D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EB69B49D4076EBC1D441EA77CCE80EA12A89991D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 02:47:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:89:d8:19:0a:8a:58:21:de:3e:79:ec:56:c9:07:8d:50:72:35:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB69B49D4076EBC1D441EA77CCE80EA12A89991D
        Validity
            Not Before: Sep 11 19:10:00 2026 GMT
            Not After : Sep 10 19:15:00 2027 GMT
        Subject: CN=754EC8914039DF19247C45A942471CDCD71EE28E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2c:76:be:33:89:30:a0:c5:66:4a:18:5c:45:
                    48:fd:26:63:37:71:17:14:a0:01:6e:26:bd:67:72:
                    17:b5:4e:3d:c1:ae:7f:47:e4:de:e4:70:95:5f:25:
                    80:ef:a1:64:ca:13:67:5d:9e:6a:81:32:4e:d2:ad:
                    aa:17:71:06:3d:7e:6c:07:25:32:f1:14:db:54:66:
                    54:59:bb:61:da:c8:e7:16:a1:5d:88:12:86:8c:22:
                    4d:d7:e1:6e:98:80:0f:1b:5f:21:70:cc:c8:49:0e:
                    eb:ab:fa:29:91:ad:23:84:7c:a2:9d:e2:aa:a6:8a:
                    34:56:b6:c2:08:d7:22:14:b6:3e:14:5e:f0:96:b9:
                    3e:3a:d7:64:fa:d6:8a:75:28:17:c0:48:ee:98:c6:
                    6f:c8:f9:97:c1:97:65:57:26:93:39:6c:1c:15:ab:
                    d7:89:63:d5:ec:aa:b0:e0:b9:3a:a3:5e:14:b0:5e:
                    50:e9:9a:f8:e8:6d:92:7e:29:7d:3d:45:78:36:58:
                    5e:e3:02:e5:1e:66:2d:c3:65:2e:2c:8c:b3:78:fa:
                    87:bc:81:c2:92:7b:fe:bf:70:02:37:bc:e5:ed:b1:
                    af:40:89:ee:b4:76:95:0c:e6:cb:c8:72:72:b5:d9:
                    bd:0d:05:8a:62:32:1f:23:9a:00:49:94:2d:c3:85:
                    0c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:4E:C8:91:40:39:DF:19:24:7C:45:A9:42:47:1C:DC:D7:1E:E2:8E
            X509v3 Authority Key Identifier:
                keyid:EB:69:B4:9D:40:76:EB:C1:D4:41:EA:77:CC:E8:0E:A1:2A:89:99:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CAD0D6640D544384565625F127F41C9A542CF313BE7B088181DA3D59E282AA08/0/EB69B49D4076EBC1D441EA77CCE80EA12A89991D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EB69B49D4076EBC1D441EA77CCE80EA12A89991D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CAD0D6640D544384565625F127F41C9A542CF313BE7B088181DA3D59E282AA08/0/3139302e3131302e3234322e302f32332d3233203d3e20323732393238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         47:5f:c3:fd:f6:66:e9:47:15:1e:f4:29:79:0b:a5:cd:62:d1:
         94:14:bf:e4:4e:08:9e:bd:08:4c:e7:b4:4e:0f:81:cb:2b:6c:
         aa:e6:c5:08:84:02:b7:b8:c0:83:6f:4b:73:11:e5:a2:ef:01:
         fc:9a:3b:dd:cb:5c:b2:db:1d:d0:72:c1:bc:4e:cb:58:e8:6c:
         3a:2c:a8:59:c9:2e:ba:a5:80:76:6f:42:7d:f5:f1:51:3b:2b:
         39:9e:ad:76:16:b7:c3:6f:7e:00:f9:ac:d7:d5:2a:96:d1:9e:
         fb:7e:6d:5b:1b:d2:45:9f:15:5e:cf:e5:18:cb:98:33:8d:72:
         bc:01:e6:40:80:ba:9f:ae:14:53:81:5a:7b:05:07:b1:89:9b:
         55:6f:9e:01:07:18:cf:a7:ee:58:0e:b3:5a:3c:56:cb:ad:92:
         74:47:ea:6e:82:1a:70:1e:ea:76:7b:f3:39:be:10:d3:5c:6b:
         97:1a:dd:a8:dd:f7:c9:77:d9:ab:fb:20:43:e5:af:58:79:2c:
         e8:43:3a:4e:9b:05:ea:88:82:d1:3b:63:9e:0f:42:f3:d5:5d:
         0b:d3:d6:75:ae:4b:22:3b:71:3f:b9:f3:99:09:8c:11:0a:3e:
         73:7f:61:57:cc:3d:d6:b8:d3:ea:1b:7e:2e:4b:37:22:f4:d6:
         2b:91:96:21
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUN4nYGQqKWCHePnnsVskHjVByNbUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUI2OUI0OUQ0MDc2RUJDMUQ0NDFFQTc3Q0NFODBFQTEy
QTg5OTkxRDAeFw0yNjA5MTExOTEwMDBaFw0yNzA5MTAxOTE1MDBaMDMxMTAvBgNV
BAMTKDc1NEVDODkxNDAzOURGMTkyNDdDNDVBOTQyNDcxQ0RDRDcxRUUyOEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmLHa+M4kwoMVmShhcRUj9JmM3
cRcUoAFuJr1nche1Tj3Brn9H5N7kcJVfJYDvoWTKE2ddnmqBMk7SraoXcQY9fmwH
JTLxFNtUZlRZu2HayOcWoV2IEoaMIk3X4W6YgA8bXyFwzMhJDuur+imRrSOEfKKd
4qqmijRWtsII1yIUtj4UXvCWuT4612T61op1KBfASO6Yxm/I+ZfBl2VXJpM5bBwV
q9eJY9XsqrDguTqjXhSwXlDpmvjobZJ+KX09RXg2WF7jAuUeZi3DZS4sjLN4+oe8
gcKSe/6/cAI3vOXtsa9Aie60dpUM5svIcnK12b0NBYpiMh8jmgBJlC3DhQz7AgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUdU7IkUA53xkkfEWpQkcc3Nce4o4wHwYDVR0j
BBgwFoAU62m0nUB268HUQep3zOgOoSqJmR0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DQUQwRDY2NDBENTQ0Mzg0NTY1NjI1RjEyN0Y0MUM5QTU0
MkNGMzEzQkU3QjA4ODE4MURBM0Q1OUUyODJBQTA4LzAvRUI2OUI0OUQ0MDc2RUJD
MUQ0NDFFQTc3Q0NFODBFQTEyQTg5OTkxRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FQjY5QjQ5RDQwNzZFQkMxRDQ0
MUVBNzdDQ0U4MEVBMTJBODk5OTFELmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQ0FEMEQ2NjQwRDU0NDM4NDU2NTYyNUYxMjdGNDFDOUE1NDJDRjMxM0JF
N0IwODgxODFEQTNENTlFMjgyQUEwOC8wLzMxMzkzMDJlMzEzMTMwMmUzMjM0MzIy
ZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM3MzIzOTMyMzgucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAG+
bvIwDQYJKoZIhvcNAQELBQADggEBAEdfw/32ZulHFR70KXkLpc1i0ZQUv+ROCJ69
CEzntE4PgcsrbKrmxQiEAre4wINvS3MR5aLvAfyaO93LXLLbHdBywbxOy1jobDos
qFnJLrqlgHZvQn318VE7KzmerXYWt8NvfgD5rNfVKpbRnvt+bVsb0kWfFV7P5RjL
mDONcrwB5kCAup+uFFOBWnsFB7GJm1VvngEHGM+n7lgOs1o8VsutknRH6m6CGnAe
6nZ78zm+ENNca5ca3ajd98l32av7IEPlr1h5LOhDOk6bBeqIgtE7Y54PQvPVXQvT
1nWuSyI7cT+585kJjBEKPnN/YVfMPda40+obfi5LNyL01iuRliE=
-----END CERTIFICATE-----
Generated at Wed Oct 14 04:24:34 2026 by rpki-client